Analysis
- geolocation tags
eueuropefrfrance - user interaction
yes - max time kernel
681s - max time network
680s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 06:45
Behavioral task
behavioral1
Sample
OperaInstaller.exe
Resource
win11ltsc2024-20260709-en
General
- Target OperaInstaller.exe
- Size 178KB
- Sample260804-hjkflsef39
- SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
- MD5 4ef32b114eaa6f05340b46d0f48154c7
- SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
- SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
- SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
- TLSH T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe - Downloads MZ/PE file 2 IoCs
flow pid Process 24 5740 installer.exe 12 4472 OperaInstaller.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 3968 OpInst.exe 5740 installer.exe 2004 installer.exe 4816 installer.exe 5416 installer.exe 6032 installer.exe 2404 Assistant_130.0.5847.41_Setup.exe_sfx.exe 5288 assistant_installer.exe 2684 assistant_installer.exe 1644 installer.exe 4904 installer.exe 4444 opera.exe 2572 opera_crashreporter.exe 3876 opera.exe 1748 opera.exe 1284 opera.exe 1428 opera.exe 2800 opera.exe 4124 opera.exe 120 opera.exe 3480 opera.exe 6048 opera.exe 2312 opera_crashreporter.exe 4412 opera.exe 5724 opera.exe 6628 opera.exe 6644 opera_crashreporter.exe 6824 opera.exe 6816 opera.exe 6904 opera.exe 7124 opera.exe 7140 opera.exe 6008 opera.exe 6264 opera.exe 4260 opera.exe 7132 opera.exe 5384 opera.exe 4712 opera.exe 1944 opera_crashreporter.exe 3268 opera.exe 5692 opera.exe 3544 opera.exe 1008 opera.exe 2944 opera.exe 964 opera.exe 4508 opera.exe 1572 opera.exe 6160 opera.exe 6184 opera.exe 6172 opera.exe 6268 opera.exe 6580 opera_gx_splash.exe 6616 opera.exe 5776 opera.exe 2656 opera.exe 2848 opera.exe 4908 opera.exe 4336 opera.exe 4892 opera.exe 368 opera.exe 1248 opera.exe 4140 opera.exe 4232 opera.exe 6260 opera.exe - Loads dropped DLL 64 IoCs
pid Process 5288 assistant_installer.exe 5288 assistant_installer.exe 2684 assistant_installer.exe 2684 assistant_installer.exe 4444 opera.exe 4444 opera.exe 1748 opera.exe 1748 opera.exe 3876 opera.exe 3876 opera.exe 1284 opera.exe 1284 opera.exe 2800 opera.exe 2800 opera.exe 1428 opera.exe 1428 opera.exe 4124 opera.exe 4124 opera.exe 1748 opera.exe 120 opera.exe 120 opera.exe 1748 opera.exe 3480 opera.exe 3480 opera.exe 1748 opera.exe 1748 opera.exe 6048 opera.exe 6048 opera.exe 1748 opera.exe 4412 opera.exe 4412 opera.exe 5724 opera.exe 5724 opera.exe 6628 opera.exe 6628 opera.exe 6816 opera.exe 6816 opera.exe 6824 opera.exe 6824 opera.exe 6904 opera.exe 6904 opera.exe 6816 opera.exe 6816 opera.exe 6816 opera.exe 7140 opera.exe 6816 opera.exe 7124 opera.exe 6816 opera.exe 7124 opera.exe 7140 opera.exe 6008 opera.exe 6008 opera.exe 6264 opera.exe 6264 opera.exe 4260 opera.exe 4260 opera.exe 7132 opera.exe 7132 opera.exe 5384 opera.exe 5384 opera.exe 4712 opera.exe 4712 opera.exe 5692 opera.exe 5692 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 8 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: explorer.exe File opened (read-only) \??\F: explorer.exe File opened (read-only) \??\E: installer.exe - Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1696477679\kp_pinslist.pb opera.exe File created C:\Windows\SystemTemp\scoped_dir4444_1654450954\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir6628_1613224923\persona.ini opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_945814400\_platform_specific\win_x64\widevinecdm.dll opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_945814400\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-ta.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-mn-cyrl.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-hr.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1641066236\preloaded_data.pb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-te.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-sk.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-ru.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-fr.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-et.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_327662201\heuristic_regexes.binarypb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_327662201\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-sv.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-pt.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-la.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-ga.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-ml.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-kn.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-gu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-de-1996.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-as.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\scoped_dir4712_1681049468\persona.ini opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_401773206\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1696477679\mtc_config.pb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-mul-ethi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-ka.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1696477679\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_274487866\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_401773206\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_945814400\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-lv.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-cy.hyb opera.exe File created C:\Windows\SystemTemp\scoped_dir4444_524865353\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir4712_325813001\persona.ini opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-cu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-bg.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_945814400\LICENSE opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-uk.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-nn.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-en-us.hyb opera.exe File created C:\Windows\SystemTemp\scoped_dir4712_1681049468\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir4712_325813001\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_274487866\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1444700324\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-sq.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-or.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-hi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-en-gb.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_BITS_4712_776980849\decoded_xz opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_401773206\crl-set opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_401773206\LICENSE opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_945814400\_platform_specific\win_x64\widevinecdm.dll.sig opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_1641066236\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-de-ch-1901.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-da.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-und-ethi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-it.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-hy.hyb opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaInstaller.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OpInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3876 opera.exe 6824 opera.exe 3268 opera.exe - Checks SCSI registry key(s) 3 TTPs 62 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Capabilities explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities explorer.exe - Checks processor information in registry 2 TTPs 7 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main explorer.exe - Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{7E9309F2-D0CE-49C1-AA3D-BAFAF52CA8DD} explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "23" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.html installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\WOW6432Node\CLSID installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56" SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xht\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.htm\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xhtml installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" opera.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ opera.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DomStorageState SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoftwindows.client.cbs SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\client.cbs SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.htm installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.shtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\133.0.5932.85\\notification_helper.exe\"" installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "23" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.pdf\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\URL Protocol opera.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\MuiCache SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "56" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications\opera.exe installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\133.0.5932.85\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.htm\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\WOW6432Node installer.exe Set value (data) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" StartMenuExperienceHost.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{C85FB30F-EA0D-45CE-B832-11FAC2A0EA89} opera_gx_splash.exe Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4712 opera.exe 4712 opera.exe 7544 opera.exe 7544 opera.exe 6524 explorer.exe 6524 explorer.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs
pid Process 4444 opera.exe 4444 opera.exe 4444 opera.exe 6628 opera.exe 6628 opera.exe 6628 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4444 opera.exe Token: SeCreatePagefilePrivilege 4444 opera.exe Token: SeShutdownPrivilege 4444 opera.exe Token: SeCreatePagefilePrivilege 4444 opera.exe Token: SeShutdownPrivilege 4444 opera.exe Token: SeCreatePagefilePrivilege 4444 opera.exe Token: SeShutdownPrivilege 6628 opera.exe Token: SeCreatePagefilePrivilege 6628 opera.exe Token: SeShutdownPrivilege 6580 opera_gx_splash.exe Token: SeCreatePagefilePrivilege 6580 opera_gx_splash.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe Token: SeShutdownPrivilege 4712 opera.exe Token: SeCreatePagefilePrivilege 4712 opera.exe - Suspicious use of FindShellTrayWindow 56 IoCs
pid Process 4712 opera.exe 4712 opera.exe 5664 sihost.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe - Suspicious use of SendNotifyMessage 45 IoCs
pid Process 4712 opera.exe 4712 opera.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe 6524 explorer.exe - Suspicious use of SetWindowsHookEx 16 IoCs
pid Process 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4712 opera.exe 4396 StartMenuExperienceHost.exe 2784 SearchHost.exe 6524 explorer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4472 wrote to memory of 3968 4472 OperaInstaller.exe 89 PID 3968 wrote to memory of 5740 3968 OpInst.exe 90 PID 5740 wrote to memory of 2004 5740 installer.exe 91 PID 5740 wrote to memory of 4816 5740 installer.exe 92 PID 5740 wrote to memory of 5416 5740 installer.exe 93 PID 5416 wrote to memory of 6032 5416 installer.exe 94 PID 5740 wrote to memory of 2404 5740 installer.exe 96 PID 5740 wrote to memory of 5288 5740 installer.exe 97 PID 5288 wrote to memory of 2684 5288 assistant_installer.exe 98 PID 5416 wrote to memory of 1644 5416 installer.exe 99 PID 1644 wrote to memory of 4904 1644 installer.exe 100 PID 1644 wrote to memory of 4444 1644 installer.exe 101 PID 4444 wrote to memory of 2572 4444 opera.exe 104 PID 4444 wrote to memory of 1748 4444 opera.exe 105 PID 4444 wrote to memory of 3876 4444 opera.exe 106 PID 4444 wrote to memory of 1284 4444 opera.exe 107 PID 4444 wrote to memory of 1428 4444 opera.exe 108 PID 4444 wrote to memory of 2800 4444 opera.exe 109 PID 4444 wrote to memory of 4124 4444 opera.exe 110 PID 4444 wrote to memory of 4412 4444 opera.exe 111 PID 4444 wrote to memory of 120 4444 opera.exe 112 PID 4444 wrote to memory of 3480 4444 opera.exe 114 PID 6048 wrote to memory of 2312 6048 opera.exe 116 PID 4444 wrote to memory of 5724 4444 opera.exe 117 PID 1644 wrote to memory of 6628 1644 installer.exe 118 PID 6628 wrote to memory of 6644 6628 opera.exe 119 PID 6628 wrote to memory of 6816 6628 opera.exe 120 PID 6628 wrote to memory of 6824 6628 opera.exe 121 PID 6628 wrote to memory of 6904 6628 opera.exe 122 PID 6628 wrote to memory of 7124 6628 opera.exe 123 PID 6628 wrote to memory of 7132 6628 opera.exe 124 PID 6628 wrote to memory of 7140 6628 opera.exe 125 PID 6628 wrote to memory of 5384 6628 opera.exe 126 PID 6628 wrote to memory of 6008 6628 opera.exe 127 PID 6628 wrote to memory of 6264 6628 opera.exe 128 PID 6628 wrote to memory of 4260 6628 opera.exe 129 PID 1644 wrote to memory of 4712 1644 installer.exe 130 PID 4712 wrote to memory of 1944 4712 opera.exe 131 PID 4712 wrote to memory of 5692 4712 opera.exe 132 PID 4712 wrote to memory of 3268 4712 opera.exe 133 PID 4712 wrote to memory of 3544 4712 opera.exe 134 PID 4712 wrote to memory of 1008 4712 opera.exe 135 PID 4712 wrote to memory of 2944 4712 opera.exe 136 PID 4712 wrote to memory of 964 4712 opera.exe 137 PID 4712 wrote to memory of 4508 4712 opera.exe 138 PID 4712 wrote to memory of 1572 4712 opera.exe 139 PID 4712 wrote to memory of 6160 4712 opera.exe 140 PID 4712 wrote to memory of 6184 4712 opera.exe 141 PID 4712 wrote to memory of 6172 4712 opera.exe 142 PID 4712 wrote to memory of 6268 4712 opera.exe 143 PID 4712 wrote to memory of 6580 4712 opera.exe 144 PID 4712 wrote to memory of 6616 4712 opera.exe 146 PID 4712 wrote to memory of 5776 4712 opera.exe 147 PID 4712 wrote to memory of 2656 4712 opera.exe 148 PID 4712 wrote to memory of 2848 4712 opera.exe 149 PID 4712 wrote to memory of 6440 4712 opera.exe 150 PID 4712 wrote to memory of 4908 4712 opera.exe 151 PID 4712 wrote to memory of 2068 4712 opera.exe 152 PID 4712 wrote to memory of 4892 4712 opera.exe 154 PID 4712 wrote to memory of 4336 4712 opera.exe 153 PID 4712 wrote to memory of 368 4712 opera.exe 155 PID 4712 wrote to memory of 1248 4712 opera.exe 156 PID 4712 wrote to memory of 4140 4712 opera.exe 157 PID 4712 wrote to memory of 4232 4712 opera.exe 158 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4472 -
C:\Users\Admin\AppData\Local\Temp\OpInst.exe"C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=12⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3968 -
C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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3⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5740 -
C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.26 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff6b1329d88,0x7ff6b1329d94,0x7ff6b1329da04⤵
- Executes dropped EXE
PID:2004
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\installer.exe" --version4⤵
- Executes dropped EXE
PID:4816
-
-
C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5740 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_20260804084628" --session-guid=91707ab3-e183-461b-9b9a-3713debbfa38 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=28080000000000004⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5416 -
C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.26 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff6b1329d88,0x7ff6b1329d94,0x7ff6b1329da05⤵
- Executes dropped EXE
PID:6032
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe" --backend --initial-pid=5740 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281" --session-guid=91707ab3-e183-461b-9b9a-3713debbfa38 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.855⤵
- Executes dropped EXE
- Enumerates connected drives
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1644 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff76e3bad88,0x7ff76e3bad94,0x7ff76e3bada06⤵
- Executes dropped EXE
PID:4904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\de932af914ba00303d4a2778a383ac9c831101e2.crx"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Checks processor information in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4444 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f83407⤵
- Executes dropped EXE
PID:2572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,8843678836338239924,18262407482657302419,262144 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2024,i,7285815067610536361,2280699986884351753,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2080 /prefetch:117⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
PID:3876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2488,i,6484142514679373635,1820410831195207223,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2616 /prefetch:137⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:1284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3640,i,2952573929502208468,13987740681262620557,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4028 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3964,i,7403664369592590640,11897065074231487539,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4040 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2800
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4000,i,17733439717380820340,4020125041923916617,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4068 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:4124
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4248,i,6804520735838090206,1504895945135235697,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4456 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:4412
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,1788772501917468374,9216812483238233069,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4864 /prefetch:127⤵
- Executes dropped EXE
- Loads dropped DLL
PID:120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5020,i,11705987371882981231,14588636941984932960,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5032 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3480
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5008,i,16028175062792259528,8562143442104981600,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4508 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5724
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\additional_file2.tmp"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:6628 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f83407⤵
- Executes dropped EXE
PID:6644
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,11569666581715098554,17252601876176960560,262144 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2036 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,4277195522912500446,7126315267055481284,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:117⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
PID:6824
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,2483294000945587956,7612422296233698829,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2716 /prefetch:137⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3816,i,14711186257936320451,2195411582581110436,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3880 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7124
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3964,i,13246729495346408204,15868141978777908090,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4056 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7132
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,15499680895531278940,17214714088141418426,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4036 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7140
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4432,i,12718831863813663010,4992861977099837182,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4480 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5384
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4884,i,10112193581075492455,2252635232075450488,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4896 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5088,i,4911695550924925505,3787371645669122160,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5096 /prefetch:127⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5272,i,4859822725565796645,3335728317295182141,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5276 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4260
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4712 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f83407⤵
- Executes dropped EXE
PID:1944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,13264027306927049748,3186254886413187557,262144 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,9844241333067999497,14168873269164453728,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2108 /prefetch:117⤵
- Executes dropped EXE
- System Time Discovery
- Enumerates system info in registry
PID:3268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2480,i,18249505244647656057,11353714199996641482,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2496 /prefetch:137⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:3544
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,12792936595719308046,895726102616309089,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3284 /prefetch:147⤵
- Executes dropped EXE
PID:1008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,15848913184140697107,4875933182490836947,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3304 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:2944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,11394302555516699348,15798982780320531318,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3324 /prefetch:147⤵
- Executes dropped EXE
PID:964
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,10572897263129325588,8916433855784093124,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3404 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:4508
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3220,i,17489921038415864014,8039960631747952183,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3344 /prefetch:147⤵
- Executes dropped EXE
PID:1572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,3125651311063864403,9060388220604320666,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3424 /prefetch:147⤵
- Executes dropped EXE
PID:6160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,11184697299329780912,18070363025119553051,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3364 /prefetch:147⤵
- Executes dropped EXE
PID:6184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,12557153452790578850,3647543998415790711,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3384 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3316,i,8164798366208250349,16619693308699824098,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3928 /prefetch:17⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C967⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:6580
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4832,i,10304915764698859639,15546902406705003628,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:97⤵
- Executes dropped EXE
PID:6616
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5000,i,12720431521905580161,18075800531601494422,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5004 /prefetch:17⤵
- Executes dropped EXE
PID:5776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5268,i,15085364206622413025,8006228405176781051,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5280 /prefetch:17⤵
- Executes dropped EXE
PID:2656
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5416,i,15698566561042568707,11267640306939801959,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5412 /prefetch:17⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:2848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6804,i,4473552234941243010,13090553083287520293,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6868 /prefetch:97⤵
- Enumerates system info in registry
PID:6440
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6412,i,707504749679792503,8514522810047768855,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6768 /prefetch:97⤵
- Executes dropped EXE
PID:4908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6936,i,7407537281821581393,4905599581027142219,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6992 /prefetch:97⤵
- Enumerates system info in registry
PID:2068
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6320,i,2078317738924666371,15913481068611620222,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6428 /prefetch:147⤵
- Executes dropped EXE
PID:4336
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6672,i,15326463816664378108,4850201201823817233,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6392 /prefetch:147⤵
- Executes dropped EXE
PID:4892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7688,i,12552311851848540570,14298902089000155827,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=5812 /prefetch:147⤵
- Executes dropped EXE
PID:368
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,5770841356888930876,15873367829225014018,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=2520 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:1248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7808,i,8732075913947411917,16860661018837175681,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6704 /prefetch:147⤵
- Executes dropped EXE
PID:4140
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7844,i,17843997277611308882,17088446500949121458,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7960 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:4232
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7964,i,1928996532973384476,6852962959516804664,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8120 /prefetch:127⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6260
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8236,i,13735817663410703091,9604356790717622063,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8240 /prefetch:147⤵
- Enumerates system info in registry
PID:3464
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8436,i,12732537951665832137,8700114687557602708,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8444 /prefetch:97⤵
- Enumerates system info in registry
PID:4704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8624,i,2265033293727573391,15401584718627198770,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8644 /prefetch:147⤵
- Enumerates system info in registry
PID:4832
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8604,i,658321099114642974,17792873638164195930,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8616 /prefetch:147⤵PID:2088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8688,i,10253205348087154468,16847402916123834959,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8916 /prefetch:147⤵PID:2416
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8620,i,13170697811185838852,4319687633266030094,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8896 /prefetch:147⤵
- Enumerates system info in registry
PID:2396
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9196,i,10129196929341137414,3755195218602654050,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9192 /prefetch:147⤵
- Enumerates system info in registry
PID:6424
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9208,i,14295069014408501344,13136281228206316405,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9340 /prefetch:147⤵PID:6516
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1617⤵PID:6704
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff756d28860,0x7ff756d2886c,0x7ff756d288788⤵PID:6800
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8464,i,5231647362848257276,9321869249862637353,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8496 /prefetch:147⤵PID:6760
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5800,i,18300208281770082154,18127123305584991483,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9636 /prefetch:147⤵
- Enumerates system info in registry
PID:2072
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9872,i,11336886958699412457,8520197809241280445,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9920 /prefetch:17⤵
- Enumerates system info in registry
PID:5372
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3316,i,7082658538430749354,3369889483962655059,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10364 /prefetch:147⤵
- Enumerates system info in registry
PID:6272
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10460,i,16403182857848129871,11122236568621631550,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10476 /prefetch:147⤵
- Enumerates system info in registry
PID:1224
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9896,i,16173433572539660904,14008028382585172250,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9892 /prefetch:147⤵PID:7408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10736,i,8457443448538758351,4776750887091674263,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10804 /prefetch:17⤵PID:7624
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11028,i,10689614823760312527,13519184717572026890,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10996 /prefetch:147⤵PID:7704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11172,i,2531698166548425121,4909874621184933449,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11180 /prefetch:147⤵PID:7764
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11296,i,9873339711632986804,15518368904197332055,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11324 /prefetch:147⤵PID:7816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,11656366953285423805,2136489750744738172,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=6892 /prefetch:147⤵
- Enumerates system info in registry
PID:6996
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3508,i,1464687135073384792,14085534571157193799,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11612 /prefetch:147⤵
- Enumerates system info in registry
PID:1660
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11752,i,5276359273259214774,14153890010649830603,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11624 /prefetch:147⤵PID:7104
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11768,i,1438071818475855421,13741406159270667244,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11780 /prefetch:147⤵
- Enumerates system info in registry
PID:6724
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11872,i,1277644386078932634,5817158331612804911,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11384 /prefetch:147⤵PID:7188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=11360,i,5785546994092472435,4968848066477093244,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=12008 /prefetch:97⤵PID:7300
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=3496,i,501339816730473906,9134357923143053321,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11348 /prefetch:97⤵PID:7480
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=3900,i,1854238013258519364,2699726755157135085,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12000 /prefetch:97⤵PID:5948
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6924,i,9966376253549697366,8839914302300964502,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11380 /prefetch:147⤵
- Enumerates system info in registry
PID:4804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11328,i,14630921268066033187,8805135907360856952,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11284 /prefetch:147⤵
- Enumerates system info in registry
PID:5384
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10784,i,7223969048472491493,1335964560724419407,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11820 /prefetch:147⤵
- Enumerates system info in registry
PID:6388
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3496,i,2675329878454382178,14884810134633394080,262144 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7100 /prefetch:107⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
PID:7544
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7232,i,15750239741582580681,2275265848256734111,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=732 /prefetch:147⤵
- Enumerates system info in registry
PID:6568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11184,i,14801921286338925237,2371595895210921956,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11416 /prefetch:97⤵PID:6720
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4308,i,17540324253978036777,16279772916605350749,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=6836 /prefetch:147⤵
- Enumerates system info in registry
PID:1440
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4864,i,11298064159710876598,4922778995909363660,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=4816 /prefetch:147⤵
- Enumerates system info in registry
PID:6872
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12068,i,18136239769112498569,3754022299261792153,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7076 /prefetch:97⤵
- Enumerates system info in registry
PID:4132
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7372,i,1090031711349728877,9573855991145049180,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11892 /prefetch:97⤵PID:7700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=7272,i,16340477922362305135,13208917435779591304,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=7108 /prefetch:97⤵
- Enumerates system info in registry
PID:1780
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6948,i,10737151286489198054,11587355351761290394,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8004 /prefetch:147⤵PID:1544
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3452,i,10227482542372549945,9291733458791634502,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=3488 /prefetch:97⤵
- Enumerates system info in registry
PID:2924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=12000,i,10212990552933209749,10916614234700603720,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=6908 /prefetch:17⤵
- Enumerates system info in registry
PID:7876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7020,i,958295644125022678,18143922450802665731,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=12016 /prefetch:147⤵
- Enumerates system info in registry
PID:2320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11592,i,5766063901581083851,15063888767922168380,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=11672 /prefetch:147⤵PID:8088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=11696,i,12757264966017751611,10625858933246189706,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=11660 /prefetch:17⤵
- Enumerates system info in registry
PID:3284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=11172,i,2811325380845097586,12356666914927879452,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11224 /prefetch:17⤵PID:4776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11044,i,3297442408883206019,2864197957863700174,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=11288 /prefetch:147⤵PID:3964
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=11044,i,16072050973899589855,11221493038025650034,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=11040 /prefetch:17⤵
- Enumerates system info in registry
PID:1148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10996,i,18069524920025820937,2742664330309828309,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=11064 /prefetch:147⤵
- Enumerates system info in registry
PID:3168
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11072,i,54586592722502634,2840207138052900737,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=9880 /prefetch:147⤵PID:2796
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3612,i,14728198639285381958,15115256829863787508,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=11428 /prefetch:147⤵PID:7232
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3644,i,6228445072952207991,6419086232529285803,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=9912 /prefetch:147⤵
- Enumerates system info in registry
PID:3128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=4908,i,293197563233523628,11580647451993579279,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=11768 /prefetch:97⤵
- Enumerates system info in registry
PID:7668
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5644,i,3457208080680031431,8234653681468959751,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=3516 /prefetch:147⤵PID:1276
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11880,i,8015562035453585683,5670412779609816349,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=6620 /prefetch:147⤵PID:5040
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11940,i,16082691586201420385,14130322401670829807,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=4892 /prefetch:97⤵PID:4756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11012,i,2148969864357214339,14113089493736175264,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11880 /prefetch:97⤵
- Enumerates system info in registry
PID:3164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12132,i,15021752042251662520,5358613671673765454,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=11588 /prefetch:97⤵
- Enumerates system info in registry
PID:5216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=11188,i,16209973931509902999,15305678141437087471,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=12208 /prefetch:97⤵PID:1176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --version7⤵
- Enumerates system info in registry
PID:7364 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x28c,0x290,0x294,0x288,0x298,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f83408⤵PID:6584
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=6944,i,469866572951569599,14710748574771337971,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=10756 /prefetch:97⤵PID:4716
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2404
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe" --version4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5288 -
C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x5d4040,0x5d404c,0x5d40585⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2684
-
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:6124
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:6048 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f83402⤵
- Executes dropped EXE
PID:2312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵
- Enumerates system info in registry
PID:2644 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff756d28860,0x7ff756d2886c,0x7ff756d288782⤵PID:7652
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:6632
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:6528
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious use of FindShellTrayWindow
PID:5664 -
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵
- Boot or Logon Autostart Execution: Active Setup
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:6524
-
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4396
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2784
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2156
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
- MD5 adac67e1d2da2d706db151c2db316b2d
- SHA1 5f6e301d23e33132209707945d0e740d5bcb8996
- SHA512 9371b62ac25c6ea8fb6fca19ac47b873ced9b3d0cb45ce4de5ea974b93c12684c65aa23c7d83331c77502853258a08dff73ce5e3fb6170bd3ab1c5b3283a86a9
- TLSH T1DE31AD4EA2153027D5427F72D8CEBE83CEB1364667CAD46B18046E4229AAFC25FC80C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 528B
- SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
- MD5 047f3e9d21d6b325d592b1959e4362e6
- SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
- SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
- TLSH T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 cba55116b1cabdcf56cabb9ddfda1ac7eb27d06cfe0dedc07cad410490dbca1b
- MD5 99f8c638a89cbc2cd8fc0226654c728f
- SHA1 625250b1c58af5a9e29d206bc20f4a0bc5e35375
- SHA512 d34f4068fbdd03eb3eb5e77f8f5f9e133aa5bed2b8ed7f6f158c6b0c7dff38031ecad83ec11f4080b603e6e308e3cfbac17ab31e820b7b670088fc57e4532645
- TLSH T192F0D4D148FCF9702F01C4CC12D0CE763814C199D555994DF41C95FE81565D06D2643A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 32b45c58b977185a293bbe68f4c2ef586526a6f9d2f1861f13d6f502c997f77c
- MD5 9019a749232931d89f4fe67c86791665
- SHA1 ede369022f752bcef599e711c96a5c0cba54b728
- SHA512 6fa5a1e5097b8986d0053159d724cdc83d4b9f4bfd07ee26e3cb686c463b5741310cf4cf3796b137092f5f2011a25441a340168012fdb6685fc958b24cadd7b1
- TLSH T126C09B4437B54255F1304D7F1A57A31647FBE505CD4183550F706259C61DB475CF5D06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 5d4cffef4c78a7dece6610e665535e863585af56db8b771d3396f1b6ea4fd747
- MD5 32925da0af1f59f0da2c1bb8bb483fd2
- SHA1 03d5447ef48d2a00e3d711ba233bfa5e673a28ad
- SHA512 08f0e52daa0a5d547a4d273637bd5725831ffd8e68fcd4632fee2269066ab1862fe35bb74e925e942b25369efa95d4bd57575f7cddbb9d4c0f409272f310803a
- TLSH T12AC09B1473754719F14D113D7DD5560417B54505F5C6C3154F74113899297540C73D45
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 372c6fbeab1ae1a496544ea73d7d8e636932c7725501e04cbef9f3b11107fc3c
- MD5 67cac53bc7a593ac015a721cca8a0168
- SHA1 058044ff919f228cfab013e63f1e3679bd212345
- SHA512 b037efde740b360de134f43b9244e08c429659a4299ffb055e034d018c7805eeb3f080364f6d0f00629c210c21e98ec30ff79f274009ac51d525381bb8a1fe51
- TLSH T1DBE0C02411FF007EF4F4F0744FD9B5360D5AF026042892B10FE417057706E00AE22A35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002e
- Size 61KB
- SHA256 bb21de71e2261c703e2ca09ac57f922cac5790c19b23ced3acbba16d005ccd87
- MD5 43c11324a8a8a7b11fb7d40ff7f18cc2
- SHA1 971843a9364323de8e3b6e52f075320a93806807
- SHA512 2223fcc3f6fd2a15acdccaaed99b5794e8fc0ff6b46e42e1b0a96a2a80efef6f45041289f8352a4d729de07b967a8c76ff9850730858edad22141931a3734caa
- SSDEEP 1536:ng88DsNQV0+4ulw9DLz7U9Qagm9vbIrvOdOF49:ng8/NF+k3W/12rvrW9
- TLSH T1C253F2534BD541C43918615DBBBAEA3F95E0448AC4B8FE3ECC5A2423353CE29D63396D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000063
- Size 16KB
- SHA256 5e54e8db00c35e9c995a6304dca16f9c68c5cf6c3a42c08756ebb5283e42e094
- MD5 8b6344604bf9cb223873139e69a0e852
- SHA1 0d91f7040e18f8061c45c6d55ac1fa3647036f69
- SHA512 fed82a6669e1e57e8f4bf7d3023870ebc2e5b773b7bf318c8e97a8189ae265b86eb376f6ca4e81eb70a5575c9eb4add5d9f19a9a3df533cb8db027e9633abebe
- SSDEEP 384:TZCQzf5G5RN3BIfDCYRPWUehe1TKo/i/yXxJSkrzZKS3JDUFB/:TwQNOQfO0PKwT1/i6XxUhcJDa/
- TLSH T1D672D1D94722E7989CB32BE6CE6ECB031626CD47AE2313519416C407A1ADD9B2D8DF90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
- Size 44KB
- SHA256 64b54a67f67b845862a271e51b493c7e6d9487381c30c0b6d1099070a0476c39
- MD5 e852c12994cfb501cda1b4f9da7021a5
- SHA1 274c57c6591a99a43cd766a844d7d6ef1061776e
- SHA512 66dba4affb78b9e33af314cc922b458c6f67024d07bb983941ca3d4989ba070f43c9b7f5e0449e1da428bf66d2c542549687350de4c2dfbcd44064d7bb11b374
- SSDEEP 3:MsFlTlrllkl2jTPayuKkfl60NYocaTYdi3tll:/F02jTPayrkN6GFZcdi3
- TLSH T1551302ACF5C0574FCED40D3859855670E671D444D5558757117464326975745193D308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 42KB
- SHA256 cfc94c20e28eae8a768b718d919d725b1da49ec4428e9dae835e64739f1ea450
- MD5 5ab1a6ec65bc44c933648e4faabd633d
- SHA1 3c6cfb18a2ac39f22aea51df3ec951b419af196b
- SHA512 616afe41436188e3e41a900ede40df01c89d519a4753f8a3ec081e5da70734a6fd6960052d0d7ba0b77fd5255b6fa6a4ad259e54a0ebd1d524cec3d8065de8d6
- SSDEEP 768:WsgtPCh/V54ZAjmlOWQvkcuR5wkodLqRsswJnC2w:XgticZAopukw+Rssw9q
- TLSH T11613022E9873FB9E25509675CAD1AD57782E048A63FCFD740F8336D9D00AAA42C47788
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
- Size 607B
- SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
- MD5 76b78ed7ff6273215b134d6a6488035d
- SHA1 9e7a11ffb68d027036302eccd4c22315054843a9
- SHA512 9919504cd4d8c0757abff8da4bbad1c4b6532f81d290c736fc5624ef66de45e6a9e29a8290854ae554d5bdfc5291f1ea81ae62d1b25846bfbcf1515e2ec3e4f1
- TLSH T174F0DC53CBD6536BD527223CC8E207E1FA70E2719E81212386106F2D6CB77241E474B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\133.0.5932.85.manifest
- Size 225B
- SHA256 a448c0d8def61119902a7b81e79771d47662ac3d47f9d5342277461a84da4a59
- MD5 e705b923c1c7f53a31c478b68194fe20
- SHA1 29947af36a9713896098c454d32857f334bce343
- SHA512 37a0374f2e5e411519f15546a37a0fe8d4bb93d02384f4e5c15f07b63b2deaa7874e24f1c6faa0daaf3743f5c2ac65438d0ff442cf25c8126a306cbe47d307fd
- TLSH T172D0A751848921495F2141603C5A2019436CC7A704C8718C74FC7857AFE3518D5428B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
- MD5 1521be4b8c8f2e0ce20a89f163de3909
- SHA1 c291448b74fc3d7060c1df4b35026084981ee441
- SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
- TLSH T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-80.png
- Size 590B
- SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
- MD5 1b4ff26a106929e3a5710900a9d984e7
- SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
- SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
- TLSH T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-80_contrast-white.png
- Size 519B
- SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
- MD5 169dc90309162bbabf07ac3d954a076f
- SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
- SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
- TLSH T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\assistant_package
- Size 3.6MB
- SHA256 a2b6a7d645b0483aad58c5d06483de791900f151f427399ab74914a056449ade
- MD5 807b41cfff30fb35b95a7c0aadefbbb4
- SHA1 ac5245d0e89c823ad29a7669c6cf6b2267611f1f
- SHA512 48f1ad4916a8064fac547a73f905eea47f2d89593b56cb8a182c6bdaa25fb078c00b2844f6fd594471b15cd73ed12648db0bd29e870cdd412ff8d6a630dece11
- SSDEEP 98304:jkioydc1XQRozh9aUrT9PvfX84sFf4N3yjjr+J6M:jwEonaUrTZvfQjvM
- TLSH T1920633307DA5C43AD225033A8DE625A9617DF5625FAA4ECF33D40B1E9E30BD34322366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 a39ed0c79484f3e99de181624890a540b2fc5c41eb996269e5e4918bae092a53
- MD5 03e6ec9229e0b62d1468a5365d681e7f
- SHA1 39e058111892993d4f740a1a3e4fb70f63545f53
- SHA512 51b34fda6def19a3833039c0016dd0c991602ab253bd17ea4769c4757a45a81fba3afec1a38031107f7beab98f490afd68337c42a8f2af9f2f90bb0a6420cc07
- SSDEEP 49152:h6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/:hUdeqt737jFm5w
- TLSH T15B268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\dxcompiler.dll
- Size 24.4MB
- SHA256 05a76a701692c33096e19ce3e521b9fa827142348077ae8d73748d58a4123314
- MD5 791151595b267442a4dcca6c94727f4e
- SHA1 28c5f2468e66dd5cbc75125106046816ebc9d8a5
- SHA512 02f092fa90e6f3f9f84ed59236962ee4ade0bb08acc8c86ddfce3d6b982e21f030ad9af2bfe0ccc8e8ce4984fb32f10ea4867d5ad6274a327b29bc1b473e9897
- SSDEEP 196608:G3W9ok1khD1cK6hF8d4pRJpwf0xMXzadQ8KBtboRFkR8eBapJA3OgtZ8:Gm9ok+hD1ci4/EcyXzadQ3t0RaBc2Pm
- TLSH T1154729122646D49DC059C879C7678B26CA6C30E73FA7B8DFC0B461252B79EBC5B39234
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\dxil.dll
- Size 1.5MB
- SHA256 7e142d2b60f0ea517a5bb3d745f702d09d59a3c9846a31810fe1dc6163844057
- MD5 6b272fe9af80eb2d4dcd90ad290a881d
- SHA1 b5e5af3093128748bca29249dcc2ef601a319206
- SHA512 f9e26a2421f336a955b7ec0bcbed6a80398e1df53d5b4cd34cd2053e32b6564c162504668e85ac5ee7e97227a50381829bb410deef9537860e598033ee1939d0
- SSDEEP 24576:acuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/9:asHMPzbOxBduHdSCde8ZF1/0Wy4oV6bw
- TLSH T1A5657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\files_list
- Size 6KB
- SHA256 63997f976ea4517c666ca44732befebb2fdc39aa1e4dfdbed4f116001ee73f17
- MD5 6bcf653220d2f08acf37919307e2647e
- SHA1 d9acaea5b63278776523be9832b43cceb8eceac6
- SHA512 013529b725525b89b540cea987c6ee14a92356f2ce918cb32fc29e17b32e6d4ee7c1deffac9fa7ab3e07db4d0e1f27e3bb2ebd9d4cf74ec1bf45b260378bd4c8
- SSDEEP 96:jMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiAORnOU:Iafz5XMRwbxHBZ7unmvFORnOU
- TLSH T163D10797895F0265CAFD93F1EE61F89091342495DEB83058F7C70A5694A33FE02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\headless_command_resources.pak
- Size 2KB
- SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
- MD5 1f42471465becf1c26104d6624b334b3
- SHA1 6818746163a26907be02503192870c57f0b81d56
- SHA512 ab4b837cd2d94d8bf94468646087054dc27f93e9fc21b4f67f23eb77631a74dd351370b3e2b7a9272cbeb959b239b4309ae2ce1d5004a6edab468b95a011fc41
- TLSH T182511893360AB5A6C179C72891DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\icudtl.dat
- Size 10.4MB
- SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
- MD5 f50c621247b8ddd574dc9790830f28c4
- SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
- SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
- TLSH T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
- Size 8.3MB
- SHA256 1864277ebeec240cbbf366db09b451c268d816ee21622618e39c7a3e39586fa1
- MD5 cd7f93a633fd0d46935b69b1848784d7
- SHA1 2eec4b9e0d2d261575cb6a41e16b0fcaf26e0d51
- SHA512 0ee76e6be2620a6139b14ba7b7b39c994232c34674ab8cfeadc8334146d6eba4ec20222d936788cddb981270fd4385193ed1a4131e57be734e7bf3fb83c387fd
- SSDEEP 98304:g/06Gb0nq73PcI/Ztlg1RbdsuJXMZ+sUYNY8AFa:m03b0o3x/zwVC+NXFa
- TLSH T1F8967C53F2E601F8D06FDA748B7A5232A9357C464B35A2EF0A9436251E71FD46B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer_helper_64.exe
- Size 639KB
- SHA256 ce1ed2c9c0cb37b4316508b9d31782c1daf11b8fc2978b734d20cc1cf38441a7
- MD5 ab652c5c6a48ffb3732957758e110ef6
- SHA1 7074e1993767eafa7b106376757a27d16cebcfac
- SHA512 3e0934f5ce86b5355a68be3d15785ecef4c29b300eb696ff6244a902241bdcf65de11802b63b8bcd424928f8bcff0ee139d3f4e60857c956462405eb1f27e6ac
- SSDEEP 6144:wbuw4+28WFtzMnjBgZsFAuDyFIz8j0s1jFOUvWR9H/YON9X:wbDJWFtzhZsHyX0s1jFOU49H/57X
- TLSH T1B9D49E12B2E545ECD039C1348B518522FA72BC564F35B6EF02A0726A1F7BAE45F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libEGL.dll
- Size 492KB
- SHA256 df8c66c195091dd29f10543eef840ca4b13d32e0297a074239cfab6ea1b902e3
- MD5 5a3a5204310c85f05604e2b6047ab884
- SHA1 391bcf40c1c0a939614c84700d5955eab6a4d2f3
- SHA512 d43bb68e1144c9e47c61e0719f7abbb6e1f8a68f5f952d9d6ace358ede62aa4ebd2df5552051901db5a9b9b7951eb444ca2746566f46a7635a32510f2797e366
- SSDEEP 6144:I2g57izFVCpIdMpFzf071P7cRM+P2AcXtlOlxLKQ:1PFVh2f071P7cRMu2rXtlOlIQ
- TLSH T12FB48D15B2D949ACD03AC174CA538547EB71B8520F65F6EF02A0E2792F7BBE05A7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libGLESv2.dll
- Size 7.5MB
- SHA256 b94d2d76b243ef6d1db9caaaf8503b28248790084ad764075bf035ea5798dca0
- MD5 f1d06e51a42afb41395e2e3aa13b0759
- SHA1 fc8ad5341226fbe945b246bb2c342f7678201848
- SHA512 132384a1a148367c3340619cce4e10b83f5eb13ed16389c3ffdf6601f6ea9aaf1d6cbe9dfceac9d96a84564988961906bc854669857ae2dbc1e918ddfb528aef
- SSDEEP 49152:R5rxdxfXD43FVfqKckZphPavOeQOSTm7a/HK3LvJ1GYqcqA5SSBaFkFerC+jsQ5/:Jc37NzUOZMqEaOe4QU+xcmoC4xAkA
- TLSH T1F2867C13F69680DDC01DE2B49757A223F634B8450764B2CF2A9463163F7AFE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bg.pak
- Size 1011KB
- SHA256 fc18b53fad3138037fc4219621a0ee20d9fa9285455f2e51934c1c302adb0b10
- MD5 24309a005d524d9e2cdc5e432365b092
- SHA1 4a73872ac45303e68ae3d5e4570d9bb3c8428945
- SHA512 b5945aff8a4637800b6b6ef84e6d4a6234c25a21f25e1092ff46d41f74d31b9c6035505e5b93002bd959a4857f7bca1c6f5e81593696b8557896b6ae52611f12
- SSDEEP 24576:eF4TrDb3JeobvGGml9cIWdBBuK026g2HQ2CiZ0vYAgCzQkECBUqVb6mHIHiWHEwm:jbBG5edBBuK0tQ2CiZ0vYAmCUqVb6mH/
- TLSH T1B32525A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bn.pak
- Size 1.3MB
- SHA256 ebcff6e89b740071ea4653a4ae001a2f57593e4f835281d65e0139c4988338ea
- MD5 75b927ec03e092af28100792427818d0
- SHA1 7816a5fb0e86ceb85311a275cd74146ef4484e02
- SHA512 a8421d28f101c81482c081813a09b2a751155a2b8ca4a85e3b7b0dc8f36d6aa4827be1c8f7c627c42d927e45a0affc3506533b8a6f6873450661ed00a4f43af8
- SSDEEP 3072:TGM9uIw88mASBtK80h7HhFQwg/+yneX0hg1UdIZWysr9iUPDH:HcQ5AS2RhTQwgk0hsZW9
- TLSH T1DD55FF209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\ca.pak
- Size 636KB
- SHA256 09070612eb4b0cae10ccc834ff36e4681577acde46b6ee48614f1a43919b828e
- MD5 90d6196a100be5247c6fc00d82d72be2
- SHA1 c9aa720ce951528c3633d35178d879d5891255f6
- SHA512 4acc10bf7319b40c55fcafa5deef5b526cb72eb933915fbbdab42f6c3d2d0fd182464fd5946e2bd9fc61f6960775c7ce5e9196175596f71f7f791398a4cb61a6
- SSDEEP 12288:xBT7G6ybGbf1bCCrz+W58rPolpt0bziV56M6AqHl9kdkcBKMe3aRYUX1qO5g5iuF:xBzSaWNwLwb68BMzthjDGd
- TLSH T1A4D4F8238BC83B760493330AFB42C257F09CA9847B16D254F5AE1A5622CCFDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\cs.pak
- Size 634KB
- SHA256 975fdc0103942c61e9daf065fb393e66be7b7b1131ac1451b7d6d00586e5c22a
- MD5 3f51b75d02b9713002a160ab316c8ebb
- SHA1 15ef86f7f85bd0c2fcd491bda196e70be135a97a
- SHA512 98d8e3fdf6cf5a56f2aea5cfa1557df140d5328763efd414aa13dcbc2905ed622a234fa0e7e6aea379515a1b4b87343ad3a3e94647a4ed2815660565cd4214b7
- SSDEEP 6144:bBF6gfO7aRfJzH7x2GOaISBto8QesuvEtJgoN3pzYMqYhDxSV:5W7+hzH7x2GOaIS8w7V
- TLSH T155D46C1FEB936439584002447BBA5228BD5E83140B6EA9AB7CCF9C912671B7ECFF1D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 2eef7c43782b7aef93485f10de62b696e4624f2afe1a624a9e2791655aa92f60
- MD5 96f825e84554dd4936729a515850db1b
- SHA1 b04efcdf8a56b3dd0d2824731670940b5a138ec9
- SHA512 3a5d71145c5ebcf3b8301a8b7a5950cbac51b31b929a9e8ca7ee6ca2fbf1cd947ae647dc8bcd95ac48cc0c81a8b9e88a9d89c739d58aa7cf9315386d763cf821
- TLSH T14E31CAA0401260737F22939BD9633A5962071503F06860E0ABEB4D1D94DFDCB1B9BC07
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 1c5d174ed161418e9635bd1a2f5ab9aacbd07dcbd7caf2775670bd8fa1cee24a
- MD5 63532a5ee567ba25fe1dd6e6717768d0
- SHA1 46c01d1e68f62497da613b21c040cdf929fae2d2
- SHA512 f74bee696f82d96daf3c1067426472feade90a2aaa9f21dce67da61268305fa8324a0169bd63ee70efc4a5a1b800f11613380ff770839313d18aa4854c40c796
- TLSH T12531ECA0401260737F22835BC9633A5962071103F06850E0BBEB4D1D94DFDCB175BC07
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\Opera Browser.lnk
- Size 1KB
- SHA256 e229024403af1073a0e361af9dfe2d39fee51fde66edb1fc9d82d6b9d0c3ad19
- MD5 ac5f451bbc148f1dea67e7560eca9a4c
- SHA1 ccd40c079f9049b2c9783477bcebcdd87098c4ba
- SHA512 bd19683bb1536e28736bc2f5648a45041a8967b670c3e7b4f14e1a94851ec5dd46b4bf53c82bc184e172d6c3ed4082d2b7fb3b3a182f0ac790064edcf51732db
- TLSH T16821242D5EC92722F27B853209B73A35967DF841AF464F4C0050834519B5281E45CE1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\dbgcore.dll
- Size 222KB
- SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
- MD5 b26ebc5cde9b1726ee9f9534dd6107d0
- SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
- SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
- SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
- TLSH T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
- MD5 021b11c0fc1a09e49a2046ef07d1747a
- SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
- SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
- SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
- TLSH T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
- Size 224B
- SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
- MD5 a31327ed38a2e2aa048700169e5c9e89
- SHA1 cee83a9db48bf9c0d963bc6d03cc125af5cc4ffe
- SHA512 b302790a45f5cefca7131f81d2d15976d402a48147960dedb5eaea136205c7a5e04635521f08c63f7ab53f1b9dd283e575240076beca5f392f47f0522f105fef
- TLSH T195D0A755802BC0E365B00283783633DDC20B1B038C716899B3C71125C07DAB326E6E1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
- Size 239B
- SHA256 179d95b3a3b4df440c9746002f74ada31df05b8db6e92aa96b2db4c71da77b05
- MD5 f9776afaa4349f1403d9ba7f917a295c
- SHA1 cc27c0b0af513f627eea9a6aa8bda87dd4fd2bf4
- SHA512 6f650bc63ef236c2256caccf003ee1fe9033bbb5dcb73265302d4fd50e6e6c5c901f00b8ce97bf578283794043e76d817a8f30851da8c75667d76f8369be609c
- TLSH T142D05E59806AC0E269B00283783632DDC24B1B0288616899B3C62125806DAA226EAE1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
- Size 1KB
- SHA256 f7b86d303d986c8baebaaaf777c015f1367ea60141bedabdc3715171662ff95c
- MD5 0cccf9409cc8bd30557e4258cc105029
- SHA1 ef6c2a83f2fd152e1632a97d43375063da1e8390
- SHA512 4ace19c70136e5b2989c67c1ea648f0e0f9c155955582886f0936624161fd3f06e88edfd8163fe6d332e2ed716a947d490a65681922e5bbb49fed4e44923a0d7
- TLSH T1E911B6E41051F4A36BB1C29BDD7B3B8AD2071303A4A864D666C2481E84EFE631E96929
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
- Size 8.3MB
- SHA256 49d33a257c47d2e32cbb967ef1c088c0ff5d71ced60950d902c9aa82311e306c
- MD5 d9534337f6a0f2c96b59dc571e694474
- SHA1 6e706ab155031e936ff35eff549d51b815c4de5b
- SHA512 becf6953874c49d217482a211ed9fd50e3075506390d4f1c33ea88665fe529f4c8e9fbad6057dc63f3ec546171886f98de6ce8ba13b906b96a9ffce012c846fb
- SSDEEP 98304:ZhLx1oEDfLTV7fi0obDaW6oTTOFO7g53QxheYNY8AFk:jLx1oKLTV7fYeDQxgXFk
- TLSH T1D9967C53F2A601E8D06FCA748B7A5232A9757C465B30A3EF0A943A251E75FD45F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
- Size 3.1MB
- SHA256 30d994269fb74a02803b5b6b8fcf686144f27d8b7845c771ffc2d031fcc7def6
- MD5 64ae5d8328d610dde0d2c7b4a0433544
- SHA1 d47ccbc450b32d32f0630c0ae3b788f9289bd773
- SHA512 20ed853fb0a15ed3d72168bd2e2db519daa4da76b68b5635346fe83300962bc828b66ad91cd76b3074e2ac78f921802078f07846e11191e0c78ddb53a0daee9d
- SSDEEP 49152:YVAbwtDkQC3x3XyayaN+KYUkAjHMZ/buhf0R8sx/ggeOV2MsAwZu8DbALMKMeVPc:UAYgh3XyFaN+QiOy/ggJl3w0PLTL+h
- TLSH T103E5231237448475C67312320F15E7A8A5BDF9652F72878733A47A5FCEF0582EA26B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bg.png
- Size 224KB
- SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
- MD5 21eb6b8232802f32b6483eedb96677bb
- SHA1 b390f01600e521586e210936a4b57a6b89e66a7b
- SHA512 5cfcb0278e5e7473dde396ee34115a3f50a9ad195d99b53cc5cc33a169a42c8f729806491fc0fb607719139081fa3c774c37b1638de1289b73c0c4c80768cfcd
- SSDEEP 3072:7MuA+f6FJxlUhyLg2cugpbM5Q+jBre6cAJqmm6nkrw8sGaDy7y8bRzUnKdh8BfM9:7MuAWojcVdGSf+4BML49RzUnKUuLZ
- TLSH T1E92423876BC391F4590BD65FE9386BEC3CD4E7EC82AB113C931A42424D8416B85DE8F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4444_123985523\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6628_1176773292\CRX_INSTALL\_locales\en\messages.json
- Size 401B
- SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
- MD5 f58e359a5a09514e503a7de060e5719c
- SHA1 469e51c68e204d8268eede68ef1cbfe1e6732f97
- SHA512 5498cbb61a7953f5780fff2ebeec08e48daae206e5c237686b41f771370874bdfa52243db1050b67f052d7ea400e385f73cc4c41185194f006c73f2e6f174b7c
- TLSH T1C8E09208D940AE6B52F792123C787A15F72E476B0500541A7DBC500D0FB1AAAD662B58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\1f04426e-498e-4fd5-af4f-986e59ed38d9.tmp
- Size 2KB
- SHA256 dfe05720f569d214ba7390ddee4f235f25704ed674d1c931f1835477ef5c9358
- MD5 d9dbf84cbb5162244571803583bb28d7
- SHA1 c794c4287e6f7fcb800ffdba57ae35d6fd95f1ae
- SHA512 e8f7a97f05f1cf01993a8ee4be9360f74bfc42c08700b4aede0d307f8fd0e99e6a9a809cb71e7eb4d02ae40e3b44c9da963db4a7bd11720ec3d069734162478a
- TLSH T18951C7B158749D2717B6CA5AF9473F43DB660123B2982FDC96FD0D0C14EF66C1752822
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 b281cec571c4687c10bd7ae5aa30b88b20138880d57df071cc6389bc50ef5ed1
- MD5 0056cf37a0137c2162e40d28957d47a4
- SHA1 77750c0cb4dd846236a9e3a9de32bf518300c636
- SHA512 ed0e3d90af28d7f06296c0460cf2858b4306e1f4261399317a713531ffce4d04d5de897e087f014bfa54766007f64ae502b99683c1dfeb753831ce4ffdffed19
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0952a118-fb27-43a9-a8cb-bdaf550de7ad.tmp
- Size 149KB
- SHA256 0e49ba39910bd41086cb3f5e6be39e2f9628d3c22389fa84ef40ac8df9fe3f90
- MD5 1fbf455e9eaeb8fdab30cd5db3e8e39e
- SHA1 80286c41d9008f0ab008772a79de0e5c16f53555
- SHA512 c10813912619a2fc1a29c2bbc8055cba96b9502e811766da01d7b3692b0b68cadf41acbf4d40fefba319ea7d0105e6a0f065b74ec5fa3321c15bf351c2b89429
- SSDEEP 3072:okSZ6pY8rM6YSbD/Cq3VgqVST/8hTryasaL2E/t0b/kdzznffXTUXCuy6ph9mvRp:okSZ6pY8rM6YSbD/Cq3VgIST/8h3yasg
- TLSH T1FAE364AB468C5CBB5F8232D550CB7A5A80C3701F6E8CBE89E780CD4DC2659673B78257
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\09ad5bbc-68a4-484f-a60f-02f63d2d2a6d.tmp
- Size 10KB
- SHA256 6733f24e553aea74c979f8dd2254387fda2517f35d36ec784b79ed66419ebcb7
- MD5 e04b090eea1a7d200e8b8c787a9df37e
- SHA1 0d3b11d05301a494e739a352175efe663ac08040
- SHA512 a317d1aaac5e86013618e1d103430dfa53e15c613b38505d2839b549d0dd90d183f0558f5dc176400fa06fef2869531a10acd04a7c31b99dec656d2bef51e559
- SSDEEP 192:c1rtIUM+a5jHnXMvgokH3cEWPOgakxdwsaYiSD4hHb+WNOYcGCHyIsn2agp43:2SXbnEFpA
- TLSH T1D232534A99B01DBB4CC2592EF611B757F3E50021B1617DA4B7F9C82C08CB2CDA223AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\36d0b134-1441-4510-a87a-8bd4ec60cd16.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\65f58ac7-5ef8-4351-a41f-38e0ce6b66f6.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
- Size 24KB
- SHA256 eb6e05a21f83c4fefd6387381d9efa8a6d60646a844aa65678326e945e522ee4
- MD5 bc2a3cadc0f907888dc7502c4b185287
- SHA1 756ec6c2e9f80ce555bdca9778aa1ac6df5436e5
- SHA512 2395483c66d554573d4c71217691ee5df36c0802ba2f62761a9e6f7c6cfcca11f8bf0d380f80632a2f49bd93e83767ad2bdd2bf6d136dbfde509a8a9cbe9dd3b
- SSDEEP 384:XJlQES0+LdZ8PmKMmPWXv3mxTlY9v6VgQWJ+2F:3n+UWXv8OC6
- TLSH T119B26237D4026C6B817012D664F6B71BFA86332F5A848D8B767CDC8D8F31963B256B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
- Size 186KB
- SHA256 0e006f8d5f21e293d321d8604cb29d22e362cdca0e31d5e9a0c58fe3883f0753
- MD5 53a682533905c629561578e56f4e34ee
- SHA1 f9f680bf917171f63f202304733b00936705de3a
- SHA512 e737d41eafc3a36458e33aa0084189d674a194ad474b02e6e7c8a3258e835642a13a08a068d307c7da84ba35401734f06d78931a822b007bbe4386c9a6df8774
- SSDEEP 3072:M+4UwPALJmcTXRxQZEIPu5izn1DC5svmL7qKz8AlZB6J7VV7RCqDSSv6FNIhi:MtLAJ3NLkxDCWouqLEzTSAwNIQ
- TLSH T1C81412994C760F5AC37C6326A025FA7BFF651D8A19CCA3C01A87EF6981C37C190985BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\c03e6e83-b233-4a81-a380-c32718e6aa29.tmp
- Size 48B
- SHA256 e75d90b032f82b81e6c813a4826baf15b90f4d195429a861c4a8de111f6723ed
- MD5 6178652731d96cd02a487ad77c13b6ac
- SHA1 d0e12beef1b8c903cf29a3c076a36063fc37f910
- SHA512 379fe29fb25dd98e41a342c61dfa1697babf5078db5cfc67e5d04fa20f40b85430affc53cb5c835a462e159b9f76e577b0784eceab3025644c753d1141624cd8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 1b0f7479c42481f5a9b702809e7952da17ece38c4a31d64b64814b871bb3d36c
- MD5 ef23de09699a61979f17f6809c7a19ff
- SHA1 33705cd516ba3e21365443e51d137cf13181bf85
- SHA512 74ddede5205ce47f7428b119b1d577a0bfc2f69f32cdcc34d8eee125dcad87890a3082fac6120dbe0f3acf27dc8da90baa185aaf4deb731f812118dda8d70bb5
- TLSH T1FBD080A455DB5009DFC9553553365DD5D35438131000DB473282937906CFDCC757411C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 1aece5da00403656bb9948d15340eb1ff13393e520021123daaa03be1904d08e
- MD5 f8b89c290fb41351db5be0694c28b86a
- SHA1 b72bc52a7ece141e5a62259a030db2b152c75331
- SHA512 2000996314a7df71999e40f28ef8ea5ac26645c5bd5a8a75e764e870b13beffac153471b8c6d7a2d37504dc48bdefac39401dea6976f4df00ced8f5dd43f885f
- TLSH T1AAD022AC602B4006CBE5093C022302C0C33838038000EB8A6381F3A90ACBCECB8B213C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 744B
- SHA256 2da2785e4ac8701c14fcef4aa96cc220dc29ff7b317f8593ded7a12d2a99cd8f
- MD5 cfa38cc396ceaccf069e2d0c92a6a20a
- SHA1 fa4bdb10dd69698ced0313b01c0d86bb7d08430a
- SHA512 aa6d42bc831464901f81a3744d323914cc54a8deae6019f554f56b0f1601c6e8e6082691817057e794a4fec5d782002ab243ba85e3433aee66251c6ed3d4657b
- TLSH T1550146977DE2C12ACF8F03385A4A0E48F162289B0405C74742617360384FDD9757206F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 ef22991b5e48ad742f1b6052845391d622b5bc8772494ddb4d0aa47629052f34
- MD5 cbaa547af6927a44894fd591304f5b56
- SHA1 1efb26556c858013ee0aa35b07fde80df6f78a3e
- SHA512 4b0c6d8bbee5cae761f19ac8d79832bfab6855ec733ceb814469c7ef92104ea829fd926d1458d2001a3120c24c74de6f4dae9d128b0deb16997ef675306c220c
- TLSH T1AA813E42F882C51BCFDE0A7469E6C921E47B15064402CFCA99FCA97D3D0F7E810B546E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
- Size 464KB
- SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
- MD5 b22722b42e8b196c0e26ab8a8c6508c8
- SHA1 2c4de3caa4409a164e31837f6bbf54c99d922c85
- SHA512 a0904204f795dc7cdc6612867a87f60cbd27d1edbc70007e1fe5c4dfe83165ca287aed3319409a0829815e5175480e085775a9a3285d1d20d629b28641fddc99
- SSDEEP 12288:lrGu17lQ0NW4Lwq23Po85e16slc0hyKQuhZSAS2T9PPdHNCPsOP83JDxj54:lrxvw73H521IKxh9S2TVPdHNwYDxN4
- TLSH T1A4A423E043F7207FC6678D44F640C86E15ACF52ED99C58CBEBEB401541AB8A4ED1C6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
- Size 46KB
- SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
- MD5 3a4b577e6f2150e055d503fc17aec243
- SHA1 6ab613cb92850a343caf28887301748c73b34722
- SHA512 d4fb08f3423ddb5501e2d50c4b3c6cec5be34c9b149d469074119b144fa54a317199f485a8dc7eb650fa7762a0be79b49a2d99b4cbe9dd8408a632baf0cb2537
- SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51SqJ:un8VEbWXxYNG8/A85DQqkslr4JPmCHLn
- TLSH T1F22328996269687E0BC2D2ED925D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\service-worker-loader.js
- Size 49B
- SHA256 3ac757f49d04af7076f9f1af2ea33c2ff4d77f5f3200821153c520b4c58fb873
- MD5 16d83bc2a9d7b069571e01b4b856948a
- SHA1 06c8ff11bbc029ca703e3bc0cc4cf747f83491d0
- SHA512 22e573bacef7279fc642c251589cf334cf461d1d892ae7c969c9373c9fcd273cf1f3c5d4ed20ca7d88b98abdcbc491668486bf8b2374e61588ceef85079d97c2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
- Size 112KB
- SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
- MD5 59de0decd0e4751b14231dde34507403
- SHA1 5892abedcec573765d8247204ae038ff4c44848c
- SHA512 16a7716b4afd10d0984c99fdb4e2617af3ca0a96f7599d22675924760b72ac00bd5460de75b46fb26bbdeef9ac4ddd432bd70c47467d3cacf345af5e552de4db
- SSDEEP 1536:Ska6rka6dmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6vszmxnS9lbv93NddM3prX+wH
- TLSH T1C4B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
- Size 5KB
- SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
- MD5 6586f73b98953dc3d70ffd9a61e24911
- SHA1 3e9de04cd595f3a391392a92010633d1d0608a38
- SHA512 8ff2b9b2ac25b0cc60e79ac6399bed6d02a29b1f92ab499a89878c63618460a70a2d0e3f2309b227fda01e03c3427c4a11940b4b95704ada5689f80c385adda2
- SSDEEP 96:xSVa6rQaSVa6j38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6j3805se3m4XFzVJFs31wx6z
- TLSH T16AB1B505815C4C7D8FB5028A9ABE135212DE2283787BD4C4EFA3C47597353CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\20ff628b-172d-4940-be77-4b5621bc716d.tmp
- Size 27KB
- SHA256 6bd6b3dafcbffd70dd3275e6d9982936c7d21b4b3d0347414d256a8512f6fff5
- MD5 26dbe8775557f6a623c35dca6e0b9879
- SHA1 98d6699cc2139aab60d059b38a986baad5aafd64
- SHA512 cab80a0fb4232cd9465d3a3e160d04ce6bcd9822a889d5920ba310135497f2a3161e0621f21d2d807670329f886ad2476e2cb30be13669285cfa8d6c1482a2e0
- SSDEEP 192:O5Kyz4+Cn6olPnUPKYmUrKg6HrNyilRG3rhof:O5x4tLOPKAYJoQ
- TLSH T111C2F1A4DFD1E95AE2C5637D91CF0B08A776D00E0A472FC72504DBB21D47298BD8A64F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3951c50f-a9b3-4e93-9e0c-83c89189f60e.tmp
- Size 27KB
- SHA256 1cf990618d717d9febe7f274ca61fa0f03d3ff5265fca7080f51999e3dd38ea9
- MD5 550e01cb403c32932a4a921162f6a76d
- SHA1 742233dd564bce17b05883ed256a637f5eaad87e
- SHA512 adb56848a5c6eb4faf685d0c1d5a3dc02e544b9179c588401ec352d36185f43de3a6202ff9a460b2ad3b1633685683f2f7c5941063c0a56d88bf5d193f11bd00
- SSDEEP 384:Ot5CzAgqra8mQszUIIU5srLndrWl/SMayRj:w5Lgqra8mjnIw4jdrw/SMJ
- TLSH T1C0C24A0BF7D59EA7C504977489EBCB987338E8866713DB03B601AD791D233E91C8A4D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4e15510f-5731-4b35-ad41-9312e55a15c6.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\81fcff05-b206-4769-9969-fd8c315b12d1.tmp
- Size 27KB
- SHA256 01630b636ae1f8c3943d9dc0268438d6f022114197ec0007894463fe058ba7d1
- MD5 4245d59ec231d8278f9ce9eab0a4ac2e
- SHA1 ccc1556b9274b8b3dc2bac0f4102be680738f38e
- SHA512 96d9f7eb1b18b1f70f48bbd6b47a25a4a2ac6dc964d9e45521d2759d45663bbf64f62cf3d3840ed1c34fc5e1520f0f21b4468a3821003829c6691192d2cc4a39
- SSDEEP 768:LGfGZgOCmoD219sKUYBky6yzQzPI4JG3c:yurpoD219f/IG3
- TLSH T1A2C20FD28ED696DCD28925309476870783AB96BC03741D8A79E9ECD7BECE443107FE24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\98478492-ca45-48aa-956b-c569fd6b1a2f.tmp
- Size 27KB
- SHA256 5141f12550467c2dbe7c5c1198ebe1190160e3f0ca2684f03ef05b83f6523c2d
- MD5 f7359bedfad8937801013a9a9861be12
- SHA1 741a740cd29ed057a527441a87dbe4ca006ff27a
- SHA512 d372d057c18d232eaf60247b31a0fa8f6baa49f36835fdcc5ffc46931784becb652539edafbabb8bdb3c5a5b72bd802fab679ff16a4dd5ac4cec86e7784d79a5
- SSDEEP 384:Od9cCrxneJ2bZvw3TNjYR7m5DGKEc/xNaXgPGrOU8loNpUz2U2+ps7Gbr:A9c6neJ2Vw3wNKEctpNoNpUa4pf
- TLSH T117C228113237A161F9203BB5182B9FF2B77BB8176581278B733BA3791D67642C623609
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cee45db7-8cea-44e9-986e-0e07cc30571a.tmp
- Size 27KB
- SHA256 b947aaf4112ed87987d0e65bf4688654ced1661b950a36dac6628e4ab485ee22
- MD5 87e7c822f0d9e9d67ad1586a94419ecb
- SHA1 3c21ede9b025ae4e89ed1baaa5ed44c94f710043
- SHA512 8da32f086127aef5156d5ade477446c59c4db3befcff22d57e6ce7699ffd43dff333205f6894baefb0a40f47c207851e534ea77b215c5062aa0731e332967be7
- SSDEEP 384:OU29NBsgJOv9V06vUUR43bX6tOfw4wOq+r02LUguHfhVESEyGoLY+1Q3VNTGNOsT:GXu5ROrUguHfhySXGoLU3VNG2rUvgDK
- TLSH T13FC28ED373A92B88F1507FF8D02E5BF607B6E66D8AB52317186DFC299E5354204B2481
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e942fff8-2892-45e1-93b2-e1ab6e17b9bf.tmp
- Size 27KB
- SHA256 46032af1616740352b7d3950202b165fbef65c79d7bd39317581b90d3c3c7cd0
- MD5 8969cfe0d0f7f78d2b542dfefc562fbb
- SHA1 7ea3a65936d98d5d1a69192fe5317ea40f5e31e5
- SHA512 d63cd0755b1b07ba9ef88da1ba917cbf968713ade4cd25d9d06a3cbac4cafa7e09b729ae6835d5a57254ba7242fe1b86cf96c674c24100ae686b110c51fd3285
- SSDEEP 768:mmPpadCE9ioq/pj1xl/GV33T5S84atvUD/0QDbg1tiX:uvvq/p1xl/GN5SKtvm/BgHa
- TLSH T1EEC2CD07C2E7821FC2C224FE39024175BD87EFA59555C3D1835BBC6E624E9EB0AE61B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\0c776d44-a3e8-4691-ad5d-b0df0b2f327e.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 643B
- SHA256 60bd96eca7c6cb1fc31509044b35d6f4cb03731bdf1d8d6de5722a6e9ba0e68a
- MD5 d310899ad4a8aa651f8e9634bb48d4d3
- SHA1 9e2b2ce5856e0d4b4999a41918c9b07777115f0f
- SHA512 d6dc9c251c4edcfe361f1303b9f757e5aebe8318078c3a96af0a4f85d1cea1d101057202db53acde2060308748ba82fd6eab542ca6b2396a905c9f784df4a076
- TLSH T111F0FEB75374697D9F2183F0E9155E1FCE5E1412835C7D7985E06E13C3A3561E000B0B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 8KB
- SHA256 63325d8dce5643c7b07c14f48f37ccf0cd7eb7c50e9544f9b69d34498a82bc75
- MD5 8faeabeb6adf2ac803e80c827bd3edea
- SHA1 5ff4e4ff395dbbdd6680469c79656193a92c9446
- SHA512 36fdce230b0fb6afe3082b9482ad0bd7491a011e2d8e0122afa184ae8fc913a32787059cf8f55450bf5d16b6b198411b2d473c448d0e41cb1f423740d9f18076
- SSDEEP 192:DKqdyGbdJ2/JPJ8zqx45HijAOInnDvqPaPTLuvJGBE/fPxNPAICpskkqQWN0QyYz:DKqdyGbdJ2hPJ8zo45Cj9InDvqPa7qBm
- TLSH T10C029AF7C7E8862DC95156F49B256A2FCE2E0528432C3D6AC8D8AF4BD3E2471E10574E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 61B
- SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
- MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
- SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
- SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
- TLSH T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\TransportSecurity
- Size 2KB
- SHA256 d6d3e714e67c54b579dabb1836c6897c218f64bc92a2c2fe921801b80ced70ae
- MD5 cce7d1b181258612f705e55d7f654787
- SHA1 07e530180683bef25474ac3126ecaeaec61cafc9
- SHA512 a0b8331a035afb4dd2f2326a024c4406151aff6c1f8c388605175bd5cea36665e1dabfa51e0425acf0d26b9e9fd147931fba9062b279d4cdb2cd96829232f121
- TLSH T18351BF67C6FFB81B207C487F1E197809997AA43102C674F9EFA7C26DA0494F32716463
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\a1bf0685-5977-4716-b7a7-2a76bcfa7cbe.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 bc100de40e6bb6d7f2d369243380af826354d63d285dd9c85066e86629155418
- MD5 8dcd5dd356dc95418a04523d99e44dc4
- SHA1 ad8d061611e3a7aa57dcef86aaff92db41a59a81
- SHA512 1a0e949353ae6b032bba42451c17450439995633fcd7ecb5cd5353df1ab88e34148b45a48519d01ade0a8c483389cae1b80669b9ba64b70318a3e330d93b7df0
- SSDEEP 192:wKcBdjkcrmY/JT42EtG2mb8aFlAM6oi8h+9mdZHIUM+a5jHnXMvgokH3cEWPOga3:nmdjkcrZ0XbWhd/s4xcx362ADYj
- TLSH T1E5825687A4B41DBA09D2952FF561F32AF2D51021E2605DA4F3FADC2D04DB2DDE612E82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 7e05880daaff2dbd4847a3595061c70ff8f4fa49a57c6d81ece2d360d8c9c54a
- MD5 52b95ffb989681d3ed78064d846618d0
- SHA1 bbf55e2144e61381ffbbadaa90d85b5bc91c01ea
- SHA512 aa5d46e73a17cbbb27d4967c42be0d44e0f0a272fb103357430035bc9f37ddd32c24468643a16b80c2d4738a86ea595844690313cc5f5c3eb0966db3a449c1fc
- SSDEEP 192:wKcBbjWrmY/JT42EtG2mb8aFlAM6oi8h+9mdZLIUM+a5jHnXMvgokH3cEWPOgakd:nmbjWrZAXbPdrRcZ362ADYj
- TLSH T14E726687A4B41DBA08D2952FF661F71AF2D51021E2605DA4F3FADC2D04DB2DDE612E82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 36cfbfbbd4bd11f514d44321dbbcbca97d719775bff8f90aa65c62928e7bdd32
- MD5 36231c18157c811004dfa70f95eea3a8
- SHA1 4a49986bbb70e37a08259075773dd6f1cfa6371d
- SHA512 379247415bad5fb3e5bf2415ae41a1be3a27ee6e69c56ca54de008086949c45a7863955727074dd5c75ff1340e127b9d6201c461b10512a50db084872d6d38ca
- SSDEEP 192:wKcBdjjrmY/JT42EtG2mb8aFlAM6oi8h+9mdZHIUM+a5jHnXMvgokH3cEWPOgaky:nmdjjrZ0XbWhdrRcZ362ADYj
- TLSH T191826687A4B41DBA08D2952FF661F31AF2D51021E2605DA4F3FADC2D04DB2DDE612E82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 78230c02f8ec485e81a01bc3d98fa012044b29f435e4e7742c08e4254cdff2f1
- MD5 9136e6503b2158fcda894419dec8def3
- SHA1 a57dfd7af4b59b87323e9676c1a575657a909ded
- SHA512 98833bd9c4aa8883ca05a86f8c6265bb2b212468402f469f62ed204b1d2033936ce53e0358ba4e951f77809d58795d81b4a6c20509f9d7c1b734dd9b55b25027
- SSDEEP 192:wKcBdjMrmY/JT42EtG2mb8aFlAM6oi8h+9mdZHIUM+a5jHnXMvgokH3cEWPOgakj:nmdjMrZ0XbWhd/sAJcg362ADYj
- TLSH T11A8266C7A4B41DBA09D2952FF661F32AF2D51021E2505DA4F3FADC2D04DB2DDE612E82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 2961815605caaf6535129bdd6bb90630ceedfd962af1e9e9a22ba5cf6a2e9cbd
- MD5 7666a0547373e2dd8731d88c0788bf0d
- SHA1 f2790d0c6b817dce07e0431791e9e29e59ece5d1
- SHA512 6ab823dfce79e98f42fc216ad0a92f9837ccea0d2ea361521e1a90b6c7a9e0590926d566b1613d413933ca0a8108616c0f35e3981be4d666e602cc9a665bbbdb
- SSDEEP 192:ZprXY/JT42EtG2mb8aFlAM6oi8h+9mdlIUM+a5jHnXMvgokH3cEWPOgakxdwsaYU:ZprykXbY6wO36hDYj
- TLSH T1BA6255C6A8B41DBA09D2592FF661B31BF6D50021F2506DA4B3FAD82D04DB2DDE612DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 20303a1521d579edaecebf9191696768e09efeb813aa85fcdde5d0e9ff85b6e9
- MD5 64afd649d65c0887c8148a60c210af87
- SHA1 91ac25023e3ed58459cc284b4800e9f70d933d5f
- SHA512 446a42a56cd9f9462ccb92427d552a32d810ad0118c581454e95504221767f405caaacb7c4fc6e2c1977d53f080d3d4942176ee51bc9490707238d981f35dd84
- SSDEEP 192:ajgrEY/JT42EtG2mb8aFlAM6oi8h+9mdlIUM+a5jHnXMvgokH3cEWPOgakxdwsa0:ajgrvkXbY6w+36SDYj
- TLSH T1817255C6A8B41DBA09D2592FF661B31BF2D51021F2506DA4B3FADC2D04DB2DDE612DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 45420db2565a83d8d457d87ef98dcca063561b06c50268fcf9c3c6647f168ebd
- MD5 f378b567e7f4f322ef28c7bec8e83eb3
- SHA1 437dd52f64fb1743cd75b1bca4e212a178e3396e
- SHA512 749f9c1c6b268ade915caa017b9710716e8b00bdd0a117e357c03dc43a396a3edfb1242d396d92e30414a4e0d863074145bf0b3c74420970bde7590dd332be4a
- SSDEEP 192:whjQrEY/JT42EtG2mb8aFlAM6oi8h+9mdlIUM+a5jHnXMvgokH3cEWPOgakxdwsU:sjQrvkXbY6cx36SDYj
- TLSH T1727245C6A8B41DBA09D2592FF661B35BF2D50021E2506DA4F3FAD82D04DB2DDE6129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 10KB
- SHA256 84e5c3fd326e8d6176a0a41bf42b786320432e7ff00b711a1ac0b24c4765c4a6
- MD5 123367e2b48645ec6b1f26ad3df95f0f
- SHA1 11beae781d13dee8e8df6028e63561a5898e254a
- SHA512 5b50fe3fd4f31534998f93b416b3a67e804b9cf10ffe7d25ce0856f9e61d936c78eb8166595b886135514d228e6cfbe177554787287f11f12e4576506c04b2cd
- SSDEEP 192:g5rrtIUM+a5jHnXMvgokH3cEWPOgakxdwsaYiSD4hHb+WNOZcACHyIsn2agI14M:GrSXbMcFI1J
- TLSH T10332434A59B45DBF4CC2592EF611B757F3E50021B1617DA4B7F9C82C08CB2DDA223A87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 2027856d97f1b2d42c12914f418ad3436991e2419e7bd10713bb99a878e01c40
- MD5 87a59542f21b84339617102855a6211f
- SHA1 dff61b2f15f523ce37121d4cf56bab407b960206
- SHA512 af8d353a3a1553bba388cd2b59b4d26e592e1a28cdd72d591a78aa1372bf89a4317badc133c29a9f19c64c56589c468369b121b130c2d57ce30d673c6b8f92ec
- SSDEEP 192:ZorrY/JT42EtG2mb8aFlAM6oi8h+9mdlIUM+a5jHnXMvgokH3cEWPOgakxdwsaYU:ZorOkXbY6wO36hDYj
- TLSH T1126254C6A8B41DBA09D2593FF661B31BF6D50021F2506DA4B3FAD82D04DB2DDE612DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 16030710453db67f6caadb1b5cd0d1c6dd79d5c0a4d9a4cc7d27ddd9b0a555de
- MD5 b4367af4ca38381f2e993c013ff83209
- SHA1 27d699519206f313337e7c0693d096f3fd5a78b7
- SHA512 59807b964ccae3756d3292b9ad57d657899f3c49b6566223e249a9d89fb79c7adeda68fd3a0daf1caf750e38448ef7f688cead9c05817a2bbdfe17d6995c441f
- SSDEEP 1536:/HsH0H86YLHRhhHjoHr6G4Hau1HZsHgIZHXHCnH609CHSCkvocXT2HOHSsOTQUHG:4hZR+lEmGrf4jWSGee3Mns
- TLSH T14593D7A6CCCD9F758ED88BBDDC36A71B98D40015ABDC9E14A7FA804C03C6685253F686
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 113KB
- SHA256 6d24bfce96f55e0eb21b2f0f8699aba01cac7d23369cce42a37870babba164e4
- MD5 8ae88dad6bf1ae0a02fdd4dcc1abb721
- SHA1 54a6e308e0844518f7400bab61d2a466552eb16d
- SHA512 91544fff6772d48fadbf616b8859a4492b21e1e8aaf39c823c1db8b20517c4416549f2c239de4c57bfb16b4ca6445734624ccd7ed3d76c496aa664d94d16fa3c
- SSDEEP 1536:XEYTS9ds8JaqCHsH0H86YuHRhhHjoHr6GXHau2HZsHgIZHJ8rHbHCnH609CHSCkB:XEY0dsI7whZF+r8HimGrf4jWSG/
- TLSH T15DB3E8EACCCD9E758ED88BF8DC37A75B88950115AF9C5F14A7FA804C0385A89113F687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 88db5fe1b1fb35abeda93c44b38ecb14d05e4ee5382bc59c880191c92dc3271a
- MD5 b6f313c40e4dd0b1c799d4e10c61ad01
- SHA1 1a8ba73fd61f88a95f6681af6c401dfc88592734
- SHA512 e7a40fbe998b4f7c10d76dfcb958ab625aaa6286923b567010d4c80ff2cd2f2410e4208dd36f165e1feefc77c8a2a5ca132484d11b193191e70fd9ee756b1f3c
- SSDEEP 1536:ZHsH0H86YuHRhhHjoHr6G4Hau1HZsHgIZHXHCnH609CHSCkvocXT2HOHSsOTQUHC:FhZR+lEmGrf4jWSGTj
- TLSH T1CD93D7A6CCCD9F758ED88BBDDC37A71B98D50015ABDC9E14A7FA804C03C6685213F686
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
- Size 46KB
- SHA256 87985ae1bfe55d4b42a6b0a860f5ea1c32dba653280e91af4b10a600054bada8
- MD5 a467eb486795d39d81023f4f4e4c7782
- SHA1 19246b4e65d6d6e5ef6ddfd7d1bfdea2d6e79a65
- SHA512 eeb3729abcbe5fa89ec69a34a2fbc4b0f8c61cd0cb77ffffd3506504dc03a07e1fa7cc7e97a88e5f0515c4900928fdc13c2fb387e923eb24bbe13368bc4fd4f5
- SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51Sqi:un8VEbWXxYNG8/A85DQqkslr4JPmCHLI
- TLSH T1FD2328996269687E0BC2D1ED926D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
- Size 110KB
- SHA256 3cd4c9cbc944bc42413b1d054608970d51320081be271e758e59b9e610b47660
- MD5 08e8fe673d9cbbe40ef5ca729635fca1
- SHA1 0ae270d0a201f074042b8dd28f4c1e5156f8d8fa
- SHA512 85bd3cb0abfe0c11ffebaa42088ead7bf1c6446666ad8936c8d83519d5ad42d45471d10af378465e39a3ef67913c281f0fe889825c8deb360d1f35abcd813bc8
- SSDEEP 1536:1GrITewf0rQDMx/d7CVYV8I2yUmz8iavzB7P3nR95IxBB:1G7QDMF77B5Umzj4zRPb5IxB
- TLSH T1BCB3D6522368C53FCDAA07B606635A5B3371C68E7F83E31B216AD33E1C167F78994426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\02275ec3-907b-4666-a3d5-00e8b6227d9d.tmp
- Size 48B
- SHA256 b23bb41837454c63e06944437ae8d3f2ae764d33455fbf86e445d62fa53ac322
- MD5 22ad6d32504ec14c59987a4d7d3e5011
- SHA1 f892648e095e91fee72f8d74217999a6e15f9d58
- SHA512 96fd2976cce5af841595a6066037ed77397ade170f5df2ce08cc99b151b5d8185ad369538a2b7efe6b954addc69fa8fe48bca24c44b8d98822e2362d8c7c884e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 336B
- SHA256 7a1695388d75e8ba575f57bf2071883d4e2de72061e27e9ff938f5be90fca4ce
- MD5 6d74fda0d49e98fe35171a56c54e33cc
- SHA1 b2cfcbace6e114769ea5fbd9f5b85d75940300e0
- SHA512 4b959f9002e64ae8973b92d6ec191b2a41a444eacffca5de8f8476967e22692adc29311b2fb3626773bca10467cccc4c1f41a47908170a64117ba53b227bad89
- TLSH T18DE0A7074F8515CBF029C339658341AA733A94B4A71D27AB402526292D79B324D25446
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 535cdb3872d8f5beaa79d1be2a70a70c103b828bbf9565a5d3c893e9d858964f
- MD5 69b3eec1deb43ad796bd3813787a55a0
- SHA1 2fdba4140540354875a6a087fc8e500a18b4806b
- SHA512 83e96d1b10dee31a1e7a453d2d3d4bba0b8ff169a1565ecf2c4c3ead61a4ddfb72e80bfb8a084a29ae8bc0c8edd0c535ff2254b0cfe8d3718d30310a2a85ca59
- TLSH T1A6A00250058DA412D81F9B70589FD6D4B300F8234003070374D0F395CDB11805E91241
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 88d48990b1bfb41494d7351c2c77e1a6cac1419c93038d9ce6527c7f65cdcf30
- MD5 0d01b09ffa2917dbc19554865f1d51d3
- SHA1 0e024f9e838b04c058f89fd430b6d0f02152a01f
- SHA512 d7d6195561a64335157ecf0c9b233fdab2200d9d6ba93e9687300f0364d70205463ff9397152727e0d5afb7b81f4674c8bde163e4dea9abcacd8c52c1373847e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\14621e90-1d5a-43a1-954e-2388487e8103.tmp
- Size 11KB
- SHA256 f3a1e68c82e1bbaa0290b377b4822ac606cd8d1196e9f03d281835d7cb9f0ce1
- MD5 236bbcb8829d79829e35c01ddffdfd6f
- SHA1 cf30d49c6b51d10c7a1245d8b047995bd867395d
- SHA512 1d986a7f20fdcac67af189994e6cbd0420a8935ccd64d74f7717364a7636663ad04355927299f1458c7cf7d1f219fbbcd186a5b3faef3a40b852a4ba531a2580
- SSDEEP 192:RdWYXVBWytwmnWydRQtD4quKMikk0tPsx9Y/lEruzvVvYBgFKltY590lCW4Os/SY:RdWYqytwmnJuMS0dkS/auzvVQfltI0lK
- TLSH T1DB32D07CBE816A1FE4F8731592040A8839139F18976309A95B037192D2F97ABFEA7095
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\14f41804-721a-402f-aa7d-a89a8083c0fa.tmp
- Size 12KB
- SHA256 54015a6270a70c50b83cf983336871cf770a83627381980bde48e353f25c8ca9
- MD5 a151cfaedd29cb9546c5d2a4b44ba17b
- SHA1 d1b794f81936a495cbfa03f7a8813477f4dd00f1
- SHA512 2596c1bf6c341c7a84f8e655ebda8e2826ef14d8dfc906fce8d4864214cf04632e13646834d4f141ac32513454a0c4c2749b74d8d531b6f147718398cbd5d336
- SSDEEP 192:TCqmADYqLTu1I7QtcWaOwI53yc3ufnj68lcwXbXeZfC1+Ivm+e3r8eLmOq3rsOIC:TCq3LETcWUIpycEjEwX8CdvErTssOL
- TLSH T17042D195FB0BCF15B0D064EFAA7099A81EF9C4B798F6B5C55512C6C2B7303804598093
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\26704d14-120e-422a-85e4-b5a4409e02b5.tmp
- Size 381B
- SHA256 a347541b27b89004f43ab29cc91ff8efd2ba354f6d58fbeb47b2334808dd84a9
- MD5 8b205ed8c4b89b14cfeead916f77b6ef
- SHA1 15e3628fd92446d3709290c4afbbfd0d72bf58ee
- SHA512 b051cd89261b3bb6c07795dfcf203422ce26fdf81c409db6073db4cc7ac9597c0b5800e5f89b159844b6b35b4e16163bdb214cd3da27dc13f63a3fede1bc6f12
- TLSH T1E0E06802A2948661639657152A63298D22253501D2457689B3006406DBF2E41BAD0158
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\328eaec7-1fa7-4df8-a621-e70f14c881eb.tmp
- Size 381B
- SHA256 1bf9aef8bf5429f7e4864a9769276f383294bbdb570e7dea28486dc9ab0adcc3
- MD5 6d73a2015216b6b8bd8c557339be5ef1
- SHA1 8b9362f80384e40ab002743d6e7fd2da39942467
- SHA512 5b9ae5e803731ee6829c813313e1e4dcc4ed08fd1fb572ca0dd2e71098d1425a27b95b9894516e34204d17a23430241136ea7ab6d5620e33cc678165d606e163
- TLSH T171E0F13D3103855A0EC8828BA4893162F21A00685EC051621B864C3C7D6684D8F583B1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6a6c82b7-34e2-4344-ae78-445924442be9.tmp
- Size 381B
- SHA256 dc3d90edc0802427c9c6e7994a319b771b7eac1321944f97fe4a7a86f525d5f9
- MD5 9a23b2be9420870eacbff4bedfdfa494
- SHA1 f90de10c555a54ebf1ddd222652affc4eead1390
- SHA512 cffec6523b02dcc0530810d26b7f146fad2e2f67dc5ca04b3db444f76e3d49675502588b43c1654dafe7192e29aaa2153cf457109486c3efd0563e330c94abca
- TLSH T1DDE0C0514CC71DB582EED790AD7B81D4A63205F9ED28660934C9E40F4A0CB13AEDC3E6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 605B
- SHA256 c7ca46fb199fe417918333d730605c2383db3b12274f124658a97a7b2f1fd7e8
- MD5 47f764aedb333779450a963347329914
- SHA1 8864094bb8fc04c602c1f9a01593cc1bbfe8a890
- SHA512 275bd438731e490ccaf277b19fd28df6aacf8042120eac759ffb217c1a2865040f765685f8421218c99604df5a82541b3a2cc854e4e09cc450c24b21ab808913
- TLSH T1CEF0470D76C627E3D4326DD742493D69F1E1536582476A000909A2C07E401529F27CB2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 1KB
- SHA256 fcd081bedf768ce54fe82acecde11dcfc97ba39520159e8dab5428591a09310e
- MD5 24ce786fe686ddad76137efd0b5f7f67
- SHA1 86f22e1b7749d591723aa51df0252e4d88fda697
- SHA512 4d538be8b68dd1d44558a8f6dbb31abcc99515f24ec605272232ce75cdbfbbc27292c984705ae33500fcd50b322929770c7767648ef082da9aea571f07484e31
- TLSH T1B221F9AE088036A7013F8AC1FB0856CD90AE9B8CD00129528F575F143DF8132DC90C13
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 1KB
- SHA256 b93113f77aaf764601efce639e378108a6d148ee58d3f6215a7ef58807038ec3
- MD5 e6fd890a4c33df872c286bdada2e577c
- SHA1 f3541afaa949cadbae6d499655cd913e1262816f
- SHA512 5aad51c931e2aa335fcd4096e379147ad2077bef53c6f14b751bf94b2ea741d42e7a50f5d0c201c093977660bdedd86e29c292db829cfdec3ed3546171937e0e
- TLSH T14921BA249A3F6F040063C406D8E1C85A2DB107F1844E1F168765D7B7B52F7431DA5638
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 1KB
- SHA256 dea5e2d45a5fccaf253c92a35c5b202023745a80ecffa331847e42958dee919c
- MD5 3c62e9b59d41e4f991c6627c06011b6b
- SHA1 e8869d071adb84f097486405768621da28d05b7c
- SHA512 4b530369e36d391f081d71387073d0fc6b7c2d36d7b215da51d70973bfa7300b456b8dd2e1100acf5bbc66b8471e4a286a8568791f3504e7a92997c68eecc88a
- TLSH T11321C695C134AAB863153A2985E9408ED52D3F2417BE4060EFED21B647B6F37C913A89
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 1KB
- SHA256 d97edad40f703ee2a536fe427bd556eaaa4fd013e4a66c42094003c7555f2f8a
- MD5 d061e2091b810521b47afea7d21dc48e
- SHA1 3b0ad1c5fb101b7a3e262584f68286d74510e723
- SHA512 b2195911b94959c3d2a19c58f81ab9e41080311a38794e6e77efbb6ac793fe7334a1e67b3eac5fd32877563ad22651385875c316458644d6d0da512df312e304
- TLSH T179311C64AE58E3912C9AD20A30E5F89E84D18CCC84030C3B3BE7512C6A71DC4901FADD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 493B
- SHA256 c43ed6c964cac52c21201d85c481a08b75fa07dc366df1d1d39517957f0b773d
- MD5 b0aae13c9746f20fa6f185f943320548
- SHA1 0605e12981048e741536840e4ac744daeae561ab
- SHA512 51b90dacd08ab1008964f47ac218fd28548a1d5367e2a36dfa57d1be6ccb300fc24bfd30dff32feea1d9d1910161d2f14e4d8c5c51ffc588a7815eae090489a2
- TLSH T1ADF05419FACC971B475C2E694B6E801C749E3995819C7C4A04A0D7B983429800EFD407
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 781B
- SHA256 c66c41b4f14dc0548b977819f79964b1646080f4a534643152a1a3c35f3cb5f7
- MD5 ba5de7af265bfe8cb38c0ddc6e03e6ec
- SHA1 d0e575f6431646ad1f7294c48362e896ab53d452
- SHA512 88083a1570cf9339740a52e91c6eb25d0524fc55f86873345a13bacfe439187fce581ed76f77362ff0fdbb7a58dd18ecab81bd3cc66a852719f7e515df8cca15
- TLSH T1F301467E5800BA14651633A5C85B3EF8B4B17164104A486B8F0A459BE6FF481DDE5450
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 797B
- SHA256 19b0e181012716e666ce105888a92a8c230d42ee9ed2caa38e4a7ee43601ffe0
- MD5 dc52ca4ea813a8f5e1206c6307e6abb2
- SHA1 18c06047276058fe9b1f4fbc39b5d156aba90784
- SHA512 80bedd35df7ca48f50808c802d6e734f946d38e984fcbed2c5d54a4733b9019aa0fd4e9209d18471d7ddd2ce8f813bb1859cbac21d45a5c500e15431bc0248d6
- TLSH T12101C533674DC4DA8E01CAB84B287D2E1DA5DA5303051430A7928E8376EC397416784C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 957B
- SHA256 59aae8693f9e153074707aa1438bb2535845e0f0927a2a5ce83798818a1894ed
- MD5 8d35f4164eee415126c62368e8f87fd2
- SHA1 7934bae98e2cce455ea631768b6f929d969e0db3
- SHA512 c1bdc1a8dc35db33a1ef24ea9dd43e2474e5a46402358e8301c9b56670ddbb4af3e2a5e38ce7988896f8cfde40dc348d4d6542e96e0e8c1ba767d9c9238bce7c
- TLSH T1DC1188AF5181503089FFC91994FACF78B6594700261D613DACE8D1503D61812893F54F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 765B
- SHA256 5bacd7836de8f9c581b0673f0d331616bac99483fa68d0732b03f19d120eb8d5
- MD5 7cdea6a7190f5aabba0f2e10f95fe8ed
- SHA1 189a5804c89f22fde09d09b365bed7fa757d4fdb
- SHA512 a2ed132cbb8e2833d9ce2785108c0ea6c4305715ef52a166192c52c76d2a4409ce50438b1294b70de6ece9ddd466fd650eefd501432504a40e78191b02891dac
- TLSH T1A5016532211DE97E82B4E3E0EE195F798C95DFE2414290F2D749CAE1611EBC5DB98503
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
- Size 1KB
- SHA256 002df7f6044afd4bf3761ff6efbb259d6ccd80a84dbdaf5a6da9400918bc0872
- MD5 e0f1452f038735a08ea69f4fb3088886
- SHA1 6b90fb9c38b690c7d3b3303bf27baf4f733b50ed
- SHA512 d181c2f0b0f9e7ed762b7e4b08fc8818d6fb998dc96ccd63b7a73cd6ee6535d11d3ee44aa1bceffcb06e25558c8104a3e91f62494927fe68bfea76d3a02e78a1
- TLSH T17F211AD0211B23AF371955A172CC9B3D1241D97D90E94101E807A9C705B005C2CBE851
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 49493e0e2feb271e851d65a042544d3f73264343489ec1bbe44c12f344c3d4ef
- MD5 cd5f0a0b2f85f7ec6b748a856c36fb6b
- SHA1 e6e1b71c4f3c48ae9c9d7fdafde8a33eb82f2fb5
- SHA512 a0cbb76f4c1e05048c68f92ac51f38afab2edf10c500d5abc51f1c08f040bb0160c117b1e2d9800cc3a17e64c239235eb835aa370902e3504fb53fa3ff18a8ac
- SSDEEP 384:eXUbUhM3EZ/cn64QXEo++CmaBTt54tSAQsMcYit7EwHzo6K+:qM3A/L4OdCxTtytSYDtHzg+
- TLSH T10F82D1258DA870F4B58687188BB3AFD08660CE55871F64E9B1E41CD43C1EFB71740A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 d412c334681b4c460cd7db7108dedc760aedcfba6c1a440a641f14f500c84c4c
- MD5 cfd431b5c41079caad9275a97bb400c6
- SHA1 94c6d965b564f0f775514ebe62327fba5287b599
- SHA512 5690775f16f619f1d0990c43cb5c0d65545a7927367f3c29ea56e27af14f56a02e9b2305c0090ac2706a780705b69d742b962acafdd5b20d461c67b71a7f0e23
- SSDEEP 384:PIpFatj1s5Zk+YWutu/3hsDZnXsvCqN0/H5mMCff/PImxz68:PKFa0Mu/hspXcCthVCX4w
- TLSH T17182E19C810886977D846529D0271E7FF40A9785E1FDD5AF7708DE481084E8FEBA14EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 9392ea2e519d4623bc8d18fa5e4c71334936a906a540aaebcb843eedaa7d0de7
- MD5 8ad499a09cd9086363e2c2ba4c85d6a8
- SHA1 c79a6285f1a4f877c30b7f81b80a1b8e47eb4bb0
- SHA512 8de07af6488dcec5330b6c6bef0cead763d8a2ae423f81558e60093acb22f8cd4a696ebee6eea6b42ef85c9e36a98df0836bad5126928bf7cfa485f0c7526e52
- SSDEEP 384:QwS7AOJWe5qOTPVQtWy5Pp9dkQWmuAPQBo+zvN5UPgVRFBBg50HVZaus+cG:07SuDqtdl/HWfAoRDNOPg1B4wZaus+Z
- TLSH T1EF92E12E879FC7ACA041011905D7D36E96AFD6F49C8CD696BDE71066D24101EF037DD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 0df7741d6cdb77e4bd729ca750024c6b9b4b1fa48497c08a797c8b89efef9a04
- MD5 90a213104ee42c822830084ffaaaa013
- SHA1 0b10a63c4d14c12520b195310a83be2dc6809821
- SHA512 6b92f34b4fd76021b16b918723c0ecb6319474d3415421653b70ed512a932e6560e799228a7484bbc45ea37bfc7edd71345abb070f7db121c9b3f2acbb396601
- SSDEEP 384:DyGqXww80gPVTZ2uJxPoYHEe51oqpiR/ZVJloaqyq/msvwfZZWI0SlBQ8VrmGLgh:xkwP0gPGKxPoot51QR/ZVJmZTYZZW4lG
- TLSH T1A492D0CB4D7A0559B6E050E2BF63360E9C95736C1D92E4A732F3167B62E0CCA3309E24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 a1c9641893dbfaad2c5c94c8b38ccc5a77cecac35ac3a34c6753c857186b1830
- MD5 83fa682d63d6539df0ba777e90d19ae0
- SHA1 72743e6a4901920b7d31b2298d587164780a119c
- SHA512 99d7c3aed85108db4d81f5589e6d4d7964274c5feb922394ae193a0a63437eb3347d9c844a684019b2835c257f541a3c5e1df79af318d594a94c858cb8eb4dd3
- SSDEEP 384:4Gbf0hzGxD3+Q5ZynRbLWBrsrEBfdJBx0nbLnYiJWcYpKu5:5bUkyQrGArsrEBPB6nbLbJWxpZ
- TLSH T13F92E15EA24366B8291CF3964C241A4FC01628D254FE7FB23226853CF8E6667B7F3409
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 3bf4dd86c18fd00a78efe8fe3707b358c6f8e438c816ab45070dbc276848f92c
- MD5 faa4ae881c0c5049c6316badf98d59f9
- SHA1 29db993b9080779c50c624761fa7e6cbf3275fcc
- SHA512 d97fad1dd0f37af646f88518502a2b727ec0de68a749de53eb2642c4dc4d9cd2d38d5c0042e04768d2dda0227ebcc10c91df70c5515a16cb6537f89956bd575e
- SSDEEP 384:A7HB14FeHm3bFJjoWvJWu90WbgSV5HyjMG4V1otOnpMFrKkTle1S1GukrbcAIUOg:EhWP3Djdv/9lbgSjPpMFrtT9GukrYAIY
- TLSH T13FA2D1AD139BC4566F48A56CF2148ACFEF133B4E06F017619391F474A203A4443EAF24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 1bac0621bd091ba8622551b8e4acd5e58f065940f3a661a95694d67072948c23
- MD5 c6ff5b7cf93e0cccb1e766d33ee8f49d
- SHA1 e8498e731d5df77360e91e3d98fe832976678c55
- SHA512 d5e0421d0e6610b3715b313638ecd45222b0381aabd7ed4bdb1f54d2a392037da369cce3fbbc3c4bb1c67dac3eabf0544e7e27ec5851248a33d317b922f6a898
- SSDEEP 384:oKrVWNiOVvQBH+ckqcX27cz2c52xJGzfBcJdANBFb8B4iFnwM:xrYNiOVcecPyzD2QcAXWFB
- TLSH T14562C02162E7DBA738828556712BB9E6EFCCC81524B9EEE6087C033409A4F058B53A71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 039d9d3f5b140085345be65a783e18b2bb2a5f55c943a72b9c6a55501eb47570
- MD5 4b9b5de248d0d183506870878e80f50b
- SHA1 19ff488063530011517d46537253e608c101dc26
- SHA512 9fa5a102acd93733e9188dd92f738c5f0dc820cde87f2dd34f11bde47bf8518019a00e3275df68b9c1e4ffdff1456ab93c9cc615119f845851ceb82e17313aa1
- SSDEEP 384:KYFaBylRzW9LsaObvpg2+HnEBEI1LDqBE4zpQnImwcfGAvfSh:KyMyLRhPAEaEepQnIm9fGESh
- TLSH T16A62CF9251C6E3002C311F74ADA9C7028F4A589BDD33AEB5BA60331C9879477240FB96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 37b86c148b862bc8f0500b10741c0cb2217db61d995ba420bed725cff535bc69
- MD5 75f19151220e530ef0613846f815619f
- SHA1 78d445975a5d3198cdab55ac850c0facee5a8606
- SHA512 dfcec6cd6c3405c1cdcc4c92792539afa9a747790bf8612241007ecb053ac15400520f80c93bbfe749ea6566de0c9ec9eb449d31cf5b88de31d8038947fc6ed3
- SSDEEP 384:SDqCQ7C7TyCNaISd0OzX9/UHzSIQzBJQy9mNXYqRCnx/1Dk:SuCXTTNaYOz1UTSI6JQy9QFRcx/Zk
- TLSH T17762D0E0560664A8FC340199FECF61C146759EA0BB7D31D2A931B9CC22ECC8863072FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 42019d823fa7023ae48298cc4c712b73445d3d2f05859830a0c6a0d13468a935
- MD5 20a0cf9fbc30c5596bac4b0e96dc9649
- SHA1 c9e4f40b1614888e8c3cd45e943cfaa24cd40691
- SHA512 bf8df7e847f03f786d4c2c1caf039287dbe48094a941d488050344f3525e1e84e4f13e0e4fc45e1dd4a3c83627898c7d37e796a9a0ff3812cd482c0ce82e6f40
- SSDEEP 384:vwVEIS8MzuxUG6RQN5Ur2Ej+O8q2II+46yVb07ZF3dzOVCsH:18MzZGKQN22EeqlIACQnNsCsH
- TLSH T1A762D0564CE08244C5A1AC06C8B534367BC2B84F1CB1F8B439A56617DEEA5235EE6A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 17bb2be13b335223e073f446fb109ae3d0823d3120400b744796bd08afcc3f8f
- MD5 8b6eafb77f98bade77d6c0fafb803470
- SHA1 b2f925fce40cdb1e32aceabb8929426bceaeaef9
- SHA512 b6821bc99c1563cdc367fa71857fac7865f0daed3d4d0fea9e56520ad210e29070ee3dff2e73ddf0a27a6a0ff970c3999fbb4f42a5f216b27d83099a015281b8
- SSDEEP 384:RnP9RkOOvTb1Eqz8Lh9CkBHrIXdJQMGm9zQ0r0NpZAAwOhBsUe:9zKCqzKyyrO+lmlcnhwAsUe
- TLSH T12662D16FE818C2985DA7B910F7CC0CFFBF385D4714157C43759B164CB6A544B9647490
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 ce1d1f15ddea12b643d3cbba3cb3c6cd284ae42db674130cb7124aa30c0c4136
- MD5 5fd0ac5014d4b62ede887ab6919fa788
- SHA1 ff2bf53ccb3a2697cb664f87bf58eb89d56a5fb5
- SHA512 b7a8d563fdc723acbce420dadbae9ee6315323f36af2b83be6197e56fe715166c5739ec7fb509c74b8ae5e548207e9d397c2815a9f28e10b57a9adbf814028b5
- SSDEEP 384:SCfaNuU+szCQuDv4/WDE+tP2tqaZW+fjKJ4eyR6yfK+a7:SCSIU+sPuDvsdFFZUpy02KP7
- TLSH T1BA62E0D39F892ED6DCE69F5211E50EC2A2A12C117D3EC9FE050A2C8E6D9343F5F54099
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 2c1e47f74d596c75e000c6843fadbf10fd7a5163baa8ae2fadecb0c54a2b9cb5
- MD5 4bc44ad24328b4a0076e99397ac34465
- SHA1 a3827bf02b1a376567fa6682891368b919873478
- SHA512 a6cfb1501af9a5934e9847e31e111a5a11f2cf0e5d816d490389be96f16204e023eeed0b9100b331044d3706e598d6fcb97c84f7022cbf84128ad0ebd13ff225
- SSDEEP 384:Br+1OAFYnba98sDTwaFRS4pHHSWjJ0WD0A0XYT2shr2+z2SwdvkT:Br+1OAOnbOXwaLSmHSqTDgc2C5zNwdI
- TLSH T1CE82D07FF9271C7E62931DF8DC313C6E6606BFE24A41E7D2CC18AB91D8C991125B1191
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 279a9f6ead80420659bcc6ad5d9849c8ff534d0850ce60662e362caffb975aef
- MD5 47e258a5d15ccb7c48bde3b3fd3155da
- SHA1 1fd2ebf72c74b8a64f8c49bd79d4bce19a9b6f8d
- SHA512 f4290cddadb2be3365a2c843ab04ce8c52699798cb05e086cebb5d3869b338edf2ee2d519e27c0dfdaad080dd91d1b87213a7588c96967f1d155885e258dbb12
- SSDEEP 384:rBfZKKIC2OCqdz6ecej/+txj6zUkPHFazPPqNa+f3plHb:BBICTdzPj/+txjrkvaoZ9
- TLSH T12382C0852DAE6CD182F2307028050B5940A8D6EA0BE3EB6FEE8AE19D134571572773F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 c48fd9e4b9769397a39e0e5d41e440aaa16d0599cd06d287c2dac0e53e437734
- MD5 7ad5381d56da5b855b1f4f67d89b27f3
- SHA1 37772f467768d184abc0c98bee24e0cb7f2758d2
- SHA512 94556fa022384f4f336fc1bee2181583e8478f640860eab8767a452a89293746171faa37b524ae5fb29d0737dd5bb4a87f61a555456c552d30e15e7d4d5cc95e
- SSDEEP 384:/GaBid/jzSy2t2NKySF4oe4g92c7ks/ApE3aiRhjA5pep5Vd59LEecg:/9wdKy28NJSfJFYksdR8e7b5hEVg
- TLSH T1CB82D019986E4F128B1C1E845EDD7FAFE08D36912C9107D0E20666E633EE14397619A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 ab6681a256845ff8b1657688315b7cb8563a7e5607414e644d3766643ae420ed
- MD5 ee4008b18b9c2c4dbd8935a70abf6b70
- SHA1 2a604e635c6b3f3e6a4901cd0c37f0fc33f9720f
- SHA512 2bcf573ddd471d894bcf3e98cc9e1018bbebd08374c1756512dfb57b1a8cd7af7026d3c07a3f12d13ab510e7de43188a28d9de986b9ab89cf49f3c49c9c40782
- SSDEEP 384:prV8z95eSMY0CWipUoFoECvH370vvpOeC:psF0CrpnlCvHAvvG
- TLSH T14D82D194D5A207B71E74563C3ECB3FF55C92B204A312659A205A46C2EC08B3F2BB425F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 99cb6d8c1306b641b4c5710d7c9a194709dbf9ed156673ead18307063bde1061
- MD5 c93041564afd2c71679f8bdf412ea500
- SHA1 e88137400617a1265ce3c7a8afb13600fa2e3a28
- SHA512 3505e2f6c604760535ea9f02d1f7cdf2d0a7ede0aff9024da9e9f90d92d9419e5325c50242a95b79ccf3c2c805a491ea268383ae7f3446ec155b0412dcf375f2
- SSDEEP 384:EMHjth8megcDjq1z2Q9f4bEL/eIUL9BGgzxdIIoY1YxhJoaCK7:PhDcDO1znfvL/e99BFoAYxhJdCg
- TLSH T17882CF22513F90B9DCE9F288CCE79C5E20BC99DC3B067D817AC058A42144BB276FE875
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 4bf7ffc721a4a5fe5252d8d37ea0f45d3f2a6d5679c373145926c58270a1fa67
- MD5 db173beded4eeedab72bde13978c826c
- SHA1 4f7f5e47bd8e9f61cfd2198b9ea209ee8235f312
- SHA512 d08230f9dc18bd5c19dd9d7342cff7a5fad3d622e4f2b21aa4b6c62384634dea761ca277545bc48d00f100243595ca6df6296262da85b8a34c9edc31ec89ece6
- SSDEEP 384:1xz2LQlMhPlgBbatAGLtk+VN/OgfgaTiK2WOGOmZrfpHptiCiAuL:1F2LQAdSOBt5/ga+HWomZrpqCo
- TLSH T1FE82D016B1CBCD4C1A907DDFAEA881AC67D830C869F09A707E8496073433E862DC7719
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 2de915410528b06dabe57a35cd9da56ab65ec146ab3991051533f968a8c7b9a6
- MD5 001414fd643a127d83b783a1fbea1550
- SHA1 bad7aba1b6d30afefa16ff611f389534bfe28c6d
- SHA512 9cc6f8238744fe92f015757c4150be5d33b32b302ad44aa14a668ad1ef269b260c2bd6ef00f00e463e3149f01835c154b770e56f240897576bcf938b699ddf01
- SSDEEP 384:8+F0XwJtTKhPwMHzP+FZDTHirJA42Qi1eQjHTyXJBpRwa5YRV2DlC:ZF0mtTKdwwE0JA4NiRjHT0ZGP
- TLSH T14C82C0C817A10D00FD3E59D71549A5E24F51BFAF18F7B502876F30F9CC125A498A78BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 77f6a4bf7e92a4a2c02f963ef14e73608be7f5450f1ab2bee47e721c1a13961b
- MD5 054c4028eec8575b599f88a919d381d0
- SHA1 6443c3e345d50a2fb983ff8d178e42cabba8b155
- SHA512 e6b826595b96ee1248e5f018c9740a3856efa32859018c5f283989063e902025e15e5bcc0d4b789b9d3dc672865bb86c5daad557d8df496599d64dedaafc43cf
- SSDEEP 384:b33BlCnI9rUnQ8npRNeEzwvIRT1ZYBWjQFH1eb/NpF:r3B/9rOQ8np+ZvaxisQFH+/jF
- TLSH T1C382E0EC80FCEA40B3253252921BFBF12AD65ABAF68E2EC52E7DE1108C1B34D055501D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 87ccac79345e3be3060ca68cb31b1026e92a6a9c71a03316413c21c895e69e51
- MD5 49f7b12f75cefe69f37926abc58e470c
- SHA1 c062de20c174247b4654a94959ba9330e81c557d
- SHA512 bfc97b9e8224db5c7714f7eedaa75a91c81e4bd8cf4ac23c1a64e91b46ed7796577a54e694bf8355cc9de60667132d521ddc5fefeee6be69cbef3aad947f4ef9
- SSDEEP 384:2Wox3k3RoWoeKMtgitz7c0iSFCiW5s8nS5/+LqAEox/6e6oA9HJKd:1ox3kaq2Mfc0nQiW5dnOmuqxv69HJ6
- TLSH T1D782D04D0EF675E52314832AF7BFEFDA9DDC120BE029F11AE8201804952BDF0702A5D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 7312c5e3411445f894c29896dd93fd13097604a6d7d8c7506900f9225a4b7a13
- MD5 3ac882b80d6b906381cf9ebf3532ecc2
- SHA1 b66e2385eb2c79a6b6a759cdf6eedd512957c5e3
- SHA512 53a1cbca48c3a6ca4093e9d24c473aaafe998ad866498bf1583a49a963f91d79dddcd8e6359cd8e2d802790543259b4bd047c630ca9e2175e2dddab906c55f0f
- SSDEEP 384:MBjNPLn5H2F1tpf8tUc8ElljQxioMXOtZ5baKs84/BNu/oiT6CLCce:OL5H2FnpfoUIlGtZBa9BEoiTne
- TLSH T1DB82E1D25579285672E8F2343110F1B497ED69A4CC1CC12A6BAFF63B22617303E977AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 2168f23992ebb7ce98535b87e8038db6c8e94e8cd99bec5ff4ded171d408d934
- MD5 6a0001507cc7c226641b75316b4efb2d
- SHA1 b5b6947cafb37d51cb717616d883dbdb2f4eaeac
- SHA512 6ec8b21f06c224ce319b0a324f5647d7b7c43e43d6797322d79946b4fd1395337525cab7500b62bc8da7cfa827c779db48812636ff837ce54abff2a1c795ef49
- SSDEEP 384:YF9qkpZi8m6qzBsjLmt+4CPYXFyzkNGijxVaUsn:ifm6qzBsjLm09gFjxUUu
- TLSH T18382D04068A92304C0701EF0FBF7964F06D7E4A7ADB659DE0A6706AECD213D43656FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 fdcdfd5e208ab52d4e4990ccc651680d93659d175b5545ca9902eff77b77f1c1
- MD5 f3f64f93bddd29acfc7d52a2acd7f99d
- SHA1 4f943480c71845dfdb555bf17a7d54041bacef7f
- SHA512 55dc119b2407078bf0c8aa888d229fc0bd00d8f6652d5b4aa46b0362fd86dfa87fdeb39b6df36ec22920ef1e78eb277b08fe01ad02d6d8195de314ff5d128fcf
- SSDEEP 384:xfFq1TfWXzbEPLBdqgb3lBn/cNnzE9bkSvP/u:GjWDbIBdqgJ1/cNns/H/u
- TLSH T10F82D170D0FC4E06B25B2E6F82AF5CF85DEF6F9758881053A0EAD25AD7F056A5B14050
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 ef4ad7d6a1e47bef262b3bb19d3a4087385273c63ae73d7e14c06dfcc5e59725
- MD5 58fb1536535690d02c4e8543ee99c530
- SHA1 95d85ecf8445bd93b25f1a948081352d546cc584
- SHA512 50813488c55016290a8027f6a3c61d8628ad5c5dacb227471232454591c67959648b70da3989a55524fddb4e82b0ee27c5153b61b49d93db91207b57dcb52ff2
- SSDEEP 384:f1r4tEkEpst86MHhXYTfuui61N/RbclVrlyAJicQP50:fd7jnBqfhnRALrwFP50
- TLSH T16982C0D523A15CFEFB23A8182C8F5BD4D68462DCB14D92F2D635312E6E7C828734459A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 43297e03072eb142d9d5dae5b5b9a8ceae6e5a293dc5e8318e6691d29e3269e2
- MD5 d6eb6d07f01be7cd7a00f010172227e0
- SHA1 497b5de6676756773b3dd514d23947447eadaa78
- SHA512 6d18ece686b8f54ef543e7d9d84bb3ddc28d97b1fb24ba6ef0647d8ebb1b94a7c6d44dad4c14fa531eeb999d65b989964fc6f3c09ee40c1823349f27591112aa
- SSDEEP 384:gygb4OWx4nqtSzturLLFdohv66EQG4Bo49DVtQXhNZ:j64Orqtatu0EJ4Bo2fQx7
- TLSH T1D082D041BBAA44DE4570A4F658E341D5C0E5E6F7FBBA8A8B1E513B38C12C1C069F81F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 d0295a79a3e53e4d8b75140845d22ad08adf1958e389d04422937c5d0fe86ef4
- MD5 8bcd41cfadc05a336b9f53530ca3e50c
- SHA1 8c74b92de2cc07e9107fa8ac243398ab348c43d7
- SHA512 e9c6bd6441387aedf7692f7ab06d4bc2008ed21d572b8a8710c9bbf627d031e3bc7646edc454831dcb5183871b6bcdc9e30c5a9a18989c3a76ae26a8a6181925
- SSDEEP 384:EgrqGhXd1vxOPjpu88seENP78+65Bw5sUnV/g1MwqH5B5BoPrr6CveUon:El+X/ojpuGN6w5ZV/g1zwwjIV
- TLSH T15B82D06049361133226C8C425B90DC76EDBA35B9EDC4EB7001FCBCAE648CCDAD658D5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 e748e33c10fc07c65879c164525e6c07e7665ddd00041d11a437c70fdc77304d
- MD5 4cc0276e18be06d963758f6c2cbaf680
- SHA1 4b75e218644de96784846aec0b1e123ff0dc5ef4
- SHA512 7c34348dafde06417c8b8de7846ff1fdfa6687a76a8387cbf2e11416d542fb8fa86b42106ad981261376b5182491a8bced22907a2e990f563fab1e5a47e8d31a
- SSDEEP 384:5ehtd1vQPdfdH0HrbtspsUdi4/fZfItJn2NfTxOIs9e+EGhfIXBI:5efvEdErbD2DWtVoN7s9IGhgRI
- TLSH T14482E170F24EAD8620DBF98FD0E357EE40B873145A71677422C1E68E3052927C9E55F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 c37ee07f5c2d65505454967b2ec9c036b78b63a418ab3feece14a418bfec5cb7
- MD5 ebc26e46ae6f3e1b0b5b7a4519842aa1
- SHA1 116df057c5beaa0f68fa469ecdd94b9820743ccb
- SHA512 0567a1c9d485f59745339c8eda3a309fe464c78016c7ef7c6dfc1c59bf2e694315befb8c6699902593cc73fdee052095bb81b4d65381b453d40cac5cc2a7e0b8
- SSDEEP 384:J2+LYuWnJCQci/Ah1lEiSan78wnE344mhrNbC+Si3T7z:JhCwliny78wE3mhRbKUn
- TLSH T17592D141D11C26A3FD4B6938D4C6DD0DE03B5446342FF28EBE93E92A888613355EFE56
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 32b52eee23f9c58ddb0258e76a1faa61415533df2dd6725d9a6c09a4a5ec896d
- MD5 b2cee9f002445a440d35da91dd48b332
- SHA1 d14a4644f782f006be96c0633b8bbe2c4cf73534
- SHA512 a234c97442b3ca6c04e55b1d16dd989e465b43f10ad754c32929d885b9e9fee126a419321a557750d076f96c251f4c0f21fc83ac10c1faa4c63c6267494675b5
- SSDEEP 384:1JOs+iyB8btHWVqAMV8o4XUta+/w/bulK1uGqxpfukLLh0EUMfypAaSY:OiRdWVMR4UA+/mbgKIxppLt07MfyGzY
- TLSH T14092E17C379725F46ECFEA10F90BA88512B86BCBCB1A8C76DF458638DC6A15740D1346
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 bda0d55c544a1e535efbb6910dbb42a27701314bdedb3321d0d12051e1cdcbc2
- MD5 df1e804031ff33199a03f2aaf30dbfce
- SHA1 7d6be1be763635711b3a4f09a6099e01a5654277
- SHA512 fc8e460ba557d627996228fe47af1c977baaef9c0b7f4327f417375b6f437adb097a549c9ed3a142d760decde69a97a51cd3f984fbfe80808966e9a26ae01f61
- SSDEEP 384:6LR/4Fs90yMbzzw3iRR4+sqyXPC3oUrzYqPjxG1/wJR6:6LR/4FsuyEzz7RVuJUrZPFG1gR6
- TLSH T10192CFD19990C3C9CB61FFBC44B11BA81753D2F7562BF0138485338C48ABEA73A845B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 cdebcdffbd2d7377d5805f6f77c5a0a43c746ecd2f81dcd776ee4030b1b8d75d
- MD5 1b3b9a3c97d8bc70075e2edf5b8894f7
- SHA1 246c0b02ebddf4586d9bc5ad5b7437421a74afa5
- SHA512 b05c6e473e6c1f5b7ec9d69ee778df1e315241aac139444a8fadad75b816339653f0211edaf4e8ebaa577b8caecc68375a37cbf67f161950ae4d00b4c5cd9b5d
- SSDEEP 192:0Y9qYu4B/UdleOfxXDySyj4ag5HxHKUhKfbQC6git3gDV7mbCwvgjYt8+Dqo5GbN:r9qO2dYOJzyXj4agZxHKMKf4gcMVi7gJ
- TLSH T17D22BFA6F7C78EFEF6E15DE863C7E342427F2E0C9135552F3246B166483B09D2A08250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 7b9c801ed83ff78a6b12efda5891ae8250e3d9cca9dea22798b74369abd8ee06
- MD5 2246acccaaee15a66187828addfcb2f4
- SHA1 a06c096f28eca0a1311faa627bc6c4ce99e9c6ca
- SHA512 6b15610a72508b616bc546a602dbdd6074d3c4ea7f540117da06b66275f5a591270ca5cbafd5809237d3ff7e6082716831f70f382479ec46c81665cad2ab6cac
- SSDEEP 192:dzJmQwkkLR8Nwpspnf08B03A6T8VpQWKUtZ7tNCaAF+7wFoqdvkL:1rkLaNwpspCPIVKH2JNj2bkL
- TLSH T16032C1BD0B9DAFCEC447419DC41FBBA214EEF4A1C127B6C5000589EC1BDA4A4C08E637
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 62f8bae0ebfbf1e57a9475454b87866e5e452edbc8dc02b6b2a7a59224447ae9
- MD5 710ae3f69db115d5f9530e87160be375
- SHA1 4cb5a1be52e3e51e9b1aaeeac0aa222881e6115b
- SHA512 73da3974d210bae9247f6e454158589f4ca785282d7a5323a6a6cd436aab7310b44ec048d61a696d51205189be4bf7a67ff124c4720eea54728b570d3c687002
- SSDEEP 384:Ftd0UUGsPifgrdT4YiBcbSu6FGOi79QqbX2iqQBO5HLoOg:Ftd0G7+dTpglumGf7brgnroOg
- TLSH T1A2A2E0269B0B07187236A409383A1404A837A611B60DDBF69DB457C4C6B075EEDDFCDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 12KB
- SHA256 930a90e3508ea0362ff430efb3d4569e7485b3759949c2c1e91767a470104eb6
- MD5 4222dd5105cee4b22781fe35351ef0e7
- SHA1 9eebfe5c0cf4b39da292f1e940fa8122b82eaab3
- SHA512 ae1bcced613dc8d9c9dc2c8d0c6e6e250edeef81539681b6e94b07b9be1abc4e93a8a609bd30ab192919e2c24b4477289acb449a995b58d02884943b93c15e46
- SSDEEP 384:qNJDphw1jUxDcMeET0qRpG0mRJwX2L4gn+bF:qNJlhwqpeEPpADhL/+J
- TLSH T1EC42D0E63A3FA76F36230E9936004B2BD50685808F634EBAD26BC7A83F27C2445605C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 72e2a974266d2460aa2632c87eb6ff71492b94f12127dba9972ab07a38173c86
- MD5 1b75bfe1faa599b00c379d5d65ba29a2
- SHA1 9dddeb2c34841bd27367a8adc243230771f64b8d
- SHA512 72d9911a3d3cbefbcabb34af8b122fcfce3271d353258eb3b1e863b1bedf915433034cacb10e6753789015fd0f513478105414ee64a1185f5391453ed9998d18
- SSDEEP 384:3VBkrsBe8KX/6vk4wLpXFXcE3FF1fzPNvQK0W3QODNWLl:srsBe8PkrX5j1bp30WDDu
- TLSH T14762E0A5E84B26A2CEDE547C8CDDAA087903C69E06B3E64B947A09519341D0B1CE7399
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 68f9c9e29f0f7955ca50636055eeb0c57eeb598c2851db873a3da13c691d947f
- MD5 a210dcc4657ef2b14f8a57c7b25acada
- SHA1 ae97dc7667b3b6ec15bbdba73329080ebb38a5e8
- SHA512 ac257416baab94b22b6e23e14dfaaf858ca8a75790f7a96ba4449c7a7aac5fb6dbce42ba8e0a337e3d8e41ab88b5ab24e093085289e712b1dea25b4460ce41e3
- SSDEEP 192:GmL2BVXXu35SJBhVN69YpwQIjMXyzzvwIOvs2/VNCe0SOiIiGnfGF7OAEOq+AxKj:TLQXoSJpo9Y+BQynvwnsSqv+Fd0Kth
- TLSH T18562D0F73A5488E07BEA02593FB6A321F3044DCF07EB2C8F95A77306C951A4A9774525
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 3acfa2a4dd04d51b059bde6ad026a93b63e0aa0addbb49715df09c21f9585e65
- MD5 9609c4cf847424e6d1b17a1f4c3dfba5
- SHA1 4ca1be3486220c30758da05471b4a50eb26ad3ce
- SHA512 0ca7503dd919e2c77181b219b33ed8d2c251d4d6e2d4c51a50923fd8c19011709b36adbba80049fdf4de6954ebb8bcc51195d700d7f4be4406939f6bdfecf40d
- SSDEEP 384:W+RlzCQtn5std6xpI1rTW0k1tsY1MwOs+u84eKqspkT:W+RlzCQtn5A6xpI1VotsZgp849M
- TLSH T1A962C007849E8C572C6F37EBFFCB12E54EB852714228F06A865579CFA445A8E043A1C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 250d88c463529b4aabae45d4d3ce9ef5119942821c9bddd007d0fe993f153b8d
- MD5 9041ee4c3717580dfeb83e4cd867a366
- SHA1 e15effc63e6a4bbead21b514dbbea4839066b9a4
- SHA512 0b29611dca1e826a385ffb81701b6a6baa2088070665a202f821dc1d4db99053e62460b8ffcd36b01fd82439790072acf20efc8498694c75b611e62aa9d9f1c6
- SSDEEP 384:ouzJlCTFxDwPxHz+b41J5mfqYGlUD9DHg3xJmVX:bQsHj1J5iD9bghJmVX
- TLSH T11462D056EA41595016FA85EC30423CD8E6B82869DAF25F8130BDA3FF0527E64B8584EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 6bdc508b8ad51708e4e27c040def8bec14f04bec68a202c5ab0de9a6fe5d4e5c
- MD5 528ec14a3d36271635a6b3b723c61e4b
- SHA1 4cc4a904133c0e13f06b3ae19b01ab30586b1fbe
- SHA512 daca9745c8bfe30332ff6c4ff46bfb4eec4849f5fcce5a1999e698ffce567702e05692b9ba1ec52ca4873220de38a550432286712553bd1063708e9d7ecc8e05
- SSDEEP 384:gcFpbVWDOjtWzdRUTcu7KFkwlZ8LPdBeOXfKdBT:bFDaOpCdRUTB7dqZ8zjFXfYT
- TLSH T17862CF82B6D361FF3F63623A1209A8734115A1AFD08197CC1B370DB4DA933C38277A60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 e851fa4a5d185ec097e4fee9135140b0756416b6bd177f81f8f69cdfb937a449
- MD5 653338609cc8f8365e0df4ccc02a59c6
- SHA1 706bb00470b794e4e856a3c610aaaaa112ef591b
- SHA512 bfbd11271e12456e2402f14e61b48ba66e1b02d18909973012559890f83df171cb39fc0cc2414458086db3baa17cf669a46151e5bd714ab02d01ccde571673db
- SSDEEP 384:UGVAGyunmM/k5WgSjZsqFkPF6CzUO1+iJ7s3TRcRt3uVuW:UlGfmmC/nVUriJ7s3TRQteVuW
- TLSH T1E862C0F0B495E54C71DD9BDAD9901A613952CCDBF4DE2A4E06826846208BCBCC9A0E49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 c6b3699deb36662fc90294508045a5a135fe291e47fed9d1e7680e26713dda6f
- MD5 4b9896d9334d036d08a38eb328258291
- SHA1 5504c79087d2882d6865d14a6440556de35350e9
- SHA512 23ee977a2e696a89c33ce15130efdd34f0edce51d383460f21fdab3fd6bd518865253b1c970ba12d62d3f665016ecdc2a05cb43b7086933776d12e11d90b85de
- SSDEEP 384:gtVNBG2cu8nbGIcYJZvm1S+4LTP4kCYfosl7/eGtd4QlLqKiZ:g7NBhcuCa3YDO1A/PoJGQQlL9iZ
- TLSH T13A62D0BC792D24222AF386111EEDF450CE16733B7158F6824D97C9A37DBEB1466841CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 48302a7086110405c4e5ff9bf5489af59fa3f1fad59d6ed78a3216f15a4922e0
- MD5 97f12bb75e3ed97ca5caf29a34e4fdb5
- SHA1 d5c89b1cdf9a4c1b98684114d90432fda59b6bbb
- SHA512 7538bd8519d50168a329e6afccc9494308b52fd81cc1acc376dae566e12f24e93ebc2ce445ae8aa90d3f88d6cdf91c47b6679f14ab9761686104cd80c814b615
- SSDEEP 384:Ad4zax5Nf+5C2OkSSbEJnGuPb1u435ZOzwKMIa4dPejjeGTb:Adxx5Nf+JOKbmu8OzwKfdmjjt
- TLSH T14462C09B147D1EDECA55CB7608DA5DCFA003BA114C5882B529FF80772160F5E09BA6F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 ea4efd2fa5d07fd245db23af4f58dea6b39b0b106e5db484f2967a6734a07d2a
- MD5 898496da72a956b70dfeef186c9f061e
- SHA1 de18b92f846a9c449ec251390a7cdc908d99ecbc
- SHA512 503fe42b9ff42560463fa1f82cb4485bad7826658e3b33da88b3d28a25da17697ad5d0bc91df73a49a96c5718a9fabac6383502eccb271a33f1aef644d2894b9
- SSDEEP 384:hM1774ts3CgtoJ5jWMnOMT7PqQNPn1YjMsbcBP:hMpEtECgt+WYaCP1/BP
- TLSH T1E162D1FB4DA9DF6813BB5AC0B9C6F6D7D8B481A1AB4684D03E40F800650A29511ECEC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 d763a9f14a03398124f942ec6631ad5d20c4dc935ba421b9998c0ba373997ec7
- MD5 8bce2aca9b6996fb9bc128e3120c9e18
- SHA1 2316af684469c914a93d83ce7cfd235e285628da
- SHA512 92f82ce09a04e191b85d5a84f24b3028b64bb708a0b9620ad84c24f2efb77edcaa2aa0fcc29208722967b4af51dcb2d243f83fd2ea907d1ec62642164444fc85
- SSDEEP 384:6Zpb5PXStwcUK2UBSDEhK1cDNiBWroiOofTEDV8HOB:Ap9Stw/K2UBSDElcWkitgDV8uB
- TLSH T18A72D0D2091EC78D74CBEDA8C9C402DF9F6E5032DA7CE7958556609B38C325FC2684DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 395c26519da39efac174f0bbe28a86999c5b10ae6a53257c14cc2d08891050f3
- MD5 8b069a4c7a4bb5b6e1b5c23fbc4f28fd
- SHA1 8ae25608489e2380aaf64ddc3ec906cf6703a0e9
- SHA512 d82a3d3103d9d8216af8c4b4a95e3ec3fc38ac2a3b0b50397b3468b1382c23e9fd5c37c89d14dde8ae17cd75faf8e2392755ac0556055e8e3a5a868bf48a3a3f
- SSDEEP 384:TcavxzdhBY7qISDF/acK7+APz5IoR32+9HcF0vknYsftI3A9kRe:TcWhK7qLF/acK7995VN9HUh9Ce
- TLSH T1F972E1C59C880C49E748C6D09CC687B34CA9035EAD26ACFA58DD7D062A1473FA17B95B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 fc477d434ec6c3ebd421a7796d88be1714a081619e0756ead8ee180da632c23d
- MD5 ddacd6db7a04b1cd89d079bf3e68d986
- SHA1 38096c79c3278d106ff086019f9370d31c2b606b
- SHA512 48861bceb502f9c72d40341e6cf23c0930987495f0802109dca8f0e9fbcb1d5c4847d30525b18a0eb5bd2680ad66b8e383770c5ae0de5a5ce9a2a5977ce10076
- SSDEEP 384:0zVbUL3UUybYTkPJ/s42CJSDESiCm3j8G6uGfLaK4:WZuEATkPJ/s42CJSQnjofR4
- TLSH T1CE82E1C75D64AD0E70A22C2C174AC9B796B136C4509BF6F0E5B9508C0C636B2574B3F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 3be28cadf2928d74c0f7cec30738f8f0220f5a31299584ddef21c19085610b11
- MD5 99c9bc8b255d7cbfa1c6429cfb68ea77
- SHA1 034617b6e197e9dd6fe7747fb480da8257e8ec0b
- SHA512 e3a9f676797d8eb5c4f7c82bd7fb5eb9ba93410e90803e5876ac7c8812f3f22e14b9b9acff0d66cf785925a572fe267d29740f429a5ff01ec7a6d9b7ba7f232c
- SSDEEP 384:SSxHF+7RW71ie+cf7K1rGFMCdCUawSyxbCH3klcZv4QJRFTQc2erbtpUsFV9mcx:SSIEwna7K1oMGbx2Xklkv4QJRFdvrb/1
- TLSH T1ED92E127F7F1365A5C2AB222820F69A5C19AE004782F0266DEC65A4E0B8E71F1D5CD36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 9b7715484f3e2bcfd39934149f7cf5e94ea211906ba4a68eb8d63e72ef43a81f
- MD5 700f79e767abe796f0dba800dfa88550
- SHA1 94329299ae4695c23312e70bc6f9a91ab7f0771b
- SHA512 007b278d3536ff3562fcbfeb8055faa32dfef5d040ad60e8134a6f02320ca8d52f9d7ec7a398ca3db64217b4e6a585e55612fdcb4aebe8eaab647880fd0972e1
- SSDEEP 384:8/rORTRIzeB1X5fPKBU6vZ5Bo6cTkVEqGnQ/0gGkzZ:mSRyeBzPc3vhoHoVLggGA
- TLSH T1A782D1A0F29E4454548D68CF933166A67030F4E9DDCA3376DA1375B2686B3D87E608AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 dff40f1acbe9bdfcd97a0ebc144b3e4e3fac6d2bf8dceb3f9063c9bd3f1b9369
- MD5 bf4a7e5636af04e91d91cac3e5b986d5
- SHA1 3c2f31fc9b46050b740de6bb1c23fc2ce10f30cb
- SHA512 409fb02d17df590480a8b11ad350140d5a378b71e9fb71a472b3ceb26c8a3530f4ec89be7717023fc8095c20fc5301bedf08154a30b5d3565a52f6bcf6839ba8
- SSDEEP 384:gl5nvBWjsjpxX8C7vmDJo//HGQDIndZe7wdQaWkahkKX07SqML/zx:gl5ZWQFrkoXmQAZe7w/WASq4zx
- TLSH T1F482D07B6CA76671D6C1FB904C5BB268C5096C736111BEB6C02F3239E6385B30A6772C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 5e7c721106885f83838d0d798d46c4c98ea4c3e284cb5a38348ebcff4cdcb162
- MD5 b35425d0c3e04bd1c7c1c0fab6854122
- SHA1 3dec21d3d420f13d40b41b2a452c084c95f513d2
- SHA512 7f003fa4e568387846e2e7ba826f8f0c97a51d5cd1193c5f99306051eaffba6de20ac09ddb54778a9ef32d4355f56c7989757f46a340d1037a73ae6cc8715984
- SSDEEP 384:wp9svu2CFL9Ak/igDT5VTYLNniHBQQPq1v7XMknVfEf9mhwIoDm8cZcGfoE:kQCN9AkRDT5mgB5yxMyVQEN8G8E
- TLSH T1B982E1C09F9C63AB1873058D36D5A8C6CAC9DE6A5214F69AF73D82CA22330C4E754D35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 31af5b86214fc8a8a4ae2a751d29054bbb10ab22cc9ce399ee36794ccf81624b
- MD5 8cca2c635206dbbe240767aea04568b8
- SHA1 470c0b174b9733f0fd49748d258c7672320da863
- SHA512 b7091dd67a0c4d63f3fd2f0694a363fd9fad2650d27c4029aa5b9182ce2ab3d72b4154ecbf0148dff2e2a2fd8f8c1dbf73536b23bc3504292112897e02121826
- SSDEEP 384:HOqaRqJgg1Ob6sAgOLVq3nV7Ah/N9xbql0JOMVYcEd:HO9RqJgg06sKmV7AnA0JOL9
- TLSH T12782D0E8A1EFE734D30B0DEE76505B561EBC87AC174459E9B74A39E02860F89C842CD3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 cf135f3986d393454bec1e864e70445733253a878c8109840df53886433b4c00
- MD5 2a7ca083f3cb5259c0f1ebd9121812f7
- SHA1 427843c3fac5243c40ded9dfa9fc9708f59ecbd8
- SHA512 dea65de7d0888039dce481a1de43baa9ab4f4ca6fb66e2a6af782d2f989c0869ad7594c85801aba478c9acb1a550cc7506b1b43daf7bf769a4161951cb8c78d1
- SSDEEP 384:4LWrUSH8E8j2hrn4xRw7NsrL5vWfWJ9aOPaAdp/gMpDw8PTq/WZIQ4mi:giSjY4zwJcL5ufS9HR3gMfiWH4mi
- TLSH T12382D0156BB2CABE6F2C15139D2F2F26264756DC2F65D8288CDD6F39CC928C02B1C853
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 7KB
- SHA256 b4a97062a901cdbe902c1a16a7c20ff0a1daf19b97391fd4e89aebd5310b820e
- MD5 9c65ab5902757c55c5687b72b9dc991d
- SHA1 bccfacaead8ec38ab5371150152603ddce1eef26
- SHA512 3119b2e9cd6d345925a41ab4cc8fe8a94b774cb58eb31242ca276eba441a0772979a85e7d418f762109e981c2c3b97b75f0f5d4a210c74f41bb423586efc2fff
- SSDEEP 192:9Q/yxRr761c/dw2/GJ1Bo6toDyOU4ybVQjd9:fRrmYdwsUoGOaV+
- TLSH T136E1AFEC3981AEDED74B908088D7FB0C3460480799F2F1AE5926186D1AB1B7848EB8C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 09a1ed27f74b4f0b82ada1c1a6ab8feadaa6f2d9ac1189cad6f989b6c4e850b0
- MD5 b7a5702a134a5e432482d8787e46a01f
- SHA1 3e28959f4dae5e9b0fb2aa0021d6f0043f9134a4
- SHA512 0ab05ab143f07e1548db5df06336a5feedbf9bde9fb5ab845d4c5f9055c0e5df9df3556094d19ef8e5fec66c77a97b6c51399ee741bc8e5cc981aaf14a26e0ca
- SSDEEP 192:9TLo8Xp6E/QvPEvljj09DeH3PVhuaQ/Qf+YX+aoE2eXerfPGRooyfB3y:9TLtXkE5tjg2fKaQ/Q2qg57GRooyJy
- TLSH T11022E0972C75B8485641E7027BA06B622E01B60DA32713D40F7C5067EFE18FFB8981A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 d4b3d12b525586d1f382aebc9ca9f41fd52bd0551d12d1ca3296ea66d27c60e6
- MD5 151bf3ae7597b0ed458418e2b800198b
- SHA1 3e453a518ebe85a6b14c8909a754c8afe3eca6ca
- SHA512 e6f9fab88d65fcfc59558cc8b6e30629b5e082ef300c2cd69aed5b435ed1ea0923bd4e4f63eca9df4d21751f145abde8d43c7dca2f8cada3b8e148270c37368b
- SSDEEP 192:WaHGNBmDMOyiouMcLRRhzcgTYBb8/CMIMqTtVaawX+thFnB2RLTnEZk:6Ns2iopWRhzcbYKMIMqTia6MF0IZk
- TLSH T12722BE5F66218FB00F0BA1E17994778A308A327AB5F16E95533118EDEEE56C12ED9023
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 8cb459c661decfbea384ae54b73af2334bccdc5a2f34d57f75837bb4764cbc4b
- MD5 611ec1ffe94674e72aefce1065302ee0
- SHA1 13a1326dd62b97b992d8356b5d7ef0646f354970
- SHA512 3aacc20f17edaa841080813b7f7531107e02c2b61552163cc53f037952fdc63421cb73d7f0c447d33b2a018335bee54990b496fbd776e8a268f9376582a236b3
- SSDEEP 192:Ngs907plmxtGJX5T55J83Ta76Dw+xpXADyG4j+aaQ1UeD2oR7GiDAMfc/tWJzveZ:NJO7YGJh55J8G7mwAfG4/eeCoR7G8AM2
- TLSH T1E222BF9CBC31C6AEEDC4A1DE86155C420B4742E5451F6ECC2B28DE24F33675F0628AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 ab221471b6601c7c6396415f44d52cf3de4fa1e1d42ce523298b2f81ef6c589a
- MD5 f59b8d8a7a85b65ed88cc3b9dff3a06c
- SHA1 2780fe4c00a457f012d7cc32eca0744f9ce48eba
- SHA512 c62e001fe75be135ab3f749e217c2a68c42a24068312fb5e76e5134e3e9e30e0cdb109b72fe4f8cfda57a8588fc939945d19dcf43af0d8b9e7c09720763b7f2f
- SSDEEP 192:A05RRZ3vc0LMvBHr8KfAga6vzAiWUaL3KKNNJ76rJIIlezOx:AgRRZ00LiBFmizARDL3hNpWIIgzE
- TLSH T16D22B0B16CB301DE3E5066CDE4B5FF2009709175ADD1282E97FA4B5C03829B9FA521A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 00cf7492486b7d0a8bbeb2f690dc332b8b3630cace37811b2c1d9402508e6e16
- MD5 c04daff372a169203cb5b9a8563dc49c
- SHA1 9a850d237a00736364aa5e4ce0b1a25206467a6d
- SHA512 46f73b0c20c2aebddc6c59cca198be3f3ed33290cd06aded8c3302fd6056ccaa6113d162994367e0b959575f93ff1e0f94b38493c5e7d9608063501716a60c9f
- SSDEEP 192:Nl4IQHu3v+6EimgQ3ukEwy/04usfrHZfTAj369as0azQh3FcJDRdRiejaN04jPnG:4nF1fukiuOrHRTAl/SQVmJVZn4jfG
- TLSH T1F722CF92915131AB47E675D4328F1EEFC068E82EF5A1076F8A3FB811DB173562A6D0A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 55fc7aadd83eec4ac8c795a554818092bdd2956b7a119b0475a3f388e7bf700a
- MD5 3d2af3f95f2c5a921ec53d4c5e66b5bd
- SHA1 2c971ace09b4bec9a41140c32590e814a3c3e3d7
- SHA512 ff4f07a11d43e5c12f81083b227daf28fe66a5071f55785582d2f492146fa169e2a502892a5a531b3a70efff659deecdc61af6af13371dedaa3f283038bea819
- SSDEEP 192:64mpF6jD5YUhJJGumazV/LT2YXdq5Q6fF85nuaStvvM6oFDNyFZiV1zY9NOC:xmpFM5YUtxV/LTlq5/MnivvM6oVsiV1o
- TLSH T16D22B076288CE7A7117840DDE1924928C17DF18BDE4C3650F62FA0BEA42C55D4ABFF42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 5da2127b386a447a03c3e4f56b8fc7d6095e05f6044a8dc8d903a7d151f2a7ad
- MD5 b5eb06fb052f63d1d736e92ccb9f34cc
- SHA1 917771b921bf927e3ba4516267e0b2bb7e401f30
- SHA512 45b8b7fbf3fcaabe5b4645a7610b3fb049e59c805b4ff750935edbd6ead420f99786be7375669259b2e80f0830e8e01c993daa8aca80de2c7887f47beac0384e
- SSDEEP 192:7U8ttQ9UgjdyWjtcgpEeTQPmPoIF309vcwyn+NcfiE0PcJG:TtFgoWjbEeTQ03k90RnECG
- TLSH T1C522AF0EE66BEAB8907BFC0B45B07534D328336B8452C9556D39472C22C98C52CCD5CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 612205092417b51756ec9d3f00dde042cc8f25d7caefd4f1b327171b2b1e2fdb
- MD5 27e1c00e78385022298e85bafeefb310
- SHA1 1aa323ee658838cf3aa3046f45af9c37b5e91cb7
- SHA512 264107d8ffd1d6122f412c6a911acdc93f650e7e60fdec91b39d417b422bae0cd9cddde3d84b0cff5d4d7241b77df0e0cab9a170b846791bcea4cfe7a010c170
- SSDEEP 192:KdF17dBiTgs1AQkVIxxq2FDuN0ELD2e74W2KIIVjRNT6ZLODWlWoF7RnU8:GXHsuQkuxzMNb/EWvICX6VWA7BT
- TLSH T15532CF985EE4CA07554D163892A2067D04AD0F3B7E8A33616CD6D9FD9FF0206C4E5A84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 933a6e066a8ea2fce75a88c41fb321cb60a335e4151b9dda0d51560e0da14aeb
- MD5 2bcc0315ea5e65fb2cec8011663747c5
- SHA1 77bcf35d654408d038784cd290e0dd22cb47173f
- SHA512 b9a1db8ef208303745a876b8571f7a6fb232d44099710ec63553fa0be172f91a2349c727074d8f20e27d1302be918d20e35c080c4fff93002e2abca877199217
- SSDEEP 192:CvMDtBBj+jZd5K3VvPQR8D5Me9Gq2cBGegrmcH4eA2TwFUzOh:AMRBBj+TU3VvM6ae9G4BGeoVYe/682
- TLSH T12C32D010B80F797DB05EFE38BC39B9637A48FB8BAC666027B82569B4025BD45642407C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 4a6ecdaa6efc2f33153ca61c5ee0ac6681a359cb8c13157a686533c84ec15fa3
- MD5 7234fbb0539eda3e0711444437fe6dc7
- SHA1 68edeacfd79b9cab89a41d832db4ad8a480bb224
- SHA512 f79b236feb9b3558e0248e8876f050acbf5ebec6e7b3b59f194adf410749537c36638aee3a4d0d5565b8acc88cfdc29042b1f5c62534d466070b7cc1a66eb652
- SSDEEP 384:0loHz8v60daCS7Dz8khdOphYvIhoGshpkQlOTr4Ry:0lCPDz8W02Ih8Hk9/j
- TLSH T19272C0EF9FB2538B0FC74613864608C229F5AD7CB9063A1B1291B73394CA7289FD9106
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 12KB
- SHA256 fa63fab5724c109e919cb72ebf424862e3dbd3e18a058bf465ff23ef6d124c38
- MD5 d874b6b8e3b80e2b36a5d774d52e44c4
- SHA1 6eaa07b846e830641731f82ebb606577f729d0f8
- SHA512 fccae76a749006ca0d6af519c7115efd4e89ff33119cc5f3a56ca7d5a68b06a7a8d28db3713516e5b19ad8f4cd1f05a36db2755bccbc01658c90b379a1103666
- SSDEEP 384:JneEVDB7I/tQvEguqrbst8TikgnXQEu/5BMVymjCdVtd1:4El6VQc0fTilnXQEuhBMVyuCF/
- TLSH T10442BF2C1F61807F227091D78AB95D58661300BA32FC784615DA8F63A99564A83E8E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 5649fc6a14d40f04b06253c3a42a9c0f6da0921c1b3b17edcb005eb52f39b2a2
- MD5 743da029c5ef38964e96ca95d2a4be1a
- SHA1 b5ee1e31947d3370311a00c4e089f6d96056e437
- SHA512 ab7210ed3fd8740f22ca3555a130dd3541e75a1e9d6168e3a7ff81ede91f2d95d37dbda5e6d338f834440e4dc46aad306f0097f3284e069948fc80e51734d399
- SSDEEP 384:H3b0YjtMQtmYQGOL91mmP/HV9HtcaIIM1:L0sMVYk9179HLIIM1
- TLSH T1C652C0FFB2461A705C8D802C68EDE9BFC5532E53162A8812D2B7B7A1CE5483D1D170E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 2905f448155445b431424f819572d327eefb70df84228d1b93da096408d533b4
- MD5 c06116eae2c89fc0b3109772c17e3f2b
- SHA1 36b06d55cda4eef7294a67235a47ad9c02342875
- SHA512 417544fed201255f45581ec02a53e01048d1dd2b46b79a786ba17423ac376729c417fedf25dbfba38abcc871da4f84822b2ec7c58d1b05f965e0835dcf322aae
- SSDEEP 192:d+fl7EfOT2Ly+YOqEEkLnPF08S46ZOxcOzuyaquJtLdNXxUEpmcaN18SWOsA3+sF:dJftJbqnbVZOxt4qCdNCapRG+VA+Va
- TLSH T1AB52D16DD6ACBCE2338745AFF47BB84D30477C58C7A5810EE247F401C528B55D850AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 4a0827d4dcb8848e4155272a9ec73e571816e3d22ff1b08670ccf608e58735bd
- MD5 a33a5770c97585c812e9b4900e4e09ba
- SHA1 c9bee814d120b04cd0e70cc7593e44a34e08e95f
- SHA512 b83fa5f8a66c7f3da513c25624f18afbe85316c553c4e6063104e3b2b0105598d6f0810fa7307577d648031de4a2cc79b33698f27ec6db8467244867bb7ae935
- SSDEEP 384:VA7aeQCmhsvio2V/hdQhE0jp2kx1m0kovc:VAey5iJ2E0zvXhE
- TLSH T12F62E0571868CF685152A1DCAB6AA37801F42E4A2E755C4A0ECD8FEB6C0E6D231CCB44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 7ef1d7b0af46fb2a218a29dc80cc9cfe2decf617db032839687a652f21757979
- MD5 0b177a956ca5306b11e3632f2085173f
- SHA1 f9f77b061007accad7a6356c2374f57201b0a877
- SHA512 d5b93343f9a56e60d06e3a001ce30b2c5d4584ced30a1e34a58a2ee79d9b8b217428085abbe00685818cd66561010205f7fd66942d49a3724cafa209c9c458c6
- SSDEEP 384:6ji7nmiyAjOsmANzvqWPBi80Z70ba/mkwsnq73+kAS5:6j2nznmANzvHir7r//Nq5
- TLSH T1B562DFDC499F122E8D413450466A3A0CB9970FED856DDFC7D1F429B96267008A0FDB86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 b56ca346cfd46a6830b67084a9de5735b0cc1f1f4631ce4b512ed7fd413aa48d
- MD5 6a129fa258b2ac7baf9f228a88bbc555
- SHA1 d379ce10e37757e6f489a0fb9daef56303e20c28
- SHA512 6da98e1628cb0c66ecd64357479ec1d2a2ff6888646d92c002a9e97b0a3cc2de4ee01285b94e27225836b1498c98f392e7d70e3d29d4274eb57bec6acdbd17d8
- SSDEEP 384:CiuBP0kYhZd5ao1ZhN9M3PSKyErGBKIF/R2mJS1VfWg:CiuCkYZjMfdsVjSVfV
- TLSH T16462C0E0835EFB0CA33AB0757AD5DC29EA0247231670C57CDC56CA41AD5A7F9C2236D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 0ce3507255cea5464bb87e3c13c10468f2af7b5b78fdedbc41b1105058536f46
- MD5 d7266c981fd2a2a956d4f84a4c688fde
- SHA1 0b4585665bc2cdc971555b056502ecd6c2a7c93e
- SHA512 4bd3b6c1cae4bc30b0e491ae4659897d7eeb93d12d4e8e8b6820e74a42ba0a83a01283fae9dac2aa04dabc9913d306bd1a51ccd7e6c491ab4c5b9803263fc431
- SSDEEP 384:Wlw6NcLrqaCHcSJd0gkuG09DXk5TiokJFmnvV66y/QwUGIY8KTZ:wcLmhHv0PQpU5aCVXDwGvKTZ
- TLSH T18672E03AAD867CC29324282376212CC95937E93618F6E7BDED41AD28C71CD26947FF50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 2d757d58e2e8f2351b45fdc15cbc2d0d4178cc11707791794a2c2c6655dbb355
- MD5 7a30b6f7851f808d41e30b2ee0bdbdb0
- SHA1 813fcf7bd72cf930aa2c7287d96df82644ae6369
- SHA512 d600d5f14db5fecd0c418d9ad2b394f3e685026a56f116ecfef21c933ca9725990860e49ab209a97560ae09d99ae6e062dc7a9550a462e194e7c5805784fe8c0
- SSDEEP 384:r1psp1DUWVPzh4wI4t58qkAcLTdwtsUNASibXcLZ+TWbSl3GI:Banjt58qMvdnU/ocF6dGI
- TLSH T1DB92E18A5475023B15BC85C6DDBFDE270F4E482A82B10846B54D86B06D8B706BEB42BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 e898b990c3a9c7780b94d1b0255469d6b81e2ca333384b9bd38b725b5355bd16
- MD5 c154ca68f89ae77d2ffc75e857d02627
- SHA1 6b12b888608dd9a4270c083f2e937cedec2bcc2e
- SHA512 b583a821bd0b0a132b67f4e3324bfd2747f3418ed09d6acd5d28499fffb50ae2d67506a30be9151efcbcffdf30ed6010b1c03a2f8308e727701333306ba3a6aa
- SSDEEP 384:ixo2BtUcd5IjvlaKGFuP2Xp9vg34mGWvLMRuy221ofk9zL:ipx7KGgOXrvgImPvLMXwsVL
- TLSH T10A82D09733CF41F488300697B659B5CDC285CBE756811009A0A727FCD8E857ED968DBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 0e0858b0750e050f7c21e41e389af839260c08a63b97a3f29ddaad70abf1a401
- MD5 5916af9343718d2b5c9f83de1fdcb14b
- SHA1 a313c3ee1bbaa4c2c311556a36e0edbf70823877
- SHA512 ea647af3e728fd0913960631d7a1cd40093dd58d934b0253af61579e5a782ebbe4177c142dad86743e5d86ed9d8fc554af8c823aec481a0e809a49dd3105ccfc
- SSDEEP 384:mthCRBHGqxwrf6DcKdcp1MOXidNxsYISDnMvVAQ36+:mtAHmq2R/K82sYI6Mt2+
- TLSH T15182D0BF20596AE7E2FA034D2E1832452666D812CB2F5D63FD593C26E7522EF614092C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 f2941eef8e3c54728715406f64e181b17a4bbda1aaf64bda5a2fc4a3dd5553fd
- MD5 7368b76db6887cd27891538dafffa43e
- SHA1 c96114c11990cf333af250eefd7a53f9a8596da2
- SHA512 e92b6e8334ca6235c7091348a0ef4f45d84120e5c7ba91ab88fbd71ff691905b673100728206106b62ce21eca1b7a853e9c902dc8a21b1f3932706c89f11f22d
- SSDEEP 384:WOJJQmqa2ZTqfsvgUAjaHIeHCbr3/1T/CqqHnSIoEa+321VwBzx18lCCbqua:WmJQm2ZLvSjj//1ToSIoEaS2rYxUbqj
- TLSH T1CC92E05E6733A49FBD310B3AFB09B97537F29027A60546D2CC895656BA9C20C3454E32
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 430138652f117a3dc87c7d65c1b0d5e679b9c9ebca201aac52467dc1fb07f46b
- MD5 b567ded8077a5a62bf0582d25c52c8ce
- SHA1 67a1743c1153b35e9dcfa7ea3595ab2a85ec23b9
- SHA512 8bc713f3fbfa581b7efbde59662aad196e31925e3926cca47f9a91fbf2bb3c82bb7a28dcf14109f0a38bffedf3652d60cab4c2bc00c684afef8afc6508698058
- SSDEEP 384:RLRXDxj6ydQ+59FoxB+6c5M8NajiypIx5m9BX3f4d7igEN9vk9ql/KEBxMPEzich:RLXj3/DFaBi1UjitIj/e9gnM4ich
- TLSH T195A2D0F6B780D2BB12CB2ABA3223DC06D776FCBD04680744888555E339299CB6DEC745
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 b552532ab81075350b90e13f2f2ec79b6bc0e93fe8685ec18ca2ac18da2f0580
- MD5 135e41a4100d4d375142a5bc5630bfd7
- SHA1 2b1732a197bb7052361a7844f9bdf49be099d371
- SHA512 dfbf5e568b1b09c916d00da9866af1fbfc2dae2c19bae795ac28658ae0e74f41dbaf52ce00608bf000e9b99077bc5862fd14290411abb68ef861f63ab3b76e47
- SSDEEP 192:h9bJ3UcHO5zlQj6mYcrJq0b56A96dUSzlwzst6ozXiRDCX/YMeRYYF2:3tHOW5Ycrx5UKSieWDo4RYYF2
- TLSH T12122BFE87369B701DFB13746CAA8D623CA3C2F1E61EB83C68E6521D083B950C6677119
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 bc1a5d0e458f094752eb57cdae2a1e555b0ddb03e715d8bca362268849530797
- MD5 a7acc902e8e0d041b895acd7d2c3db86
- SHA1 10f49e23f3a3d6092f16d6ea580e535cccd3a672
- SHA512 3049d655246612df2bea8cc344543a4bead533f9550fddf12511c45b3594176d8d5c60a8b369b90023902a1efd76c920b489ca0df26eed800036dae194586f1d
- SSDEEP 192:9Cz9dQgNRx/LQ5td3Nkcbf4o/EXYssRCPzmPXCVexS/J6Qx3X5hpMTYS:Yz9VLLQ57Eo/EIssRCKPgSKX5hmx
- TLSH T1CA22D02908D20915EB9246FDBA2873E2741B45489BBF6E9231D29ED129E70F0B06751D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 b1f07b82423cbfeb24dfcde2a55ed1a94b755c14d7030ddf9733374494daf7dd
- MD5 d5663add948ae173b35ff6c23113d8a6
- SHA1 5f4548ceab2df61180935dfeea0a42e697ea1a2a
- SHA512 e0a03c8e26bdeed84f548f66cc52d35f47d0d3d9620c56538a94d17f0c6693fc8b18c0b6b4fcd1b5e0182056ae46e36413cfe400eb4e52b0d75f97ccc70c0fe5
- SSDEEP 192:vbNwtKU15qaS98IT4WqEpU6eHPuHytYwehApg5Y3CtnvM/ucgn85Ic4VhJsyU9vm:vStKU1lbmeH2HDTJ54CtvhcQA4Hm39ol
- TLSH T14522C00FBE046B12723368E48331C17E7EF86282B32E980547E6520D74AC86146B7DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 017c029f43ff644c01f5f764328ac6262270ca145f5a17f95610e26f6f5e3e2f
- MD5 e3ef49d07b3e404cf64a7b6cd1eacc91
- SHA1 ac9f01a3c715145e8d6f16edcdca177eb46f53d3
- SHA512 e87c59a25220181f01c2dfdd821fdc4b51820c5caf20581da9d3cca3bc79a01f15de1f04731f2853bdc566d3f7f5a190d5dbefb21217f477192362411248bfba
- SSDEEP 192:QxPIwRRjBl68CEZOBBji0q9NX07fXb0S3v7CZzuToY9AI/vTsTVRS:IIMRjBolyO37iuDbvMoLATbS
- TLSH T1EE32BFF83086C7C0B3929AC473E6871571F558E941AEEF37685EE006AC3981740BEA6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 d9a2f24adb027dcfa6aa95255c5b0c744585f544b3d23ab6ce0fd60fdfe72fd8
- MD5 83d7018823165bea1ee4f0e2212a5d47
- SHA1 9df3985f160c4e38046dcea1c262db7b8769c66c
- SHA512 2d36d78b185b8ef7ee27b7aa054f065fd7c1712626d20c2faf4b696b0ca2ad36530660bb2f9a61bf96a8abaa38e0909eda91a6c8a6391a365abaf62dc09a43e2
- SSDEEP 192:DqnIKjR+JS9GghxyyzeeKiqLFanRJtlozYHQVgbTVJ22syCweCV/9:unb0U95yyZYBe7tlo0HpbxJ2fjwfVl
- TLSH T1B832C0A2DC66652FD0BA2D92A2E3C61232049F0B010C8EBDCEFE5B44DDA76C05F155A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 5cfd9cb419d0802fca6b695b8c6c5f1ec0ddeb240537cfadfea9249204e427b7
- MD5 8f3842b50da664314002eae4af7de279
- SHA1 593eabdd3fbef607840f0ca080f9efc4b29819e9
- SHA512 1a06cc63fd802a3e742d3153e32e48dd5fba8623874f7671ec05b26b39ed8f6b40062e08ece413df7606f98879243429bf0362c0a0122eb78c3ae3cc41e76963
- SSDEEP 192:tUzT9Gq95rt+mk74Xl4/Im+/udTeUiKwV0R52v5krY25XJQ33LsIfPMO2Ozfmw+g:Q5GqAv/0KTXwVmM90Q70OVfm1oFz9HR
- TLSH T1A452AFC5C832AAB86A567483FED3BF510162F0CC00A863B7B42597DF219C5D9139C467
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 31d069c5839e1f719a5fac69e3c9d86b9e392ee7ea96a66c5c51932bd2ff7d77
- MD5 ade119afe8e087de930d9aa535087949
- SHA1 60480dd467b5a3ea8c255d5c3308b1441fc074e1
- SHA512 d8ab50bbbe0a6be47f50f578c28e671cf06138873f47e0bdee4e145c0166e1a4e0f2e322cbdb381bff51f9705d479a5f6cc261b4727e69ef83a358619ddd6306
- SSDEEP 384:ICw0MtmolNf1hpGxnLA2zEAi9Bgcy84FYc5Wbn1:IzZixnLAHAA9yZFtgn1
- TLSH T12962BFC07A357A6620F756541E58E4D879F88B7120127797CB4CBC2C8B432DDEAA762C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 70d4ce010e4587c3fff6de9287f3dde7420b3a37700083d88cce7ff49d176735
- MD5 725bd45e12ded9ff75169cbf268bdb8f
- SHA1 c9a4b340dc68a040176d754b66b0c0c5bd87fab7
- SHA512 6d0574a2be157781d7eacd2349a42a902a2260e2e9e8041647057cbdf1fdc79cab46ba408a8e06b16d0498a6bd2a25f54afe318f284066626ff8b1a82b2704f1
- SSDEEP 384:htni2PYodzVlLEaEcNsrXEF7Fbr75fZVMT1i4f9OIEKDk7LdM1ABSAp0:htnJPLdvLEagbI7ZVMT1i4fgIZk7hB6
- TLSH T1CB92E15DEB71631C9C0CE3CC7F27C61A6A6331A1492B0A26F5438FD191265EDEBCA835
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 17KB
- SHA256 03975a1954de07e4456b6d6c1fcde00c9782d19355ce969e4e2d3e536dd0833b
- MD5 cf200098d01f1ac98ea78346eeb123ae
- SHA1 8c0ff747f1f7993a730cff05d0b39ae7f2eccc82
- SHA512 4906dcc0f251f73b19d9e3f779ebadfe55c07dcbddf9edcef1d10cdd8865a49e2046390440544fe9ed92378915ff5ad7fcca41c84e952105c4f72b7964f6a20d
- SSDEEP 384:cBYvTVYyLomUFONj7hHIJ3/xqGJGalS5yx3Vd0NHny8:cOvTVY+omxdA3/kGJHlS5yWH1
- TLSH T17182E1AC1D0610AC27652B121521C0F09CF3B1421F3D6AEE2766B552CFFE9B1D91CEB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 7b6f63178709fe7898ea6b10552da9d76231dfa93df2ff1099442a748f65529b
- MD5 42f6becd563318c34e6da649cba5ff1c
- SHA1 607bf5267451a3e915494e0f7d58bf2635f958de
- SHA512 c339f27568073bef47a3fedccdd840bc3098545f3803c968e1e0b91e95da424a90c39249a015a2794709c07731f2b654943004bd09740937e7fa39aa2bbbda2b
- SSDEEP 384:w9f/ZOAr3tZF4GyRzOTF29uj8UBUyQKf5gagpWwqyfiN/:25thmyZmuj8UB2KfTgpD1fC/
- TLSH T1B782D08B6C86F1CE27211688A5D2740F20D51B5456612849FEAE3573D07EE62B8D1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 e87f2811c31ca003ddff80f72e4cabab2abe524ac9f7aa120a71f37086550f2f
- MD5 ac89c6539738a4a1cfa8666bda01098f
- SHA1 88bc5fe919f0097d069184462f0f8c03be50f535
- SHA512 7d447bfd78c505a5e1e8a6f1bb18994c70ce3895ffe95bbdda44155592f6d30949ab0d60bd8036b2ae5fd4b663d44cc8fe0e39f419243b15ed47b213b33fe230
- SSDEEP 384:jpwa5bjI3pqpahO2+Ril00kKSp0b5JH2c7BZhv2bKeSBx0OI:jyaVjI3cpa2wx4wJH2YBnoKeSgR
- TLSH T1D182E1720CF5518C36F464A37A8312C8994146FCEF3A347DAD28EE636A16B94646CCDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 55134d56e7f58f5e7bb35d2389336f845b5c8a54d0d3376b3d6967fa0e26ff5d
- MD5 959b7dce3d584064e36e204e07020171
- SHA1 501499dae21f5473d7752aa6a1d8b716f98f6f38
- SHA512 fc6b695f374c31aa9fe1b6829b249571180b031b01068c64f5942ab42b68f14dd5864fca6f255b2d02060fde13c8cc530d2ed0aa9634a950c18f4a50dbf06261
- SSDEEP 384:2I9NqRk/0NFuNlQtEndCqn0H0t6teaaBy3/cQkYOr:2I4oHQtEndjm0UIs3kQkYOr
- TLSH T10E82E02D346E1F01A6A8E13017F047EEFE221B552B23B00D1D1C291D932A81B5EF6DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 621B
- SHA256 e34018c6392feb65602678985c00ad659da1b397f8f8f400d1715b2246cc5f4f
- MD5 23a8ac7c0140b0d89e9ff10d8648619a
- SHA1 ec59cde4d5f2653a19a799af95d3ec8949e4fc82
- SHA512 11f3a9e9dd628de2e11d4d4f8329a56b2fc1603d3b3710644583863c8f728cd5957d4c302556799a9bfaf0526b28b0e73dd816fedfe0d86652c5cefafc65024b
- TLSH T19CF062C69E2C43F395C1A9C21A235069D3B4F217AA3183E2D8853B185147AD16C907AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 909B
- SHA256 afe5d4a07cee179f81271ece9a1e2c443a4c02078d7efe9ef9dd982aca6db7a4
- MD5 5d6c3499736c86968d014aaac5ad2bcc
- SHA1 1017fe6f6ea0d43418548bb2c0a77236b411174e
- SHA512 4899c9b20b55848aa77d5f1fd1c7ab18ffe5e27edc4fd5928a1ac3295c787d3479ded0ab1d10864a07827b1c32df3e8e8ed5bcee27ea04ef6e1a16b9d02e63a7
- TLSH T12B11676EB81D0C8F7FC78853E05E50990D476CA57F7B132454CA9F23095A828C70360A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 974c45e0d69d087388bad52ebddce8ec9dec36e901ceb4365986a2b8b7068c5b
- MD5 2189a5d9835efb04139d143fe0337039
- SHA1 cf81730b3ce8f555a5452723aa1c98c2f491bd85
- SHA512 4c4971865969228463ed6a4149ed34122f727e158299ca9a746aa9fa54ab81958309fee6e17454dfc451da5a5d0928d9af6b62c02caf135871db832b316e8b76
- SSDEEP 192:iisKwpaJJckrv0ESVHoqhkq2YqSlTN3a0xkT0mQylpZheYTQqDT2Hf:izK3kkrv0Eoc7SBxaTxhzdQST2/
- TLSH T1E812BFEA683527CEB2BA018DF12113A9037FA24C5D4BC648CE0CAF915CD66DE48F765D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 54bf1bf5d836baf192f25a229b14173835711eb6bdd0d7e0d38208e8d5d926c5
- MD5 2039107b6809782e9fabf1cbb4e852cd
- SHA1 e788a87f9268b6b3951c947b73872598a3f56077
- SHA512 05b98dd54936c4aac136456961bc33847fc5331d761e9cddfd47181d964011bc0e064130176710fd3e8edd002d02e23f107898add13043f33b0f3fccf3e95466
- TLSH T1A93108669B1B288C7022360E6D0DDF3B20904561B6B6218514830A78E82A7DC86163B2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 6ca235d4c510de3525f050fb8d56335b8055c44e3d323ac56ba1ac8cee5171fc
- MD5 6850246ad801155353df3336732df02f
- SHA1 b499f8885a3487ca5254877718e1d27d7b0cb43c
- SHA512 7af27cdb4bcf90cf3830accf0badd003fb543d9ec49ee09c8676c9850bd04c70247e24cafdb4f9744fa3f3f050ef0ba5f86a675fed378b16e383df630cef62ab
- SSDEEP 192:qe7hT2J3S+TMwwIdb+VcclRGVMTjYwlELJ5tO0lz8U5vgyysmEW2Oex6K0z:qIMJ3IGyIJr2U5hmEUeAK0z
- TLSH T1B332AF199F30978B5509F54AC5EFC962D40800A6C620A5DF750F2371F3AB3AF5E1B989
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 873603fa48509fe73dc8fda1a6fe60682de536d83701eb1dc8b9a1f5440039b5
- MD5 4289496883f9a6ea59f2014d089e20d9
- SHA1 103068f13197ef6f842cfecbcf57efdc62fa9637
- SHA512 6fede75b40cb6f172c1cb06755ce519ce4a80ed98e203bd6c84c68c11e7d771a40afff0138581ce77598ffbf86fe1d3f485c0a883286804ed5fd1474497fdd3b
- SSDEEP 384:9rVx9sVeTFrpG9st8ZLA13u7YsC4Hjii8lmTSkKwS7yamn0jX:9rVrsVIFr/1Z+8lmTSkNS+aoI
- TLSH T19A62D0C868389B03283A06AB9A6D87C92DC054400F33E3BD8FB6B5986F0597393A6565
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 47e17225f8faa2f43276ef74f82819208250ab824ae3729c7e19430536261ce5
- MD5 31cfee57bed0f4130922c48c9033fec8
- SHA1 9287884a00a87a1a5ebeb5b53fc6d2ef7dafea17
- SHA512 d89db9bae13226d25d8a41d0883b981ef3bc3d4b146038947a7cbea8717dad0a293042a713f529b9b6d1698aff7d16a35b9e995f632716d54ad9b586bd741c27
- SSDEEP 384:Jx3ZZLbmCFR6hs8fHiHmhEM2woxBZNLQSVoPTtlcJctfLZ:Jx3367fioAZNQSKpjtDZ
- TLSH T1FF62BF0DB33409A807F9B504197047BD99261190D7D49AFDBB7C1B61B18E6831F8DACB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 ede0108adab50f9bdddeb8bedf90be61f3dfe1a915c18c2062a78f441abbaafe
- MD5 369a358834f5934cbda78907172903dd
- SHA1 d29e74f3e36d478364a2b5b863ced8cd453a60ab
- SHA512 3cd44b7837063b07d58630d0d6a43aa954862d70aeba11738d3948b5eec8c8c9b2ff4cdb54061ef440cce59cacbfc8fa03bdeacbaa9ae5acd9d47b6a47a28e8d
- SSDEEP 384:ESCT1xraaJQQn5v1gKgjVR4LYp5vnY6cXhzqGWDqtGLH351j:xChNaXQPgx4McTR9WCSrj
- TLSH T14572D0260A1221E2DF6336CDFDEBCB028D406EC2DB03496AA3C9B57876D4C85395520A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 3c8eb7e02df9375caa13d036d3fbd736bf981d42999a0190a2976560fcc77237
- MD5 362acad309bee1bdf169f48ce0c0e662
- SHA1 5e5eb1fd5634373174c88a34ffe231f7614fc7fe
- SHA512 114c71ea9628e3856bcf20124443851c54cdfd365e29cc15198f4a055b447ba94334241e24b9c14ec766bafc2c89a1751e83a4a96b036eaf91b28399c271bc0d
- SSDEEP 384:FA6RpYxypKEPxrin2tg7ViqHk1AAVRkhINnis3y+RsLXPI:RI+KuW6qHk1AQRkhIO+RsLXw
- TLSH T18D72DF421D6F15D6103D8AA8CEC2466FA183185103C1BBBAAFDAF8CAC4FE4AE6564509
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 df406b164a62f7edce9f1e7c44dd83008806f4e245d3f3af6e1af5ee11315f38
- MD5 ad253d5c88da0387366f1046c7cb60a0
- SHA1 3594268be7f25776747e7a7cbc1ad40a6923dce5
- SHA512 29591e131ba185a96033506c3f2be9dedf51cc3587f565201692042496a3fb26b8d10a28d489bc3c83c49fe52a9ecb2dc01d8dbe611894a8fb8b50373cc43bbd
- SSDEEP 384:H2XGamWq/l+kalAKTuhA5EpkJwlSUdYeqbWx8F02gJ5G:H2+5ska1Tu9pkJwjdKWxauJc
- TLSH T15982D19954FDB99A9EE2C19706E610126C355293171377B4EAFC8E372BA43E0F241B18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 4ae863a74351b22750396bb5a70d9159a9a20d12556b720d3674f876e48c9d83
- MD5 3d7851a9362c60e4bf0fe7d1872fbc24
- SHA1 2bf28c0ed03fef84a146e94ec4cf71927d949ad2
- SHA512 a3d1b988836a2f2e6e0a04335b8b03a7ca5bdf1712d54abafc0a9b8f65b32678554563e00d83b918a53ed060a3ae6fd2d5a3c8875d7e97ad5d3ac7ecdb79e5f2
- SSDEEP 192:SiYw/lwpZPXjb2APNFPYseJtrf3/dHL6a+6gLIhz2WoZg2scxyr8Hj0/SS:SOKzawFPalH2D6gY2xZg2s0g8H4/b
- TLSH T1CF32CF6A69C26F035184F22B7DC6BD980E8FF49202414DDECB3A25ECA81F75063343AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 6f265fcb6bba96c05a47261175ce33d32c959da37418e2bd78edf38454f2e2f8
- MD5 4a2f85065e9da4fe5e8722e121f973d8
- SHA1 6908974945802ce8306f48ac8cdefd530f9ae8da
- SHA512 678b843c9b154970d749b9b21a57f610bd3abf058e25c7c09709a897a58058eaa9c47ff688f25ec2500c135eade0fc35095da682c4a1c9987f223d4858444d42
- TLSH T14D21B7EF84ED0B8AC8A32BF0E5A1405081771BF457C19DEA9379522A11E5B8FC192644
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 6320dcc26674613f3418d94a4d4e798af7d9b29ed9bdef90c83aaa33f029081a
- MD5 27218b9d45d0e541dcc3f265d5532a05
- SHA1 7972a627c753a39414eaa431e4f8b22840c3edee
- SHA512 389017240883f104aab20458c8b6520f788dcdc04719db20b214878980ebad1bd5ecb34d5559227064da649c7586d48a2e4164886acd8446c561d685b44fa856
- TLSH T1F121D879F8F853BB55187A9E382B11927E4F099188417B43F311730F5BAF86A1C96B13
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 e458412741d39d6df46e89c661e7fae9b3184c2bee42a61b72229ea66873c77f
- MD5 76cbf75cf8a94f2a7926cc70667c9815
- SHA1 7a909a5ae15d9ec02853df2166709bd672c97fb0
- SHA512 4d59fb943415f556af21d86f7c49ad4ee071fd61df1f2006cbca4ed07ba6468131c14538f736bb7ad7aaabc159526e427cbabc1d4afcc38f7109fa64ef26c59c
- TLSH T134312CFDB884135D1BBDFDA5014540E0F36B700969693F93B7011751499E3C48A72CAC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 bd3cf1dc97d32562615d5b5de0477bf8d4933fe49cd4e6059f9136d86b61d852
- MD5 ec9a8eb1ecae8693feb7e59d7295b5b6
- SHA1 cc19b9d2236b707217a8663a39ed49659ff0587b
- SHA512 71e25ef39424a6b0ce31eb54477d3ea0e2e10cbee5a4aa0b211c47439c4988b10e37f1c0892ca1b6841183a32d0240f3d4d69a813b6ea6295a85d0969dcef282
- TLSH T164413B5CD3B60EDD0A06DB70AE91F5C19EF2787DAC2150C4614860B93897BD0A540DA2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 67632ed9f3859481016f1bd378d36a266d2dd4ed66afad4a4330ae22723727b0
- MD5 203f046f995056afc72c9998f2b78863
- SHA1 8a2d6d8431fe4703eb583644e050f72d7a5dbcba
- SHA512 289c3818f07b5606dc1f58004df17bd5fa0dfbe6271f6fe3d27a1b56304ac9adf2a6019618f6875802eb1e67636d4b9a0879228491d5792041fcfaa08a00e408
- SSDEEP 192:kncBbjeCYumsWhNYuJjCHJj1bOIV/7dYdWjKTcv:hB1tmsWhZjIB7dYdWjKTcv
- TLSH T1DF22B090113EAF55FB9F42DF416255BB62A160E32225333F86A184FC37A539CE1543F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 f8fb7b4736f81be0cdddab9d5a9a8b44e4ed6fea4248cbb3427c87289deb095e
- MD5 4263d7c97728bb53db7b43d0d312d58b
- SHA1 a1657fa5093a9049b7121746a8be9a3af8e4bf87
- SHA512 013e22a54b4160ed4bec8113b10831097a43060359afb92d351bb634087f60855ba84e2eb3ab4838184e80273178cbd0f28b7fa5b4efbc99e1e3a8aea5635b2e
- SSDEEP 192:PiDQX1GYtvklykN17aq58BrA36WSZK/Ktm5qbl677lK8oReWtjGAnjuv7L8:P60fNklVN1h6B8qWS8itm5wlSc80tqhk
- TLSH T18222D0B4D12D19AF43C2D527FC2166684B44A7E319995A80C732807B0A3CEA77C138DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 730a28c3132ad398d698e5974fe890c7899b835bf44c4a9447ac0ab1e74ae34e
- MD5 af50c075eab8c52fcf1537dcbe97b738
- SHA1 468c916c523a90963199df72f3b8c6c7bf006563
- SHA512 49360b02ff0eb3489dfc90c50674bb5124792c91d96dd9ec4b1401fb49e4029082aae312a48ab5e274da1a2ae9489950b510198fa3399e5fe91876fed60f2c4f
- SSDEEP 192:Ukb1nFijs348KFL4o6fFxpNL/++US3WWL8u4nCBoCgwpZovXufiFH/+2TalwR2jy:Z1sAI80u9JDU+WWgu4GpZAJ/+XlPjXOB
- TLSH T18742B0540A60D2548683F3925EB813F6F0DF165FE6ACFA178316AF86AD67C6E004E5F0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 a7e1f93487f6d40f92ceb4f03979338bd6b1bac2cf81af0ddd7ac110e74f99ae
- MD5 a2c9487d1d113abebff661543785ed3b
- SHA1 7ab89004afdf794fa7e155946be812989b7406ee
- SHA512 7d78a56594770d3af54d9d44e8f0de24f4360cb60489496edf40babeb5b8f1187c014d4fbfbe47451ca4fd087f9ade1649fe52d04843b3eca77e2dc11673e25d
- SSDEEP 192:cKmsno5VU8SkIZd20m3hhUofX3mkUxkFtDaYHofrURDqi4GqUuSLNhgvbBCiogtY:cKpI50dkzUq3mZWqeDqNau0gvN32
- TLSH T1C552BFBB93A0C9A154172B6B1A46138A5B0F0436EC472B7CF0148AB3CF63C7C365272E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 b0fd743bcda3c794d7b20005323b227278af0549bbf20171ae0da1e4719013e3
- MD5 e37c2ba301b3b2d4c50535418a52c2cb
- SHA1 729c265a624bfa650e429a42a722184ee9d5aafe
- SHA512 800afb8e27387d79e4d67cefe44063a5370541d2235ddf09d5a572b4bd8dab99ebc7b716902ae937d520559c0f1d3d49d2e8387808473a348e4891b2a3465bf1
- SSDEEP 384:tfmhF4Duc2I9BbwBMJoUeCK9J3NI6aaqp4Fe3e:1mwCBiiRGaXFWe
- TLSH T19C62C149006A650B5D72A9278183620B67E4849B32FAFD12FC425E1F5A9F381458BAF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 8659a377c72df97f0eb8055d2f2d08d42205c42d616a7628f337750cff01be1c
- MD5 f2eb498735438af14b24aa52fb1336c4
- SHA1 edb21303c09da638613f3879045d3f0700dbe5dc
- SHA512 e99011bcc8b987c8c7b5042f17d67d1368ccb46908031a895f25414c44b35d883bc3fe35320c31f3be84cef6ff126f89e8f7ef0222d7e64428e8ed82d330025c
- SSDEEP 384:IUJSosNgWVpAcIV6NbzD5onAo90fh9zePeIgJz7QuRmMij6:I6h/quQ56v905OMzf8u
- TLSH T11262D1BF589D46F94184FA910FE2E4810BA195F36CD9382AA4325B8FB7F6205C70CC21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 61ac9f3977621728dda2270b9ff5ebfc20afc6c2a9ddb35972afb54c7e10728f
- MD5 41cd56a41c674192d973d22c9042207e
- SHA1 371d4cba6a3c92845b1f47242c7f376bd1fb0c2c
- SHA512 a76773a7e962b888ffb0d2166985b92de28f12f4297bc3560ab6876e8d30b608f40650f0034912abed0c7c2b38cf96f4966fd7128d71dd22950220fc90f1883f
- SSDEEP 384:Kpn950loj4zhYqkhkDaAdiIw4tLcXehRWZCZhJn5jBuq/tjKKW7:y950a0ViAAIwHZ+J/7/tFo
- TLSH T11472D1C9B3A199486E9C3E4E1F0FC9DA994F895627F83DC3A6160C5F4473F437645210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 66887d8bf4d401743351747e24beaef6f6e15a70df709e9cef127895fbade2ca
- MD5 d50e69c0de9ce712eee95183e35c6bde
- SHA1 4a8c7708efacf8f5e50f65b7455dfbb3ddb9d9a2
- SHA512 7874ee6cfd66dc7bf631c96103cecc88e96bf74de952d8b922a5e33965dcc9b417a47bbb1101c1de84f6d4b2485f2110c88388734f63aba2683384458d71984e
- SSDEEP 384:cgu6zKAyIZcxmii3KpTZN176tItl1n1AC6zWbj3mEm/BmlJW6rWbATh+oq5lIgah:Xu6uXIZcCa9ZN1Gt2ZOOjW3/aJthTh5J
- TLSH T12192D0092AF9D749095BBDFDE051E131F67306586A4C2CA30B9E4AA038197AC94C7CE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 afb0dc3c6e8f7080d032fb1058f545df58a6d2d5be26b0c561bc39cd1cab941d
- MD5 bc4b3d344d7e63bf3b29c254a9ed7da9
- SHA1 13e09f8cc460a59a56ea1c631b6c8e35fb5f91c7
- SHA512 9f35c5ab4cec0a016897509679f3e64182d70795695d7f824d1b9ee1126b43bbdc13b110b2f7c556ec7c4625acbc95106949e002470ec1bcf2617d91b674079f
- SSDEEP 384:1c2VjP7SdsdEF9AW5lLAArAGibsh/xVqtu4ZiMi71fgu2zQjdKS:eXqdE7AW4OAGi4hTqtu4ZiM28QjQS
- TLSH T17C92E0E162CA940B2A3BB517DF30171C7053E715DD4E3E21912CF41A36927A1EFE5A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 493B
- SHA256 eda5fbca1e13d06ff57c2ecf0e73f28b56bbf7bcb74599e75f6d166c58022ed7
- MD5 20ced71adeb118214650d493d5ed29fb
- SHA1 11ddd23d6b0e3037d5ac1e659f4feae45321fddc
- SHA512 a81882962b61cc3994b8ba913aca539605f7b42191a9bfc4bf9868f53e49c4e6f832cd58eb7326486690d7a49e41401c25f3118548926765371c67d95307ff93
- TLSH T1DDF07511CCAA2103465B8780AB1D22605C8645FD81521C2000044792D4EF8C7A003A06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 983f37d6877c26add533097fb6c6f910d9620ff4542787dd5f6d451c6fa5c4a8
- MD5 b6a31b622b0ac2de929a3b93735109e4
- SHA1 f8c945f4c4f8ed990bc95c9aafb7ccbef8fafb3d
- SHA512 05b8fdb7d8f1bf96e6f0a604b8627d252a544778857a3b7f5364e259d27c4c6ef842b1dfb2bf75d4a4393675fe71f7fea6d83148562d3d0152fd6478c1d587c7
- SSDEEP 192:2Fg2v0LhYCoVaS2qWrDmr/u1Ew75wVqWzE4cFlFfPURoG:2OvPoV9Mfmr/uyVqR7BG
- TLSH T1D802AF5692F099320F36F268CFAE95093E8B63F5BD3C994C06A16D67AAD9001478DC3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 7KB
- SHA256 a2fb84ee846fcd4e0ecd52e0afce9071974329a3850789c9a559e54a330418e1
- MD5 a1e41dc1a963bc54c2560bdac865bac6
- SHA1 530db10f00e4d9a6d1c761e31c4a75315b5c8927
- SHA512 082e8db3a42c7feff016777511c3df381d9758e4e20ff9a8bd316bbb6fab01f321e059819ecabf3e5a78fa6c538e23e7a13c93961d549c08e6c028d3defddc4d
- SSDEEP 192:KJ8hFStGQ/PiYqELZzZyF39nieX8FVoa+i:K6LO6+LZZCH8vV+i
- TLSH T11DF1B0C97D4EF29208B426AA4A12E126F3845A4DEFED7ABEAA15D40C1C372393105F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 7c6caa8587a2d4d7e98af82b37266a51c27e80ecf5b9a06688e77176a1f7d80a
- MD5 5624d6c194e5d64f8e178aa219524fe2
- SHA1 fb8d14a50831b29573213387d55829473d2f76d4
- SHA512 292d3339b27b2128ccede79ff34541792d1ab785393970ef79a1340415a783763ea9f89ff2c69afc99187c847422224a115335df3704db269c8964b0348ee6bf
- SSDEEP 192:5dH7S/ENIxYGCOhvknc3vTwBwoOOE20aAtFqE+/n:597S/ZYevkc3v8dnMo/n
- TLSH T1E112D00211B33086953CDD0D4BD82F29D24ABF9BDC24B2F8D8513CECA97D6DC8675968
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 7KB
- SHA256 098598a42a34c6fc6b24e4f34c00f6157afaac495a595ab4d88eb17d008269c7
- MD5 785808d9eedbf22570005bcbf6519bc6
- SHA1 51138e94cdad489a8513493699af560033aed33c
- SHA512 b6ba225bac1e48c9ebef37f4b7ff293a4ef7e659814531d1180fbcff6c8e3b750665767638f98cc346e4ecfe61253b4552faa04d94fab93bc38280074dd32363
- SSDEEP 96:QTbU8e+TZyv7U+y5sCba32j8ye6Ar3YOQ5kzsYn3+CqLACJX0V5MKBZBEm4ISh71:mDTIvY+y6CTO3483gLVJwMKjYI0nJ
- TLSH T1C9E19D9C7A72537148D3B0AB4C3DBF5728267D1C8AB27631186D4DC00B7421E8BA553D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 2c4aaad84b97e8c67c372fd3992f9c8a336fa379aa25dd0eda247a6f9eaaf4e1
- MD5 614e163ce74878ccef1f7d91b35e9611
- SHA1 308a68bc418039a01464cfe31ca9c50bfacbf06a
- SHA512 3944abf4c4a76c46b0ed961945f996bf5b0fa20df7b83af34e29cba7eb34522546906f7296dbfd9d80ac15a73527c3104ed72715cf92dec44e86e9d7ea02787e
- SSDEEP 192:G6LLQtSaIKcWz0Q/vM3q+wP9N4DMJEkIn2qzkY/WUTlKMMNu6ThxcKuf0:RvQtoKPoUvuJ+4DB1IwHKMJKU0
- TLSH T13C22B038FE2600F71298A146B41FD57341E21C71939C30F6978CECE57E544C9A7E6AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 10KB
- SHA256 f03975161ea44a382c17ea398ac7ee405d0857413247965e1ac4915439112fa9
- MD5 909676c40d36a2812836d5841d1c6020
- SHA1 5b03099a663751003eba51b8c2ef0628f326d05a
- SHA512 351993efa8922c606c5179ea537dd6ce74a61d7ae3de4d963aaa00f6fba137ce83c9d686882fdd3686dc46a76d24afadcdd7bfb57569780df643af419792e835
- SSDEEP 192:iqoa94zQgLIBgr0UdUKi3JpB2WqW1YuzIRwcid9SzjcFibfTBrqttLTtNjzsI/8B:iG4zQgv0AKJpBaW14b/zaibr1ELpNjz+
- TLSH T19722BF326C4D68C1BD96540131B23C16BC47AA91FAB4470E2CAAB34AFADCDCA30A5646
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 935f3e960f4bb65fed0ad76aeb657e59ff8dba1d0f5487fa616821384dad5548
- MD5 bf91c7ecd6b5b6f416ebb189d0ae3545
- SHA1 8acdf0673319a8d23a9bc1fcdf70ba2a5c6c9b9a
- SHA512 c3a7635806d61635285b1a7c64105c61d33073ab1315bd18b3d6c6bdfc6ad55d2fcf4eb7d12730726edc0f91d37de0b64982cc68eaca5d4522f007d7b2ca4adf
- SSDEEP 384:Aa5k0xLzZjfprKqQA+3vk8vg7RYc+f40g9klQn0zNtikPN:Aa5kEfVK3AcIkztz
- TLSH T10162E1DF1154C1CB6F3E3DA7F162C1812466CD0A762C48C534A36FC8134998E88F9A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 3fff8be71b7de115f60fdc7c3ed727d4112e8cff956cbee47fc1fed9d2da3a3e
- MD5 61e1ed47ca6c885b7459a1479f0b96ef
- SHA1 b8745d66a8d8aed8681fc7e635004fbd3ef440a6
- SHA512 544cb43d5aed58ec66346f86720fc58648c7244ff6f9fb25dff6ed9a8488d2eb808d42e85e17bbc37016633a8bd49c14e27df0f1041caa4928d87a448bd94ea4
- SSDEEP 384:bF3XhY7f1EEaCsbvjlvecUCAHVF3ZHUgECeIfEvb2FRUfB/Pg18SEU:xnhY13aCaNeDCAHVL0ie7CFGtPg18g
- TLSH T14B72D00A9430BF1659DEA536B3E64DCA73190810FF5CB20CC35E0A66A356CCFB409AD3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 cb1662a168c97ccab4929ff82946ad591335bc480f7357a4e6ad7473c95004fe
- MD5 90ce805b7524539e19ba68f959de408e
- SHA1 5edc41064b04c7bde55fe19772d613ce3b2c46ec
- SHA512 51c4725f2f1e556844df2235e71f107fa27c81c5701a22fae15aef4776920151ef76eb2c8f475111934932bdd9418fa59b9ad14b430acddb76dabba652f65ca7
- SSDEEP 192:+9Wyll29dFJ6hnsVRT8CpMjOg2aD5kaJ7ibZj2P+/N+xP1o:nyll2ZJIsVRThMJOp24mP1o
- TLSH T12352E13A8168EDBC8D7016F04B59F487DCF7F9587178D388A81340B64BE2731A1AAF25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 ce4fbc8d97db4a861227e2e449e7e60aea00ff427e8dc42a7b37fe116c6da1ad
- MD5 555100bff11241701120dc46aee406c5
- SHA1 a49a0ad0627c457ca797775a926f2b030131ffbd
- SHA512 66566b0f510b96809a5fb529beb57a567a88689cdad67528bee76135073134a27819ffbdd23c72662c83bddc5a54dd4a1c0d0ff6086aa1c62b1e3314fb5bf543
- SSDEEP 384:ZhcV1cP4lWTHg1ZEqDmpRcuUplR9VFJGj5/6nloT5USiNk:Z2bcP4lWTA3DWOuUpM/6nlotUNk
- TLSH T1AA62C07A1E0D4CBA50D6758397938AA630A5C128B343BAEF7F917FC4113CA2A339C41D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 fa5c0750f89f378dcf1628c225daa6c325d04a054f9d2bab66407bae2472e93b
- MD5 7b8f7c1a228170af191f65dcde0a29e5
- SHA1 6d1ac71bf9a7fb92e28da9b51ca904792dd10eaf
- SHA512 6e43b6d3f928ea13c5364398808f2c9b0c48375379ce0d9dd018c0a6f938667d7b83bf0a288ed2a1090aec51d7caf57056108085a98c76e383a656a600e9aa3b
- SSDEEP 384:BupNmqkVvut43zMMCYjFNe+CkQ/1ShiDX6qh+2nGhGXgG:BgmqkN5dVo+0AhiDXt+2xXgG
- TLSH T1C392E1DF0596E0689F24374D8859529D7A10E4B7E27BC41E8BCFC0CAA9C21E645949B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 733B
- SHA256 5cedfc9a76bee13329ba9db8b5bdbddfbacccb4ef304036ce9d17e10f2510711
- MD5 f458bc3a126200680010a4016dfef54c
- SHA1 33029cec8743abd28779320fc5637694ea58bf27
- SHA512 19dd50da740cc6f49bd1c26bd257fac53c3b6ba21d6ebf429e6fc5b24ca79522912f9d685053dc3d3dcd305ed17a2ea2d5c4764ce788f2fa54bc143a437f4b5f
- TLSH T1AE01B5351ADED64D2AC92E981502CFB8C10A46CF97B0B714D0F2BE8A1225209438C996
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 7KB
- SHA256 96d93208bfdb6df1a679ba569615081d20ab46c145d990935b169c3b74c1909f
- MD5 0c6e583aad1d19986e5f22592ce25c2c
- SHA1 fce7c4888341ba7cd3de4907c6c6a2946ae593d0
- SHA512 9b5faf7f3a61af85a1e4a88ef6027912d438e9fccb3f6c1a999cd91a66939e70c08c1b4771a0e0a570cd60aa2fade4e2d35f53da1074df7326b873b0f8adcc75
- SSDEEP 192:aoYPT6j9o7eboqaqEzwF87/9Xy0wU8QP6vYIL8ecZ7I0:o+8LqaqEMG7/9X7wUXyRTIt
- TLSH T16EE19FFAF690D62FD99C4FB0A84236C804239D7E54721B6ECC71F2D8E8701DC261925C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 d50d070a92a90f276deb3a5bda76e4f0930b76de8182be3b2f056f0413f53c8d
- MD5 b84a30878d1b8a9db213da7468ee2d0b
- SHA1 32b5eecbbd3346c46aa667e4e6d2bb242e85afb7
- SHA512 fdfef198336d88013cfcf8021cd1a352696e8d3ab3749ed3e42bdf2361096f971e547993d501b074627867b15be28eab5c4f209b7b20594de1df5a4f6fcf3544
- SSDEEP 384:TRBbUe0XqOUJpg5UcVPYQOSO1kkAPhQZJb8QePq4:1BbXJpUbBYmepACZ8QS
- TLSH T1BD62C05FC36F94A46A523723A34847A7FF3BE7C5549BD30112A0A1A8271BC19E04CE5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 64f3af71ca36907f55d9b2e325b1fc05116ecf1e233cbc84378e7ca0d5c3c600
- MD5 08904b38570c1ec0ad61ddafbf6ece00
- SHA1 1c981315fe96d8fe0f9f061b4f021a9fef2e3623
- SHA512 3b0a9d8f3507b1a4982e88d7cb464c49a60fae005162123c441c810fc3ed51abceed495cf6faab295fd478d5ef530c6d6a05a97716798579fc8293e0b521e54b
- SSDEEP 192:RSzqmsLRTwgXmJk8af5weNpFsfgQtGGbVTxM5GhtHRqvMP3znTI+RpD5:RSzqhLRTwgvvGhDpTxvHxlPnIc7
- TLSH T1EB12BF8E33850DD395ECE18CAEB6C1EB70A5B92F03DC83736C155C769AE171AB5520C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 203e610a13ad4fb98273efb6445915f8b71a6e4f82a739211f9decd5b167500f
- MD5 9129c5815248bcf9b63d34b20359a7a4
- SHA1 2b5b4f49c5782a7b46413191360c01a794e43cda
- SHA512 b25471cf5a3f6eec7958fd5c9548ea68f3d984776d9582d718dfde1dae21439d7c93bab538d6fdaa733b610bbb1ba6b60c344cdd6c6ae91b3125b976f4638257
- TLSH T11011F94D61E6ECC581FCA8E108501372E0A22F101ED9BB9F98C5E0E80D310C2C0CCA4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 697126a93a42e577d10b8bffde3ce1406e1471d4142cd1c614b3ac2e6ce30c2a
- MD5 39486b1a52ad7f5d544deb89dbc5e400
- SHA1 f2539a10731e561f56b076d0389b1ae5975d1c08
- SHA512 e6e6aee8c2a0bd9d28f387286224d4a74ba6d783e7c15c1314068fad9fe4879491e35fced4e103c89b9f4e0de66fef69fe638fe61d2263909b896436eab7d64c
- TLSH T12D21D7068A36E3C32E4A6CDDCE6511256A5F2CB1456310B078300FC886631BA5284213
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 a5de36e696cc2558930fd1d2c19f644334ab4cdac4401ec1b4a413f878714d3f
- MD5 a6d91c33733925fc5579f3dc5150a0d1
- SHA1 973c5f6f659d38af86083632dae6b0e60e052fa2
- SHA512 afa072c837e74e527a7b0512c0a82d20d24bcdddc0d45ad2c27174a792dbfb827f9fa06e1668d89d526bcf798630577c7966713efb335aaecaeeeb698bb86d82
- TLSH T13521D856F001045748B4A8786442F3B1E8DE9278AA5DA718A694D3F2E132B85C4EE942
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 19c1fdb49c2311f340e90eb334e110c51d0892d9258e91d9be1269b2edb945f1
- MD5 3d3cd860dc4cb835d7fb7b2761d277bd
- SHA1 3bf87da254dd9007b804789a87e89126ee3b6724
- SHA512 6547247955da866cff66b596129d6be698530e07e176db8944394471f9e4efb9c8f2430df6033436d5383e896dd38e639d9d02ef62d7961c6dbc5e86e8b0f186
- SSDEEP 192:qBlIAq0GKMCZZsXoiU/cx0yVRI33E8HLhxVRC1ZC4ov4sMKdfK:eSXoh/GVR035ZRC1ZC4o2KdfK
- TLSH T19412BF341C430658E9CD87E2882CC305D61797C3ADE5EABF53F144AE6F03B9791A149B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 1KB
- SHA256 9a2461761f1159db810d0f6c95b61c3c6f4dc57fb7b3a10d330b887a9070d344
- MD5 074bb26f012124128169045d51578385
- SHA1 4c6355f8d9d6416bf2cd0c91933f578207262905
- SHA512 eb63c718bea61530d031249f77f094d2e6b7254747ef56c60e7358acc0be9e45ab523108cf715dd61bf1c8a352fdebc9b0b8433568a5f9b363d5f6959da57af0
- TLSH T14F21D885EB917440920EA8669136B9F7A52F7B83B3D0191B87C88C2759093204B33BD6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 5cf80760259d1caa974d0362983be4b0043bcc099d820e198105c84e7252133c
- MD5 50d27826b5faf5514bd2d1317ec80c66
- SHA1 7bda8035780854b14ac3ef4e19644ab9e137f520
- SHA512 ff546c9adc64ca46f69aa688f2de5d211c6114299a3e23561a790443b2a597ee8742401752a48d0c9ebe6f03ea4e810f85c72cd1b2a244eed6453ec93346bc5c
- SSDEEP 384:8bQj32K45VUjd0lCFEjztY26mSwngy2T51bGpkppCOV3VJUmrf8LP:8bQD2fCiHYvangy2n3XCOVkmQ
- TLSH T1B962C0E561EE48B902A0DC82BE6B34313B3B6EB8E704532599916277D7818370169DDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 3030fe26fd92be67fa1573e5837dd09a5197dd211193af72e855607742a22a51
- MD5 6e511fcaa61e1ac3a1e6319af0adfbc3
- SHA1 e4eedbc032b8bf57df5d721db30788cb83f073c3
- SHA512 41e5923fa248370e6ac5692b8e986e0380cbdd0bcbf9cf4bd2a3db60da1c7be3e8f75f51e48087ac881a61288d807d475019bf30336a741576fe83fe53c99f02
- SSDEEP 384:Pru5V82MU4NSM+bfJWgsary5eECmthQ8/tTVD:PEV1y+Lkgjy0mthQmB
- TLSH T16172CF2AFCE78D41EC01945B9C903369F2DB2B40BEBF446EFA954B466E474920F4DCA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 bd54e068cc296719b1c7718a6ec98d471eebe4a5b67935b99fde1fcdc7d0b108
- MD5 5e6e67801fdf67bed937ee935528c6f6
- SHA1 431f0459e49b8c1ec074de22984485e88c68a57d
- SHA512 0c7f16e7e82679edb0b1556c5a07b15dab9281052c67af95d1c57a4dfb41f5d3e558c8adcb147f4df992a2f498ceab9fb4b805b8bf483d4aeb2ee8675e23d555
- SSDEEP 384:xMtJOya/gLVAHxDNnWh0Y0pSVO62OUS0htEyW6+EoTFzwdYs2D:xUpatWh0YMSVb2OUfW6+Eoxki
- TLSH T16872C0E47487FB3150DC4DCDEC159ABA2AE9EBA2F628708915C570EEF028B86151316B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 223c25f806f5da9a76d6cd69b934e3e969039524397c50c5db6c3f8ee6d5f5d1
- MD5 7ae86c2c450a04adf843f9be60df9d8e
- SHA1 f6dbcc88c51622dd3cc592aa1cf3bf2fe7561242
- SHA512 c5320d6cd3e704d65d675ded60e64896599cf0f233aa105be279334e7c2782ccf16c315faabf5feffea3a744d0e5895db6e31964ede51baef84003c5aeec0806
- SSDEEP 384:6y/Sb0UCNaVZIwFmVxEARjIRqZ2jlgHwxTjoI:6S5UOAzFmrE8jImqKwFz
- TLSH T11772C0A31C2C3381F1192B6ED4A83FE6554DB281784815DEF2D9C84E2914572EACAE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 2e2bdb207522d722eab8650818b3298e4bd9b5bafb5e0c16bc9d93d0ab66354e
- MD5 91cb7dce653ad81d4b9bcebe8d49a3ec
- SHA1 74b731aee88b82c55f14f1eb68a5ab8c6926e321
- SHA512 607ab0c40081a64c0d6363df9cc573ef689e5082b6321d66bbe9da4cb70676fab4a0a831b805cb1e84865f988c860cf1bc79a3b3ad86ce7d8ed278ab53c3c743
- SSDEEP 384:io5Vr6/71Rqx/yK3Ki9vbCXuGP+QkcQqEXwQ/:t5Vra72ZBW+k+QllNQ/
- TLSH T1E562CF0E6AD7E3EDE290738F2C56FA7D1D42A8C0959335681385893E7A30F1AF0167D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 973B
- SHA256 f87c4b00f413353f661a600b40b2ecd3a8f75b4dccf9d5e1c623e6612f2be3f5
- MD5 0e2e3d46b54b196c1583de23456fa8a8
- SHA1 e4cf1908da973ba645c3297c13b8861855e68376
- SHA512 ca6543d1e47dd61ed914fc5c5230948564aba016c0a956f7f65c9ddd3fbe68775ea91fa1427ee50522a8dbc1ad3f9a0f80820bde9e7e89de787011345d6cc193
- TLSH T15911C893D8D274E900F0D8FF4F10859F91941EBB1E928054A3D717FC26C11D942E6BA1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 faad1bb6553d229024b47d2ae6fcbef3ea3bf4781d1673faeed16abc3b4cacbf
- MD5 6c477324386396d2d5e0b128b26d5df6
- SHA1 7f59bd161a1f3dc66e30a8a89a15dda11506ea9c
- SHA512 69bad926b862416953adb157270e4da41a311ac5f89db4328fefd11afcee9162a16ab95d5acc3f0477c9584432dccc83ba8196b3c39e4c58aa87344339ee3591
- SSDEEP 192:K8AdHKRZqEnQfSWOYvZoFaLfGCOKM5grnyaG60lph4FY4:KXdHKRZqffZJvGFWzZM5grny7ph4v
- TLSH T1F512AE793C334C60BE92907CDBA2496283A90C14A0F99E8547D75CE2B61B4DD6AF04F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 213d38c201d4c0fefbc0b443cbad1a10fb02e23ecc16818eaf3bc9add6ee5e78
- MD5 bb756b46fbe9ba9c70b1dafa5c922213
- SHA1 cafea5223bbeee6a13cdc30dbf23d25463684c12
- SHA512 c1379d7f0ecea3d34fd1375089461de5693e5a16a557e9e25dcc99cd1c09689da1d8dfe04e6c422a5b60ba033ca5b813d02771e646695e8db99e102c5fc32f9b
- SSDEEP 384:iJI97FaUd9m5g4C6G8vwH0Z3nWQXE6f20w1CD5aVwxWfBvym:iIHPV4/rvwUZ3/vw6RIBvym
- TLSH T1D082D0CD0636B72B6D36C9DCA67EE1350E08284574E38B1DA3C062DC9AD635B0E27772
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 12KB
- SHA256 4dc172f7f56c28f56dce4a9f0283fd80b548421cf438708e1f76c0cf29936499
- MD5 4e5a7f62179d4dc54fc10458a03bfa33
- SHA1 0ecbd48f6dcf93b430013174f63bf9b147c357f9
- SHA512 713057300de3706cdbc33fb65f435e9e772842c7dc57e9883a1db667bdffffee4f04f30371ff4cdf600e790d9f56089a4b5b607332f9b50cc42a6c08813b9ac2
- SSDEEP 384:rqHmjG0CYHB50WNJDGNcyRK9fsMzKqjX1PJEZ:rqGjGaHb9+cUK90MzfBPJEZ
- TLSH T12742C04C59B7E569E8021F67E85DEB6E2D40582C4F52460DE8E73830751378DDC2C96F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 14KB
- SHA256 4d0a44c7d907e5e071c39bd33853549e709b1d8d13271e0c9e6fba5944901fc6
- MD5 021025c00c31e056d7d436ff5fe8b97f
- SHA1 eaa866efce4731a4b29914e8717c74b103d13f20
- SHA512 e2454b142f951ba2ecd1d64be37d159d8e05317c5ab9b08c53b58d68a0adea42cd6e21fe4bf8f2af1ea17a9adb315337cd88ad0ef9d7050b144fc46dab997943
- SSDEEP 192:Re9Eyz3zS1BRcQXHw/A0wHhzR8Tvz9fcXnNDcMnTX0J3wLr4I1F:Re7zj4BiQXQ/A3hd8uiazAwLFv
- TLSH T10762D02E366841081E1E143B46D93A7401144E7CE79A77423A7F26B4A6FF275A9CCF37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 7f588b8e973cc4ee9bbf2e3ffad1b9d126ad06a6a9a6655bce9542a56a8b09b0
- MD5 12a6b9954c4fb94fb0bdce65521b3c85
- SHA1 d9e3c3d49acb74bcda4f1bddf8b3562a552ad4af
- SHA512 9f553740fcf206884a825865fea84a134250b2f480ae66fe246e2270d901795fcda327b222a40abd3d9e759131bce622694271b67be37f8de95621c3c1328e7a
- SSDEEP 384:/jUFuFpFekqOfd0rye8NyZotuwSLNw6vUokb:/wSpzdfd0rye8MCrGNvkb
- TLSH T15172D1CCAD5605650FE82F3ABA9C27DEC8152326A56535B8F754C3A1B28CF206325F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 14e83decdeb816019a7e9db77c0e432bd82fd1db022529730bf6b218791eb307
- MD5 384f03cb73bfaef8d5e4551f340e23ad
- SHA1 64fc9a6be949d8d7b8e8f74e27795811515bff6d
- SHA512 cdee74c63d4b6b39bba8935ca6375fcaac40b3fc6633d8c04df630b11ff1225b773fcca9aa65acd94c29a6532053cb9e2dcfb0d5e464e7562e9d3442b9c9fb9f
- SSDEEP 384:M3DYzZDlBab45gE7lIC0S5y/r/Wvz1etPPnIysJeqknqyjafJT:asdDlBtSE7mTfzmIIHk/jaZ
- TLSH T1D792E12FFD3560F35C48A5B276132106BF959A5E9BE3A740CDE2A0C1358D8751A01BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 cf7a02e28965ba0ddd5b44eeef55403d03fd876a89687749e41740aa3fa5a002
- MD5 51dfd8d222dc236f1d99222ef0f23ae1
- SHA1 4449dce5b6a75b295b6da8a33db8938261480e53
- SHA512 c3983c14b92f28fa62a05041b4dfcc9e45f4d1aed34c4c9fa4221c8763a819132390198f630e01b0725cd9c8b0289e7a1203e58e7313d71695a379a9041c22f3
- SSDEEP 96:tHIU/qxJSdjxqlRy22FeSbzgZyw6luzF9bgH5N+JvT2NAc24RLMrIaML2820zp/7:LiUd2RaFygurcN+pT0AARorIa38A0zIc
- TLSH T1BE02BF05E7B2AC715522A450D4F403FD3ACC8D4E3A55E2A0D98BD80F2EAFCB745DE980
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 d7982344d1ce4f542bee2e6f57f1a7e0805e206b19debfa96ed59d124b0540b2
- MD5 ff49c38fe60cba5b5217dbc235b7cf0d
- SHA1 59cb10917ff1f9f4f68a8cbc65d2345a6ec441aa
- SHA512 efc6a260ff1e157721ff5bc60ede2ec74906b0e75931923ae238c8ee3f5c5bbaecc8ee3323e3c984b024e7a80c65493910563f2806cea2bf300795293faee0b6
- SSDEEP 384:PZ8KzBjGEJRa9o+BLe2HNEbIRpYVFMUZpNURhtZx+C:PZ8K1639o+tlMIRpu7ZpKJ
- TLSH T1C762D08BE95752C34F4C9E9F4C92600B19B88780E9C8DC4F0E65858AD1BB992933CE9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 e38b565fe2c77b9cbf1691728a00ca1811f2a2fbfaef4ea005b71ab99db7dd41
- MD5 cc57a3efc56e427e2a588bce66758d57
- SHA1 14a7e7e5b52c991a8520a98fc8d79867277adfc0
- SHA512 e60849c74496e9742a9eaf5721023bbd977c3aa3de745f24ccfb01072484e3adfd247601bc769990292ae79db0e8ddd12507cfa50f281134a6a6ffeb16d70875
- SSDEEP 192:qYQZepuOr6Fu2aBjmLUl2xNVW1FUGixDDa/KkLbAaxv:DQZepuw3njlONM1FUG8mXbn
- TLSH T16312AF06CE1054B22C2B8457DDDD3798393F3993F82415ADE14A378CCDA9B2A6E1ADC1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 3f0a09e51efbc58df157ff7c5ebc0d1956b4c881a2c78d78ba495d9222f51b30
- MD5 ded1bb70c67b0c5acdd719ffe6b0268d
- SHA1 3413ccab3ce6dd267e7a7610bf00d298578e0a96
- SHA512 468977f15ac6726b9ceb37fa41e5916cf207afb9933f3e299b424df1f4cf254aedeee48e7de2959bc0814599aa975c3c8c377e8179e468369e86a3b2b1637113
- SSDEEP 192:uW1REuZHV4pfMh/goUN6BSzDnq18qdKFesYQitGLSLbRvHGbza8SV:uIyG4Va/gdtnBqdK0sYVGLS5/6zazV
- TLSH T1B022C0D03725CCE486225670F383EFF549AAA0162D116D168B706ACB770CF4DF2299C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 18KB
- SHA256 236fa2c857d702c70ce690b9bf555ee10915b2ad54d30679ec505a5b629a24ed
- MD5 66561fcbfa29dffd3fae4ba7c7d2d8e3
- SHA1 bcc17ade557396e39780ce23ad33bfcabeb52529
- SHA512 6060286086623cc626ae7c23df0dc5a1e224138cc7e95ef46387a7b57a5c29ae33d7cd05843990de98129d5656acd85b07571a4f40cbfa31ead183a221be4f62
- SSDEEP 384:6BDQspJcVpS8KU5Sd5iww5udLfvvVrIvmmbNZlKNeavcBJ51l+drs:ScspJ+dRSdVd1Xv6vAEBJ5P+ts
- TLSH T10982C03E567468C2CA462462AB832B67D773BC54F135E335F280DA27CDBF8245A08913
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 93e4820b33d4447a3405a3c1c9aa06af2de147f3385ec244e73f0a32174e77df
- MD5 43fbf08bb9774850a840e9c243a0bf16
- SHA1 c1b9e2b4403e8828ee782f386a11d8c25fbd797b
- SHA512 eb61f7bb0749527cdaf832ca1ec2218b9e80fd98e8af0c07a66bbc617e4f19d140abbd3cf489f14d0994b54eb9b5f965b4f297fd8720ed5f2eda5cd76f22bfe1
- SSDEEP 384:x8cXcM4S5k2C3gKeV1XsbCZhs/U9RJVwEQGnQk9Z:x7d48YheV1CCZC/0JyEQ3yZ
- TLSH T1C062D010702789CE21E35CE0DA36BCAE713DE834D530AF46A8713461489DECAB844F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 16KB
- SHA256 d7e0315f220819214c6e8edcc17d708354ee9f75a6913ae428a66dd43672eb51
- MD5 4bc7d55beae7f4f157adcd59c3e9db34
- SHA1 14a2853611554a8ef38771b56ac8a9e348d7c747
- SHA512 92e9570ff43982d7ca2e2100da9a96e7f411d06b4faedefda2c219a941f84980ecdddac952117c23b090f643675363bce68a16f6c978a011baf7c8db75d19c18
- SSDEEP 384:ZOMLOHGdQc3X6YOkejQ/XBUulV8a60QHSOg6Jf3U0dhO:cd6LOEyNa60sS6KKA
- TLSH T13872F17177CC8193C5A3D5A268EF029A16F84154BD518B3074EF346E379A4988D73EC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 8dce4424816d0caf6f963be5f8d51f6c58dc6364bfa1d736471e3956eef1c0f2
- MD5 d4592c6f01da3c0e02114caaca4fb5ce
- SHA1 856879ee80e22d8a049da1e8fc4c7e1add99de5d
- SHA512 d4a33cba60cea450165ccac9ca33aab04c7b0f2f03aed9c5920616a33a52325e73804acc12779616659ae91c2b5ebe49ead770635845576ce153e2102f1f5944
- SSDEEP 384:XgRgrZeXk4gzMBDsW2TChkqrbrotwuHR/xrG3g+DhQlxqLB8Nkk9:XagFwk4gzM6W2Tyr/opHpxrG3g+Dh2M2
- TLSH T13E92E11A93A2D982FD197C1D2E719891BEB0C1ED7134B630EDDCB4E0B4D91BB09248F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 8493d531898ead5d4ba74eb1220064141128e2e1bf6fc5b1c6667e40b0f03d8b
- MD5 e1dc938333d1bd55de796416b3894a77
- SHA1 1dfcfa430dec4f8fa8f99db235b884e2adc0e74b
- SHA512 3e53ebd61b5c73a0408924fa165ae506a40336272c6d474f89d0babd778ea45b858cf37a86f3d7fc21742cf239964ffc4368fc254c3e16cece5198140bb8ba7e
- SSDEEP 384:l5XbjeLhZAIdI0EogKui5n6+x8tmgOVFK:PXbj6hllPgKfqwgT
- TLSH T18B62D1A31B316395C6330427B5F67684B613BE0314E45332C43060B2AB2BFB59FC6905
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 8KB
- SHA256 7bb28f7478fdbe72de4974fd4652354241530bad011512c316cf9b12bed81108
- MD5 8c8fde7155c62af678ca17ec16eddd8c
- SHA1 865b5a00c93e39424518f88a5aebb635a2f9f9b7
- SHA512 61af9323eed03c71c47edf9380f5eeda84341903d3bc79375f371e1a635f1f632fc85b2edd8ffca949f3e4a3c1299c167b45b7b6f0a33aade44cde46b69c4d83
- SSDEEP 192:zJBm6rt/u0vpvJcASpKesaXCACQZfTeCJCdeOJXMTX6Ome4:3HlzPcAeKesYDCQxTWez94
- TLSH T1B402AEDC2961D2776B2C45075F95FEC8E08A2F12B9CC64EF893613358E3DC2AA1D5035
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 12KB
- SHA256 006ffa1c24093b403ff7510f9e895c9e1b5d47b71d6101fa0ec5a4a393fc7f90
- MD5 fffb8cec4f82e8444aced647c2b93c8b
- SHA1 d776eff8273edc8e85327f2012c47ca1715bb28c
- SHA512 db436d4a3cb479f9d5a53055f87716291aee8e50ec7b97cd91ac678bf4e62b04840dc681b9f279aa6d9199f0847320649f9c70d76b90535e0f3248cfe0f3a2ad
- SSDEEP 192:L96UKaSvll73tHvhWmZguJ1shMzbMHTtmVV3oYcVX7U57FdQRooz:L9zK7vll731hWnuIsMzt4eJ76Kooz
- TLSH T15452D0A3B9CA4B21D96C5BA88217F8EB0F48BDF75BB1C27464D41643607D1F4EB240B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 26f3988b67eb9b5dce03d0b0d45ca6f88c42aafb6fb96e62ee0d5874489f02bc
- MD5 9dbbeae6a9b4f1bfb1f538f969a6d018
- SHA1 36b814da7fae0c1865f8f10c7348bfa8ccf5051b
- SHA512 3ef72791c24e2f9163b91517d24431aaea37dfbad9bd04282aef11c5b513ee8eb5d807119e1c5638dccc90de44edeba38cfe00ad04bce6b675e9d84de8d50016
- SSDEEP 192:U9xShWmSijpSAKS/SuzjLsJcTlhpy5EtLNv5k:RhWXS/VLxTvpPtZ2
- TLSH T14112A03E1BC6110C7A3A42C5EDDCDEDD1B1B4559CDBECEF8A01A12D4247277A761A0D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 1a210a5a8706ae83dcb2a7f2dc540f668c5a4a93102a0db0e15a23dd38de4628
- MD5 7361c50c31b19c7125733f1a645f7f9b
- SHA1 16948bc7773c45ad96554e0e477538ab5d8e37fa
- SHA512 3f52a7fafafc466e13afd459527b340e05166ef820171e0c244af8e4cf6925391650ef8abf06d9d3644da14a91adc2f85d00faa8aad6e4fd2475c4dff46742c2
- SSDEEP 192:s3idaALxs1hocGcFE3f+bVwXdAjz1HxUVnNvfYDXcAktJ:cjALncUlXdA92HvfYzcT
- TLSH T1BB12AFB83418AD84A2BFA052ACDE3C4B5435FBC2E52D718DDD7642C5A691BD40162BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 89a4b6538310cc974cede4e19207d2748bb7ca3278cc42578aca6c25baa14c94
- MD5 af3143695dae12dd361914603692ac6f
- SHA1 f4e2a1ef02fffabba4f264eb1ab87ecdade9dba0
- SHA512 c70fabbe1dc73b89f8ab461c9d68005c56af0117043aadbed38e926ec44ec1a771f6417948e733b23b451997989469e6102fa3ca2f253ce6a1412398b6c7ad5d
- SSDEEP 192:2nRv83cn1hgnSPJdq11/fJ7i91hoEeIMSgAhuq4bcROLehkyy:QUugnSG1/fJO3hf5RxxXkyy
- TLSH T1A622BFDDF321F9B21C0C7040ED8F0308EAB2ABE8312E359DB6561E58A8C3F90E445D62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 c3e07caa714a30ef3706edb30deb927ab87792d7b3c20c2346d24c350aee69b0
- MD5 cbe5cb1c76c2438f5ef31e2ec130cbe3
- SHA1 a3350339ccb6e594ce3966d432356401ae4fa455
- SHA512 b2a1f08b9457ab52a790f838ef73aa32155494f953ad66e90cb94d01d19909e2130887d3daa723b838980df492dda8f97ec07a59e8b96c6af65839defdf07cac
- SSDEEP 192:X5EA/tU8uyvjTGBUZ7C3yZC2VkgJ7Ri3Jm/n5a4RFBkjcAM9hl7k:X5RtU0jiyZIArVkgJFiCntDBGDM9H7k
- TLSH T1C522BFE1DC482ABA66454119913CD87BF50829A534DD7D2580C268B8A0CB0756FAEFF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 779bfb82cf98caefce540b55a19ea0e4fa6124783375a9b8b74c198705930d58
- MD5 9642c3bc12a33a7699e46cac27b1b449
- SHA1 a00a0f16b2416853a33592538ddcb706c574e4f1
- SHA512 f45c3c10c9389d18848eca6efd1c27ad51e96cd5ce3af422c23797963a7301364fd7d1a8c1916dba5d9804482948a1e039e77ee2e2decf05129d69d1f58f5a00
- SSDEEP 384:mIHuQmF2yLdUP9a/KngPjh6bG2loOH31uD:5O1FXdUFaSgPnWow31w
- TLSH T15F52D1BC4242325FDAA857FC771AC305BDC514161F259358893871FABE20D564FB8B72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 9KB
- SHA256 1c62f5b1d5c23ad2d9f893c352b3bda90155e5aaade3a32b378d180c27e3cebc
- MD5 420778ffdeabbc3056bf9929ff901ab8
- SHA1 50b12f46834f5866489066289d638ebbc8367791
- SHA512 9fbe090f6f998e7d3a4af77ffbfc361f6b7d862d14786dd63fb48ce4206207ac8b776925990fa0358fbaaf4b6e4cada1011200ebca8b7021e5636c97f5600537
- SSDEEP 192:flTkml9PoNlZyH3TDScDFIOE5HrSGAJz+eFShZz843U/HzC6l/wexSX:dT5tylZ23KeDKrSGAJSGS3d3mHXI
- TLSH T16922C0E18A0EADA77D6F0D6388B3C5DB1707785D00CC09C165015EA239C81F16CE576A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 21d816cc991ff92e5a0587c31a6112c73fa1c488a435ad808e56b011cec2818a
- MD5 7f4b0fb5a86517110ae9d543ed22a2b0
- SHA1 baedc5266a633aa6161ecf00478ed155b78bc1d5
- SHA512 c25c6b893a0bada33cf9afb0d7cd4228161b259ca5e704639717a87cf4a4814b74c8cf00d1bfa64daa31c1fe81d9bb3161fed8dde5540de6b60bba546a6039aa
- SSDEEP 384:elYAuKKJOm1vQCKro4T/GYLezfGNjJj22mZfiovE3VDGj139iJ1gH27IyO0Cy/Fn:CuKKJOmq1GYLezfCsZS3hGj13MgW0nKh
- TLSH T19992E12D7A0DE1BA92CEF687F6406FB899A631CBB52AD5103176200D3DD5901ACDA0F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 13KB
- SHA256 04a96bc5e1650f9a7a5612162ca8b659694ac6d742cd8aafd0523f17300d67ef
- MD5 a7a65023509f066ef7df8c17505f7569
- SHA1 3c1850c1bbe41a05ff6c022adf04bdf53ff8eb1d
- SHA512 f9dc505020c2603f6d2fe8a18892b5ec41559f4fbfee8d75286c8626a0a83b43bb8341b38daeb1b07b94422b429ac9e998d93b677a2d033113901d1a42d21b90
- SSDEEP 192:In4TpH51abt38E+XZAf9HzIp8fUU/h0gaN9rZzUwNoKJPWlKjHglZZF4GybvlyWH:vKtHFk+U8huVz7D1WMTglZQssuU
- TLSH T12552CFD338DB97CAFBA0DABC5BA02666C1CA8034C912D5E010513E456D9B4BE3FCB991
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 15KB
- SHA256 81d30708fe6d46ed347470b8623f312afd818a2214f62e7af863b9d17f7eb9e2
- MD5 646d85216cd3395831b761af10b94916
- SHA1 8ab34d0a8a30fa7945a2203956e2fd43b7df325e
- SHA512 9bf16e4d2171df20ecccbd472a510f10e1e8975a803c216b5e583d4418ecaa581cbec6a917b3c455f547426b966261540219aedcbd067929fd22b51e7bf0a149
- SSDEEP 192:wB9Ln6ETFMXQkk+MyIVDJkS4oyDJh4BY4WFcAl3fRR0kkKwF8KVo+K8kbGy09s+R:wB1TT//zkmyDJh4Mf0tUAoTqyUZz2cx
- TLSH T18172D0B60C091287EF07F8315F9374905DAC5EE1BE89DBDB213AD86BFC39189A001C45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 19KB
- SHA256 26d81753af31a72d18b6a666f43b5512b550a681c5c3760d8806dd146cf65472
- MD5 2dfaf4ab27f19634b6ff54f38a64a75d
- SHA1 7023044a057466e83b814a1562d595fc1bfb54d5
- SHA512 8fa49a37b660ef6b32605d2024bb40c802de2ad86fa3d31c250094711780b083caee036a28c3eb529fc4f28e4636a3c4892b0ade7cf26f7ea5f9eaf52e0ff312
- SSDEEP 384:Hjl+CQVchYI/zZ4h5GZckIa8i6szbPRrnqrQrJv:D06YaK0ZZ0szbPRb8Q9
- TLSH T1F392D1C08DE5C0DAE462F09123B9DAD534AD7048506DD6C7A37EEC652FE143F1571C4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 20KB
- SHA256 58f4b4031f7238c49ad9857c6c71ce98f47856676d2fc32c5d68cd171a35e5d8
- MD5 360aa40c3d71de2c89a16b7ecfc6f14a
- SHA1 360cd9bfa453d1f62ebfba74978eed33812cc3e2
- SHA512 9c789bab52d4affed598bc27a693850022f1159cb95523e8c6e7717e1d38c72c9d92fb66c6eeb8b85f0edcbe9c18e631e1b8275e0b8329954dbde3e976f66c91
- SSDEEP 384:/I1V1N+XBq4bdaM7qtjHVzOVJJGHKRidBfvgfdMGMlMj8SbYrM:/QN+XBqMIM7qtj1zOVWKQafBeM
- TLSH T10392E1BDDBA7236D869573415B9C9A72427C4442090BF104CB63ED862BBE8EC285F196
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 11KB
- SHA256 3fa4ff7b8f006243fd9bf9556562a71e658e6b5f5071dda5f71c9031f812695c
- MD5 3094516c727ce5d1e8e792d0d70d925c
- SHA1 17791ac52eb0fc5e763638ae549435f30c606efd
- SHA512 8aa3515d0404e5634cdf64ad0bd5f78903357af1b9a8257114efffb2e6c845cefb8bd155404d387c46859db75c424b10203d347a271d4dfca3d3bd1337ccd8f7
- SSDEEP 192:4DXUhbxPViBtpZ+NQNruElgb2S9j4Svq4R+IGGXWKMYbLEApfeRakGotUy:KEh1I0m5uElgbeSinIGGXWKMYApUy
- TLSH T1BD42C01A4351432C43689A1ABE16B723C11747299D411DE4C7C793975D8D7744BE4BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
- Size 12KB
- SHA256 86058b66e6e07973e3707cf4f1054714e2a5246faa80f6aefd9e5b33a2b2a3c4
- MD5 715f7a2f418e1b0a7ecc40d7c753d948
- SHA1 e315f1db12c2b7513c6373a5550d1400febdd056
- SHA512 19e892a822579c141b855d99c65d00ba964f384ff7d2524745f7760c58f29b4e82dcbd67d5729ab66a97d6b1958baf899e32c3cff2dfb69bfe8c43075d680a71
- SSDEEP 192:c1zs46lseiFRybb0LLtFF2/ZRFqQDdSY7sK3K2RwOmoiG7luUpK4KIcc77f26gQ/:IzciFEbbAZf2/FqQxnFi3I9VpprZ4bI
- TLSH T13042C029C4BF2A157901616843F8B3F2582CA4313C68D1E52DD582A27256AB9F0BB223
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 637B
- SHA256 f03a5b054712e97888c54dc1b4bb46dea09284c01d4692566a7a3f3b5eae1ee7
- MD5 285ade04b27dc7e6a26a374cbbf733f8
- SHA1 04419ec93d6aa79b7341b8cd271f818064bff987
- SHA512 fa5200450677079b312cb413cca9d0a566d01fef604192d7c309dbe18a2ecfd1f001fd2f2102db456f5bfa9f9713eadfbff6836728ad4ae944ac13488599fa5d
- TLSH T1B6F023AA1001B5154F43206CB976BA274ED0BA500A49A3A4C53B791C8109E5A71D2320
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 845B
- SHA256 a6188577bb17633f7ed6aa7e3d0dedb32cf0b58361282b09992bc0934deda5a6
- MD5 7165fc2e2847edf56cd146556cf8edab
- SHA1 325dde84f4509d407797da99980da8bfeaf82558
- SHA512 72113f5623a5c6fa7cea9269c5a27eb1edb7f46b5f9ac9621aa89859510402e0fdd72797028017eb5c9fa8cfe1ab0b64349f47c250178594ada453fc258a9622
- TLSH T1A50186794268171C0750449B3B3BBC22F89E8408566CBCA8B69CCC9D2E409AD33D5EDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 797B
- SHA256 e2d12490d40f78c952e761f141ee8db5b321e434a28ce1b0e6c02fd0d5344671
- MD5 dcb796384606735c630420b3ea045e6c
- SHA1 1f66bda0d22aaff5c09f41299f1725213e2aa56a
- SHA512 53771a93b3f088857dc848d2cc8d96cddea52bcd844bfcf71dc19a14b33f96a15a4fb8975d7898f061c1756cefbd00596451e313497b073a8f3d99d268f68f06
- TLSH T1C901C5313A9ED70DE652B21A4A0D301C00700228AD2AF7D1B628BAB4187D273AA31372
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 493B
- SHA256 5a9658a45f8db5dc97e7ae3d51aaa9765ae34a4ed1f22fff0e49f23eb91c96b8
- MD5 16ed0b9bb9ef30c6739e1012f6591267
- SHA1 1cc0de6b6b778efa49037a64dd964be6499b2b77
- SHA512 ccf891a0b2296c321cbc87f71634cba39342c9c4f0298cc947f2c04e76418aaa9468902ae078196c136c4f49850301505d7f80821208b64e1691078a538dc31d
- TLSH T144F00EA2A882862E2143410DCB6A922DA28ED4AFA4A5108C006D27D12BB30D5D17E294
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 621B
- SHA256 24ea5b4186f4d00f7f551d62d610c588cda8d5de75061457d5f8f78f1cb6acaf
- MD5 d8af9c01afc06b89a1cf97dc0a67dc60
- SHA1 a6ce9e8c1ec8affde3035717296e4adff32a19a8
- SHA512 f7de42cfbf4cacb94143bb229136c5ca63417504512374033543ac6fec703c3497b0fa384059b46297036d4467d0af8ec7fe50cd553930f8af58437e8ee46439
- TLSH T1A9F062E46F04864013300133EA4A655B5E21617E230A3E648083F606152AE80CC30F36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 637B
- SHA256 4602c2c32a64248c85f1201828fed4214008b80db6c6bf19176379d27176d456
- MD5 d071970a91594d050660374c2d66fdd4
- SHA1 abcb83a9eddda970eefd6edfe8907cc6bc5ac2ee
- SHA512 367614dce919390d25290aaca93134d630fc3bdce6fccd1f64f40316aa4a8a23356442b818aa6b8061a2f09e4c79dc105a52725091ad053e86ba813c3ee6624e
- TLSH T151F062DA1C3F518FE79CE80D2E03886142A090A4F3F1237EC9AB844339DBCE25336529
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
- Size 637B
- SHA256 3bb6061339cd34de688355365f10cd44cf10e24f632d0163a7275b1695e57bab
- MD5 9f5af8f693b37d15be8fdb2106838cc4
- SHA1 4776d3d3ef454dc7f7bac90583ae11170e7114af
- SHA512 266f3e1c591b0fef4e006439fa8853f7e75a6c919246a11cedb65d3b72b17996ae366ddcf6590faa19ecfc3fe8db49868fb35c184082e51cba37012452f77c33
- TLSH T166F0681407C793781C71F7CF9472CB7A18846C74965B23538669756290E10D026F11B3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\df7b8847-f1e7-4c41-baac-c0b03603ac57.tmp
- Size 203B
- SHA256 5005d262a6be10817e594573e2770488d37a79866dcf5afa66d3351a888a2c80
- MD5 eac89f069d9b2acfa1f9d4ab8988c769
- SHA1 78b81ca3845d2bcbcaeab77d0c7db94b987f5d31
- SHA512 b5effe12e7506c2886b63499fff42637a7d82e0544299734b647343140eb24e905b1aa25337cf0b3f1249eec50d421f4da4aa3972a7b9516f8398554b2a55701
- TLSH T1A4D022280F62AA1DF0D4A8B4A3B83FB328180C32150C4932A07C0133422C2A0039A735
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\e1ad974d-e368-4e0c-b055-a518d06dda9a.tmp
- Size 371B
- SHA256 a4fbae74c5910df260aae4a4b71624c00e5af9d1b6d99e19113819169d049848
- MD5 bcd58be4e13f33445db18880b3a1772c
- SHA1 f5c0cc0e24d7e0d2343b1a025d57fdf91e1a2ae3
- SHA512 fd4840ea67ec0a882c84d85052b3b5e4cfed989d28b1d9d5a72e48d87861a13572070e868ef95d28b4f27ae42890cde405e3078b098c81f6ed9c874d5e27812f
- TLSH T18FE06845F445882AE99CBBB232987B23A25D0AC499D093A55CCF205C420A80C4E2B210
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ee60c5af-34e6-4c63-8706-009cc95cde98.tmp
- Size 171B
- SHA256 075d75f322296a71cd7367154dcc3fe5bd5653a9a754de89f5ad756697f04ea8
- MD5 d46cbdb4519f01f2db6bd3ba9c294b44
- SHA1 9adde7cfa6e446e517ef909c9e532cbcb74fdb1f
- SHA512 6c729c9f983187ea0bc40b715baa04c2d62b1af40ed317415beeae122ca5591870709b34b856f3a40eec9e56f713558f71b5713b8dd2acdb2f9de6a66e77f24a
- TLSH T152C080A1F4603ADB7C545BF8E43576533559000505055158C4B9649E013F57CE69F725
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\fe11407e-31b1-498c-b224-573933a54bc7.tmp
- Size 203B
- SHA256 953fd62d5a937efb495d352c9246946dcd1a129d6df3c30cbce8e381af9e135d
- MD5 6db07971a3d85245d9660b1625370694
- SHA1 fb763f379bd5e000bcf9d5d0d533bd935a394631
- SHA512 2f2ae62d06599adfc999ce5485d92a4b61524802976e1a4bd7100048247a3b58df0b974e0b9751f06f3d50d1f0bc5eff99d93c4e007ba079eda3f94ae71156f0
- TLSH T1C7D022107AD25029B0F4B5E096703BAB0C2C8D3304026430E02F0223827C3CE232EB36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
- Size 1KB
- SHA256 e8c37f9615054d6abd247bc197d5c9e44a3d3d451d38efe60108bf82c7bb6da5
- MD5 4a92fac5b0fe78df9879064e0124afbd
- SHA1 a9fb51f2e2a713b8c3873a646fabe8eb4e23760f
- SHA512 1068294d1a71b5d5c8e0c2903b5cbf1f3a244f2ecdcde80fea0c68e976dc3ca89176e4c310d8316410f70fe770eb992a3adaeee5bc4b768064b0fb11077ad9c8
- TLSH T1F4216521DD4138B66FA9C67EB1F036270FBDCCD7621104AA31DA504E06ECB74910B62F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
- Size 2KB
- SHA256 a074f8df24eb9ae07f648b3d9ce24158355113faaf36cf344b7a39ed92fecb39
- MD5 88283809f1f1ead7dd282ab6930da847
- SHA1 6c1adebd8689d094d7d06798277d7f902972bb9e
- SHA512 46c016b4cb97526389d3ef626ee836bd1edb75a66ea111dd770f09d831a4059fac12afaf413ce9b07fed2f627d716a2b8a1bc5be26614325c69e69a9e57ea6be
- TLSH T1F3511F119C412975EFA6C73E71F13F260F7DC9A36211149E32EE504E19BEB66811B21B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
- Size 265B
- SHA256 18cf02e5001a5516975a6569c757e3487850ae942828a0631f54c3631d0028ef
- MD5 cb177e000cb921d2478f455f24c2c6cd
- SHA1 f0dd56b6e99987cd1bf7d71b2565422d2b6b6e43
- SHA512 d902091ca92d49a249ce23edb5752cad2c311392cf723db9f5109e6904daf0ffe12adff4cbc9ab76b8a0d86e5ce07cb0c1e8d48b4535ddfc447ce8eefbab2fc6
- TLSH T10DD0959014079165F5D4FAF44A743F5F053D45330C056474505D133642FC2AC0315F62
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 bcce659a9f3b500b423ca69f95dffda5f8ef673ab32a31871340e942d34752cc
- MD5 c509e1de05410e6c497d39b6259183d4
- SHA1 d48196f98e6e2863f4367439330fafa0a904d001
- SHA512 581ba4ab0c2d62361662006582f1f9eb26d68791a79672fea5b708bd9e8f9b0cfed5111f51d4c9d203b657141adb2060148c331c93e0e4233dc088aadb1918ff
- TLSH T1BF616611EC013975AF9AC77FB2F13F220F7DC9936211659A31DE004E19BDA6A8217217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 581afe0d4ddffce07e3afaf0f563c716526f86ea21d3907e74efbe5a14085b10
- MD5 794cdca4feaaca0060c92455c1ff8716
- SHA1 a18d110f084c1cf31ca419bd6cf3270ed3daa032
- SHA512 94bf4a089deb8f09e10a75a562edcb30a7c2b6b925db5598a88a855e297d9f6293eb5deed782c22265d509abb7bb3948e23bfb10bb5b7a60727ae197658805c1
- TLSH T11A614311EC013975AF9AC77FB2F13F220F7CC9936221659935EE004E19BDA6A821B617
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 fc7d1bc545f8052cd2802ccad1800a4842d294965c3e7c9d0033b24b65bb7a1f
- MD5 32b6f7bb25020fcc89b3e7177ef6035b
- SHA1 b9d6679ba3c788ca30b3c0145d376f07276d32d1
- SHA512 9b1db5c5f8d858a24a1081dcc1f32ac7893c648eeab30a340da998e89d44662de205a5ac982126c93a01c00f617a011e09239b9d97ca20c813eb2b808f239340
- TLSH T1C3614311EC013D75AF9AC77FB2F13F224F7CC993622165A931EE004E19BDA6A8217617
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 0197535fbfccfeb2c87814904e66d5b61812fa75d9e304d6dabc7a739310eb4f
- MD5 5a566046f55086726c8b438d44516165
- SHA1 e15721a0758a79dd93d455f8e23a97739ccbde10
- SHA512 81c37d17c7257d9a79fadb1e233d0413780d5e50625a437abb23ffb7d152bd58d0ebb13b3e56af8d360ea879ecb9e832511ae733df8c27df369c3c41c560376a
- TLSH T1F4615211EC013975AF9AC77FB2F13F220F7C8893212165AA31DE404E19BDB6A8207617
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 1KB
- SHA256 2f6e8fb859b26430eb28b20e8926b59e3b1349453956c46c26fc8cc446c03a6c
- MD5 d92dd54c35950e036528b23529cf28a2
- SHA1 a86211f4d4eb4060bd01f4ceb35c7e9863b2e68a
- SHA512 e34aa5e56cc7d8c221a04c6bca1e791c5d41a5243223515b2630b0ace6eccc130c365c806362951f9856d334bf8a5e1fbe6e8f4bf84aded0d27061c1d333e40c
- TLSH T159315551FD4178B56FEEC77E71F03A230BBDCDC2621045AA35DE504E06ADB2C810B626
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 05d999095d51993c3e369ccb347edfad33ab874a88d7079571dfd1a222033a48
- MD5 eb4368dc089347d67f07057b09ec6f41
- SHA1 b33f149f5517c724b0306ca008cffab64808a79a
- SHA512 1a0ced68b318ad07356f027e9638a22efd772b2e259a077c816eb009e889d8cc329faccd399b58616527fa04cc3c10f3d85d2a9c22d69b4fbe496d727fb54dec
- TLSH T10E618511EC013D75AF9ACB7FB2F13F220F7DC9936211259A31DE004E19BDA6A821B217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 50918bd48ec21be6c348e38ff39ba6b060429d52956ef2b30ab0b60ec3cf354e
- MD5 83d88074d13688308cdd8e032626b8e0
- SHA1 2ccc569c3300461dcb42297d40745f3cb6a56ec7
- SHA512 7ac0dcbcfc6258798ff4c429c287cd7164bb40a054b5b4592cbc1b288fa9abcc9dcd23db634bc8e0a5e399435b99793add4c8e01e99aff648027040d8814a982
- TLSH T19E615311EC013975AF9AC77FB2F13F260F7CC9936211659A31DE404E19BDA6A821B217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 3KB
- SHA256 59e923caa2fdfd1c1fe289fc0e4e93467c50cf934d107f74496cf1cf766a15f7
- MD5 46a437eb599bc53b6312313ce40356e8
- SHA1 6a788b044fd2e900badba11086ffac356ebe4d8b
- SHA512 cf0e22f220789774e979f1da84d1014095c3265c3d116763ae9d3ce7bbad5346063b2aabaa5e2707ba987a9e1e8f44b7a128c8d0ca160e979b852cabe4d59167
- TLSH T133517411EC013975AF9AC77FB2F13F220F7DC9936211659A35DF004E19BDA69821B213
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 531B
- SHA256 607413a810ad2862141eaf649cc20e78aa84c15a4a8040a6a72551f244a03c90
- MD5 a7cfa032af78079e9fc44fd5421311aa
- SHA1 3e1ba0c69e614633719addfda4712a28213c565c
- SHA512 58d526e1c3a27f90360a6e231d34603a2d61e4e181001d4865026c9917d7c34450adc3f4bd7a4c5d1327b0232c3962d0c4e5caee83a57781b28f765f45e0b3bd
- TLSH T10CF0C941B809A8B8EAECBBB673683F7343BC0A8044906B71288E202E42AC51C070A731
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 2KB
- SHA256 2ac4b5718ec67f74b66ac867a8fd641361015d25ac19e3c89668be35b8bb1509
- MD5 9a5d5009cd8cb1142bbbe9111a34280a
- SHA1 a907f19c1e282c8ae4d41737bf7c9dacc0b66fb1
- SHA512 cc70af4e76b5f33ef57bf02a89ec870ebd45f25614896c4295ed9d955a6f212fbd42950158f7f75b09b00402fcc8737e9a569abc1fd6df2f38e2ed30eee77d89
- TLSH T1B6515211EC412875EFAAC77F71F03F220F7DC9E36210149A32DE104E19BDA6A801B217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
- Size 469B
- SHA256 fa99a10bbe3aa07fc0667d3b4bc7228a7ef9c71bc930f4ff7be719d60be91572
- MD5 806408ab84a990d071a299c80fc7df26
- SHA1 4b534a99dcb5885ef034a83e6350d2fe08813194
- SHA512 a2c75e63a5a68ca1c7c0be3e5f8ac7f5ea6b0b40668697057ab52f3be1355cda24eece10640d61a8fffa8ae5cc5e3049cbbd4c55d621b19752c30977f1e18a3b
- TLSH T166F0DC42F94458B8E5ECBBF632B83F23426D0DD049509BB218DE30AD422C60D031B720
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 e7b0e37246746503228b7e31de4794a5abeecb6617f66f3782c312b031af767b
- MD5 7aef18d32f63648d0e89634e58b150fb
- SHA1 5e8b7697b14b911217fca1d0ec09c8afaf350cab
- SHA512 108d859bd57ec4fc6144e9bccddc1b3b4f5d8a6fcdcc8c8eccd2f0f2bff9956ecef90a5ee11bb68de1ca684b80a29c34d66c9b6d37e3bad97eebf3f2641ce171
- TLSH T14F2111F3A91083285E6DCBA0BF747B9ED67344CEB49001DBF46CE65C1298BBF1815290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 f98548bbc912b58da2b628d32ce7edb903788f0cc6b06afb0959037d4077fd24
- MD5 4825ba041a87d883253bc6ca4e9e5243
- SHA1 a07e3dafdca66e367b74a67df847fb35c2914a30
- SHA512 1fdb300da93fd0f133e6b9c4f15d5cee50f4196d6bab485ad59482ddf0d7f94ea437e5906b10e188c5e2bef7cfe2e6db5f5d58a09acd567ed7795093c4fbd9b8
- TLSH T1FC210FF3A820832C1E7DC7A1BF797A9DEAB344CAB49001CBF468E18D21987BE0811250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 03e8f707520f792d1ff32ac2478c1c9df764c460eb426f7016ad2054d9b2114a
- MD5 f8fc8bfe7b44332425b624dd581a6dcd
- SHA1 6326e7b9958c51d899efc1979aa9f1e92a890224
- SHA512 da45e5e4bde5d4fe41214e87c08376afe286da2d2c33e8cb8b3dc3c8f41629ad2d1e630a81554be57ece92ac7fe1eac06595f67990562cc86b42a2563ac35a08
- TLSH T1382111E3A82083292E6DCBA4FF747B9EDA7344CFB49001DBF468E25C11997BF0851250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 39a96583c0deaecde622475602369e5f9ebc8aa12632f63bb45209dca7f7a01f
- MD5 41b4f8540518c02bb9217b4d1db4b486
- SHA1 0fecf11976ffc41e2daa52abce95d905f8d046ec
- SHA512 cdf05cd9e47425657d3d1f07c72b06ec4c2925c95db35702af984bf8541ba378ccf510cd0112463a84485488ccb7861ed202ff631dc0b5acab909e858253a972
- TLSH T1062102F3AC1093285E7DCBA4BB787A9DEAB344CAB49001DAF058E14D11997BF0821250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 25604488246896bc1f64689c254a36f80c2add5ecc0aa005183896e9fda7ac34
- MD5 d0fcace2eb32e217d1ffee590e30a0d9
- SHA1 f8538ecde9fb70b68708ab7613c1f9506ec92e1d
- SHA512 ee9758f07a53acd228086cf73ebb303320abc98078bc66a2c8af50bea5cff8d207dea0abd9bb2a36a0dde7ad93eae18d2176e3229b6f476ce73ab741e0af2a1b
- TLSH T1682111F3BC2093281E7DC7A1BF747A9EDAB744CAB49001CBF468E25C11997BF1811294
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 b7dd8aa94ac918650e0a38409d5364ac24ed750a3f5299cea3a56a299b5e8331
- MD5 28dd0e70477b1eddd0220d6aae4fa9a8
- SHA1 b9b310d652cc6dfa8e879ade3bde1973efc43c74
- SHA512 6399e407a45d905d40b98590497ae4fced997a4452e02595e2ab856c49c1e16aadfe02af8ccd38b6e6337b941ba964e37dad51b0ac99c5d48e06a8da4c09ae63
- TLSH T1052111F3A82083285E6DCBA5FF757B9EDA7384CAB45000CBF468E18C21997BF0855290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 823B
- SHA256 1567677796ae536d56d93777776dd53b13393dc28fcd5e37a58a83d759b3ef9e
- MD5 717e84c77c2f233dfa47b5db05cf05b1
- SHA1 c79bff49b38d721aada1fe12d97c77d21c583044
- SHA512 2f6e38c7d7c577c2df2fa7d5feebd55a4841560fdc8b192f25fcfa3ec145ffa52e242301976445a061f38fe74591b230436683a55f561e4bd2d00c0c29033cf4
- TLSH T10401CEFB796043542D0D8BB6FE3D7A9DDA3748C9B49040DEB898D08C015E3AD0885391
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 918B
- SHA256 35834f2f690e489e1f49badbd51839431567d36ca7ac3cacdadd9f1be4a9b127
- MD5 b7c9e5e4475b570a9ed684e825c878f9
- SHA1 e78683982a0eaa7398ed18cb43c2632e68955313
- SHA512 eac1ba8fb63f2e1b5df8b79c2224bf7bb00c97ef1dd5e524e49fca0a700944803e93d0472d18462ec683bfbdd20deaca5f810a1b24946d2a970a75ededf39a03
- TLSH T19E11DCEB782583542D1D8BA6FE3E7A9CD63388C9B49100DFB858958C016D2BE0845390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 a2db7edeb2e3f5717f08c7d25e126b30fe1a336688b74997dca6b156631da5a0
- MD5 45b028e34342ee891b7f3dfd2389feb4
- SHA1 4e112fd975051a8572dc8e854729d1d98fb47e32
- SHA512 fd3869d7f060784df4e37536de2965b93ed8eeb7e3321c45080cf0f5bb500c042cf6f6ae63f7e479a568c6b130a3a578a220dc36a958b231e7dcf105caf98b2a
- TLSH T15F11D0FB682083241E1D8BA7FF39769CD73388C6B55101CFE968E25C115D3BE1845380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 8b7d9f3609e2d2ea1b7085828170fe9fedff3a2b68ec8cea1c12aec104c4337d
- MD5 2feafafa8843de56a6c7e68b6b1b156b
- SHA1 56e367b0f38853afc7398ebbe9257b827b0c94fe
- SHA512 2472a8918ef98021e04abf2086f1e615f4a9b9531b6d3c43632b2b15ffb36dcb31042e257436a82d10eb35632e144007d94964f4400392add684e8383d9a2ad0
- TLSH T15F21F1FA682083281E1DC7A6FF393A9DEB7388C6B56011DFE859E18C119D3BE1854380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 08da478d798affcb9d566631b8eacf46a44dd61faf7fb8f2c3795dd706bd1b4b
- MD5 711e35a03226d5ed92d7995323dc3368
- SHA1 b77aaf9efe17437104d32462efffe1511faf917c
- SHA512 5154e03ad329b9c738ad8efa4331d9334dbd9e80cd25381f14f84c00bb1428482986e49c997837bdeaf1c7f7bbf93af13f97dc171e389d86b2cfa3db40807430
- TLSH T1BD210FF6AC2083281E2C87A6FF393A9DEA7348C9B59010DEB459E15C215C3BE0855380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 f582ebd56222cbe6224f2b26b68592db8e7c5fb997ef74af16c57d705492dbe4
- MD5 f7c4273a84d91880e06e8b7b2cc71fa6
- SHA1 c9e935013647502eb695a184b22f4f8c84f39443
- SHA512 87c809b52eb0e43edbe3352e5b980243cd07498cffd45fe906f5d20d7173d7813e2e2a200fd68eee07cd43b8805b8b42bc7bbe43f5a09a4f8bcca9f13dcdaf54
- TLSH T15421D2F67C2483281E2DC7A5BF39399EEA7388C5B59011DAB458D15D21583BE1864394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 2194db7d3a219d9255da8dec65342ede13517bcf4f817c9bc60e06469b05da04
- MD5 06260fa252c9d36cd0e7103e8ecd9051
- SHA1 c6df61b9c1b853ad664372b7e3cb6c1afa6d0244
- SHA512 4a60c5056fea5d0ac57468560060df3bbc2f2daf8ce8b0c98f511cfaf4313b3e16cfbbea2418f669ab0af93367a67c5f7fde345b6c8a0ccefb4e6db3c1fff575
- TLSH T1E221D2F66C2483241E2DC7A5BB393A9DFAB344C5B55011DAE459D14C21583BE1865390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 d05b64e1039f4f6d784ce87b9465ec7b0bf8ac063d660bf8ac7673447661c300
- MD5 b70823bef15609462e6bbcc2047cf3d3
- SHA1 9fc36547868bdeda71df808c3ab538a1d9f64575
- SHA512 18d4b449ae720825ce962ae29bf4684fe3607f816f7b25799372b42870ea160f5ac139d65436c335e23cadd650f7c53c3a28effe43dc51befdf036d0f1d4cb39
- TLSH T16D21DFF27C2483381E2DC7A5BF3D3A9EFAB344C9B5A011DBE459E14D21983BE1865380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 0e39da764bdf3f723c1b63a532fdefa5f01a51b524f3b3a3f8d525fee0b5535e
- MD5 17a37b1e6d34b4baf6cc5b21f77d9b2c
- SHA1 3156401f0e65c5050fe3456fd97cd4fd46ff6102
- SHA512 87432167b75f76fb5bc6532efde51ae7b0ba5822bd773cb2c1a5b10f40cb9704b5f78bc371863c075f2f042e433a6e15f3e162c71d6e3df82a538383172bc90b
- TLSH T17F2133F36C2083285E6DCBE4BF747ADEDA7344CAB59011CBF468E14C11987BF1851290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 4b87658e047d9434f2405080e986894590ef5f936448b4de5f825a9c88844c9b
- MD5 2d51cbd126a30e92664eec8d8d16f4dc
- SHA1 696119762e95ba8224d035eef75cad9e23d5a81a
- SHA512 28f14dd79a3df28d4783145a045ea7478234362668be0c9036a49642696619e7f56caa74bf497fa58110cd9fa1d9ef53c9ab0a6138ce855c39d09cea0f337e11
- TLSH T11B21DFFAAC2093281E1DC7A6FF393A9ED6738CC9B5A011DFE558E15C11593BE1855380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 8c2a87d09668d37d2e5fb960502b14f3f4a47065a83f8cd4f0b429df82c15822
- MD5 3384f25bb5bae827f36cce3bf30d77b6
- SHA1 8cd7aa1b4219a64c070fcc56a6f05d128d829b11
- SHA512 248e931b6d7a055115ecc95bfba7164f3c2152a2ceb0fd1ff2402ea7b93089f903a32a617083e82a4cc5533ceb53a8e71d209fd9c16c645a84aa953ffd62fe45
- TLSH T11C21F4F7BC2483281E2DC796FF393A9EE67348C9B55011DFE459D14C11993BE1860380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 c81ad5ceeef96b577297039b576ef2b1cbc479efa3a80a026d3d06b706981dc8
- MD5 9abcef1b3cb31443063e19e9629a7204
- SHA1 176f70907043376546a2994c05d094b8058ea113
- SHA512 629814173723c1224a2f654e0a30862b1b1073b8983b1acf1db662d3c307b3b2ce3f57988d6e62c318605d32d31adfaf8972964f64d3bbc365949b51687133c1
- TLSH T1B021DFF66C2483281E2DC7A5FF393A9EEA7388C9B59011DBA459E18C21983BE1854380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 294bc9a52d60785cb5564f82c4f6987c668b42e97dc9753d074a2a72778c91c7
- MD5 76b99d218199df29ee7a1ea4f427c3cb
- SHA1 f4bf6e4d703f9b4c742086794479eb0cee831c20
- SHA512 0c772ca68af5da590a8a569901fb6f963555f88534acfb811beb761e4988c3f4f0bd7222023051eeb2c2a2d8818a6d0a881756e67778590490cc263f8458048c
- TLSH T1202111E3782083181E2DCBA5FF747B9ED67344CEB49001DBF068E14C1199BBF0841290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 07e218d13993c3081978eb5b6b3846f0d393279c82c99d4ed47ca65439cd3f39
- MD5 2a57c75e3e5a5698153efc1f9e4e83e3
- SHA1 4e3a95ded76dd862f1c92367db6cc99bb7f42f6b
- SHA512 0cd34d8ad28b43d13d7d0d2110341eed132ba89392dab6509112e1c3f84df9c24791cbe64d68c19868c7a4f066e2fbf276edaf7402c7fc1f5f8b3fdba13c85a4
- TLSH T1D721EEFB782083241E1D8BA6FF393A9DDA7388C5B55040CFE958E18C129E3BE0841390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 722B
- SHA256 c5d598d1618bb2f7bf8fb56dda65afb0814f4e46d811f8ef113d3e4a6d6c5d0d
- MD5 3aab1c5d09cbab3471049b08ddc17d7b
- SHA1 bcf659d1ffc91581a3be18bf0b62a426126ff80c
- SHA512 e9ca7d416282ec461ec933aad902db67741924087feac14c313f5ec4a1572e7cc3d857e8d26e54cd3ea19fa9743852a2da99509a3305f7a17e833ed4d2f4c5c4
- TLSH T13101DCFB641003482D0D8FBAFE383BACEB334885B49050EAB598D04C015E3BD0889390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1015B
- SHA256 6ffce000d4c6e0e2986c7c6dc16e0aa59790ec349d16f3ed01c85db993804b24
- MD5 31904bb26ddfb2f60cebd0af48b2a529
- SHA1 18939ba3ef2578df51c2321fe3a7993d2100d36f
- SHA512 1fb17b2753ca6badd497f98ae92755c7c9ba5c4b8f64072fc568a7af4edf049033cd439570ae364a4b8e71987d1ce967e22b01df9620bddfe3cec3c9d0e3a4d3
- TLSH T16311AFFB692093641D1DCBA6FE393A9CD63388C5B59001DEF918A55C115D3FE1845394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 626B
- SHA256 60cb3b1fba68a555cf3bd613c1cea4fec78d2303a89df77822d1b69feb423a1f
- MD5 3963d01c29ca0f0799499378a8d884d3
- SHA1 18ba745080a1b8527e24a6218db723fe2df0b8df
- SHA512 569915a540ceb4d7ba20e946f595d8ba13f8d250768bff608f1bcf4739099d97bfca398116a421ff1f5e7cfe62155d0dccf6649126e555b49119ff63183d9875
- TLSH T1DDF002FEB52143546D4ECFA9FE717B9DEA378486B4D010E7B4D8A45C016D37D0849350
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 f821c3e45dd3ad170fb8acfd6b60f762ad1ffe2056cc203bcde1b9d051c1c30f
- MD5 9fcbf09c9f86bf010c5d8a650dca39be
- SHA1 0992ee043feb2b1436a5a71cc416f2c2f585b3a0
- SHA512 d7e3e36a78a6400034681ed0f4b7e734665270bd46e0569faa00fbc02a24364d7dfc9b4f08a4be6a33444c83f31213ba108d5c7a958214c94cbf0fbcf7d1a503
- TLSH T16621DFEA6C2083181E1D8BA6FF393A9ED67348CAB59011DFF958E19C119E3BE1851380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 ae4b4892485b361616382fb9e0a199a01f4e25b640409002e1b8edfd7daaad21
- MD5 8ca22d60b6e683d246fd63433dff894c
- SHA1 ee5cc3902c8b6f5b2e03d80ebadaef788cab50f8
- SHA512 5d8adc8deeb693c0ca94652a059e6b3e3cbca4e3daf35b5a3217491197c549e143daece541c3f8c2f64f75575b13c51d3a71bf9b65ae1a298cb982512d598a89
- TLSH T13C21E0F36C1083281E7DC790FB797A9DEAB344CAB49001DAF058E24D22586BF1861250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 369541528dbcf46a3aeb2e0be7a0909230ebad255643a704b43dac8be069e178
- MD5 c5dde68a873c52f509b009beb7b0f2a9
- SHA1 15125d95f325eeb35c8f136705c608c485ae37dc
- SHA512 7cff837d730307ae87ea7f21d9bc3b609a2d6a1ac4746cbebcf3899ae1459038b79e51a6610e61354b37a12d16eb60c2091a2289502b3db2430b5ddc3267f481
- TLSH T1482102F36C2083381E7DC7A1BB797A9EEEB344CAB55001CAF458E25D21597BE1461250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 356B
- SHA256 e3dadc7a11c5fb056a4831b38fd5bcb4434669fb921ae18e230f67ec1fc81802
- MD5 8e409203b01d4544604ba8e6ba319ca0
- SHA1 b0f07b3b18627b453d43838daf0dc5702b70077f
- SHA512 1c0e517e4670b97a0e94081d49c8afe9d5c0757be4a1a8f5c0c47af0df5f07c6c611489ba89dc11b3f58ae8d34082a2fdcdd987db07e470971c58514c4389a4e
- TLSH T17EE0C0B2B42273581C49CFBAAA663F7546230805A848E2F740CB509C013922D409AB10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 538B
- SHA256 c6938819697d2856e336aa22f4663112f4ce61e630d72634637b6081a256c71e
- MD5 0049c95b79d41c4c1299fbfc076c8e46
- SHA1 d5c1282d85604ba42335e78e8b8a069b887abab7
- SHA512 0699f5e18d9591da3a700179f74347553f1ade0895e2f1a5a1b4a8342637c53d3e60ce9fd5dc101de61e03cf012cec0b64e6aa4a8317a3bd56a304d81545bff7
- TLSH T114F075F7F42403146C4C8FB6FE303B8DD23748C8B86541EB80C8909C01643BD048A340
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 200B
- SHA256 50dfed2a7d7514e532c32e056558ebc477873d1a68ece4397a754d28b42278f9
- MD5 db33c1bc0b7edc31fc56ff067f2442b4
- SHA1 128d79948f1b276979d9ad00c56bde2f3728164c
- SHA512 16eace72f5c51e00ce01d9949dcf29632050f279c7ee4e6dc2314aebdc585eaa72d17f16d83a58f029f455adc1cf3ab2c2fdf98e5c24bd406d9f217620f66275
- TLSH T1CFD02261F1F03C967E898E38F46473130A0A4289540911B842CC618C623E028E1AEA54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 f3e8af87d22d7d61ba1f3c0bfb21f694e63fc947e92c0cf33eb465b00d881724
- MD5 134e8c3317b1d9a51919a48aa182a457
- SHA1 149f6057c58ce59b58b048982a9bc6e62dbf91e7
- SHA512 61a4e5ef5eef27d2a33ad85f2b44974376127d4a839eaab8f4788471e8e2f10d1de20299143982393d8e389fdcf1f492368e110709bd4f045846a0c85f1e7c49
- TLSH T1DA2103F76C1093381E39C7D5BB38799DEAB348CAB45010DBF059E24D21987BE1861350
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 1KB
- SHA256 ddbc76f1b59812ed9ebed0b5cf615c58f77aeb65c93900751539dbcc55b8e611
- MD5 5421b3fba7906b6870212973d9d2b87b
- SHA1 c2aadf946bf7b9d3f8bd7edc77390af709e07d26
- SHA512 8cece4907eb0788794ba7b021e376ba6b1e294ac8c9fff294d6348cca48bbf06cb2ed4c598e690c106bda962ffde692b5789e7679c5e091187d9e2721f0df259
- TLSH T18921BEFB682083246E1DC7A6FF393A8DDA7388C6B59000DFE958A59C125E3BF1845394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
- Size 448B
- SHA256 486ee4e2a6b20a9c28384ce3774efb2a59efa223101a4f3071788a1283a7139f
- MD5 4cb40f41b823b49aa94c0ceffef66ac0
- SHA1 4efd5eb3966ba94efa993926a90074f52ab7f37b
- SHA512 ad8b89175f7f108a096632a4f5b2d66072d00f9e07901360fad023ba5a3ed1783eaf46e0ccecb1e5811ea46c843c668eabec7cdcec3df74434f9fea7bc99afe5
- TLSH T19BF02BB3B13923486C4CCFB6FB31BFAA8A3308C5B80416EF9089208C022933E040B700
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
- Size 2KB
- SHA256 872f67917cb4a0d76c0c8cdc44f71e0e3f1cef1d41b74d3054b27611575d7e92
- MD5 24186cbe0db723cfe1724d67067485ce
- SHA1 122d80d581420ccb4614ee170aa3c2c6dd4f6506
- SHA512 e88886990e330a66354eb53c30b483e12a5a4b95b7fcb5d0effb6371470185c0f45e38e6af291a4d45817791ee194bf70296c27c0a94f26f02fa38923a5e3c86
- TLSH T138512F519D4139B5EF96C73F71F13F260F7DC9A36211149E32EE404E29BDA66801B11B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
- Size 265B
- SHA256 81d092e97db3516739b918ca4cbdc888fae0244aa0685c33e1743e5e4aa342f8
- MD5 71c0fa711970cf3c9ba71a501f525645
- SHA1 eba7c184a09817cc75067afa8588d5adb421c0c6
- SHA512 fc043e49709140949f8e0f05217c3de8ff419d07b37fdfda14fb13f6f6d95cc53583e9e79d882f9055b26d65c6d212798d537b7646ec120cb53420a547255afb
- TLSH T185D02B600901E599A6D05AB59B257FAF09B8853510096434116C012783BD15C0349B36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
- Size 1KB
- SHA256 560293c0f06b5d647594c355694a5fc7185697b554d7652e6b68920149d2b5e7
- MD5 8dd26ff305025e4a0c530580b82a57b0
- SHA1 6120ea9c7a5e00d6ee6e7d34a4325e67c172691d
- SHA512 dd4bc232546ba94731e61573462b4f6af83bef1985bead0fdc1c15a1a9fce7a89472f19c232725c08c664febafcef33a60aa515c1e47b2389fe15d7e95aee37c
- TLSH T13B2123619D017DB65FA5C67E71F03A270FBDCC93631104AE32D9004E05DCB68810B62A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
- Size 157KB
- SHA256 c5a15ce51e3e8a3315d03c947baf64cf47b87b64a26b6363a63b576d0a752219
- MD5 2fb258cfc60aa676fef1c3d6e35e28e0
- SHA1 6309fbce732e78dbdf1cac0e282549cda71e10e8
- SHA512 a25b256927121a2b871bd9192fab88b4b8a3476a1838acc30e95fccc53f6f809cf22dfa0a0fce67cf170c0cf3efae6b948d8f06c80725efe79a0a94309c48ed6
- SSDEEP 3072:0SkSZ6pY8rM6YSbD/Cq3VgqVST/8hTryasaL2E/t0b/kdzznffXTUXCuy6ph9mvt:0SkSZ6pY8rM6YSbD/Cq3VgIST/8h3yaP
- TLSH T113F374AB468C1CBB5F8232D560CB7A5980C3701F6E8CBE89E780CD4DC2659673B79257
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 e946ca3c84fe601b23669e44f8008c587792f35dbadeaa0a8aa4c88dc8adc7b2
- MD5 f379f23e23a92a9258f1a4f5b13dd2e9
- SHA1 b36f9876b0081f7a949bcf85c56a407622629b3d
- SHA512 a985d3c680c02a3b8ce07201defce96471ec75735fc4f7e35fca9d0574a3f404319b90f4797c74e3013aaedbd5ab8b0a7dd7e86b7c6bb2127e6dcfd21d0ff058
- SSDEEP 96:j8f97MMsW/KJsxcrQfiH2DotonYz4z+QAf8LZki0lob6h/gprh1IhEh0XnkWP:j8FWMx2jWDUR6+QA0Lbcvk+
- TLSH T1DFC1E8359865F97687EE866FB90A3A53EBD71213328C5ED888DD1C1C00DF69D360260B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 712d8a4cecaa9dc0d55579a2037c4fb2aaca06d68c87344454c423cc27b417d2
- MD5 70846679a0bf211e064c40f485e6e82b
- SHA1 a95262441fb2f6e3aaf6d2a6bf1baf61551b6ee5
- SHA512 d2de673f97596fb88d4ee2a4c43c1c05f92b1b5cded7019820436b28b80396d76c9c02c577ea9d8d71ae6bb5d70d4e9b447bc44a802983b49b0bdd596a643ed7
- SSDEEP 96:j8f97MMsW/KJsxcrQfiH2DotonYz4z+QSfeXki0Nhrhghfh/gprh1IhEh0XnkWa:j8FWMx2jWDUR6+QS2JDvkF
- TLSH T11FB1F7359865F9765BEE826FBA063693EBD2221372881ED848DD1C2C00DF6DD360650B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 12a82739735a988f653c1bce7b4552dfed30fb5ef62608684a3e8b5cf5a5d02e
- MD5 0bf116575d06b9c025a139c2214f7088
- SHA1 9408cfcf320390b9821de40e0810d7273ded514d
- SHA512 d88ac0727cce5ea276377f5e4a02fa8c2b29d2822b3e928714e90a754018fd76f3c992390be4aac66dd54226c7262b364aaf2ce768afab806ad82e93dff8e73b
- SSDEEP 96:j8f97MMsW/KJsxcrQfiH2DotonYz4NfeXki0Nhrhghfh/Uh2uh1IhEh0XnkWa:j8FWMx2jWDURe2JD7kF
- TLSH T100B1E735A875F9775AFE826FB9063692FBD2221372881EE818DD0C2C00DF6DD360651B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 718f9c9e55a0b2be5adac25d7c1d1a9f8441fa991582e862258e21675ff4d189
- MD5 a677fd178191f7a401e860956e3f80ca
- SHA1 2cafe9f98556dfe990906fbd8a2b37079e0d9898
- SHA512 2a8ad86c74bc1184f6868200200036716909953099c1a5a9d2b42144d300a13126462071ecde4d1cfecb213cb3c12d8d1f3a5f1592e9709ee0fdf8a55760aa97
- SSDEEP 96:j8f97MMsW/KJsxcrQfiH2DotonYz4z+QXf8L2ki0lob6h/gprh1Uyh0XnkWP:j8FWMx2jWDUR6+QX0L0cTk+
- TLSH T11CC1E8359865F96686EE8A6FB90A3A63E7D71213324C5ED888DD1C1C00DF69E360660B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 6c66c7e2970e7fec8bd1d71041e1d9f5221426e06c0818c5ab0f90c599329494
- MD5 e7e08f91c79a1c2127cbf6ed22b4c11d
- SHA1 39b28ba139344074e50fd4a0d40c5d6d89156ac7
- SHA512 f6adc3580ca4760edaf8bd840a29d21b065dc127ce703207af94fa8cd51ce52453dcae819016caedc92721d61cdedb514b0fa2d1ea6a1142ca4449f222034de4
- SSDEEP 96:j8f97MMsW/KJsxcrQfiH2DotonYz4z+QSfeMki0lob6h/gprh1IhEh0XnkWP:j8FWMx2jWDUR6+QS2qcvk+
- TLSH T14AC1F8359875F97746EE866FB90A3653EBD62213728C5ED888DD0C2C00DF6DD360550B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 e4d44c1ba253289904f2492b0f48c4532510f4521de8d1e4359ac127673da692
- MD5 f5ee3a2e309a80a81ef29ce912b705a2
- SHA1 bf8469ad1336bffde0b35f5523ff2563906d0eb3
- SHA512 807303d37f12a25b43eb2b8902e0a913e3a0e79c8751e006e7058b2ae74b612ab1d8628c0263694fe4ab6b38c63542bf647a3955d82f157e6ee8dcf658de598e
- TLSH T15B61E6702C64DD7317B6CB5AF9073F43EB664123B2A86EDCA1ED4D0C15EB66C2653822
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\1406e157-b554-4ded-9bbb-8b2c237c16ad.tmp
- Size 348B
- SHA256 623b23fc4a74968ef5d06903da56f4a7006a399a65ef5ba1b50c9033d3d78556
- MD5 a4f8f7d1f4bb68b36fcc178a1a62c90e
- SHA1 290bcc4b259a3835a92f0bd414ffa833cc09fe50
- SHA512 b67d55cff8207051b166e662486083d0ff34189c1dc507a512766ec8141f4fdb80368b5f5d78567ccac7eb29083ab3ee00f37bcf871b21a583b18e4045dff6b1
- TLSH T1E6E0C0DF498E27D00611090F26C12418953AF615DDA371BD0557A4014B3936F1125C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 124B
- SHA256 d94de90c0cf39e350e6e61f584f44e4ac815a000c94e9cba769dcccb3d70b25c
- MD5 37641c20debfc5d830b88fbb3d641bb8
- SHA1 016a7f7844f1911eccb48a5ab023ea6e93c7d5c3
- SHA512 e2936b2722d6d90fdb366446d4b01ad37d32db98cc0d380a5dec9a1dd47459dc4b13f7484def4703309de19bf735b9c2987308c367c304d922b4fd9e291a0a97
- TLSH T165B09B965D8F57D41F11150419900515D71E9E50D567649C0CC2A0311B3A27D505981C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 796B
- SHA256 3dc0104195cab4f946fead5fbd028d56101ce2c6a246dbb0bacfc584dd4517dc
- MD5 00321ded0d9fc40481717ce165bb9418
- SHA1 4053bfeffdbe12e3086ff729fb4da294e8394d7d
- SHA512 5aa697f0e6d807a80ef3700073d987175c16ae89a208dde1cce6ba397f7eaff719a2114740f4f3d224e4e8601f7d134ea91f7d18a203598ede401970c4c2a5b4
- TLSH T1390175DA454E37D01B441E0F158670ECC6B9B30EBEB1B57D1193B200433916F3410C2D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 572B
- SHA256 29400fb17775227c2895883740ce13de6eb5cd60402952d2f0af42707008bf53
- MD5 da29e4c277c7891bcb4772fcfb66b54c
- SHA1 3115f9b32720d8741aac0e84f163d84ffa093255
- SHA512 f88d4ed662d2fa81391ea2fe3e75b4a5f61247f4b2bb0be57fdb8653e22363b8515916f28bb80280881a71c53023707337a9ec5242dc753fb9bc08a6792874e2
- TLSH T169F020DECE4E27D02B100E4F15C13099967AF24ABFF3717E16A7A601473A2AE3121C0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 460B
- SHA256 a72029d441aa7f1ca6cbfacb5d96f9902dc1b31d25a9c6b95e36427f2d1b606b
- MD5 e93ba28a992f328d89361cb442f64dcd
- SHA1 6f92443f624873d5e75c83389fe5fabcd41f55cb
- SHA512 82b42e6512ef258f8186d0c06b4f9cdd4e8676186013af12be8d190562e45207c45ae4265b9315bf17e25d624e4e104cfc3380bf2f46535cbf56e839f2a144bf
- TLSH T113F0D4DAC98D17C015100D4F15C13095913BF649AEB371BE0453B601473926E2111C1D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 684B
- SHA256 dd04d34b867f264cf5f7346da770f403db8cc4cf19d57934b7f549cbaa9aaafb
- MD5 c6fd364cd64bbf23dfe1657bb449b709
- SHA1 b1f56510c41a3ef12c2143810b7374affdedeac0
- SHA512 62e8f3386d367e13afbb25ebadb31dd59dffcde2a0b2f59d66c11d42072b29cced2cefee578721405d1bbecdfb22357fc9e9575db87c58869d34824be5361023
- TLSH T13D014EDA890E23D01A000E0F15C934DD81BAB20E7EF271BE02A3A600073A2AE3520C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 908B
- SHA256 34608d1a9ef6e0a27858f95806b6a197bbfdd6e438472501f9516f2740bc2cd1
- MD5 a43b451bc48dd4500ddb026085b86fcb
- SHA1 7074c5fc99d9ccfb979547f9fd70e790a235b4a2
- SHA512 75682ad5e0f68c4af0bb8d1d91d357d6048a862c2ee2be2cbd219dfb3be7df348052c26a95288f8d54d308d4f94d28f5bf97677eb0ab9b2d207ec260ccb631aa
- TLSH T1151140DA894E27D02B041D0F45CA70ECDAB5B64EBEB2A97D21A3A240073A16B3810C2D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 236B
- SHA256 b14b91d6fc1282f83a877c8bda61dfdd36420ca190f370f5e14705344d403b9f
- MD5 9f7b41375a4ca3b68aaad139488734ec
- SHA1 4384f9feca16186e5ca6f68316f05596e14fc382
- SHA512 bb45c250c2c01ac7c385f03b2a1c04a4c51900df6058e3f0fb371818a16aa46ce9be69853c18931ed62a6914f6233b8c8e7a83c20a772e00c306fd0535bc4f66
- TLSH T16CD0A7998E8F77E01F11464E1AC12448862AFA58A4A365FC0987A512573E22F6169C6D
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-bn.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-mr.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-nn.hyb
- Size 141KB
- SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
- MD5 f2d8fe158d5361fc1d4b794a7255835a
- SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
- SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
- TLSH T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir4712_1681049468\opera-one.jpg
- Size 194KB
- SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
- MD5 c18898ca5a97bc5807f3be336fb1338c
- SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
- SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93
- SSDEEP 6144:bcztf14vie9cI/+1YhN8iuRIHN2XT7/N7:bcpfmiscK+QReT7/N7
- TLSH T10014125012852B6BD4DE763021AF362DC703F5BEC63E94065180AC5BD9CBC931EE7BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir4712_1681049468\persona.ini
- Size 207B
- SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
- MD5 a2294db65c800d2e518ec4943a2dd187
- SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
- SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53
- TLSH T19BD022A621820222D203C79C207173CE9AA692588A1442AC03EA70A3F21B2A9C297D60
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir4712_325813001\opera-one-dark.jpg
- Size 349KB
- SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
- MD5 fc3dafe25d5bc30a830ab92aefe52634
- SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
- SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829
- SSDEEP 6144:SXn5tlDpMtckM8FeR5HrNVvuxQiW3qp6gIQ7B/7SoK2RIFW8aE6mM+z:QnfMtc/RBrr0QiWc6TQ7B/7SoK2REafC
- TLSH T1A0742397ED4262D66B26D0F13C52692FE3066AF31728454B322424F7B3A1C1AD1FBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir4712_325813001\persona.ini
- Size 217B
- SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
- MD5 8fc4f4bf76a946d682606a6be94a822d
- SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
- SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488
- TLSH T14CD0235211470321D103D7D920717ACD56B65168C604539C03EA7093F2472559592D50
- MD5 SHA1 SHA512 TLSH