Analysis
- user interaction
yes - max time kernel
364s - max time network
366s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
09/08/2026, 04:17
Static task
static1
Behavioral task
behavioral1
Sample
Opera_134.0.5954.46_Setup_x64.exe
Resource
win10ltsc2021-20260513-en
General
- Target Opera_134.0.5954.46_Setup_x64.exe
- Size 132.9MB
- Sample260809-ewtm9szfnd
- SHA256 bcacbfffa4cd0809a5eb75998322b6f8a0a1c768f83b423451310f00879efe93
- MD5 d52d82439ea6041e6b6b31b096ce8013
- SHA1 20032ad8708cc6d8a39ac7b9ca5642e36a396517
- SHA512 382ebdf6543ab74304f8d931bbb659faf15a955190e0ce93f618ea935c1a6254cc8b58fb5bf3beebef3a9191c0183e3edb05d9b44d3e0f11aaf070c0f469cc13
- SSDEEP 3145728:GH/ef4HkMOUCd2etPV869pRKjSJmxHWrxhhPKtoVSDcr/dMUdiL3mXf+AOFE6:8/lEhXRPVvqcmxH69KtoWUdi6Vcr
- TLSH T1AE68330EDB93DE33D82600BFEA59EA48134A555C0E02CF4F2699264D58BBBD01B35F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Enumerates connected drives 3 TTPs 8 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe - Checks computer location settings 2 TTPs 35 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\Control Panel\International\Geo\Nation opera.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemTemp\scoped_dir2152_484636467\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-hr.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-el.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-eu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1084455465\crl-set opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-ta.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-sq.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-ru.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-es.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-en-gb.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1084455465\LICENSE opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-te.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-pt.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-ga.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-bn.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-af.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_2121108056\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\scoped_dir2152_295905644\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-sv.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-nn.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1084455465\_metadata\verified_contents.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-nl.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-nb.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-de-ch-1901.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\crs.pb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\ct_config.pb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_2121108056\manifest.json opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-sl.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-de-1996.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-be.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-uk.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-ml.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-lv.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-fr.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-da.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\manifest.json opera.exe File created C:\Windows\SystemTemp\scoped_dir2152_484636467\persona.ini opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-sk.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-mul-ethi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-hy.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-gl.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-en-us.hyb opera.exe File created C:\Windows\SystemTemp\scoped_dir2152_295905644\persona.ini opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-cy.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-und-ethi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-mn-cyrl.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-as.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-mr.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-la.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-ka.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-it.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-cu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-bg.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-tk.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-or.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-lt.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-hu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-de-1901.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\mtc_config.pb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-hi.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-gu.hyb opera.exe File created C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1377188173\kp_pinslist.pb opera.exe - Executes dropped EXE 64 IoCs
pid Process 4720 installer.exe 2936 installer.exe 4660 assistant_package_sfx.exe 4196 assistant_installer.exe 1896 assistant_installer.exe 4448 installer.exe 1548 installer.exe 3936 assistant_package_sfx.exe 4232 assistant_installer.exe 2208 assistant_installer.exe 5024 installer.exe 2468 installer.exe 1560 installer.exe 2808 installer.exe 1416 assistant_installer.exe 1632 assistant_installer.exe 4664 assistant_installer.exe 4848 assistant_installer.exe 5016 browser_assistant.exe 1388 opera.exe 2152 opera.exe 1716 opera_crashreporter.exe 1708 opera_crashreporter.exe 4888 opera.exe 1184 opera_crashreporter.exe 980 browser_assistant.exe 1760 opera.exe 3112 opera_crashreporter.exe 188 browser_assistant.exe 3876 opera.exe 3860 opera.exe 4620 opera_crashreporter.exe 1092 opera_crashreporter.exe 2372 opera.exe 3748 opera.exe 1928 opera_crashreporter.exe 3848 opera_crashreporter.exe 3208 opera.exe 3936 opera.exe 5140 browser_assistant.exe 5224 opera.exe 5292 opera.exe 5484 opera.exe 5492 opera.exe 5500 opera.exe 5508 opera.exe 5516 opera.exe 5524 opera.exe 5556 opera.exe 5560 opera.exe 5608 opera_crashreporter.exe 6120 opera.exe 1340 opera_crashreporter.exe 5320 opera.exe 5388 opera_crashreporter.exe 5456 opera.exe 1612 opera_crashreporter.exe 4684 opera_gx_splash.exe 5580 opera.exe 3328 opera.exe 1372 opera.exe 2252 opera.exe 3160 opera.exe 1700 opera.exe - Loads dropped DLL 64 IoCs
pid Process 4196 assistant_installer.exe 4196 assistant_installer.exe 1896 assistant_installer.exe 1896 assistant_installer.exe 4232 assistant_installer.exe 4232 assistant_installer.exe 2208 assistant_installer.exe 2208 assistant_installer.exe 1416 assistant_installer.exe 1416 assistant_installer.exe 1632 assistant_installer.exe 1632 assistant_installer.exe 4664 assistant_installer.exe 4664 assistant_installer.exe 4848 assistant_installer.exe 4848 assistant_installer.exe 5016 browser_assistant.exe 5016 browser_assistant.exe 1388 opera.exe 2152 opera.exe 2152 opera.exe 1388 opera.exe 4888 opera.exe 4888 opera.exe 980 browser_assistant.exe 980 browser_assistant.exe 1760 opera.exe 1760 opera.exe 188 browser_assistant.exe 188 browser_assistant.exe 3876 opera.exe 3876 opera.exe 3860 opera.exe 3860 opera.exe 2372 opera.exe 2372 opera.exe 3748 opera.exe 3748 opera.exe 3208 opera.exe 3936 opera.exe 3208 opera.exe 3936 opera.exe 5140 browser_assistant.exe 5140 browser_assistant.exe 3208 opera.exe 3208 opera.exe 3208 opera.exe 5224 opera.exe 5292 opera.exe 5292 opera.exe 5224 opera.exe 3208 opera.exe 3208 opera.exe 5484 opera.exe 5492 opera.exe 5484 opera.exe 5492 opera.exe 5508 opera.exe 5500 opera.exe 5508 opera.exe 5500 opera.exe 5516 opera.exe 5524 opera.exe 5516 opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_134.0.5954.46_Setup_x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_package_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_134.0.5954.46_Setup_x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_package_sfx.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3936 opera.exe - Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 57 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.46\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.htm\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\134.0.5954.46\\notification_helper.exe" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Application\ opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.pdf\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xht\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications\opera.exe installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\URL Protocol opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.htm\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.html installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.html\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.pdf\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2058276091-3280583803-376660292-1000\{D3413A59-DA7B-4168-91D6-FB7A250C4DFB} opera_gx_splash.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.opdownload installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" opera.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.htm installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.html\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.pdf installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell\open\ddeexec\ opera.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\OperaStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\WOW6432Node\CLSID installer.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2152 opera.exe 2152 opera.exe 6180 opera.exe 6180 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs
pid Process 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 4684 opera_gx_splash.exe Token: SeCreatePagefilePrivilege 4684 opera_gx_splash.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe Token: SeShutdownPrivilege 2152 opera.exe Token: SeCreatePagefilePrivilege 2152 opera.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 1560 installer.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe - Suspicious use of SendNotifyMessage 17 IoCs
pid Process 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe 2152 opera.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 4720 installer.exe 4720 installer.exe 4448 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe 1560 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2408 wrote to memory of 4720 2408 Opera_134.0.5954.46_Setup_x64.exe 90 PID 4720 wrote to memory of 2936 4720 installer.exe 91 PID 4720 wrote to memory of 4660 4720 installer.exe 92 PID 4720 wrote to memory of 4196 4720 installer.exe 94 PID 4196 wrote to memory of 1896 4196 assistant_installer.exe 95 PID 4056 wrote to memory of 4448 4056 Opera_134.0.5954.46_Setup_x64.exe 109 PID 4448 wrote to memory of 1548 4448 installer.exe 110 PID 4448 wrote to memory of 3936 4448 installer.exe 111 PID 4448 wrote to memory of 4232 4448 installer.exe 112 PID 4232 wrote to memory of 2208 4232 assistant_installer.exe 113 PID 4448 wrote to memory of 5024 4448 installer.exe 114 PID 5024 wrote to memory of 2468 5024 installer.exe 115 PID 5024 wrote to memory of 1560 5024 installer.exe 116 PID 1560 wrote to memory of 2808 1560 installer.exe 117 PID 1560 wrote to memory of 1416 1560 installer.exe 119 PID 1416 wrote to memory of 1632 1416 assistant_installer.exe 120 PID 1416 wrote to memory of 4664 1416 assistant_installer.exe 121 PID 4664 wrote to memory of 4848 4664 assistant_installer.exe 122 PID 4664 wrote to memory of 5016 4664 assistant_installer.exe 123 PID 5016 wrote to memory of 1388 5016 browser_assistant.exe 124 PID 1560 wrote to memory of 2152 1560 installer.exe 126 PID 1388 wrote to memory of 1716 1388 opera.exe 127 PID 2152 wrote to memory of 1708 2152 opera.exe 128 PID 5016 wrote to memory of 4888 5016 browser_assistant.exe 129 PID 4888 wrote to memory of 1184 4888 opera.exe 130 PID 5016 wrote to memory of 980 5016 browser_assistant.exe 131 PID 980 wrote to memory of 1760 980 browser_assistant.exe 132 PID 1760 wrote to memory of 3112 1760 opera.exe 133 PID 188 wrote to memory of 3876 188 browser_assistant.exe 135 PID 980 wrote to memory of 3860 980 browser_assistant.exe 136 PID 3876 wrote to memory of 4620 3876 opera.exe 137 PID 3860 wrote to memory of 1092 3860 opera.exe 138 PID 188 wrote to memory of 2372 188 browser_assistant.exe 139 PID 980 wrote to memory of 3748 980 browser_assistant.exe 140 PID 2372 wrote to memory of 1928 2372 opera.exe 141 PID 3748 wrote to memory of 3848 3748 opera.exe 142 PID 2152 wrote to memory of 3208 2152 opera.exe 143 PID 2152 wrote to memory of 3936 2152 opera.exe 144 PID 188 wrote to memory of 5140 188 browser_assistant.exe 145 PID 5140 wrote to memory of 5224 5140 browser_assistant.exe 146 PID 2152 wrote to memory of 5292 2152 opera.exe 147 PID 2152 wrote to memory of 5484 2152 opera.exe 148 PID 2152 wrote to memory of 5492 2152 opera.exe 149 PID 2152 wrote to memory of 5500 2152 opera.exe 150 PID 2152 wrote to memory of 5508 2152 opera.exe 151 PID 2152 wrote to memory of 5516 2152 opera.exe 152 PID 2152 wrote to memory of 5524 2152 opera.exe 153 PID 2152 wrote to memory of 5556 2152 opera.exe 154 PID 2152 wrote to memory of 5560 2152 opera.exe 155 PID 5224 wrote to memory of 5608 5224 opera.exe 156 PID 5140 wrote to memory of 6120 5140 browser_assistant.exe 157 PID 6120 wrote to memory of 1340 6120 opera.exe 158 PID 5140 wrote to memory of 5320 5140 browser_assistant.exe 159 PID 5320 wrote to memory of 5388 5320 opera.exe 160 PID 5456 wrote to memory of 1612 5456 opera.exe 163 PID 2152 wrote to memory of 4684 2152 opera.exe 164 PID 2152 wrote to memory of 5580 2152 opera.exe 165 PID 2152 wrote to memory of 3328 2152 opera.exe 166 PID 2152 wrote to memory of 1372 2152 opera.exe 167 PID 2152 wrote to memory of 2252 2152 opera.exe 168 PID 2152 wrote to memory of 3160 2152 opera.exe 169 PID 2152 wrote to memory of 1700 2152 opera.exe 170 PID 2152 wrote to memory of 5676 2152 opera.exe 171 PID 2152 wrote to memory of 6512 2152 opera.exe 172 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2408 -
C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe2⤵
- Enumerates connected drives
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4720 -
C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7a4d5ad88,0x7ff7a4d5ad94,0x7ff7a4d5ada03⤵
- Executes dropped EXE
PID:2936
-
-
C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_package_sfx.exe"C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_package_sfx.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4660
-
-
C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4196 -
C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x204,0x208,0x20c,0x1e0,0x210,0x7ff67ddf8778,0x7ff67ddf8784,0x7ff67ddf87904⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1896
-
-
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2044
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer\opera_installer_20260809051904474.log1⤵PID:2324
-
C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4056 -
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe2⤵
- Enumerates connected drives
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4448 -
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff70064ad88,0x7ff70064ad94,0x7ff70064ada03⤵
- Executes dropped EXE
PID:1548
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_package_sfx.exe"C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_package_sfx.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3936
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4232 -
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff701fe8778,0x7ff701fe8784,0x7ff701fe87904⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2208
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4448 --package-dir="C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A" --inside-package --session-guid=d690463d-c980-4de9-91a1-688e6862d353 --server-tracking-blob="NjFkODk4ZWJjMmNmNGQ1YjllMzkyYmJlMjJiYmQ5MDY3ZjdhY2U0Y2Y1NWMzYTQwM2Q2Zjk0N2YzZTU1NDA1Yzp7InByb2R1Y3QiOnsibmFtZSI6Ik9wZXJhIn0sInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fX0= " --desktopshortcut=1 --wait-for-package --initial-proc-handle=48090000000000003⤵
- Enumerates connected drives
- Executes dropped EXE
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5024 -
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2a4,0x2a8,0x2ac,0x274,0x2b0,0x7ff70064ad88,0x7ff70064ad94,0x7ff70064ada04⤵
- Executes dropped EXE
PID:2468
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe" --backend --initial-pid=4448 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A" --inside-package --session-guid=d690463d-c980-4de9-91a1-688e6862d353 --server-tracking-blob="NjFkODk4ZWJjMmNmNGQ1YjllMzkyYmJlMjJiYmQ5MDY3ZjdhY2U0Y2Y1NWMzYTQwM2Q2Zjk0N2YzZTU1NDA1Yzp7InByb2R1Y3QiOnsibmFtZSI6Ik9wZXJhIn0sInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fX0= " --desktopshortcut=1 --install-subfolder=134.0.5954.464⤵
- Enumerates connected drives
- Executes dropped EXE
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1560 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff74634ad88,0x7ff74634ad94,0x7ff74634ada05⤵
- Executes dropped EXE
PID:2808
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=05⤵
- Adds Run key to start application
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:1416 -
C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff701fe8778,0x7ff701fe8784,0x7ff701fe87906⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1632
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=06⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4664 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff6cfd98778,0x7ff6cfd98784,0x7ff6cfd987907⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"7⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5016 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream8⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1388 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f09⤵
- Executes dropped EXE
PID:1716
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream8⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4888 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x268,0x26c,0x270,0x264,0x274,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f09⤵
- Executes dropped EXE
PID:1184
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff775812208,0x7ff775812214,0x7ff7758122208⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:980 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1760 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f010⤵
- Executes dropped EXE
PID:3112
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x240,0x210,0x234,0x23c,0x238,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f010⤵
- Executes dropped EXE
PID:1092
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3748 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f010⤵
- Executes dropped EXE
PID:3848
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized5⤵
- Adds Run key to start application
- Checks computer location settings
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2152 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f06⤵
- Executes dropped EXE
PID:1708
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1720,i,16135367851566359791,172023703303310803,262144 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1936 /prefetch:26⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:3208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2024,i,14430009075094275950,5550077807499805841,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:36⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
PID:3936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2448,i,13009967968194742723,12329282851105038737,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2440 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5292
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3036,i,11524469112008096136,8957750045457654581,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3236 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,436803303344218180,6414886407257084007,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3332 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5492
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3264,i,15836505958858115529,11664645995829690045,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3356 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5500
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,10086865031054708317,13509675471375574110,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3396 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5508
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3276,i,965654909323986703,7915732131603864209,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3376 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5516
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2996,i,3856028462500799324,9998229950129599131,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3288 /prefetch:86⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5524
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,10847662668235670650,12934428056681457302,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3300 /prefetch:86⤵
- Executes dropped EXE
PID:5556
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4008,i,12488902138554370609,13375154260923801700,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4012 /prefetch:16⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:5560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C966⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:4684
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4684,i,15713388528394563190,603959694430215719,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4696 /prefetch:26⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:5580
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4860,i,15201312949993660570,9650800932393375295,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4888 /prefetch:16⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:3328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5192,i,8115594323452213076,10909964361419916144,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5176 /prefetch:16⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:1372
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5308,i,16021449923028876526,5270780638288553695,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5328 /prefetch:16⤵
- Checks computer location settings
- Executes dropped EXE
PID:2252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5824,i,18273477773241555295,2209493377142241327,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5856 /prefetch:26⤵
- Checks computer location settings
- Executes dropped EXE
PID:3160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6528,i,14369367995970097792,7648278462308337705,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6644 /prefetch:26⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:1700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6816,i,6026145161153749403,8966911989126993592,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6800 /prefetch:26⤵
- Checks computer location settings
PID:5676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,13712610848098610642,12748640829488925369,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6488 /prefetch:86⤵PID:6512
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6960,i,13482520003470248626,10295368102648065655,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6332 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6072
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7116,i,13062894060863561473,8796318065234416544,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7264 /prefetch:86⤵PID:5512
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7244,i,8762037400441661011,2080958857363187934,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7324 /prefetch:86⤵PID:5520
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7104,i,1045516511772997600,13073344969834227184,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7304 /prefetch:86⤵
- Enumerates system info in registry
PID:6136
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7072,i,8305023957664846941,14442092013630093830,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7284 /prefetch:86⤵
- Enumerates system info in registry
PID:6172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7252,i,4484488181315818153,13488347166106555005,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7344 /prefetch:86⤵
- Enumerates system info in registry
PID:5408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7240,i,14153457967447149482,1711893978601178406,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7920 /prefetch:86⤵PID:7180
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7924,i,16440804481971530553,7524277360184111554,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8036 /prefetch:86⤵PID:7224
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8076,i,10641856665377473022,7211942755204463441,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8044 /prefetch:86⤵
- Enumerates system info in registry
PID:7236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8200,i,12913747764383610503,12552508495105720858,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8356 /prefetch:86⤵
- Enumerates system info in registry
PID:7248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,6653595963954358052,6078707286064408444,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8376 /prefetch:86⤵PID:7256
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8612,i,11375484033979479852,9256292449382738918,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8616 /prefetch:26⤵
- Checks computer location settings
PID:7304
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8780,i,11427580816437728068,11432128649317431490,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8788 /prefetch:86⤵
- Enumerates system info in registry
PID:7364
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8796,i,868876273407217603,1522602627880429851,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8828 /prefetch:86⤵PID:7372
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8820,i,14085330892314826926,1362475782865982007,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8864 /prefetch:86⤵
- Enumerates system info in registry
PID:7384
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8876,i,8571944355730548087,1611647749387988448,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9236 /prefetch:86⤵
- Enumerates system info in registry
PID:7684
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8888,i,5492451888404629850,14605862477235614793,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9256 /prefetch:86⤵
- Enumerates system info in registry
PID:7692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9224,i,9156308612251655048,3198395989892662986,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9276 /prefetch:86⤵
- Enumerates system info in registry
PID:7700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9692,i,3913250960221965776,4528790738671116283,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=8656 /prefetch:86⤵
- Enumerates system info in registry
PID:8084
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10380,i,15356893968858731148,10460139262789466770,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3716 /prefetch:86⤵PID:6744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10508,i,5627379329964121868,16755796710309203641,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10520 /prefetch:86⤵PID:6896
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10680,i,17965408498585576289,6044220755871819739,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10700 /prefetch:86⤵PID:7196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe" --fix-taskbar-pins6⤵PID:6656
-
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff74634ad88,0x7ff74634ad94,0x7ff74634ada07⤵PID:5564
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10724,i,4165921171997783305,12368634561860869766,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10848 /prefetch:86⤵PID:6052
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10976,i,8193405622128411327,6962157103038017696,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10984 /prefetch:86⤵
- Enumerates system info in registry
PID:7084
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1616⤵PID:7472
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x228,0x2a0,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e87⤵PID:7908
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9684,i,920613618069238674,6593522260595394310,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8080 /prefetch:16⤵
- Checks computer location settings
PID:8036
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4044,i,15286387344201633643,15635907213436770986,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8536 /prefetch:86⤵PID:5700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,7056974187900880250,11793749850082406608,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10872 /prefetch:86⤵
- Enumerates system info in registry
PID:5968
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10724,i,14547594913078340392,7821963836444897060,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10852 /prefetch:86⤵PID:7828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6784,i,11766827779445846939,7771560514075776461,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10952 /prefetch:86⤵PID:5556
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10704,i,5378098264493759058,11534612746420822669,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10640 /prefetch:86⤵PID:6708
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10884,i,16318597908548844242,16033904787297863539,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10536 /prefetch:26⤵
- Checks computer location settings
PID:964
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10652,i,10815082174872937157,12848621344432838920,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8436 /prefetch:86⤵
- Enumerates system info in registry
PID:6504
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10976,i,4204238635114956666,16103663121266108514,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11100 /prefetch:86⤵PID:7616
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8852,i,4223327369535588131,9835510750664990819,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10876 /prefetch:26⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10720,i,7055070306307095739,10130556640245555313,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10680 /prefetch:86⤵
- Enumerates system info in registry
PID:5568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5656,i,11143435297301168271,2284661099243292444,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=11048 /prefetch:86⤵PID:6060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11044,i,3186343995220846995,16305536112303264741,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11060 /prefetch:86⤵PID:7296
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10916,i,6021877018440346603,7882174224323122205,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8476 /prefetch:26⤵
- Checks computer location settings
PID:4844
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10960,i,4648072613122892199,16646051559967102877,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8404 /prefetch:86⤵PID:7364
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=5632,i,1784335332553099490,6018872469740254020,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5596 /prefetch:26⤵
- Checks computer location settings
PID:7332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=4252,i,8987428150389963129,181177380736958339,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10700 /prefetch:26⤵
- Checks computer location settings
PID:7700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7680,i,8753582447371028559,2548224243461078955,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=6668 /prefetch:26⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7604
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=4684,i,17457407771029191252,8930452776101428616,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=5764 /prefetch:26⤵
- Checks computer location settings
PID:7200
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=3268,i,3594716449520732717,14376782059219068622,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=4780 /prefetch:26⤵
- Checks computer location settings
PID:6952
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10824,i,7227592028074940543,18373500468649148880,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8784 /prefetch:26⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5504
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9672,i,17146754964913108303,15403815869947598178,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8628 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7352
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=8088,i,4776720167320227427,17600380029820426263,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8684 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8124,i,2101332595683896010,5178804579291396011,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=8148 /prefetch:86⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6880,i,4151248246446302802,9036851800027912798,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=812 /prefetch:86⤵
- Enumerates system info in registry
PID:7468
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6796,i,7714115048421507055,8804830508541177735,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=10352 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:2264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=3388,i,10891915063205407441,13648500193464624095,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11028 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=8128,i,7734734272064293682,414834659247353865,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=8700 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6696
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=9312,i,195668708267379562,18008124660460149066,262144 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=8196 /prefetch:86⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
PID:6180
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8476,i,7229201797986568779,17943107289784324928,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=3224 /prefetch:86⤵PID:5676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=10812,i,6513206092844897400,2227194103399733316,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=10860 /prefetch:16⤵
- Checks computer location settings
PID:7848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=4240,i,1099435057020854658,16311971641951207914,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=10476 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:1176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=8420,i,5682641737627067522,5011131900576301577,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=10912 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8860,i,1290761663617887083,198911181744777006,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=10484 /prefetch:86⤵
- Enumerates system info in registry
PID:6360
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10548,i,7209764834382138191,14875817123355953437,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=9552 /prefetch:16⤵
- Checks computer location settings
PID:2532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=5044,i,4198491428672252298,5367522774659821439,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=7220 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:3172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10408,i,11211433226261763896,10163880788896923425,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=9780 /prefetch:26⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=7672,i,6561067887848077036,15938926026256202037,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=8576 /prefetch:16⤵
- Checks computer location settings
PID:1620
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=8604,i,9560311040109773661,8951094554156408920,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=6636 /prefetch:16⤵
- Checks computer location settings
- Enumerates system info in registry
PID:820
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11052,i,2238134490510776155,764570152015853663,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=9896 /prefetch:86⤵
- Enumerates system info in registry
PID:556
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=4908,i,12552223146843268091,1391961762643235962,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=5188 /prefetch:26⤵
- Checks computer location settings
PID:5032
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --edition --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=134.0.5954.46 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --firstrunver=134.0.5954.46 --firstrunts=1786249288 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV96⤵
- Enumerates system info in registry
PID:4224 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e87⤵PID:7600
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:188 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3876 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f03⤵
- Executes dropped EXE
PID:4620
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2372 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f03⤵
- Executes dropped EXE
PID:1928
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x1ec,0x1dc,0x208,0x1f0,0x210,0x7ff775812208,0x7ff775812214,0x7ff7758122202⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5140 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5224 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f04⤵
- Executes dropped EXE
PID:5608
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:6120 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f04⤵
- Executes dropped EXE
PID:1340
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5320 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f04⤵
- Executes dropped EXE
PID:5388
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5456 -
C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f02⤵
- Executes dropped EXE
PID:1612
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵PID:6836
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e82⤵PID:6684
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:5772
-
-
C:\Windows\system32\ApplicationFrameHost.exeC:\Windows\system32\ApplicationFrameHost.exe -Embedding1⤵PID:6504
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 471B
- SHA256 f24819377506cffbbc34f9fd055fb8991378eb55d87e7b7fd81e4fd511b3272f
- MD5 1b515328abe58da410ad7a73b0f8413d
- SHA1 e6fd86cac9fb65e54f03bec202f9df27ea17baeb
- SHA512 43feed3da011b879be06673d9a9a8585e5165430c7dc0bb153d511bda24d53f75179c8c9a67f77998f52120cbf61acd53d9006005be7c2d8f2a5bcaf2091155b
- TLSH T1F1F0D43A8CB538F11555847C1D759C77107174DF60C68136243815F9421BAF4E20B84B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960
- Size 471B
- SHA256 7d5f4abfbe338a7a3bdd8a9b01cc8d9ec2760d8682b97c566b7deed7838558f8
- MD5 23e37cbbfe8e47d493da8786c5512490
- SHA1 88dbc2d29f5692417f2846613b9b71ea5f6d0197
- SHA512 69ec9e6abd1aaa1e5379d4b2a6040c586f74f3b452a370dc4c88729ffd62ce69aba5b494d6725f55d9470317b7272b92f74f126d7866215400153a694be4e270
- TLSH T16FF0D417290680E3DF74DE581975DE31744E584B04C25A9B11BD16F6D1C4BA07D1D241
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
- Size 727B
- SHA256 6244c1941fed10f32d3cf1517119ad7d80bc2c3d27d78169fba553423ac89864
- MD5 80b5b76513288dadbff0001df1cc5bbd
- SHA1 7e687d30749c687ca2a671608f07941a776b4788
- SHA512 0dcd86355c6528d78dc3b2d87349913b1ad2e00beebccc0f0db26c782b3e80d25a0d352ec5e6b860a788a1a4d1d6d04a1cb9b8c672d5fb26396bdda50118530a
- TLSH T13C01992357EF6DD56E148C858ED92E71772332639BDD58AB30FD1114D204F144EB5004
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
- Size 727B
- SHA256 0f9634b74d5a8ea0237937b3c883d71ee6cf8c005b2ab41c53327d6078a2cb33
- MD5 2622c86e6f34ee32932f8d2b675840a6
- SHA1 eaeaba8e7c8b1539224d730c7a4118165979ec0d
- SHA512 e08757790f3514ecf0262c083e9d4ea52e7b3141da4dfe4219f6db08270f914da2e2c21606019beb526571af70552a138d0a4522aea64b2241bb072052b033bc
- TLSH T194016557BD649610382087539BFCC7A8323FC4E124461BA6B364449EFEEF9544543485
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 5ea73e46d4d2a45a24b689bd156e299ecf330317f54f087d1da238f060dc8ed2
- MD5 b3da231c6d22b133cb9974e0b6927358
- SHA1 30b6bf59f66bfb89b802cffe8e6f363d68b778b2
- SHA512 28ec2ce730543f6d1b428d81c013926d72807f5897316f9c088ac1155f4e4cda5e084671d9806e2de8d2eea76c81ef3c1b119fd1727dd2448b5573827e2d67c6
- TLSH T1BEF0DCA268EEE8A56080C8AC25E145767816E02992A65142F01F04F08526AECAF3D536
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 400B
- SHA256 a9957f2e407d6a5eea7eca2b59d7ea0255c4895798ab7af70a12c74677738d92
- MD5 9471cf4ed5ac513c303558b17eb02b03
- SHA1 eb02a15e56cc89ea8661c76bc40bbfba7ab16c5e
- SHA512 98c6a16c99dd3177eb231e13ad7ba168b9ef62bc9c3b00675877e3cbc2a9d9c0c9f60d7569ff367783943250292300ea002b30012addcb2989aee2539bf064b0
- TLSH T157E0C03033FB202FF3B49B3803E8C1C9AF25F0032C055ABE0D91141E5519E004C52C30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960
- Size 440B
- SHA256 d9e79ec0bd4ad711c5b233d200c3f99b15b08763dd36b5ea5190b6daf9268b43
- MD5 a60944a3c437a949d474e1e180abe465
- SHA1 17415b91f29ebb817255cc6a406a60a341185cf9
- SHA512 766ce368dd3f48f36d9012ba0fb487a323bac2dfec37791e5404d0af015736fdea90f66a7cd71d1211415fce9fd8cb3e23b06a91c7a93f78924c6d3680563500
- TLSH T151F0681C06F9501DF5B7CEF84ADD99A0481BF1662C1186302AE05009BA32B80EC62A31
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
- Size 408B
- SHA256 f41aae57985509a2a13159a14842cc8339daec6f77d547b70af894fad075efe6
- MD5 d17ca6cbb86567506f38ea404ac009ae
- SHA1 391617676e62b740035c6564c0be1b7ad6f42636
- SHA512 cd20bb499b47cba288fca7a3271c9664d9a2b032c7943a26d36045ed34872f2eaba5446d49c8eff0e660df3333c59f907a7607987d57edd2a669e717eb594613
- TLSH T18BE0C03471F5045DF1F0E4740AE9A562659EF217280582B404945301E614B004C95234
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
- Size 412B
- SHA256 73f5c2d7c2725e924dcf511a91aefd3a3f3f7be798ead63cced89ee8317d3e7c
- MD5 628bfa15805a54fe1e4f58d5df7dc626
- SHA1 c9a53fb84e647b791ce0f9de529a0f1d8cdda1f3
- SHA512 9df33a7c8562f061feb369220755ab82256963aa4c814ebb57a3d8021defa12ab93b1f8960891848ef52549e5d4bc01d2b6abeb6f30999684130a38e4359e072
- TLSH T15DE0682C25AB741EF090C83146F9A1711E58E2421440C6B819D14318B71EE005C11AB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 6fccd77fafcf52f3f36e49c71a8770afa9d8a70255a04e2176c315a466fb74a4
- MD5 60c3f2d87b9de97090c3d4bb6f5847a4
- SHA1 a969410ea5cb0a27afe6f982e859bfb28fc6f0d1
- SHA512 d5591d464c9836ae4229ff28412ea4b25a4a5f120c588f0e27ff0f5cc50b871315303ebec06ba7fcf49a943e35a0e28cc77cfa53f8d23adad4204efdd01fbdc1
- TLSH T16FE0683914F6012EE2F4D4B44BDDA9310A9AF022045992B40AF427007206D00AE12A35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000b
- Size 331KB
- SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
- MD5 05ef8155cf66131654d3bb9c9cba5853
- SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
- SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
- SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
- TLSH T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 162KB
- SHA256 9711a9a0f35b15391f77189762f7adf15bb336d4e60f6510516c7c7ff116b1fd
- MD5 e5915882e2a1970194f2dd6e4c60a5c5
- SHA1 c1cfb45f1684486fb5aa016dcb0e10a042c770c2
- SHA512 edd73eebef9dbf3720b827423a8f3b75913c0121d04ad503b41fad43c13edff420b526ef463d54829f6c43cf9df50bd89c258fb16cfdb2210a970fc18b3ac44c
- SSDEEP 3072:sNgk4+CAyw5m2iwH77kNjY54EktJcVUCf1Jr900SSTO5SLkfSn0W10:L4Nbk+5bMGr+01G72O
- TLSH T17EF32274300DCEC4D2CDEF1CF65D9815131406CA7DAE69EA278D35A04EFA5BA070AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 8bb139cd7d5ff1afe0ebb895b7796262e893eaefe3e83d08e14268d0f0a5fa35
- MD5 ca7f4f9bee1c24dd23010c2a5a13bbf7
- SHA1 4bed38e7e86e291ac2ccbb5f8c387707b1e3aea6
- SHA512 b67cbc699be7e85c20804de0988fa0c688d91cea334272dfd4b788f73ac70fed55f54ff333c2d803918a1e3d99c0678ef6e27ccbda144a5347dfacbf2f17cff5
- TLSH T1293173701555243ABF26C36FD6836F572A174093B22851E16DEE090EA8F7C9F0F1751B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer\opera_installer_20260809051904474.log
- Size 2KB
- SHA256 7bc566fcba0ccfccf07d93715f3a0d2a6c42e289109abe49b1bca206f2af32d8
- MD5 786f023a1bf074982425329e76890e2a
- SHA1 7f6c49b0d55007f1e36f915f06f6f92eaab31a0f
- SHA512 263c75763427f1b35327c56d0d362ab21752bfe4ded481a8b2976e62cdba318c86525f89f04278430b06f414cd556ac14d3848737b1523b5fa469bf347cdb01e
- TLSH T17C511D4D06004776BBACA3DF63BF93729315BC4385A44EB863FE01547DF265AD43A88A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe
- Size 3.6MB
- SHA256 e2e8801e03a318242e41605d348162e6e5e3af9969c1642917f45e03b77f09ef
- MD5 6380b57c6dc4f4885b77bec784376232
- SHA1 bfdcaf0cd8850c8fe61321ff045b8673c1cfe49f
- SHA512 161598349e0698c10cc5639370868ac71fe7305aa75abb4c5a8e90467d5d27831adf57474822e1e68780ab0e6f2ad94f2df76150cead78026d178d087d9d839c
- SSDEEP 49152:OabTeIVeutXcwBC5k9pXMggi589sX0YVDTOvKQcJWchjIQIYTSlVZO3rc8:La+LD9pXDjn6xOdjFTSV8
- TLSH T138067C13F29A01D8C01DD1798B4A9232EA71BC454B31B6DF0B90B7562F7AEE46B7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\browser_assistant.exe
- Size 7.5MB
- SHA256 c88739b078faf0a9f39b568a3c50f8b187bac01824169a6db985bd7445c7fc9c
- MD5 e27f41e6d46b46b2602232ad21e25171
- SHA1 fffe07f5bca3d8ef309ff73ec3102674a9f1bb6f
- SHA512 2d2c92ca4dce34b57b54d2f97f370d6f0220208f53c68911ace56425fd108f9787c6b4c0b07077fb5d60c2e5f2f38d140fec38798c6a5c154d130dfed5b55311
- SSDEEP 98304:vhgH3RE8614iKPHbajkinL3GOBj6r/oj4f1Bw9MRqwQ:vhscKPOwS7eFRqwQ
- TLSH T144867D53F29611F8C01EC978876E5232A975BC8A4B35A3EF0AE436211E75ED46F3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\dbgcore.DLL
- Size 256KB
- SHA256 f8f9b7c105bfd3e7021c81d65dc05480f5a2c80057ff9e3d0326390e0d2fa703
- MD5 dd2291af8530db435b37af717e154d46
- SHA1 933be1fc7d8002aa194b8fd200e4b16835683afb
- SHA512 ab14cdae8992afce7ea40cd2334f9d9be2de50adbc0909cd9837d3d3f77303ce3eada62ea76a537e927b99925dffc2f1e420f76f3d2f0f73c0d87e8decd7bf91
- SSDEEP 6144:hTMmeETF1i9jt8tPJh2Usk8EcW/gWASh0ddOFlOrT:hTMmeER16jt8RgAOT
- TLSH T12F446C2A63B414E5DD67D13CC647861AEBB270212311A7DB03A0C1B9DF1BBE8763DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\dbghelp.dll
- Size 2.2MB
- SHA256 c74f6b2420a16583f940d02f21c1bb3131a8c640f903c1e24a6a56fc05a76931
- MD5 74ac78fe2568c9f0692e7a87b6a8d3eb
- SHA1 eb3ecc101cb3a9a265615f35b79b558149c057cf
- SHA512 60650922faf701dc93934093a1c391560693ff1770b3a5bb5bc2910580378096704ffae95508f39510ef46302f1b11c399abf7764a88aabd940abfd563c21608
- SSDEEP 49152:NT+ipkjpsHJlG07db7lOgSeQfdEC102IQQcu:ljipsHJ4AllpQfS
- TLSH T194B58B075AE800A8D67AE27CD667560BE7F274010721A7DF026487AE6F37FE41ABD710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\files_list
- Size 72B
- SHA256 5b3741e12f14d0ae54d450fff585c5fbfa7b360800c863722472d320c26b4ef4
- MD5 7c375531029e3e1e14e204850417eb74
- SHA1 086ccee638fbb7dcad3d21627c4f32386490f456
- SHA512 8411bf285d334a51b51993487148d0b53f6cf9439a9250b71cce9718250bbb226825e3a1be832443b84ace59e43f3fb77c4f4741f0d376543ca32d9ab40f4a67
- TLSH T169A00204C51E089CAFC53595831146FF67D765145AB89655075F10CC5926027478F776
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant_package
- Size 3.6MB
- SHA256 bcf1751bd4a26fbf8a66570da26e75993470b69e737950fc294cdb48d5269742
- MD5 dce412b92d695557acda2870a79c1d29
- SHA1 8a0c4b8ed4c292526c44d8ae69202217e2f4f5b2
- SHA512 effa04d0d3fbdc24fb8ee4c8fa920e7d0f7d11aee4069703a48c47cb24dc3d17ccffda26f252d0f220efdb1c43cc43981265d90e61dc2aedea9334fb448ea4b8
- SSDEEP 98304:DkiokFwKFIgGvsxiGNBJCM5AGvMnjU5+jBqtfAPylt:Dh+AbViGNByUc1q4Pylt
- TLSH T1350633217AA488B0E75249330EC1F2F96FBEF2710972969F3398076E9E61581D319377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\extra_apps
- Size 21B
- SHA256 7fff1ae3a38aceed8de26fe3de3c43fdc2526210c3f225557ee3c8411175882d
- MD5 922927f22ef5189300db689f0c9ef022
- SHA1 359ab18960786773969268aa8920ed284c136da0
- SHA512 015b3384cf3cf62caccd1f1b6db04298bbe2e72dde2618ad66f151effd3bfe8b062f24aa99e6f0acba57120e43b811cf782860fad5ff46b391cc57a006c39ffb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe
- Size 8.3MB
- SHA256 ed8a17da5e7ce86d6be3cb9956641c72033cd9de51bfb0a4b2caac6b93f2215c
- MD5 9cb7a6660482c83b3f1308cc6716c71f
- SHA1 5f0c0a44a8ea83efa5e18196f8376c2c0600b42a
- SHA512 30e6bcb36c593e49774d9deb12a87d0942225cbcc785d348c8762cc6f50d1185b5348823a45ce268bbd03abaef321165b956788a5fb8e1c4c96c70b649437845
- SSDEEP 98304:uh6i+ubH0SElWmLmgm3yrglOgw+Mne2ZQYNY8AFC:Li+ubH0SElWEZmXFC
- TLSH T1E3967C53F2A601E8D06FCA748B7A523299757C464B31A3EF0A943A251E75FD46F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\server_tracking_data
- Size 256B
- SHA256 cd33994a219644ea016b597fbb332b5d7ab58732ac20e7d17aa882f920f56ead
- MD5 d8637a4cbe6106147c90b898f8a438c1
- SHA1 28f23c31c02c0d3ece756df2efabd476b8989325
- SHA512 3463418129d9f82f910bd71190fa1b3a207a9c86401f05b5355f8efb92210e39109f9406638a79bee691f917e292c3b271fcf84231af886c2b35b9b2f8bb8e90
- TLSH T118D095B57AD53196D1095E53340B7F2E164490E634315441CFC1015F4116B357FA9751
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Opera Browser.lnk
- Size 1KB
- SHA256 e14baa716f6690b573311850ecc16e7364286284c9f07bfc72ef95760f132d07
- MD5 fd49e7a6b6db3ac350a3186a11cb5853
- SHA1 e2c4e83eecdabffcee8aaf453f98b1ce448639ae
- SHA512 429c102e246cded9311945ba29a52375e0ded276b103748bdd3af32e1c4ff6b4fa8779ae1869fcac0293ba2e3c4eb65245e5f7ed2e2b37a735cf4880d4079bd5
- TLSH T13521D2056ED52722E3F7867680F3371A6274B451AF0B0D2C20A4434559B5986F9D8F2F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\e3a66f35-fa35-42ba-8638-dbb8997d0c6c.tmp
- Size 16B
- SHA256 4304ad9301017a03d77d588218c73d2b5fbc0a292138994c023a10aed3196740
- MD5 76bb71133df1f02f4d9946a0daa79104
- SHA1 388b44fc9e7cd4afb7d54e0e62ae2fc07d870ac7
- SHA512 4ca4ae976e87089b2a08e73cee0988aa8b1084766602aa10701c049e08f2acab61f306f56c2d3d5ac3c6ee965e417f9c2593b94f4f33110818bdf327d7fbbcf4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\files_list
- Size 6KB
- SHA256 a6a92b393512c688e29ee306223c4e22d6446cb49d882cfd3812fa7af34d4510
- MD5 c3bd13cc30484f8117d6411787689f78
- SHA1 4f94adec66a33c5e96ed3b7d48fc9c527fe822ca
- SHA512 aba8acd32d00eb56e53dc957ea7788f516f219c75fdae286c4978fffeb9b97d9b0ae00b3d76e7c1739ab30e1ea7a1027418924359fdb51519e03fb1870828a1c
- SSDEEP 96:TMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiRORnOU:4afz5XMRwbxHBZ7unmvgORnOU
- TLSH T1C0D10697895F0265CAFD93F1EE61E89091342495EEB83058F7C70A5694A33FE02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer_prefs_include.json
- Size 907B
- SHA256 73d3989a76ec3b4e332ec50c07b85922be1319336f8446a65663fee9d8987d5e
- MD5 da5e5129ebc5562d72065573808e8809
- SHA1 e4f9ea995720c93c1cb0e240e635e5fe27a28b55
- SHA512 33c12af44024128ebbf8a9ba78fb7c0ecddb497be9916e341576aac7f808b71baf488ef36a796f2ce22dad50fdc7e83911c5080b39d0d53cf7804b8b18844b62
- TLSH T155112BF0208074136733C21FC68B0F97A6435303650810F354828C4EE8EFC5A0E56134
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\resources\07593226-C5C5-438B-86BE-3F6361CD5B10.ico
- Size 1KB
- SHA256 f06ebef0b912b94d7e0af3915f2a6b6b64f74cb60bc8aaa1104c874761a0dee6
- MD5 74fdac19593602b8d25a5e2fdb9c3051
- SHA1 81db52e9ad1be5946dffa3c89f5302633a7698d2
- SHA512 8ffb507e46c99f1fede3f12c14998cd41afa8cfc5c815756343041f1bef6faf7ba4429cebeb87b0fb807d911f5516d235d5f893e519576b1fb675d25d025c21b
- TLSH T173218889DA51073DC9E1EBB34210265D93D55F6E60F27FA28161B1453EB02A0393838A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\root_files_list
- Size 693B
- SHA256 d835cd27a880b62877ea68ca07c5240ee686f2744bee1580108fc786ac3affff
- MD5 1e98efdd378d2a02a922b434b72fc91b
- SHA1 303adc66ccf882f9a6339275aacc95253e122cc2
- SHA512 9488db13c8526c64e8748777d72796eed299b1409df6872256c8cb236e967c3d703ab762d0f5736588640d588662d25505aec124c760aa3d01a60cb57c79cf87
- TLSH T1F60100E22D83EFCF517AFAD3079B89C8488C4743F69F492903901881B1559340EBB08D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2152_1450120445\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2152_1553790258\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d70cbdf642c9f8c5.customDestinations-ms
- Size 25KB
- SHA256 aaee2af7bb687fb3929b1bad3d2246a129302f09dfa467e55045b06d4322e694
- MD5 18cdd4b1e756e8d5426b4b8c3466865c
- SHA1 39455cd6e4a9a79075c3051eebccf4a42272152f
- SHA512 d8566814aeb33386d305c6147280ef1f3fbc73d78a67f73cc4ba267176112a8fe9e867f81d9d1a9c4780c98de5d9c36e8aad7cc0c9dae65beb79737c62047ae1
- SSDEEP 384:7VZWtJWT1TeZkt/eZgAeZ6eZGO9SeZ1vMneZD9YWDeZ4eZ0eZU:7St6bt/QlccVI5Tv9
- TLSH T14BC211243DE92623E3F7877685F6278AAD24B8527B065C1C109243464D63F86FDC6B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d70cbdf642c9f8c5.customDestinations-ms
- Size 25KB
- SHA256 ada23a55b305e4b01c0c89979e809d6094216ad40759637ba830b6378d4d0603
- MD5 015a30e6e3a67b6c08ff676ccdc1412d
- SHA1 761fe8991728edcd2ad9ced76aa37eb2e32a0319
- SHA512 719558edef9ffe781d786b38b9057c3a790e8b66a091891171bf9b3e3ef71610323f1a835248dd0cc35a2d975c4865c3b2ac685953cdfdc078e728e4552f648e
- SSDEEP 384:7eZWtJWT1TeZkt/eZgAeZ6eZGO9SeZ1vMneZD9YWDeZ4eZ0eZU:7/t6bt/QlccVI5Tv9
- TLSH T122C211243DE92623E3F7877685F6278AAD24B8527B065C1C109243460D63F86FDC6B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\93ef5874-7469-406d-b80f-487169025eac.tmp
- Size 5KB
- SHA256 90e01baabe56424eddc69483926bfdf9f8137a2d373368f459142bd493c84680
- MD5 13720add20218fd1c9ef684b24486121
- SHA1 2a8979c8b7f0e83b99da14aebd43bfbb9dbd3bd9
- SHA512 88b4592cfbf8dba57888011b0397ce98dd55fcb02faf06e85dccffbb5410dd65b6eccd645da930fbeaa8645f72441d74f9311711f560f7f4d4bff4ce9ec2bcd8
- SSDEEP 96:mAB9TVbWoxaAfiTuWDotonYWOBNkirKTUa2VGeAk9oN0lVezlba:mAz55xW7DURWEvFD9D4lu
- TLSH T100B1C635E40ADD7AA6FE824957067AC3FB93211346804ED469DD4E0C02DF6EF381A45F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 a8dcce229a1387297362fc9b069745998a3bda607d6ca6a08c987420e802367c
- MD5 3e22f7e8cc1629a6cf0f31cb290313f7
- SHA1 5b3be8334b90f98f4a72b3445bd40b60c69981d1
- SHA512 e2f63e063777588380acf9622db74d94b6a002a908c14f467e9fc8d16b86c025557caa5c34a3140e2f8ede1704b6077a37616536ad8feeb2d562db97a0ba0684
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0de45c78-988b-4da2-aeb1-e1d85e6ba30a.tmp
- Size 171B
- SHA256 f41f43f8ac3c34dede52b0f9efe8430c38556dfeaed924cd0b062f4d320b6e09
- MD5 40ffa1d4674d10bff6e28c7df68d21f7
- SHA1 04b6ef9d02aae5967e9e096fb7ff2a145ab34d0c
- SHA512 fe0b903eb6b8f306699b79281f69b5960efa739cbc009ab5af14e2c134c1908a7f4f282f9eb2e89a36cc98953546645d7f3bf2805d806c34cba0bdfff0bad153
- TLSH T11EC0C08E3C1266185C0C1538F006311041923F11010B402004FA0049071023A1209600
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\3c171b61-cf68-4c11-b7e7-bf67208461af.tmp
- Size 14KB
- SHA256 856ad9c7004e841760b0616d7787abc8ebff36ac5baee056dfcfe752a2e020a1
- MD5 f0d93cebb9488d36bac5909c649ca7d3
- SHA1 54a4d3cdd646b6eb54ce432c978eb4717142f812
- SHA512 fd8cd6633e09f114c1b244530d1ed9d75bd89a2908caccdbb42bdf348533868a7dd01fb1f19a3b54fe9577193b31a9874b1d14f8d0dc3b5d02013287f2117785
- SSDEEP 192:d7VH7O2iu+Uyjw2QBacT/eeAqs6fsLoT39dtvn8M6yXMutvzMQrhtmzZDnOKwTJ4:dFH/X83xLrVM6LZj
- TLSH T1A0624187A8305EBA05D2557AB590F35BF2E4002196A1ADA4B6FDDC2E00CB6DE7432DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4d2b86d5-285d-41de-ab2f-3aad12cf8477.tmp
- Size 155KB
- SHA256 9552da76362069e24428f06c4565a116d1c0970c8532143094cfee02c0353f20
- MD5 4ef1663adf6ac9bdbf97b07deab687ea
- SHA1 210d4f2a71602fb241fe28ff58315b056dc4427b
- SHA512 721da2dd4961b51e9ccc736a37573d061bc6fd869b03dabe2e487444e905eb90303f69f94a118c81d3a132bd323f53a672d17db3f6cdea428e4cf8f8f16f779a
- SSDEEP 3072:Latrb/B4ZhPLJ0tSiJx6HbCxz9fNwkhb6JUSGZGnrTRWRqx8Lje1FAWJhUV:OZbSX0EiJc7Cp9VrNpXZG8RI8/e1FAm0
- TLSH T1D7F312A4E8F11E648B9E731FAC1F2BF5FE422F5F22C485498E91EFAB01179108C72855
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\54299139-9e01-4aba-bf6b-892a88056427.tmp
- Size 81KB
- SHA256 4dd2e0f9479c6a012d1e663697f541d81f34beb42060df2bb408fd6358ef1736
- MD5 43d6a42592ac254b946365cb83faacea
- SHA1 4f82ff23b9308334b68f83152fdaec58d07bccd0
- SHA512 2e412352ab46f822f03bae444cf84fe27f8ce50be0884dfca3928785a4bde7074390c18e3b953fa9a3fc7add381557c2316a4d5a854d76652da4b985829b1ef8
- SSDEEP 1536:HHtHCphHv5H+ah4HPu7HjBH7IEHJHuCHvkqCHTCkvocXTFHlHwsOHHNHLHCUHqHG:4pdPyIssCY2ATOOG+kXsPn
- TLSH T12383C7E7CCCD9F758ED98BB9DC36A71798D400059FDC9E14A7F9805C0386A89113E687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 943fd5f4dbe99901e3e5f0774ee85082cf70ef492583a44714ae89dbc4bbdf7c
- MD5 ec9d27d5b9adc6855f1af8135435d4fb
- SHA1 e1053dd6125e543f1ae7841d5e46136fadfa8025
- SHA512 12cacb80fe3ff80c79d7fc320d53909350533a8cd04ee7ea6930a338c67180f02e40f21206fa10a4fd23d8dfe686775f94e7b68ce1357778e06b6e4a9fbee937
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 1f114fdee0b98bb9c5cac1ea68dee62700668004745ad5b5152c0a5105a12aca
- MD5 2c7cb9efdc8709f5962b8b07c8f4f65b
- SHA1 b5e38f153b0ebf4e2c0fe51f5b6c8a77e3648a89
- SHA512 f6b999d2020ee258ee684f543efb1aa4e62d2ffc3d5bbea9992f9b9589d1e5d49cfc1c6aae432971ffa60ba6ad07dcb285e7f786512d4bcfd55e1fafdc9398e5
- TLSH T19C31529A6CFA442DDF2C977140EA4F7C9E18E657108F073FA650ED126AA73F40081F16
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 744B
- SHA256 60403c57e773beef17705a44c71e4a2aea84e81beff9420aea8fedcca669e936
- MD5 ce7f7900afd2d6474d4e3fe813190183
- SHA1 8651cd585fef15068fb9f3870f3f32b79f8a245e
- SHA512 6e69c7d6f4198b921d0dd3893aaf17b6ed46eb6352c91e5439f728ba1fc9323f83d7091b159ee7334273a741442d43ddb3ceddc359bd648bf9ed49853b5e1fcd
- TLSH T1B801246A08F4513DDF1C877350FA0E9CA25CAA172541579FFB613D676DCB2E84104C66
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 db7d108de5b41200332ec1c579f5cefac37469e5c62e78fea37f1ab2be7ace21
- MD5 2de31f127f71c253a7bbc2741e83c9a6
- SHA1 e1baa35a30e1a2b79a4677532c9d419d841a3ceb
- SHA512 ae9e997b1b4b62acd861e0c531b95907ea94c203f15e65881c090239d4b30ed2006a80d49baa8f3d358929c6127510cafb5b6f424cf2027434b53419aa1ee202
- TLSH T1A651985698F9915DEF2D433124E6AF386A14D3A7018B17BF3221ED2A969F7E00086F05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
- Size 46KB
- SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
- MD5 3a4b577e6f2150e055d503fc17aec243
- SHA1 6ab613cb92850a343caf28887301748c73b34722
- SHA512 d4fb08f3423ddb5501e2d50c4b3c6cec5be34c9b149d469074119b144fa54a317199f485a8dc7eb650fa7762a0be79b49a2d99b4cbe9dd8408a632baf0cb2537
- SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51SqJ:un8VEbWXxYNG8/A85DQqkslr4JPmCHLn
- TLSH T1F22328996269687E0BC2D2ED925D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\service-worker-loader.js
- Size 49B
- SHA256 f8eef7c260d4743817755ab4987619c18d1266f27d2435f32ad3f50494a9058e
- MD5 98ba3e7390f54d7b7c944a81543425d9
- SHA1 017515b72aca14c87c6731b50ccf2ae8c1c25566
- SHA512 7569a6aa2521d00b34f4e929b3a1d8fd72f5c4f10e63524deb90414be85ced641fa55299192e6c3646de1a41649b378de00ec1fb54a222e708de8236d63a490c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
- Size 112KB
- SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
- MD5 59de0decd0e4751b14231dde34507403
- SHA1 5892abedcec573765d8247204ae038ff4c44848c
- SHA512 16a7716b4afd10d0984c99fdb4e2617af3ca0a96f7599d22675924760b72ac00bd5460de75b46fb26bbdeef9ac4ddd432bd70c47467d3cacf345af5e552de4db
- SSDEEP 1536:Ska6rka6dmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6vszmxnS9lbv93NddM3prX+wH
- TLSH T1C4B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\service_worker.js
- Size 74KB
- SHA256 220fca4d7acccb3242c07ce434e9b97dd48d9fb111c71c01c0c1b2dcafb35176
- MD5 c6d94d6d9b9a4be68d85cb99d21affc8
- SHA1 f46e15a657c99c62bde0b327cee8a0e120aabd2d
- SHA512 5e0f0f100118e1fd6ba6cae0fb934de6353136dfc6148a49253ab7fbb62dd163f2c2abaf0847334d00bb0915840c988f581a2aeb79a90f4d7c783ec699fe5c1c
- SSDEEP 1536:6ka6yka6NmtlOCvVVJjUYLQY7ZVwOmtdCMkHBabW3PCPUMhY:6ka6yka6kOEnjZX1VZ6UM0BaiPCRY
- TLSH T1C2733ACC79C3F4A597A3A4A5802F2143F12D2E01249D9891F726C9E5B86CC4DE63BBF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
- Size 5KB
- SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
- MD5 6586f73b98953dc3d70ffd9a61e24911
- SHA1 3e9de04cd595f3a391392a92010633d1d0608a38
- SHA512 8ff2b9b2ac25b0cc60e79ac6399bed6d02a29b1f92ab499a89878c63618460a70a2d0e3f2309b227fda01e03c3427c4a11940b4b95704ada5689f80c385adda2
- SSDEEP 96:xSVa6rQaSVa6j38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6j3805se3m4XFzVJFs31wx6z
- TLSH T16AB1B505815C4C7D8FB5028A9ABE135212DE2283787BD4C4EFA3C47597353CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\20ce22aa-3004-49a3-8a19-02725986c81c.tmp
- Size 27KB
- SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
- MD5 c7828175f89c5a3ada16fc7817c80af8
- SHA1 e6e6f4dd36fb419cb311093dadf8acb61db1d30e
- SHA512 b68e7b8c42c6d571487841ad41148f7452e970b295516fe025744f7bbc8d0d7986699b41d5f71a6b43fd4ac28b6a216e24c19820ab01817c4bcfd50677fe7541
- SSDEEP 384:OwU2+wy7Pxdr6zfM1dGSwrI7dG91rfprU87MJzeax:f1+V7jrI7IeywMoy
- TLSH T15EC21EE360CA08D9FFDF25F155861ACBD09BBB774A262178138363A5D3E4D20D5ABB01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\51338c2b-6d5e-4a00-a237-539026e81654.tmp
- Size 27KB
- SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
- MD5 ccd9f3e1f74f2028805e3fea6ad9b934
- SHA1 f5bc2ea0c0c3d89c7f37792cc43fe592f8bec748
- SHA512 ce32e58b002e2f7fe1649ca2ef4dab2a3ff9c738c11f010a9a837a5e7eb338d03672c325636c87659fa19f75625cebd9dc2602b428bc6d1e2d0799230d81c824
- SSDEEP 768:3F1F0kh7RCnrrh1q9i1coUSeJ1xM9eK3ZSk5:3F1F0k9RCnrrh1q9i1coUSeJ1xM9eSZL
- TLSH T179C297B2D8081F14E698B835EB7B9C0A81F8AD2D1439250FB767BC507D9F64EC983746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5871b4ce-a1a2-4cb7-9b95-a0b0f0387d10.tmp
- Size 27KB
- SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
- MD5 ee77c4eb6b9e8b98db1acf41ba32c064
- SHA1 c44316ff0f61c9a7f27f72bc31925ab992de4f6f
- SHA512 ac0d2ae2afeeb0d82f75e86af6580c804c53abe3701734c7ad5e34bdfa4aa9144fc293a4c3d32207d3f0c70b9e3744ed8bee09cfbf96dc8ac825734537d04818
- SSDEEP 768:90haQ3glH/EKEi+B4MfgL2BYb8Ohg70q6XnKa9UgEUjJY99yVnX3akrtSX:90haQ3glH/1Ei+B4MfgL2Bo8Ohg70q6m
- TLSH T1DEC286C2D8C00264EC592F75257B1D39112BBFBABDB8B24DDE4DB1757BB32D24126A02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6b5b6e2e-44ac-48d5-8d7d-9a29ceb50e1c.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\88bfb1a2-23d9-4917-9d18-d261d3bcd6a9.tmp
- Size 27KB
- SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
- MD5 20592c0bbc8cff757ec1ba508ee277bf
- SHA1 7465050f95649e3bf662ebad10de27a9bef6a3dd
- SHA512 c50dc6adc0aa4f0b80bfcc9bfa774c5d1a14e1cd3e889c924d3bfdcfa16c96b34f80dfdadde662ed87c0f33b37f59eaa151706e949641a24104c3583fc962cbc
- SSDEEP 768:1VUpNy4heVwCSvh97oYHSI4R7VIO8BkM8s:3UpNy4heVwCSvh97zHSR7VIO8BN8s
- TLSH T149C2FFC2C8C54658EDA95F3460770D3D466BBFB9FEB8B54E8A8CB0717BB32C20426546
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\fcf0cbca-624d-4af1-bcb6-c85cc0f1b71d.tmp
- Size 27KB
- SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
- MD5 1f17cac9ff7b6851ed5bc95c2625596e
- SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
- SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
- SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
- TLSH T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\6913a20d-c221-452a-aff8-83cafd424da4.tmp
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 17KB
- SHA256 5a74b336f010e457dce308e1c7e58470d151b334607a7bda7650e76054fe3e6a
- MD5 2e23aa491e5f4f1c9f6f586f5684746a
- SHA1 8b0cac237a0e7ebe6b8be94235894d210c26129a
- SHA512 fcb198663a9c3321821e44d4a0e71ebd2f59acdc58f8bfc5e4e1a56357f3ef6b10f4bedb81a8841af5f3865211c0f1c8d58fef84cc1e101f349f67d6f8c85a97
- SSDEEP 384:DJpRBbldLxEAJhnP3pa6eqh4JWRhM9jItXXVrvpzh8/rVENxrfa9ZIYIiSifa6ZY:Lso7ThZVyYreyl32HljybW8d
- TLSH T15C82CEF7C3E8863CD9515AF49B14AE1ACE2E1958432C3D5EC5D4BE8B93E2871D241B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 960B
- SHA256 85f34f271824040c59837d59870e5a8a509e128db9915b9513677dd7ca122f60
- MD5 7db05be38330e163cbb2ad4156ed2f29
- SHA1 1983e41cae0651ebfd54cd0c6f94186acfe235e1
- SHA512 ec909a9ce58ca57ff5c2638441759a5ed33f761805265646b9d7e871256a78cf4296a4f7059fa3dcb2d03216f39d646645045377bff486f97dddc3c8e86e9cd8
- TLSH T1EE112EFB53706A7D9B1183F4E9156E2FCE591011839C7C7A86945E2793B2571E40074B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 e84b96a0411a6ecacf69b3f84983f20ea34d4c6992f772f9702845ff9cd623ff
- MD5 b9e5bee96a1ef85c88e61a20b8249727
- SHA1 1fc8a2c0a2b5e4d58d8bf5d22bfb7ce9642f97d3
- SHA512 37407d6f65a806ffafb5f02caeb94cac83a7de758c6edb1cf23c6e0623626675eb1b1e8b163b07d5dd29ef1f940fb54b4550f9d1d2c4da7aa6908f83ec6a4966
- SSDEEP 192:wJcBF7VdfZIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZ8:YmFPRAKX8KTp6iVh6qH6Y
- TLSH T162724187A8301EFA05D2957AB590F75BF2E5002196E06DA4B6FDCD2E00CB6DE7432987
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 d78ddc45bd3ebd5d7871f84b75baf531d698d29329f822bf166edfe0b512851a
- MD5 556ce29f11b7f2e5ddbdfb8151007e4b
- SHA1 cf23544cf37cc0c1649b873d58514e4964bf1c82
- SHA512 0700785719a13b23d412d1f686480b31c9db35b0ba0c18d8ae8b42e050da394c048bc0b1b88c00dcb39596d600bf2a01c8e30f9a716474a9d5761cab10a45d7c
- SSDEEP 192:wJcBF7VdMyIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZX:YmFPVAKX8dTpc6rVh6qH6Y
- TLSH T1A1724287A8301EFA05D2953AB590F75BF2E5003196E06DA4B7FDDD2E00CB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 14c00433cbd3f187cb829e8cdcd19526b6b9a852907b8a95e170fab37e06a554
- MD5 43847341298f7b1c18a0ccd8bcaa3b10
- SHA1 df5069ff8478788917fd4e8ecf947be647f9f59f
- SHA512 5972fab713046f1b518b087b721719f9bcbaed5b8989efc08485ca806233c34cb27854c21ebea73713a6aab5413d757645f2b4cef2f3ee84df68deb90caab96a
- SSDEEP 192:Og7V0aO2iu+Uyjw2QBacT/eeAqs6fsLoT39dtvn8M6yXMutvzMQrhtmzZDnOKwTO:jaC/X83xLrVM6LZj
- TLSH T101625187A8305EFA05D2557AB590F35BF2E4002196A1ADA1B6FDCC2E00CB6DE7432DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 30f0a312688258a1511f4abf5076ed3857607059b46c9bfc90802fc3d58f703a
- MD5 674439dd8deaea44ad377629a7373dbf
- SHA1 99a7d6ee5377e31541461bdedfa7a8f04ffe0c4c
- SHA512 fc04a5971be5adf05e547eb9f49c6192ad78a02b4a28714b7214a1c5661b46381c61faee2e77433a07bbff8193b95998de3f3f430fc655ce93a285c758e9c454
- SSDEEP 192:wJcBF7Vd0QtIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmz1:YmFPzAKX8dTpc6rVh6qH6Y
- TLSH T16A724387A8301EFA05D2953AB590F75BF2E5003196E06DA4B7FDDD2E00CB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 9ab31463ae17397bf717d9f99eec48327c68469ab0c4d521fd560122e3134c73
- MD5 3350679a60317701a3afff6d5555ab3d
- SHA1 7de92322fdf89bc63a6ebbeda01723c5aa3bcab2
- SHA512 fab7a2eead5fa1ed6c8a63bffc4cfee9471efe326753fe91b5c17aff3fa07044b41b79d469094d2c220942d633a6a7e1fa5095adf34b2f11236eff524e1ac1eb
- SSDEEP 192:wJcBF7Vd0EIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZa:YmFPbAKX8KTpc6rVh6qH6Y
- TLSH T1CE724287A8305EFA05D2953AB590F75BF2E5003196E06DA4B7FDCD2E00CB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 00abc25944a804e56421a5ca4d55b79a33048dcf19527c959a449b079748d693
- MD5 0e12ea5d9942f81081c89d0fadb026bd
- SHA1 56bf4b84d5faa10760d3e2f12c4fe281a16e8965
- SHA512 fcf7b016b1e1a78946466807b0952a6dfe1c64469185f9c132de9fa9684c35f1e00862e13970e9d0acac0b3d9798114bbb9b72782e9fb11f08a35f1a549cb6ce
- SSDEEP 192:wqcBF7VdiAIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZC:pmFP9AKX8dTpcB6mVh6qH6Y
- TLSH T18E825383A8301EFA05D2953AF590F75BF2E5003196E06DA4B7FDDC2E00CB6DE7422986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 37ef11fa4671ad21f68806110f26a435eecaa64fa67b88e2b148ac30d674a2f1
- MD5 187d5d248bc733c4ffb493ab5f41fdce
- SHA1 66e39de1481d68f013a275fddee393c8ff083d3e
- SHA512 53d2329cc67f036e10ec50d1866883d233fa5aa22d1494d26d422b57605b0798a2d08939780966cd1a36a43ce38d80ad665422e1732f4197334ee9a05304e636
- SSDEEP 192:Oj7VdLGO2iu+Uyjw2QBacT/eeAqs6fsLoT39dtvn8M6yXMutvzMQrhtmzZDnOKwv:YPLm/X83xLpVh6qH6t
- TLSH T149625387A8205DFA05D2557AB590F75BF2E4003196A16DA4B6FDCC2E00CB6DE74329C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 74f5a3e6c48e5a18fd975a87a28f383d8d1731f5f7972f1cb2936901f3dc5c4a
- MD5 f9c64295f3e05b5c50374b620538fbb7
- SHA1 81437835340cf9c68020d908db3ecfafb241dcdd
- SHA512 bb36bcf92344cc546db2839ea6125128b2e1030ae97be99aecdd40a36dde76bd169c486aa0e828bd64ef5a2c6597277b564c1e0781f3e7f65095e849d4b9f272
- SSDEEP 192:wj7Vd2IO2iu+Uyjw2QBacT/eeAqs6fsLoTn09dtvn8M6yXMutvzMQrhtmzZDnOKO:OP2AcX8yTp6iVh6qH6Y
- TLSH T108725187A8305EFA05D2957AF590F75BF2E4003196A06DA4B6FDCD2E00CB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 20KB
- SHA256 a5a29aec9c8d68ff030b790cd88a1483653d09b38410aaba1faa768e421808a9
- MD5 9198b5a6fddfca0c8361ea0e4b733bc1
- SHA1 a8556711573bc4b5bde7ad0edf266c0bdea0e096
- SHA512 154e7390375a45edff548726ab4cba652a4b3c9019e5e91fc09eaacbdf655ca11adbf2faf48b3646a018651d0562b7c92e1b34eaa67555bfe68c2c3be5aab56d
- SSDEEP 192:OfcBF7Vd61osO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzf:smFPY1KX8gPTpcg6V8ph6qz6t
- TLSH T191928687E8209EFA15D39536A584F35BE1FA0028E6D45DA463FDCC2D00DF7DE7122982
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 e5be144606eb366f744e05f542b3f49f16ccb97208edde88cab91143804de886
- MD5 fd800091c5acac3c1f713bbad6719adc
- SHA1 564237a222bf695ce410fdc38253f1706787b8b8
- SHA512 0d9cdd84107c7025d05b2adf477f363aa210888a9a13cbba9a855bc3de973136bed4bc03b26ed4f867c382d89738b9256046cf29dbb4a2df85f53c3922766b5a
- SSDEEP 192:wJcBF7VdoOIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZC:YmFPJAKX8dTpcB6mVh6qH6Y
- TLSH T112825387A8301EFA05D2953AF590F75BF2E5002196E06DA4B7FDCD2E00CB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 b3521c4f56ff7acf6f143cddfdaf3d1581ab0919c534c326e30269921743dd7f
- MD5 08b98fda8474c49b3c04b23c1ce331b2
- SHA1 6e9428f9d36d054d6b0e3df392924f9a8394ad2b
- SHA512 f2745aebdd27e4582a1c8a9b955bd4509999395cfb0c005c344bbe01958fe614121eef509767d3d52c85c4ed2cb6c106d32dc4aa8eb82d6c925a1229946f920c
- SSDEEP 192:wqcBF7Vd6WIO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZB:pmFPPAKX8dPTpcB6FVh6qH6Y
- TLSH T153825383A8301EFA05E2953AB550F76BF2E5003196E06DA4B7FDDD2D00DB6DE7432986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 20KB
- SHA256 ffabde8310470229b966b18f5f3986c9ba251473010b6a51b3a9382772205c4b
- MD5 9a959da849e0831d860192ffdcc5f507
- SHA1 db336655f71715f43e83fa3f43ca65ba07e34981
- SHA512 4be7dc703df40f06a366531e3a214d6a30c57e4d778ef5611a94a49d9a8cbe20fcc07abfa261332a40d920a0646a0542525193f92c9ddeadacf7e2211085c444
- SSDEEP 192:wfcBF7Vd61osO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzl:WmFPY1KX8gPTpcg628ph6qz6Y
- TLSH T1A3929687E8209EFA15D39536A584F35BE1FA0028E6D55DA463FDCC2D00DF7DE7122982
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 17KB
- SHA256 59d392d15b19dd980f893215d7b64ceebc2f1ceb5d35cda4435dc328a383d0ad
- MD5 4ba5030b79aff43a66d3604b29f07142
- SHA1 000dc0e7ded58b3c2513a0e262b18aae386722f0
- SHA512 143caeece3bf6fd40e7a8b899dc71b4704d6d68e268fb5c5a34b6bf23e5eb469e2bc94338cb381540364fcbeae91ea38589500bc2825513d287ace1de3a10545
- SSDEEP 192:wfcBF7VdS1IO2iu+Uyjw2QBacT/eeAqs6fsLoTnK9dtvn8M6yXMutvzMQrhtmzZp:WmFPgAKX8dPTpcg62Vh6qH6Y
- TLSH T1F3826383A8301EFA05E2953AB590F75BF2E5003196E06DA4B7FDDD2D00CB6DE7422986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 111KB
- SHA256 16a7cc05859cf310e785a0aeb9cd4901e4d734261f22fc78b4a6a7f9a73dacf8
- MD5 a674579f550501a2d0d3b29d271073d9
- SHA1 68971e076aab7a5883becfb4038134ed5198b0e0
- SHA512 6f26eeed88d03e0ba7e0b431f32edc25ed8d9ab65782fd352321856a44fa212fbc9136bc2410750fc0d8efdc68ad816de35237927c9e7dc9ea68db8f97783449
- SSDEEP 1536:wEYwsS9ds8JaqIHtHCphHv5H+ahXHPuAHjBH7IEHT85HtHuCHvkqCHTCkvocXTOW:wEYwfdsI71pdzyO85dsCY2ATOOG4lh
- TLSH T179B3D7EACCCD9E758ED88BF9CC36A75B88E40115AF9C5F1497F9405C0386A89113F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\47e01aaa-8671-4108-a6af-44af218ddc60.tmp
- Size 48B
- SHA256 071d417b8383971e5101f3b2407d95c2bf4d2d2a30612eabf89928bae762ba7c
- MD5 2fc4db5b919bc1f20675f320cac32e93
- SHA1 d1ff66b9324cc90b1d090afc026257157fdd1981
- SHA512 f0cf718e8b57dc021d05a12ad4827acf42db812df862466e36b3fa0c8673e7eaf6046e7ec745dede2cffdcad3cb47bee50709cb11ec482709e67826411711ce9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 360B
- SHA256 d823633df6871706f85cc6a35271b3808e384890c8703633e83620657a75bf98
- MD5 bc5ee029e8e48ac7318dcd06e72ff603
- SHA1 be6a1501fc6512ddb5aa3b8d07e6f969b9adeae6
- SHA512 106aae3f29b3d0044065a663462a482fe615f52fdb0a624b4f1119ac96a0d1383457b6f7e9fd21a1182e734d5016cf786ce01848891d807a0fb6befd6c53f992
- TLSH T1FDE02B03850D2086F1284374364640D63330D4FBEB052349042031765CB16310D12505
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index-dir\6b60d8bf-5708-426c-abb7-5c9cbd5924cb.tmp
- Size 48B
- SHA256 75977c1219b3642bca9b56d4cadb3d5369c0b0a94b5f80343f6c96d32b878213
- MD5 14b0abb26e83cfd9f731e45f42170e8e
- SHA1 a33f62a7ea70522c9c654b0287ee7a517983cc34
- SHA512 55449c7c49151bb80c7fd06b3467f400bde145a2721dceb7b06e1d8841ecd29ab8b55f40b73b30a94406dae94e20efcd5250a5e1be9c6766b2c19f43a61229a9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 72B
- SHA256 1c3d567a6ab1449b80eea5318b38a53adb57330e8c4d4cad8497e8646db89a30
- MD5 4d11d77db929daebd66b12d68c7750f7
- SHA1 bf4f2eefa9ba36abec94f8bdde0004aab85d870f
- SHA512 31056eda1b8d84c9fa893da9f55d6e981f101f8ea430ca5795123a1fd3574559e3f3f83717aa39de932720d5b817ff692773316361f9dd688e0a82e854d1b696
- TLSH T1A7A0027441742445D1D152745FCF06512715A8344341035984D515448CFA5428102325
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\65a15f4c-be79-492f-8471-6fc0ef092d28.tmp
- Size 19KB
- SHA256 7078afdc22ba150dfa9ce157be1c062336e9ca49c79c19aec8b3899a75271d41
- MD5 0ec9a900bd86dd5c7f285a33649ddd85
- SHA1 fc22a20d4a66817b7e241186193314080dc8feed
- SHA512 287caed5e18ba7b15a3ec7a96629069e8a895048a4b617a3b4b270f7c1df5ae38484e19ddc8612c8bc5f6df2a222379da8e91492ddb807d32941660a07d4a286
- SSDEEP 384:Sn2K+ivXpXaq0mo0P0TXfLfzOHoK1k0KgoWoZ8ds0jR7ObVHAh/:9K+wXpKqy0PcXzLk11k0bon26o8bVg1
- TLSH T16692D0684B301564B10A046F9E0F4A957B632DE712047F6BC2BC05D87BE78BC1B1D977
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6785d2e1-827b-41c2-bbf7-e8a5d7478247.tmp
- Size 24KB
- SHA256 1f909d1a766ae4f63c4aaedbff616410e7291c2ab266ed69d28b8f11ae928f73
- MD5 019205bd72179cc64dd8caf5dbd54382
- SHA1 03d6e7c82bdfd6e3d60c666bc14f4bd01161c138
- SHA512 70035fed4081355b03729baea09e1e35a5d9eaea095f9cd18572e737866f3965a77282f44e9b014f6398c123722865c1cb4df28fbb4b5cf36ac6811f03fcbed7
- SSDEEP 384:6/2HN2+ufl0tDFMqcefbPviiMNfxtldqK9dQMY3u7+xhmyaTE0Ienpl46X87XZ8T:B29atD1RDXKxjzQGOILTF/XkG
- TLSH T1FBB2E015A81C9B31EC69082059FE34AED561C3010BAFDF8638A2F3DC75959EA45932FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\7b388518-78ed-473b-b543-a79e39b2933b.tmp
- Size 301B
- SHA256 c48a7743b317f9a0ec658bffe411e4a8fc759b03ef848155d014712aa394456f
- MD5 a4040daeccff4dd02d7ef232aa41d61c
- SHA1 f026e320550f23b10a939f770c061fda8ce9da4d
- SHA512 320341f912fef295dfcce401799b0f9d453ecfcf398ed9455d8f79a2f8577fcaa9e6c298e47f250884e0e37dd1ba106a1f18a99a1c97e0ea8104cee262a4aac8
- TLSH T159E0EB1F0C04E07EC16F29098C871F8391E58718061ED3E18E503E2932C9CBC93D8E9B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 397B
- SHA256 65be349a97346d6bb8a80644cb18175e9607483efe2e81b1ace2460eee937123
- MD5 b127277960dc98ffcde8be253072e908
- SHA1 e5848903cb3e98cc151dd4074df91fd96e928f21
- SHA512 c4df854b0a461cdfdc5ec944f01be80da00b154def7ce5293c510ff09097d2a7c4eee7b8f1ddd6ab77632cf4764b3bb53eb27e96a0eac9aafaba6dacde91e6ee
- TLSH T1BFE0F1D4B024C3179943CFAFC37F6E7FAC4213D255518681C55424C28815834E18C680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 989B
- SHA256 aa82163da4a5945a6b81dbd9a8c2723ffe16c04059276aba0f6de4ccc389d6d7
- MD5 781efe735240292a18db9c6390db5a8f
- SHA1 44b78b22c03885ec8ecd64d6d90913a3aa7693fe
- SHA512 2585e5abe30c36f362493f596dbe6187925e8623fbf0cf9e037978e00a7698dc99355b59cfe926334805e692836df3fdd82feadca19685453b2dc19b3f89e2d1
- TLSH T1FF11C869A28231BA293690327DAA8A4F065351D04AB40B067D4544F096A4833C68C0C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 6ee925f8799ecf2ae584c5a47cd3ed2f3922ba12ca85572a4b8814f91c1d4ef1
- MD5 94684c88a568d297062d93153336b795
- SHA1 b467e126b55a456060ceb359767e7ad9df864b92
- SHA512 f35e398fca64bb8a892ff4ee5b2d44b20d051874cffab55cb115e98d1781f806449a57b2951065981af9ecf530331f7c1f085200516fe3ed799f16b3c0837752
- SSDEEP 384:1R18fQo5KZI5nnjVPrTGYZIREKr8DYyxE8vcVjqGKUkS8iBemayezBTd:1aQ6KijtGYCzr8syjWi8emaRzBTd
- TLSH T16292E1447F70365229E07F85E963AF96C306285D3846FCF5FA9C2664A884536F3B20E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 685B
- SHA256 991c957d764b0a16029bec9f9444b97fa5290f2146ae76ea210352b96e021f6c
- MD5 e5378458f4631b9458339fd37d82f7dd
- SHA1 c6dfbd437951753562b415466530b7feae057b0a
- SHA512 7ee6b53c24d277ef0fc4aea35dde2b32fc56bf5ccb14903d23e62f1b4165c32eee67c57ab0dc9c60fc11aeca0100f22a24e0f9e845378f550738094eec552966
- TLSH T1180194D38004958158005308A8DBB5133606D113F1261E6D8537F620570F9F9A0C0C7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 c67b5359938d70b90501b9ce57db15efe4ec0e1f47629d74a610f36e978d297d
- MD5 88354ae4e795f3e4ddb2d871d772b046
- SHA1 947f24c40d0141314637c0f80033905a6e619f63
- SHA512 85a09ed7a6651bb54b53db25895ae2dbe1924de55ff3dfa6e94a00066b85d0305e18e4922b558f0b9796170f385aea2a04d996c12d4bb3e851899e7d290b3e63
- SSDEEP 192:K/N3z8s+PgrCnZqLAc7CW97v+ZWsXsM9r2ACh9gnk8DQR8YdQuhFi27vr9Mx:4AirCnZbcGOTkWsXJTb48YLxc
- TLSH T1AE02C02260A7DEEB2F15AFF397BD628A7BB0DC00D545F860B177147751953CC6294318
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 f1fea637405945e63b7a3031e32a3f8cf13c1ba9e4088ecb2cff8385b872f860
- MD5 323efa76312d3b3d1bdd22470a77312d
- SHA1 9800d84a0f9ad0eff7afc9f6460cb7ad8d146062
- SHA512 8b6b5b4a125a21cb7d0efe72de398e8b30014a530a2d5d2489d94af53c059625743397741a50afe2e99a9195eceef72ab4be45bf34e1d6701f810bcd4ca6a110
- SSDEEP 192:+UF8012US7Wx5K6YIFnS290YYIt9qgbQlPbBxyHB0WrXLD:PFzPS725KLx2qifF73
- TLSH T16242BF76D35F2824590683527C2BA694EBC0CCE2D460BE66ADD0166DBB8CA3D46D4387
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 081f0a559981cbf1663d7144985bd344f7bc6220fd0e10f856e5c2c23cfa2618
- MD5 37442f025cde36859c98d0091cdbee3b
- SHA1 9660462b14d52c01f97c56aed80b4f081eb41175
- SHA512 3eed03a194c2529745341b67cb496e29ce351833fb59deabf07299aa0ce28b2add446b2f255b9c118a73f2fc3894efd3afd3310c28a118b8d3f0090ffb017de2
- SSDEEP 384:WMGQOz3JUCZZbS9rYcMwjRLLvXegKzf4ZEFHlYQL:x1Oz3Ves0LLmgKdFFZL
- TLSH T14C42D07213DC8290C02C67D56641429F9A9D16FDCFB9523AFBDBF69026B589C68F0034
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 8a6ef36b277d8564e25e3d81e307a795e2c87593873b790b287b2fb80da69dc7
- MD5 3455d0643eb9b3d63788cea095c07001
- SHA1 3b7a12557b4813dac710d3e4c0dc5e2290f679a7
- SHA512 0d8c8c91241535b28e9e02e9b6579b3826220d3752afee30eabe2212e96e51794f40500419a58450b5c282d8e8300081d26fafad02980f44735be0e78b3ea54c
- SSDEEP 384:8nhC9WA/a5hlvRIwYh1dO1P9k1s/gcf9OTk:8nEt/dwYZOp9kuYQ
- TLSH T16A52C08948CB679036054A63E22A65CEF2EF4C8767010ADCE7FB70B54353D6C9260F91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 96b4d1d673b47902a42133f0592066de4ca42e6e705fb9519a6634cbefb07541
- MD5 00b03d059c498161e966be78e7cf4c3d
- SHA1 db4aef74bc514b5b6eff7d35630f1ffd389bfc5f
- SHA512 82dee2cb9b05e1d65739d855874ab4a8a8cff36b24b3a47e9725a89123a6227c238b83129040baa7e6a5c48ca2e82b094f850e546e46d67c107d95feb20045d6
- SSDEEP 384:cxM4xv3nL85bqAplQmfAUBWADDcjmqY4Jofk3qnOVx2qGwYd4gI4SkjqVz1NU1Ob:uZ7aeA0cjXAmUofk3qnzqjY6gI45qdL9
- TLSH T146B2E0777BE3FC59CE7C86DA43DCB20289D499A50491B5B69EBC37B838E056060CEE05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 20c111c88b119e81a636608265c305a4af2c98aef36e64f7eeaf004725ef9176
- MD5 cf712a90ea4190cf5437b0e7d867a8fb
- SHA1 8c59ff3c0edeb6b696091a92f567ce6df57114ab
- SHA512 b27192eec0181215010ef5319861a66c71ff9fdf30fb8e3765571bb554e1383f43f74bec1d4c7d47cfe3d7d7f7d4b0c13a1e35860bb8d6d807b991710f05602d
- SSDEEP 384:skW0m3x3IWpsNFTyMbiUXPJv/PH2CQBfoAQ1JM/ICptPiohNTXcJCIoZWKDhdHN:skVA5IWeNFWQdJPVAfSnM/ICPBNThbLP
- TLSH T115B2E14D1F59015F341D1BEB4FB8B6A3C888D7705A2DAA441DE38B09E36DE0ED8CA613
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 21f7c2e9b0270809912910c49437d238d8adb3d78bda8dfc1485d594e95f1cb3
- MD5 69ae498dbc12dcc1391caabfa8dd2f38
- SHA1 69f2aeafa14ae8428db7680831938b608019a257
- SHA512 205748414dbb4f5332bde7ba3db4b9d0a2b3b34d1ac5a0d08881e843a8cdba8b8c2e37ef30cc80b4d2d1351cdc70f89b33886fe6415f685ddfb3e93cdb5a74eb
- SSDEEP 384:pZf9rRBMI12ROBRMX6+JgqUO28v53a/QuW4lQyUHzUwPkcaoDcViOVki8jIVmH2:f9rRBF0LJgqFbvMQuW4XYzUwPDcV7VkY
- TLSH T106B2F1186B57FE007A783597E9465441C73F739AE03A66C7012518AC8B1A92CC6E6ECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 4f79012e4ad9522df97ae5773cbf51e189c71a13e2b4ce6a994175ceab05ce86
- MD5 6cd21c95f95b18c46fc26286202ab293
- SHA1 5f9f27a21cceef50b628042e9e8530f2e5c7bd24
- SHA512 e6af68053f4ac2515afbcbfd64697283204684a1819d17226a4af94b4ec8048f9133963cca3053efa4105054057f1a6eed082bcf38383ed4b59d8b9dba7c6c6a
- SSDEEP 768:vWdJSqcJ2yuoEH6n0tE0ShteB5PARn34zskosqCf:vWdJSqQm1tEntg5PAFoo5Fo
- TLSH T13DB2F1C2525C13304997CCB98DA0066CBBAB6E8D12E2D743F6327F5206845D826B1BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 628098d0f72dc3001d9d07d5e1abe121eb62bd1547d736b2352d0425a1695de7
- MD5 31527986ebb4ddfa886a29b7dd1c9e0d
- SHA1 5e594f45b25f6f8ff252c2700393dab99e853b4e
- SHA512 b4ee83b8199624aad591e3f4d7407fc3c9940e2a1799a428679ab1b1aff1a3dd848e5ed32b2f810561cbf6624d2a7d72756b02c1263982c6523f533e13b01e94
- SSDEEP 192:1sDcwqYBlRElZaPygXAh15GiyjnQIqyTCjy2rkbWbLux4gK:eIwJLR2aPnXSHyj3qy2jy2rkiKx4F
- TLSH T134029D1C67EC067196C3528564E90E1A346F3AD8EB6D890F0E634EFB7BE048D4CAA600
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 ab5a839b89ac39c1a5496c65985e0e06b073fcbfd7c4347149c337992c36b556
- MD5 1fc4116403fdb3138e1d2a1d72bb498a
- SHA1 146d4324850ec14c46c46092c7e09f085c473851
- SHA512 861470d1c12fd7f76610aa50f6e60da72d14fa2d172e122defc5e2a65aff0950eed79863e4e374bad4a02b5c01601ec3fe706b3e0880e9096abead95a8d7de93
- SSDEEP 384:7AmGNKtzW6gp4BzfY/nOhx4BfbUB9pXj60EDHVPPeLpB+8v:7AjNKta1qafOhxWsj6dD1P2lJv
- TLSH T10A72E12B19D0A88671C8852B5BCA873A15BC043C797ACAD568F313D21E1F2E117E3B89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 a602aadce89ca144c496af9701a1f009569cd5fe6bfe255cf1b0fc2bdfb07258
- MD5 b89897b9f714502014d078f3eeea7f8e
- SHA1 ad47b264eeecfdbff663d1092446541ff120a6f3
- SHA512 9a7ef4d53a49ea751da7ccb9e64783dbe11d0a6e870d76c8a6a8bb63b2a93032eed2f99856f41e4715d18ac1012586a4de0f75b1b948b8ffd5d5aa02031a3b81
- SSDEEP 192:s5PCqSv+9FRkx/5K301cR6fBld5AJKrWKzOleUB5yrjEGO0TFPEp5kNuIYnJissp:sfSv+9FOEfR6fB35AuVqhB/G9ZEzkNuW
- TLSH T1AD32C06CCDCEAA17682252C0D29B2261F80BCA65E95C7D0058BB1D106F77C927BF7212
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 b08727b492fe2485d0876806fa395b1d5d77492808da4d14af7ed44e50ecf3d3
- MD5 f5a9263c54945df8dbec1d806ef3a1a5
- SHA1 1f1e78f82fa6c43e958b837268a96c9709fc0092
- SHA512 d3a5b780f3e49e245e7099df7691a7861595bb46c88563a63411c63f8c4bc819140813a0ed87a94938a2665b245676c9f09b95f98060a9d87d04bd4e6dfec739
- SSDEEP 384:qbZ4kL2sRtBz+vU0wK5EYy9Eaz5qAPeo/r7bY1iaehqVYwwO:qGg3wvR6F9Dz5qZenEQaKqcO
- TLSH T13C62C0719E3DF9B808425F1F66A23A07908C96F029D1CAD5FFBA883C16504758F3D8A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 fe8eedeab68b3146b192362a3abec262e688a8f625594edb6c7c31fdbc71935c
- MD5 13f582551c4ddd4df5d7e665a0741a33
- SHA1 a2b76381790a59a9c28e9f08be8b43b29e6c0458
- SHA512 b0954475c77acf8f2e35ab68888090cd8c88eb3349d02368a7e812a8abc6970a53b1f120dc153ad399f102e876f54c7c9ed01e91e7d3c9ba60d0137238e4d424
- SSDEEP 192:n57/plHKStlzzCaovkvagNtUfI0zzDZzloTs+mC+irz7FRuT60FOIpKsR6xT63pu:57RFKSbz1agzs/IhAinGTpKs4BiJ1Dzs
- TLSH T1BB42B0984FD37F0FF7D8E1452D6F8791E41DE864844A1E9AEA8D70CF1195101C368AF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 3070568dcd426a728b9fdc5c1a84a787841af59e2f411b57b9115aee1630de7e
- MD5 b972615654cf737d48bffe4421f33b4d
- SHA1 6fe2a18f5929c8050323efc83814065476a827f1
- SHA512 088974ef5f6b8790e60b7360e836779135af21e152c384dab19a14f219bc170966e05fefbc8f176f21c642babd39e33e0b922cba84ce41f7f886be57486df704
- SSDEEP 192:pUAVgyXmQgLgUz4/slk/UnRuLovO7gczXjSSYbmv1M8NiVGKfwpldbNbu/+jns8r:+AVhX69zPksnakcz+SYbItNkCpvbNC/c
- TLSH T1AE42A0F093F3866C7306E5F0CA77BAAE9A1DB2415DA4112187C5A9EAEC109173B5CDCC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 37ddbb2289200573ff6f07e8ee47add2fa8c6aae5f95f0c410c88773ce0eb897
- MD5 74f2969f9aabbfa2e76b98236a3825b0
- SHA1 16e3756e7ea22bf3936dad00425a7b13bdfaeb97
- SHA512 f97332d479059964da5582550d38cf65d0780c8735c8172933e1f5b6efe54a422ee05d4e107564ea0b2b7bada50db538f4cab51ccd7cc74a2c6beb1a267f3b1b
- SSDEEP 192:NV0w8vIGCEs2dBH4w1urSNdHJXLAeXzl1TyEvpF0xh8QUbuAH5GgtYXEvdL+iLC+:MAoBX1uONH5LgxjAHzdrm5TkIb8cDWJv
- TLSH T16742D0A42C78CECE151B15AEC262A012FC6DB56923B236BD3C4DC799C951C50852DE7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 d731dd13719bcc464cf8b6b6e0d98ebe4e134e637c33111be882b0687b6e8fc0
- MD5 f530d1eef1f0e532593da7d01881b496
- SHA1 b678b5ef7229be8c8f241b9d2a9995911f874f2d
- SHA512 1307fee7bc159180aadda7abd4d63d875e673958de83f9fa558f09a2736693bb79e3dde8c2d7776e7bfaa68500aee04954c718bc1fcfe20fb8d3b670a326e18f
- SSDEEP 192:+8HXhFOAT3Ckma8st70CKh/bm3dwgXkBzNwzPfKx7wnPUhqBiUJMPDNO:+uXhoMXm+t70CuCPEJCKx0MhqBimMLNO
- TLSH T16742BF436D2A2BF0F2C349BA779645170A7C0EF48F281794ED8DD728B41E94F11968B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 800bc71562f73e1585ae48690c5dc46149a99be6d7a1d88942c3fc8a5ed47f3f
- MD5 7d010560230f0007453ea40ff7f7e863
- SHA1 87ec2a36c5bec09bfeeeec3eb6d7381006d2ce7e
- SHA512 00d954b1779d8becda2d0df4757c58c45120bced7e3a5f1590e7e34841b9784c5d59f82e1ec0bb2c41d3efe2b25128bd2cfe96048252f7fc233967e26cb91888
- SSDEEP 192:wkC50Od65Hdpnm0Pvi36dTfsx99RJ/NQAQDznOBFGnO6/xGWgu0N1GHScbb:wkCStdpm47Rf2RJuDzy4P/AWqDXcH
- TLSH T15D52BE8F20A0B5A0DB1D2F695B196C8C42C713D5238EC49A3E29BB94F438D7EF952563
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 525ee70842fd85a669694951852910f96bbdbb1057cafd6e3d44627218c3ced9
- MD5 3cfd723fa144dc90ef933a540d77fed9
- SHA1 f481e03eb382acf300da548d9bb6fb23271c4041
- SHA512 ca0ed998873e8f8f2c4dd22bbb68a4083559f7310e816656c32d690b4f2e88180b3ccbc567969d703f6b952478ad4c049a4673400c15b53dcc7b8a23b21b5156
- SSDEEP 192:2pRlG3BnENu1yCJi54yMd0JF0R4XZo/O4A9tS1bjoada78XJPx2SoPrgu15g51OM:qRlG3WCvyMyJFMJ8/85wPPlg5ibu
- TLSH T15B52CFB750D29253A54F08D50C814E99AE7C0E879EE75868F6C83D1303C7AF79AAD226
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 e817f9bd59bdf630bbbae71969a03be4b30ca6cc3b9a64fe6394e099ec13f1d3
- MD5 e4b234469308f125132a090c41411c22
- SHA1 594d9f6fbff659aa9380edfd8db93bfd7b38ed66
- SHA512 9e53718e0356519885d3ab74b999ccebe6d526334a9b841574ea3841a5672226c4bf10ea47af92a49e8a98b77614c6921232d5ba3e134eb13ad52a19c8230379
- SSDEEP 384:CHuxmMaijf7QX0AtZ3dhuP7UQLoPTuCGnW6YkLfBhjGuvn:CHGm4W0Atzh876Tb6YkDBhjv
- TLSH T15252C154970D733233489616BA1AA0BA159E587F8715826B1F9712C7AF11F910CF3C5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 ce85035c2b20e68c5a881a24805c2d7f70ee675e7cff468ca7dffd35cfd84756
- MD5 428d317aeb8f860a109bda9794517fa9
- SHA1 fbe8808466d15623d2c8f0c9d6f0a0a8d01ec365
- SHA512 578e09776db43aa9260d2166bdbef547c5cf1753923bbb9f5ccfb6f25239b96c204eebdc94cfe10668c7ed9d70bf3c6438c7ef092606e3de2bc47b14946ccd35
- SSDEEP 192:OlWy61J/JtO/0XTtv3OUcuWumb9//6WBdTiCXh9mF/ywLCvg7BZW2FoOx/+VP:OlWy6lXTJcuqb9hh4F6PvgjEJ
- TLSH T16C62E01D91430D5F26C2D36AB2C7FB0979910E85BE2F259F6141CE3AC1CD3A368179E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 36d48c0681fdd9648535e13b1bbde292696ae6cdaa1ff9964bacce27fc26601f
- MD5 34e93da2be9b42f4cb3fcceba6295831
- SHA1 5e5d1ae9507b0e874e9208d7ddb11ba728b15eea
- SHA512 438d406ae243088aa9cad4a580b4a5480801b7afb18e8036370fcd7e8082c7ea963e64c1f750701bbe07d54a0255860443df0590e8dec7416d7750c0cae0c301
- SSDEEP 384:fMySJVL2Z8yKb3QBTyq4cGhWVP+llQG+xcZf0+tCyx5HciaJHKRgyS:fq968ycgZzBbRQl4Qs+tC+5DqHK/S
- TLSH T17A82E02233767C2CF8EA411518D6411BB755AF21C20C9E81EFF42570769E35A86F2A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 0bcac5808ed210f8aba02f8c237d1d6775ac4aa3b57a9bd23087f94c7295f431
- MD5 b543723b6b52d4224ae06bb4a8f2feb0
- SHA1 fd44049e8f3ba5cd52fa180d18a2d9a61a8163d4
- SHA512 6697bf10de68a25f0f9d3706316a45c8d50bd0c9808403cdf4c5757f5c4bc48c3eb47d557cb1c12840dd53ecbd5807b159368de4cf1ddff607535ad69a0a56dd
- SSDEEP 384:aBuHGaoZIVCrNNWTi8SCfyfyI9VnuoGIj+WIqyEcHLnsaiS7zUw:EuHoCVmNNWTiSfM//Bz+WIfHLsaBzUw
- TLSH T12E92F1885F17DBEA4FA0286480DE1680CD8EB5DE55BDD869D8328DD711B43EC31D30AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 44273268fda4a638ac8cec5ce23a8c65fd489724798c7bd68871b0c3ff2cc5ba
- MD5 4237a9dc5ba61539d3b709a904720fed
- SHA1 b0145d3dad5fb6f8e07e48c52556331a451b70fb
- SHA512 41da434b86e52855c2494ccb39b10ba1ce186ba2a921ce6dc20a092f9b7ca905de0e73c9acd2b8e37855a5534260dcb9df80c3bd3dfee8b9e8eb05b53a860158
- SSDEEP 384:U8FVR3bkSzOLz6klAEFxUe6SVrBpkeAvra777yRyhRyrgk9C:US94LzNpxgSVrPV771hRyN9C
- TLSH T19392D0BB4C294306EF1E6436A9F997128C777CAE2006B435F6F81109DF93721A7098C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 dfc05cecc1e94f2a26da033eb1e76073b352d38d27cf75a76b08e8d4dc62634f
- MD5 23c91c383149871cd95ef7efa36e476e
- SHA1 f4723f93d656ff711b522147a94104667235c9ba
- SHA512 4ded5607fceca66c1163839d3e5137fd6b0873d9d5ae1583a07e39ec5bb42697f8c18b41f6f064670d359b0c1a54d9c4a3b2c4afb958fcf51f735f1d6a44b4d8
- SSDEEP 384:rZgX5f0g7K0bMjyZv/tPAKXM6OnEZawBtc9QIful3gd3b+TKKNm58p7BbEYV3Os8:rZMfdIGZXOKc6OnEZawBtAk1gkVNmGmV
- TLSH T19A92D04B94788AF1084378CD6D838CC1F215FD54E2FA44FE2542C7B2566886734EEDB2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 520a5d5f9a68afeed224196a2762eeb06f16a3e2d2880bb1f04091b39e888204
- MD5 574e14cb5a5c20708356c3830bb4fcdd
- SHA1 c76217b2dbbe8bf692dc1778345c1e09a454d3ac
- SHA512 5b1c1899544ce426b954058937451e7058e35e764d35e68478a8c17a63a18a0d38e424556f19d2179928daec30fc44ca8c2d0c57723e3ce139a3615612fbc2cf
- SSDEEP 384:3e4UZSmFpMVLHLTc227ALe+FALPIPOmiWv3svs5EI3dGSStPGqXoXK/uoIQV5S:3sSYMVLU227ALLALAPOcUU5HdGSStGqu
- TLSH T1E692E0B76B7133DB4F88BA1795300F69924110EE6982EAABC24DF776CC3D5448D43398
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 b22d0f95175fbeabfd90a7a77d754d87f84b81914d25b28919b2908747b687d7
- MD5 52d2787865176a1143e63311f553e7ed
- SHA1 7db004275720cbe790c668e2b23e616dd823dcc6
- SHA512 0d627dc3d7c8e4828e7c55b1bb7c925b5c75b4a7ebb5055f7b8b1280bb5f3d3fa36010c1be87b7fa2385aa4774b0bc721910d3eb716b9a722de0199204fd754f
- SSDEEP 384:PtYhe2PbTXBGtICnICfvvG6aChSbgzZBwaWIhLwgw09T76hb3xWo7fRYjT6b4QSz:VT2PHXgnZvvamcaWML7w09T+zB+TEOW0
- TLSH T1BEA2E04D69A2E7786D07AC417590E72B4E9811A008E2729C5FEB80F1FC5092FCB3C7E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 0e4a1ce412a0a1d4172dc21b5b72e740de58a3be9f7003ed92deeefe79831075
- MD5 f7dc0dabf15df6dbddf05cddddfd5831
- SHA1 1b4286dbcb383ca0e231429175183d723503bd1f
- SHA512 cb7af810f85a55402ed23b86ca5ab8d15086a431ebec95cdf7391a6654eb8db0cb5f1542d7b529d1080222ba10db78c5c64508e1bb30db875db10806676f9954
- SSDEEP 384:rvh3SDhDWKbz/lhXoSsxwcdgI9XPe4wbO+5a2snxZnD7lMkK635oJBeKQRyEj:93G0SXB2fCKqqXD7ldK4se5zj
- TLSH T1EBB2E17276566A9EF49ECD0E70B282CF8ABC80ECDCF0C7C838616D5D629D5E2111E41A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 5ca1a96e83a3c918daa5973a1325b0af283ead556988d3eb5ce2cf47960a4038
- MD5 fb31bebbcbf7e9aec201e4aa22a7d2b1
- SHA1 8b293c843ca61390761ed586023b4e7d605930a3
- SHA512 fa98964f5c39ea42aba8465eed6d31241c57dae33aa435c689d6c39aa0d8b661b481021007a76aaab7e6e6e668d469db9aa4faa8bd842ae6dd8a441e69c1f82c
- SSDEEP 384:gayXpNrcoCtH8VuqTzM6X/1FaUo9MphgOtF50nBHB3+r80A9OPRZMvJyqUQ+Yu+M:gZXpNTaqzbd0UnhltrwBHc4xBBZb+L+M
- TLSH T155B2E145636345A843AC41966512745CFA296A4C0EF0A03CFCFAD64FAEEAD4F609AC72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 b2a0058e3285877ed184cf755ddc53d3bd50d4495dca7ef4f6e473b710715c7b
- MD5 cac2e2e5b6a40be5a170d3d4a26341a6
- SHA1 75588bea89edad9546f6d5142ec9452b9029c259
- SHA512 9f9aab9670864e2e8ddeb7689eff8fb87fbbb29979062af0b508221fbf0e373d033db0951aaf2a9d6e90e847091e846529625c8e56257ae41df7e8fde5eaa8bf
- SSDEEP 384:hJbk26DKjE66Rsf7VBLgbB6A5digIZY9pX0NcBUaQ+EptGVdE3YO2mzqNu010rly:/6DmDVKB6IdigIYcwN5dE3YO2/Qm
- TLSH T128B2E1B0DDAB65CA2339E4070E792FBB85A1E027704C52C515C1E26790FFFA32477909
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 2dcf8d2b8b167dbbbd7b0d7b2032145bb808e2012dbb2e20ad31260c8ff82974
- MD5 94506627b1d9de03cd8c866da33cc950
- SHA1 1218d3d4abc843682b5729d7c70d369dfafd87a0
- SHA512 21b6bcca131941a85ce006956931bcf61a663d1815ca2e8976b73e4b5d3e3ca8028eecfbdc58c709e75efb30465e172d99bca9ccce06ad780f79aba59216a413
- SSDEEP 768:FZAFFWactjXRpQC7zSi3HrV2xhG9B5L3zy:FZyF7ctF7OEHrVP32
- TLSH T1CEB2E1B8F2031437C9FC8D6DE81E70E869268D5752D6086F694BBCC07EDF912D4A2A0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 490b77cb55fc7afad9a2e03f1d9e125f4013c135d4b26f445a344d4bfaa9533b
- MD5 32915e2fccd71f2654ae41b06a9effe5
- SHA1 4f427ef003c5d8afbf0f9151069fb9c2428a99ed
- SHA512 dd9da06104ea6d93f57f4c93d5fc9fb11e25945892ff8e54972b6a4ac242ddd1c1a3cf82d17d9fa9b16130b5783ce183b4a6624a711f09b1e8562ee3577b3193
- SSDEEP 384:f6Wp/XHHbRmelqwxrLHm+ojbPeA/KgxnBc1pq5wce65vlfWZ+5OgiEW:fXpHFHlq+HToFWlce65tfB4L
- TLSH T128B2E010AC5488FAF268E75D787D4C6711EAADF90A258CC91EF636BD02F4B39D133041
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 80d0fdaedb90ad49144ac8aabaf2cd4690d28dc9a22ad40ba828ee59da1eed27
- MD5 9cd30e9a9fe931437c60aae13876a8a9
- SHA1 932a167c5f6cea091b927a83b36d60102ffcff7d
- SHA512 f6cac5e7240e7a02e5d438655007802ad58e66467f72a0a6d8c51323c0cf5efa0edf9de583ab2dc9f59a513d8c1c6c5b9df52d5dfec1ac7e7c1f745c1e8b4ae6
- SSDEEP 384:piRNbaRTs6OL6fVuR6G6yuNC0xKVaRjdEU815pzJxLc6PeBUwKF7GrX/8/ixu:pK2Fs6fVuR6Gy1xKVaRJD8rprgUFNIu
- TLSH T153B2E069664ECA10B7CCFEF9B44FA06D6006086763B610BEFD63191445A387F6A50AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 15d79b67d0f4f3bbdaa12e62016240b9008e5716702517d8e25edf5b151221fd
- MD5 a5502d1dc974b6f645093adb8dab9ee0
- SHA1 a9a36d9764032bfca46321ec85c64ceaead43509
- SHA512 69d09924fc66e30827fff5f18161471801a546514625aa2dc189dfccb81652ac1813db7af8de51d0eee4b040f9897795cb6eeca7e5cc9b068092aeb00b6dd249
- SSDEEP 768:HPtDUlLsyXnJTHoy3/S3AleyKAirN+WDM9nF2:dUKy5roy3/sTyRiR+j9F2
- TLSH T15DC2F1854498EC4C292ADCE8B3DD6F819194AC261027665743DC4B83F3B7AABD40EC6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 574692ec6ebf1600c8a7fd77f21396486c5f8c5d25fa4a58c165d231f19f0386
- MD5 94024faf2e47aff53db766ed5788b23b
- SHA1 1d6448f73a38b63ba24f893a759a2ac6b01fca42
- SHA512 b78bbf9af06872a3a64a699a18632e25ff9f8b1d5733aa43c0b1eadaebf4cee19255b318ca77c5ef204a864d384602ac1dae55208b517f8e9ba6a54f31d4fdf6
- SSDEEP 384:lvTheXsOybxkVis9TW5vOZsVL85Mf3DV4yCRjQYGBOIFdmiMU/+spBxz0KLY:acOybxkA0TwvOsx86fzVxCu7B8i8sV0v
- TLSH T1A992E13A205C8AB0A3F51E4B0EA032D105F713B5B3C93551D7C4764D863D29FEDD2599
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 762314112f68e7b2b1a33f886fc984bef04c026c1af2c66ac7db7c0c75303d24
- MD5 df49d09638da9d48922cf42dd2e15069
- SHA1 3e2a0e0f4d98583d8509a4e6e5bdfca633129a59
- SHA512 338eadd1223e3d283a01486ca30279fd972229dff3c546dff84080bccff32d85fdbc4531e94c1fadb9f9b41867929b09916db705d864966c314700ff191227ce
- SSDEEP 192:9a36ghzB7x2RaN2jvZyMBIi91FlpED8LVxb73QFYeTx:9QZdB7ER1xb/9VLD73Y
- TLSH T18F02AF098A5989F1D6220B43C89C5E335E5DB8DB25C38E227E34706326265ABB7183C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 6998e998540b563db7d43f24b537fb233088d9a321905eeecbf68ca9a08d27cd
- MD5 69f6c8e62a7417c3f199484fd2b0e7c1
- SHA1 220342a5b278e15fb70f9725710d8cc161c506fe
- SHA512 c6f2f8dcc1d490a50afc6556331a2a8d2fdc80b5310df5c2036c9ba63a00e08b2bf74f0cac37e98c899574dd5fac4e9f2895e4803ce82a45816ad1679a135f42
- SSDEEP 192:RTKmG9XNTTULfRrPMZczsTYuIUVC2RaFDvWlwh3wL+dKJHRzaGY5IBjfPsNpE9qq:RTKm8XNXULZgZcYT5IUHRaFDvGwh3tdy
- TLSH T10832C0069AC5EBC4C0AD1BD4FB63816DE5096DE237090B06D9B432494BE354488FF6AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 525B
- SHA256 e6e31f90531a7fa9d4bfc47312822150c993e88bb5dc925cc52d69347b4bfe29
- MD5 ce37d053a44341f74faad185da6e05bb
- SHA1 71768f916f22624960211e89d6a4bbda89c7e8c6
- SHA512 e2666b95f8c81f2396400d893040c918f37e6e057131849ea6277940fa9a456703b68b6d3eb8d7797a42f0ad06bf38abd3e7f71a177ece17bb5d5367a413fda2
- TLSH T19BF00E7CEE894D690A7361031182E2AF233353F34A9CED760418FF9038B629C4E7004C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 99b1c23b14e24b665163e00c08d942c0b8f1ca4b8c3bbd4b064ccfbd0ce897a5
- MD5 592001904a7b1adb02dac5781f8394f3
- SHA1 e5eb9a684325c2f24974e9d6eb21bee06b1c3330
- SHA512 55af716341304a3dfbbc507ba976e0b2a9dbdf838dd8bc26085e12d3bbb8a74e6d7e532acc737b3c2115abca36ad5c06030ff60ad702241fdfb46c3311c61ad9
- SSDEEP 192:tpN/U/NNGmMLgD+kno1lSYWFfKC7uYVnvzzs+1mgyZssUbEJnJUD:tptU/NomM8DjnaxW4KVrztmgyusUS8
- TLSH T1B032BFFB9A21D7E77F4C6A9A48E059F6C56F30D64E1C311AB783A03D6410F462468D4B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 bf91f31ab4b35e7431dc6b648bc7a1593d17244d84ab3d6362f1805734ce59f9
- MD5 0a896e895dd29e2518eb3d99eaa9e8bf
- SHA1 f4e9948fe7b234513e03825cebc3018f339b7980
- SHA512 5984f19ac4bc55fdbb9a7ccdea46236e0ead09652f7896ec241be7513c2f966ae7046341b8a0a28c2c50288b87e2697e195a347c7153f86b2fa9d5906430a604
- SSDEEP 192:uNsHMbcOJDoZotEEaCFvtcDs9Vj6mmogZmGV9PzEF7xsF6ZhOti9ZrLazrbilSoD:uesbcOJovgFvOiJ6hVZmGLtwhWyLazHe
- TLSH T1BF32BF4C234EE15998609976ABF8B73F12F435F5C0597389FA844F302668FE808F6626
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 f1532b571b0f49cc3d6d103fe9c26778bc27ab69b5b16e5729b9ae63bf45db3a
- MD5 653307cf9c51cb62c31ec9ab1e24533d
- SHA1 95a2057382fc5dcce666ef0cb64af564ac0df5e1
- SHA512 0756b817d68cdeaa48d2561a7326e3ac6ebb75a3d53144e520bc779d262e1beb193ae892cc65a3c8f5b5380dbd6ba07ab5a0d27284a42036a3e461ce80fa8bb8
- SSDEEP 384:v+WnJWqmUy9MoykajwpSvNs9LRBo+UVL4Py/wl1nXb5jhMI+jf9icz9b+N:v+wJ/mUy9xyeSl6Ek1nLVhy9Hb+N
- TLSH T12EA2E08315335377E87E7523EAF68011C395AD25627B5234FFDDD58FA294A2B9004CC1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 d852a35ff5e3ebac30ddb2df7d189b71770f11c02dee8675f6463d64614eb2e4
- MD5 af1cbf3b27245a2545026915d73b4297
- SHA1 c36b00629201e85b1c9853333bb670b1dbf2ef01
- SHA512 89ed1f9a71fc9e8cb63c90f101a81a3e2c8365cf8cc563e0aeb95c89264b85ce813b800e112f0cd4b10847c9033a7a9f27a7742ec30a11fe40d07dfbd2af8487
- SSDEEP 384:wLcQK4J5dZgoQpDqno/KKcRvOD8WHDx+Zn8:acQvJ5dZYMngKKmgHDj
- TLSH T1F042D088E6672EE47FCF109C748BF86525A3091414F2DA01AA9269B0345CFD9ED3ED8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 bcdf425a5c64509880101e6f82900336323eaf7ebe3cc1b76a9c4e6404c506da
- MD5 bc2a6a8996ffca33b14b0819c41e2776
- SHA1 6ded788596e5433914b005a834efeebcc2290ea4
- SHA512 d16b5d3679092fbdcd2aafdc283a18c4e790aa2562d302e6371baa8e934776a4ec28f30853e5a81ba9d0228d9c8fbce6ae4388955fc2069d63c9cd75d6577f87
- SSDEEP 384:f2aSRjJM0AO3/3OCkoiztDI/z61nyUpBQXE:OaSRd9/O7zOz61nybU
- TLSH T15942BE40A220685969C7FD6CFB367FAC2B010B2032BD5F58C91DD0D085DA4BC9E4EACB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 ef423cdbd0a1d33de3322c4d08e4a3bd5a182f00332de5bfe1aa585b953503d6
- MD5 3ee9ef2b4568f47ac002131a8593cd7f
- SHA1 f9f6df6a29160670657e0b804c7f979dc65d964a
- SHA512 deb5c0e7032a899ae3cfd06bd4ad3ad2c7acff8ac8723217781c592d070c6e55e1436c7e40acebbdcf7b3865a4c9fc3372b1e321b0124621a440a354822395e0
- SSDEEP 384:2YpbI+EF2adDho5GN3mBiuk6YBU/esjYsFJHwOAE7BI2b5jP1U72O:JbI+wowx9LOf5bFP1Ux
- TLSH T12482D0502D3C10A47C7B2E40A1B7F1A3C3567480B2CD6431C7B87E538B75A1D5A53ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 865e5a861210b8e34995085e652eab0803d5cae4731f25343705dd6222dac85a
- MD5 2dcbf39f5ef3e994eedf4f7c956ef0ce
- SHA1 9dc3f7bea009f9a1a354893e5d3d128b578bbd3c
- SHA512 a8c20051a01e432f04ca3002cf532dc1913ae8c02fab946eabdbef5b50d9ded5474a34fc72e99476f4e19427c1f9222cddf21fdb327b8437abc71d8991ed4268
- SSDEEP 384:5rC1bc+gdCvrPDWoyWl6RQwfQ8c6Je0HdC+SZVeSIkVsmZjo:0bvqCzbWZWnwlc909VaVeSxsmZU
- TLSH T14252C08E9A75940B98DF3092D857F81491DC960303693DC56E638C0A3C636F62BB33EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 001be804f22d77a9f3dd8532d637a8498f55e401d0835cf6f5f6fbfc00bd053c
- MD5 912e978c6b2422c0c3a1a02202ea88e1
- SHA1 4fb6df86b4e457310d879d4583136d72207d5a79
- SHA512 45e6cf5ed185e364a96a34e8c58de05fb157178e3044730c55276ad3b51235af09b397c4f501bcb710616789485b7b177c0e3cbd18b5e436c7d3de20b5fdb80d
- SSDEEP 192:56xRS7YVjWHcLj+LOPIiYXceHdgdBVfJ4sRdcMOYYkoRVYty5MnJO:5606LWOw/FevVfJrZO7pRyty5MnJO
- TLSH T1DB52D050A0EABD3698C43EA3563A3A16BDB4F22C3F3D9E143981C217B5586203DE514D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 bf7f7ca9227e64a31910c73a9422604d8d06b776a6b786e1c70bc00de56e0525
- MD5 2297f3b3ff0da6b3b82429339f1f8560
- SHA1 dcc88ae4c54dfe34fb1c2e5f6e7361ef2dce917c
- SHA512 f8ca783d3bda05e5993cbd2b57ac0da4ed59d45c3ee835a76293f3a3ef62e66670849b3c9f9c5b466e5984b4f6c5a25c3471d64b6c2b6edefa0b33925cc9f196
- SSDEEP 384:1NUjyZsxxm3wsYjn15ASNnED19ZSZwkUebK6U:1NUjxmPc1OSNnaSRUL6U
- TLSH T17C52B08C1A536B8AC37805497943263DA61D10AB7FDE2642836ADFD3EBE92C0497947C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 19KB
- SHA256 b9d3db2af47c8ca25852cdebf56372a05351c529ba761b0a8868b891f345c905
- MD5 583036c764a13e619764246b09e47715
- SHA1 58e41ba4cf68d6280947c5cc92283d791bafe4b2
- SHA512 00905358885e2708865959db3428573b7f6e1be35dbc1cc762fbd4563c486c421a609a098f6fe8ee69416c968bb7547a68ec1aa9135d7944173995d88100a4bd
- SSDEEP 384:YtEpvGmDL0hd//b4LwRz8X8XdudZvtyGlSlW0U/+K/X6FP7VEnRn:iG+Ak/xRziCudZVSlWDWQKKRn
- TLSH T17692D0136BFFAA16CC4262977AC48D9644CDE4F06618BAFF53C6E160D5381D7A0E0D4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 8c19c4ffb5772f5c8d4d706214c5eb27cc8ffbeb26e7d869c1ae4e6e099971c4
- MD5 ed0582539343c6998601c186cddcf6ce
- SHA1 cff9e2068a8b3c3d1be8fe0a51c40f698ffcbf9e
- SHA512 2dfa9e087dd14b550c550dc9ef86f90763c3700ee031a713f8906985a4062d4c59bbf13631c326963a9d0e56e78839927cf739ca621d5277543db3592a6eeb93
- SSDEEP 384:+5FQOGWGmwmSt2V7Qm61jT3vfMrax5N9l+e6jG+CMTVh87yffpbX3cCRSxGx4daL:eFQ7hmStA7QmW3vNN9l+e8G+CuVS7ytl
- TLSH T1F8A2E149E9B3855ECCD0CEE869A4F51CF0359C7AD3E3A0B78B34788C174F6251AD4488
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 dbbf380b511e5f757e322fa4baf778b9c27a5069076e8fe256071bcfa65eb5b6
- MD5 73703b7c8cd66f5b766a7ffc59bd329d
- SHA1 070d141697402c02d4f5251aa4b8a26ff74b6fd8
- SHA512 0309b1af132da12f071c00d8b91cecb0c049a0bbc1847f9e3cd2c9c35fb95de86438a28f33c92cba6617da9e058327b8ed0f26a80a3301376f3b7a79612baafa
- SSDEEP 384:4ZgMGStft9qRhKTq0rN6guIb6PZbUwh7kOSJWT1qPE3XTY+GC86DB68w/xX:4KMDTqEHB/zWq/OSJ63XlLJ0dl
- TLSH T1C8B2F22E1720C2B5C36B68052608D3E66801E75D3B176D6D2ED2391D9B5035997A3DCB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 4d1cc84851ec2f18840ae8b4220a8b5eff15a137bbf21e3c4a19217ab2557407
- MD5 a33b7d97160bdf337ce110a0284db200
- SHA1 89e5ef79b6d61edb314c7d0e6bb89622242c64db
- SHA512 ea5b52de570a8e3a07b7780d57a030a82370793c38153fe0c28e2bdb796aeb105ed18af76d3e56516d76890bda1f18cb639cb1ab8dc08e67d31ad16d878f4da0
- SSDEEP 768:q4wEKTBA1x5Kfy4/7mochEktJctXAfrBdCZN:q4ITed4SGKUXA7CT
- TLSH T16FC2E153C0A46ED6557C3FE70404E8A1984C8D89E8F624B88CA4B99FB29547CDC3FD83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 b8faef2653a025bb5d05df4a389461e025dd52a075f3163a1c60253b2aaa6ed0
- MD5 1e789df4ca71c68ad1d86f6aa706d8b3
- SHA1 b44c35f4bd45b6d8b2eab8704ee74fba791db042
- SHA512 fc681e736133dd495770e434fb8a276f4973dc1154a65bf3d45429696e227d1f90f53fcbc1db44c4a1ec731d7f48f4f392975a5fc3170528eaa63a665f0474e8
- SSDEEP 384:7BnYaAXbgz4uCrIJXcUVUDPE/DNTLXJJzgp7ql4Y/Waop0UloeSSN+sS4MOETZa:7ub29Cp4U7uNTjJJzgdpYOaFe+sS4aa
- TLSH T14FC2E02B07291AC422510398F8D1BD1857C7DA070E5F9A2EB6F88435278AB7FAD43A57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 9KB
- SHA256 86d474a9ec0c0c9b08fa857b453e00f8c0cbfbab286e4922711c3b514a6e18a3
- MD5 0608677da07ff6732bd4d3242d5ee1c6
- SHA1 440d60f9178a59040c99f950838096228754dae2
- SHA512 5dec4a303445fcb08ca971582d42cad09f3db188728c993b1d3ed487c5a681f98e4d4255516f40ccdd53ba994866b00d04b9d8957b780096d4718556a250e8e7
- SSDEEP 192:dlBko8S3GQD6H7rRurhimk+902d9jetmY6zwS+QEzgXrn9o+qPBMM6m:f1/rD07rkr0A02dQewS+QogmcM6m
- TLSH T19422BF4D7A95512BF2FDADA53E9A3F240D8B29B65BF222B10432D941C358C22F8300BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 e4a0a56707f9318c63ce5b7a839d9631cdfcf8a373fb0bcb4ad2b6cdd18e9049
- MD5 995fc36013fd09745ae17b899ed70367
- SHA1 c0dcfe396ec01b04ac613784b2446e620b85cb48
- SHA512 8d8ed461a1f807ac07562cbd4cff9662409fed9f282d019feb76a8e51fa422b8d0c106d8dbc683bd6588d418c07ee41fc047c95580a467ba6a933030c1f8fb17
- SSDEEP 384:wdwmssEpFz4Q3HnNDdICKxkVwKgFNhDzNxpfJoSAKWQzMdWota8JkFjjmNgyk93s:LqEbTD6CKxkCvNhDJxpfOh4zM0UaT5mn
- TLSH T14EB2E1325788E6361F8842317D119825FA913EB76B7F017901C0CBB16E62523FFCA59B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 66115fffc10292f8e1975eadeb8a5bbea4cf813fc5bee82a66175b8c37e5997d
- MD5 aa9c23d4fd481d6f10179431bbacebe9
- SHA1 edb89fad697717cc74b26f9601fd073ad1b21e4f
- SHA512 145bbc6286c2d411f82ae1aa1372b6384bf7c5750d7271310ae4e7c53f16451f44f84ab9cffbba9c6845355c47da37c0e515ee99413093071ef767300191a221
- SSDEEP 384:NKOm9ySGzsBpFSUW7ZI7kdxucneBI4PfXiQPDGI7:Nfm97GgnFhsdxdnWrdF7
- TLSH T19452B163E27969792D460B643C0FF974744B0129D72662B40F5262A34C920FAE8F5E68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 e5605b1b6ab3c6a96f0daee3cd47f6e372e22c0309a0649e84e4482f41596299
- MD5 4242044b44ab4c6e3e3f40857f19b86d
- SHA1 b9e993f1b0275459c293a9205b527fbd18afb2b7
- SHA512 a0e49382451962699fa9f71e29871fa3d68709c6358bc699c563c1d6d869b0dad4e44df54fe3ac4bceafec9f990bc733004e364bce01f92f5eaf58ff2164e1e2
- TLSH T1B93108853A0419DF851ACE7C89D0AFB2F821BFE2F91103295A434051A554E9662D4E02
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 26a85bf7fbabfce8bbf804b922eb2e946c8bd20cf0af14301ac8e5c373841475
- MD5 5b5e7234f6e45c81592863543ea987ed
- SHA1 1f25a846c07ae07071e7175536dbf85cbc6db3b9
- SHA512 4181912faaf2d8ee06602710b8bd1d032b4cbc6469cfb5132686d72415241171c94f194034e573dad0e38ed04b95e0c8bbecd59f78b3d6eea0f4f6304e85fef7
- TLSH T16B312B971022A80CE226719384526AD3624C0117D6E814B6F2B6B7FCA9167793D4FC43
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 3d44e01f10e42078436368a8a23d5a736ffe2790d3ed1bf0b6a2ce731ac04720
- MD5 9194fd79874439ff41a626313c0cf37f
- SHA1 730bb26bb5b09b2fec698928208dca8b3310a1b2
- SHA512 69e478729a95546a38d3fa28921ce6df9ddbfb8db21f2e34bac268031a805250e0699a6d04e74d96ed0fe2fad9e7d9f6ef8203abf7b207ee03c82460fd6e97a9
- TLSH T1444119D96FF61271180447D6D44A59101B0E6BBBA93C7863222F4AF014DA0F8E4BEE6D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 eead3c99782238dd0b976790b6432dc603db0aab4ecdaab994aec2232bffa14c
- MD5 0864cb4be19f6b439df890b62973a4e8
- SHA1 bf6b1d77c601885eefe3bf59c5420fdd69d3a557
- SHA512 604387f8678798d9b8edd17d0e0e403d732f341c33c8efeaaffb708ad57e7b29d4f62ed571b1fe62364eaca81a57ce70ce30aedd177b84460043267359bf5132
- TLSH T1A6412C21D0A2759E98EDBBD8CF8E904B1285AB84202DB7C539DDB7BD194451C01D7104
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 586efc70771d9754ae6be14ef2773210e2391ac8f0096040b9b2c1bf994ed844
- MD5 62bc2bb616ff4a6e4910accfdd7faccd
- SHA1 6aeec28060e76557cfbb5073684c302ced18c81b
- SHA512 44a21bc66c98bd5b45e255438c3a140f0ca742e9808267ceca0aabcd3d4052af762ce68cfeb5d65d0b403a26591d1f1e03e24d23c0ff5e84f37329d0017a1968
- TLSH T1AF411A928F312F86690E623E46BDEFC9D1811473574EB734F8D096214A072471776037
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 c4fed23e3e236fd417d964067e2da0c1ed0393b107c3ba6b31eaf0409500a63e
- MD5 389e79c2668c6c5a6e7834e6e7c07af4
- SHA1 4ca53b52e862479f82686f0f2105e946aa762f98
- SHA512 c134d09960052b453023ebea3f51ada1b9d1b8ddece32e73882c12c791ff121d8cad49e217f80e6032556f654ff35ecf2bbbb3c98015641a59fd1a049d1426ab
- TLSH T183412B3BBD64F55494D28B06507C916060AB871AD31F3A0DDE8772EA6D4922237B4047
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 9ab857ed2b6dbef061f3acc8aa42f316379d59a4eaaf494ac3bbd12a400eca41
- MD5 22d1c372b688bccb111af1bbb0f513dd
- SHA1 87054bcf30aa0ec2deb5a870b91b7000e2f6bd38
- SHA512 f02fd3b27a4c1c8f4c11bb79e7d424dfb153decee3027c492b763752c0607ccc156401d8181a168a1e4a8a7043b81f1b116acb68f22fed6a503fd3860c8b257a
- TLSH T18C412851B701388C864CE1D36EF75B378A66D4CD256CFCA084E9B92E5582EC4F828462
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 bf16a95fa7efa3cbdbb8329af2baf8f9dc91577ef514d2407e3f5f93123fd133
- MD5 d6e1f3c70f1d39d7cbe100b75e0e7692
- SHA1 58ad1fbddbaecb30d606298189d0b193d78b9642
- SHA512 4c63fe3bc3940202dda351c436de1e74291673a7c19d692ac85479986a4c9ea2ed356fc4a0911030b92378bb7a936d03ea7040b6f42c60eb5b7eebff757f4b04
- TLSH T195415D022E9CF5B5037CBAC63D0D409480F9451D9E936DC88B7E612CF51898163B3DF5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 cbc72cad100db87a0116d4087116320db13d300896924da915357c4ec741f282
- MD5 5a562c7be5b9299ebcc2c42649c0356a
- SHA1 1999ab91d93e5aab726f91af0773e6bb15c6ae58
- SHA512 8a673106ee490be31cc071218fc28b57936111077b02db60ae354da81f49a9eb76c4c1308e040021fe73c5f869881994de6a836085fcc145c9d29d0dfea9b97c
- TLSH T118413B21A2B5F5E7D4A31EC172BD2625FBA3C2982F29E1545857832BDC94D4890E02F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 13ba972d6f1f22ec6ea3e39b6fd90caeec410ac31fc26b8e9246ec437f5754f0
- MD5 877f419c9449fe6184c426370e61b240
- SHA1 733e7a6d2074d1f817ce9c4a65049cbc535d2626
- SHA512 40038eb04ea8bb2d9ef3b1c942628d4c283d460f72de21043e33e0bae2b99f3e40146acc0ff44204c6a36a73b2a537c70ce51c02bf608381e68a6d6783913c4d
- TLSH T1E3514DFD7C85593D0605B94D89305781E64F53EA38DB0573362B21AE8738472849D777
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 37dcf58591e6768c25fef7601166b9e71c84a66e8c748cbaf86c615038f6940d
- MD5 4bd05b213a958fdbc930ca4d1f318d1d
- SHA1 f5209e70095912988162525332f96ab73df85aa9
- SHA512 206f8acb9fda22335640677378f42c96552d2c0c7bf0d1d7548da86d923442944805a938220813d5d6dc4d261b74140576186192dca829aae28d32b2d05ff6d9
- TLSH T1D0515C7081B05FA0A9F72BE76E23F03DAC7C704873326793C4321959408EE923A609DE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 ab7469fc86e69bafdac440c62ae12d03eb98bb3d9bf89dda1652669a619aae90
- MD5 f1e05055ffa25956b02a60991880d08c
- SHA1 eeb5efa80c76e4b4141ff024d55458d9fa036aa2
- SHA512 ae9afb063c494e6c0c6d4a64bb1ec2e334b03524f240c4635ba6daaa5a4f7b4f3dd742b21a2abc0a2da2516f9c65be2c998ace2c1c4fde8191531a845290b9d5
- TLSH T168516B02D8DC832BC108E1870DAEE138F82E8389C67CA6BD111D3254D7CA61B8712FC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 2KB
- SHA256 1f1725415f5e957833ca10aa7e9ef465288c5b290ec05ab4ca1a359c105a4d5b
- MD5 0a01dec9d2489703738c63f87f1f8346
- SHA1 83ed0a69f911214c3a7c8b8897ae24f3513654df
- SHA512 fcbc4a29fcd67cfd4d21b478a24aa98858390f780abed5fe302d43a4762a26defce457dbb055cd0ef9dbf767a6368baab2fab7d3b4acadfa8a75345c245be7dc
- TLSH T1DC513C1AFBB7A21C83ED03A245766D64DDD09A0C23A13A63C62BD73DEC031D0857616C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 4a3fc5acbe4ee586de530d795fc532f08a043531dedb462d1fe0cc6abf6da6a4
- MD5 2f3643405c2663725a98336568cf6897
- SHA1 c116a2139ec260b467ad71cbb38fafd5261c120f
- SHA512 c22393a1e8eb82e3c94bb4d89c6006f7b004ca23526c856886bdd211b1dcbd479e644118fc8726ba1de8ee24f7aa729d6fa9389180a514a7f80664339e1875fc
- SSDEEP 192:WAKZrQj0HQ9ZGuN5GvuPDiCP+G3OtWjRxm9cLutYNWsBXNX9QZTceF+:a01uuN5+uPDiBGetOfmYws9NXAxk
- TLSH T12502C0C11063993C68D6B59D1061EB537B88EB5393C1C2FBF6592B4E0DBD8A4F6C6901
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 18ba1f61716ca8943cced22796efb334ec57ecde258b2f47e827a4953c5fcce7
- MD5 f8ec6650b4fba430fb954c9493c992d6
- SHA1 b6609647c8dc8e003acac8cae11ee2d992645e59
- SHA512 3b22e0c9411ddb20ff99841fdbb79b6310942064a314ff36dea89814f7b3acdce8cd0646866f00b1f381547456f16b6c790a25ccf6350e6c4d41279d39b5c37b
- SSDEEP 192:LLajDN1AdEUxbguRXi9OCGhi6cuwRXRXo5l4INI1nO8teQiYV:LGjDNGdEuEGc6KRXCL4liO
- TLSH T11402AFFCAB3E137543CE59A9A8C42CA523FC7381961ED540A28330357E15CEB57F55A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 33b586368ae87ff1d9ef5de5edde039469ca48194da5907391da289b2bc01c78
- MD5 ec3f6e84e3ffd4638a7c17ce6e6ef648
- SHA1 b17d7594eb8232e00b719a9416134ef304a27a8a
- SHA512 03863876e18961cb3a03110fdc14122ed6ea9706cc35ce89c0bd0cd02984a2385ed24dba102653056e916df61214d30536459191d548ca4d6ea5ed5c9c1e7884
- SSDEEP 192:0r2oob+Y5ic95vrfZt46sfiCKJjOfB3nZgEFYLbZfEID2:0r2f+4ic9JrDDhmNZWfV2
- TLSH T1D302BFC9A3DA05CF590FBC0D8A4B665E1731740EB7F2B4F50502A1EA0B5B880F16D274
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 a6746a2a2e4a9728b4417696653760c0972ec3503fb2e24eabeda91900563164
- MD5 7edc06fc65a5b526572c0aaecf919e54
- SHA1 52968d756e4a2f0bc26ef683c31c38ed7cfc7ccc
- SHA512 f7f2b15cdc89dfab566262a24f5065a6429f2a42b3efe842cc7287fa85c245c737ce3009bfd54e2a3d813a37fdc50c1af8f70cb05ea63320903177394543c744
- SSDEEP 192:1/2+r75gqm5D5TOZ+SWkzSugBiz99+8rd8VLGaDCiKyR1WOx2mF:jr9gqUOoTkeu9zGHVCak+1/x2mF
- TLSH T18022B09B1F59C8D769B8404D88A20287A3009FFCFAD63C0E575CFA8D88B12953CE1160
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 4705cdcc0daed6608469ff4f6ab8c598d3f70a45c04355e641c4475566282031
- MD5 77e211a874d503f033b52ea23a886789
- SHA1 aa586380e124ad17a73bf3773191bfce6a6306ab
- SHA512 080d39de2839919474eb3f4c238d0cda62b26597e4c41d96429add3fd9a94de583876cba3f1e7db008a6bd2e2e26c93687fb9e9ab63b70bf81101e3a2bc53d44
- SSDEEP 192:y85qD/6/UWwpmWjoUR+RjBB8X6u59odcRG6gZlTClzk7RfQHIdxep+3WbMu1JW2l:TQ2Ur66X6ufoMgjCFXI3ep++MubFXPma
- TLSH T17622C07912421C7316D27B82B775D18C2A2C93B07D4D75920BA9E570F1D470AF3BAE87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 8ff0ab794ae135e4b175f7594dd23db931e6dff5d242beeeddc711e6793ec697
- MD5 1e7bc485e60e0ef7f971396dae3e7d1d
- SHA1 db3417ddf6ec040e86992f7e9cf259fe57b86720
- SHA512 9a39b94bdef421537279416f005dfb5612188bbd98f7e28d36b20b663db657ea88bcb1f3fe081be2a232251bba69ec7d66f55361a43b96f7426857b4a17da7ec
- SSDEEP 192:UJMJhypb7IdlGaZKMxN8vJYjkt9MQoEt7IsfQroyKjGGAdjmI9mZlZ+dawHZ:NypbsdlEM0vKO9cEtcIlyKcjiLAay
- TLSH T1D522C0218D1B2B21A78E7DC191187E6D1B5FC73AE114729638EB8D5362B3902C833E5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 f71f85739306ec05150f3f9eb22c5dba1d582c851cca93db1b9f3e9e35776657
- MD5 cb1e6cc8ac51235bbb10bb50a5b1453f
- SHA1 cbac54c4ff16164ab5fc42431cd67c2b092af16d
- SHA512 9ebcf94368897a7173be34441abf7a55a8e0471c4b65a56757bf7ef4100c2fd177a91954d55416117f5476ff92b0741854feb4a24cb789dd0e877c2e57e8f20a
- SSDEEP 192:IIfzr7ceykAfTyDfyw5BPyzhWrCjzBF/9F5QtnMA+TJOcA1oSy9Ks+fkUf:IUP7cwCy2gBPshWq794tMA+NdA1oD9Y
- TLSH T14722CFAB5EC1A18DC68EF4F85A13D4DB399B0782CD56B1390451D1D11AD0E1EFAB705C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 366a34dc285e4e6c6d5519a9665620c5e36e3e244e5bad82425227b98e681ab6
- MD5 de69e73284f02196d05f3d94cc23b082
- SHA1 1ef364340a61bdaaa0fb886e11c5d54543a563c7
- SHA512 9c8d5c9bf8bf87996cca357cf66fc2c700573be3519ba57fa7805af8fdbcbb413fe4cb0dcdb7a6cd378f9710e2c8d9b1b0c3a7b41822ec99e1bd5f0416c2718f
- SSDEEP 192:eWAQJtfsf1srAmGOH/4YTqyTP5XX75c36Pen9IkkDcz5tMgEMmz:HEf1cAFSQYTqyRHFzP2NkD45Gl
- TLSH T1BC32BF129BDD177643AA2035B98C37BDC61816B5F60EEBEA408B45C1AE5DB22012A41E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 0ca13be335fa3a7db941cd9bbcec35702c1e1dabf11a4679320762f1208453af
- MD5 bd0c11b29e25f04150bd8063d4e3d499
- SHA1 7f107ac72cb1f6a7b8074aaf83150dc23095ab42
- SHA512 d544cf9c3f10bcf204e6b2d362bef0314fb2e493ba23e52038e199bff36dbcdc768f2f90f51fe1a30facae5673bff8b12446ee3c2a220b8cdcc970949fc6b825
- SSDEEP 192:cGkiVebYb1qOeCzjKQxd4Lbtu4948lPWyIOe8ALmwe+X:rLVe8b1yQT0btvxpWyIV8AJe+X
- TLSH T1D932B01FFD8B8892D6043757273D6CA105048D6ADFA2A6931CEDB499C5FE0251CBB2C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 3fc27d12c9e788de8a0ee55d69a7048b149c76a8954dc9ea066229b48935cbdd
- MD5 c12452c1e4949d8cf5bc845251e6dab9
- SHA1 4bc6a5b79f6ba85177fed3c1e360a1631ef4ea48
- SHA512 6efb6d2a9de76f27da87d193883da4f0743b579006a93b15d485f002eda602acf41b92ad2a25532ff7103522f3b40067ac05f8c81b85a9f76e89a79767849223
- SSDEEP 192:Y65xB09or9iDxL5y8NJn0f2Eqr02wEhJOQHod/viXwIOlj1nIu9u7m:YiaogFVdJnZ+2hOQHeY7ad
- TLSH T13132CFCD4811CD6FE331844A6D1A00BECD3553A2EE03A26D95D2AF47E72B6263053BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 50dd042886d14740cb08c54c63fbed327adb441a70ff63b7a5511f617f1cf9f7
- MD5 bc9f68e0f03c03d0adfe8401149708f8
- SHA1 9c1620822b1296b57f7908e9cdf109f193b84dd0
- SHA512 47e519bb71b11bf353468ccf3088dd95473b272022f797effea3d0775135149b14e30c097e032e43e3fa2063623a83e9b3778658874fad68ecbd4b69feb2fa43
- SSDEEP 192:r02vtnc7UiQJVyNnBpWQE+VjkxcgIB1cRxOo3Pe1SZ8S/voHQ9cHzT:r02VncAi4I1BpWQE+qxzS0Oo3Ph9cTT
- TLSH T1A232CF6A2796077E4F926A68E37233F0242D550FE0CFCAEF4F8E4142534951C927CA6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 57e8bfb51a20893e9c0a0c178dd138d937b17cc38aa4159179bd7bef5a5f050a
- MD5 1d9808bf3d866198047761ac5b9ffd36
- SHA1 0b6fc0a4dd6cb21807f9c1ec585dd30d3e76de3a
- SHA512 229084b6ba463728c10e55d1c9f221e9b0c2d4744e2a7164909dc0dc0796a225677e6aeddc607a6c4a0a43ed8777f1b969bb99c2ab6ff1d8e82852509bb107c2
- SSDEEP 384:psAeX3igMFNIlx2JjywafiSSpfulJba8Z6QBIvqUIU9KxudjJO:QygkOlgJjeIpfAhXZ6QBIvq4JjQ
- TLSH T13F72D17AD02262B6A7CFF7DC4AC5691B7CBBA01BD339092181B460851C3BB72DD156EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 2dc42798e8d5e31ddf507b277b5dee81248409a8b21a427f33051e3b1517554c
- MD5 fa4010230c6ae385fd1ecf4f92fa8252
- SHA1 685ac01f7ddfc198825a80bbf7a2e4599ac89e9f
- SHA512 9dff1a94d0c506fe9a0555bb5c6119f0d66d84fc6d4cd5b1e133e2693f010bfc2375b0824cdfe8f0baddc3b153037700a91af014b746ea564831b6fbb02b9987
- SSDEEP 384:eZ97f6PI/UcsYFlVbZX+JNnMpybY6YmCgWufMzaDN:eKPoUc3XZuHE6TC0fMz0N
- TLSH T1D962D07B53C4CB63F20C93CEBA32C75D6DD63AD19004A65C8D3C62F6AE9410917C95E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 7d7814e79e2b2a9b88e75884c011cb9ab7228a7af0f1a94fff13c25875935cab
- MD5 ded5bbba41da41d65b1aaec0afc59c8e
- SHA1 f9edcfdc10c3ec5e68ca6d987f5a1d817b03d899
- SHA512 7acf3cef058b87bbeb8679829eb9cc001be4091d0eb1b5a23adb558422824772fccf1419d362d3b801a9b88b4336f6989e7a31e92a46eface38ecc5bb5d0ad4c
- SSDEEP 384:7dR7+1u3FQhb+YTk7ftOVJJOdKOB4Tpz7kKe0Uam7ek8z:7r7+1u3FQhs+JTOspzgKeraxk8z
- TLSH T1C382D0984D4651B8AA3E4A94576BE8FC78F64342D6B1FC6301EDACF80ECD50211B19FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 94cafa1732a0c5641ea5e58c2b9764cc58772868a6d4fa6069091cd43b93aab3
- MD5 e7c20ff553a5b661354ea69f47d6c041
- SHA1 e8d50df828d0ccdea6bc0f5243e7d3c8663d1f10
- SHA512 214bebaf483221cdef0e25653f0a154a8009b60f91b4ac652ed0b98f9083d3174e913becba04be8e82d7c291ef114db084203a263eee1eea72adb4e18d8062a5
- SSDEEP 384:wd43dnjrvRwPer75qF1fw2f1tTVwAq6x8uWyHJla:d3Rj9wPePY82f1S6xXHJ8
- TLSH T14D82D19261A36E82B22FBBAE33C2E7A194FFDDF15F550AC0D665C751C2456CCE225013
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 de46b7ea5ce84a9b4d3c92e8a8e586ca63a83d9c3346f155f39eade60a0c0772
- MD5 dc5d806560798e27c7ad96f0f273ab75
- SHA1 9877f34af9b84186146257d28417dc4b54867d08
- SHA512 ca27e268ed41d455fc47a2dc4f3830c15d6c2e32a2456c980c5bc70a7a7627b34eab8c9e5b030672f98d11a532659ea15ca96e4d1accb10b03188530f28716e3
- SSDEEP 384:jpmAko0YfWebl0qONviKGWUH/HfD8gtbnw1G4dq:jucblONq513HbnZB
- TLSH T11A52C05E8A613C871AD94C6131D8E2152CF61F836AA80D078A48F3551BFB3623B842AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 76862a4081df4dc48f126f44fc8db934a42061ff602dcb792f19d682c30e47ca
- MD5 53b61013fd450353eb32a6df48360ef0
- SHA1 1fce88e907e0b229424f8d8624919b6fdea6f530
- SHA512 6ae20b19477497c83873e10c179a48627b269156b5ef2db76aefb919b26854bec8730cfb1486e04d7633e4608e94089fd1319bc458a26ad4ea9b620cae2bf903
- SSDEEP 384:RUimKZXwWo2lClmdalUYiAhM0MLxXo4740Ss:ROKZXwWwlmiUYC0OmCqs
- TLSH T15052D1B2F00E053FE5163729B2233057B5AC5B3F5456E9E4275CC2B56970E1382FA8D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 a16273c86f49d8aeafb6948fcb4994f5a8c961c5fcb292b65354f00c26f254cf
- MD5 cd8240d4ed8ee53535a4420d9f05f7f6
- SHA1 95a832d74a3550c5bd9abe22b4dabc540800b262
- SHA512 0ada04e8e75ac265d0df886fcd88eaeca32825be34c333407e46d5400b4731edb89efb2fc45e051218dd3830f43fbc4dd3f5d673d1c68e4716ce698c78cda171
- SSDEEP 384:BNinny+aNs0aSzm82Esc40DcJgIuIr0JluYeboN:riny+8s0PzmJt0DcgIucFw
- TLSH T17772B1020F639F9E11D6E41B40D071F62485BD54C63E47F067D9DAD7B066EAF8190BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 888105c798cdfc994808331e18ab5a02411f215c8757637887cd46858994e981
- MD5 ab09f9c3ef3c731515c390a857917709
- SHA1 7702b16a80664c5fd8b5e5efc2ce6eb170388ef4
- SHA512 d9645374ddc8dcaabfd229158a0fce438fa90829e9a22c3acfa5ece9aa1572c127afbd5c4006c87a898f15384ce0e190d57e02eac27889cc0bf7d0742b415dad
- SSDEEP 384:werdqvSxcGV4iphiKZg7XYHikEJ35egqh1/BzOfIWfew7FDbEJndGrwOe:vg6uFiphiKZ3qxIvafZ2wZDEjOe
- TLSH T1CF92D136917C68DD042AFED85CEAC79FC1E4468574132F3E582775CF6E903921227DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 7814e711305f53d65644cf9379aa9d2b43fb2d889054c3a98fe61676bf38bd07
- MD5 b6c6619c4d6184a00a5750e6c813eed0
- SHA1 c718336edf19b63a7fe49f0e2cb6764f79fd5a4d
- SHA512 34c8c9f958e9a28964ba5901e952c2acc7bec23ece782bd4e3b5ce9db1e81df17fa80a05886b4d18c2348dd5077271e1f38c1039abf61181e723ee384e18b8bd
- SSDEEP 384:0U2fxzxbUX/MjEGUZsAFhdqSbqjq2lwj6tVEEb5+PcLidoXOy:0PJzsEQPZBaIKwjuVEEl+PD2XOy
- TLSH T19D92E05E9955DF8CAED2033035349E988DD9A863C933D4AA8361BCF8B90C330BB1F164
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 eec6a46164522b97345feba405b0a44343ea2c3504c8658d3630474aed3e3386
- MD5 4c087502245e57f683ffa3c02e7f4557
- SHA1 3fff712c7134fe6b884e68d34f8eb158cc3c9e21
- SHA512 6c04018a19e29bf56b8d69bf9ad456e3e87c06509fc198a5e000615ceed77e606e2e94a93c59402394026ef9175dec9f409a81b903059d06fc504ad63b036ab9
- SSDEEP 384:2CvUIroKPz6dFCsKnw8FDJgXmLhmuVs39IC7OQxBNDTqw2obuGEMbL:3vUIrbzymDJgXWhmuVs3SC7fxBNDT4o1
- TLSH T10392E1CCB5221E484B857D91EEDA9873E85DBF4A360F5919E831101E86E62FDD7131A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 bf0ce4463b01c0d6c99e654c075d71d0965990d933133a9e0b409d7b88eab38f
- MD5 e88e6bf7c1821af3e4288cd5c459afdb
- SHA1 fd5a2b9d52af806016787fb17a01acbf386efc23
- SHA512 aadec2aa91e5292c0760b3dd945ea112c0f008b37df320a7744668546f8c3d93689f23f729333b14ee469961730846250e8124ab072dd2c4ab69f8c7c828b023
- SSDEEP 384:W1sIdcUr7HjUbYydmU4n5U07Ogtbz64um81YWzZAlT0Ds:WaImsjqYydmhjqcb+3fuWzqlIs
- TLSH T14E92E1B4FE9A5C6294F97FB1268134E397CEC7EF1D2856EACBABC834241110441746AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 0353c1e5fe813527d4ca96ad75bfacb2aa26261135c79bc67034e03a324dd749
- MD5 693a6665240cfc9d7cfe59588a27513b
- SHA1 768b75447f47a5c81d660441f4e3246bfb034c2a
- SHA512 b7cb7ae33b3f8372c84b8d670540753b6474d9ff9b2567f1d5e0aff0133926147f1b396d3bcae3b8ebb8344a632a008dce5d92f6b9ab2d1eb57bd47e7f2b9000
- SSDEEP 384:5ev5Cs77OmQpM61hOQZnoI8bRj4pBfEENQkH5+c++7xaJlorlJ829abir6B416F3:5evIG6mQCyQQZnoI8ba3XQkHz++7xeoG
- TLSH T159A2F1BB2AD39BF95FC9A02DD14E211EE2B14C6B8E1212D8B7170272B078D779C25345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 868d66995f8f13502c53bef606434297fb3a0df5ddafb136027a0be8bfc8772b
- MD5 7c30fb7036f63c995a4bf8837d5a7527
- SHA1 1dc05fef7c4ad944aca78710b6a4ff767533ab85
- SHA512 7d6c271d24986ef49ed2b319c62bae83bf3c30d72680e263ad6b0a8a7b9c726daf7ab55ea967b849caa1d26e912fe8d5ce4b45ef3b6e5b8ff85a0b09a9d2d97f
- SSDEEP 384:NdDOse4qJp23Fgdnp/aHr8wQyzsjn8/Gf/I0R1JKpmEH+dW1w9zddiDTNd9A:NdDxiOMnOr81rfAU16mnD9zddiW
- TLSH T12AB2E0B33DB84D645A6E7A38626D9704CD6E3389F22ACC2D5DBCA0E908A007D719CD57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 b2142a6611889777a9d7d3bdf158ba0d8388728e2c6ada421d16bc708b609ac8
- MD5 8d4343468c4916bfc01f4d50c5bd1916
- SHA1 5fa3743bd5514bf995f62b5ad5514120ecf5d80a
- SHA512 56648493257199638fe558194401286024bb54c0d4d36388b9e74e15aa1469fba0e6cbf4005343e7ce382583fc26561d48d008e15a271885866263a2382e1a70
- SSDEEP 384:pSzHGH0uNKLnDpYtnECUHcnAjJHPquyzrnxj7f0a1WbssEcfQ14Ihy:+jjDpYJmNPord7MjsBSYy
- TLSH T13792D09A8FF2DBBA0972F3E910CC2122926FB81661FDD4956718CA41B0A5459C615D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 a20c3cfcc443ee41032c95a5a1ad86d3cb4e2da7c4ab4f2a26fa0c0084ee541e
- MD5 9748b09c467b2b98237f022723017340
- SHA1 ba3ad0209a874a29a2723d487be461259c72642a
- SHA512 94e22fee34188a94459bf9d9cef7ec981f11c040f9ebdd9f00d0af5650943e0d835d8ec1c87344d7514ae5dc936060e0bf3fdd00e4f607771e5dabd1f950cf66
- SSDEEP 384:PNZeOdcHhclQ5rUu4ZD72WczysOkzsyoIOhXjf9upTA4G7NSvRZaBvqzUl5Hds:HcBFo/D7pnkd4zFGTZG7xlll5H2
- TLSH T19EB2D0EAE390AE9B4E479D9303CE451B7D0FD72D02BC67C123B5BA1F5526AC4B3119A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 813B
- SHA256 9531e5c512ca1062f12a2d112c611b035cdbfe8e16824d4e249bddc569bd9761
- MD5 9e0566c0dc3026c1d14a9ad2d1953359
- SHA1 24d68e02bde6cf3889455de25ae0f7ac0adaa17e
- SHA512 3e80f94ad9c07b20351a0886e30004e7b8b977cb7b26956f75408f653f266a5d8c29d344d80f423fa27f33b6bf8d4ef1e10e02c7bb97495373ee1dc1ccfc2061
- TLSH T1CE01CA3B419134530527484962C301FF01080F1D764549C54F43B912D734D370F37997
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 8KB
- SHA256 5c2d97cded3ddb26f547a3ff7fb3ef206be679fca8e63117eab248333d633e83
- MD5 aa357564542e2061a277901b3a7f57e5
- SHA1 62ae922e995f4e9e1013348f659801ba85ee7c81
- SHA512 f764b6c2a60dbfb2ca972a7e777e14e7bddf8f04a892792c537f412b2794c11c68a1b52c2eab4cda3bc161a684296f6d7fa83368109603583bb6d544b915324d
- SSDEEP 192:VwpxtaRV5Nge9KO+kx7AZFJSidhi4WYnFsnjBkQv/BKb6jgApU4MI13:VJRV5+e97+kxyFsidhZWOsnNkOBKbxCn
- TLSH T1C312BEBC0CEA3074B2765D915903665E7AE8300E469D865C7B22768FD6063396F36D02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 aa2c319c9b61bf0465a433a4d3ccf96730716c3bea5c12fe96c0f137c6193c30
- MD5 1072cb751baa10d1ac08008ef019a518
- SHA1 f908905c2a70b3e2346ab72ceb8fb620e30c98e4
- SHA512 fcc2106d283f9d595f8cd76e38d83eb4fe901580e9b1cb8a748e832bb130daf26077d10527c5c1de38887cda4097b429aedd8c1481fcd99801263ec1e46f0a90
- SSDEEP 384:g6XCtx4Kn+azpd1y4Zq2vr4DRzfHc01WljQ4r7:g6y7nRpCfRzolM4f
- TLSH T16062CF0CC506B92176CF5195C603FDAE2265E89857BEA777FA61EAC472C30836030E31
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 29ca2b6d95ba721439d37111f21660e90021fb75aa83c8e6029845c088765d95
- MD5 54ad8c1c7598e5f1923287f45d2fa00f
- SHA1 0622e8a915699701a3b9419ed907bc54e73bb7f6
- SHA512 7d37ed23031eeb6b5266948777f718be0b917cbc5c285cbae1c250c0e24f39287df66a878a75099474000241db709b4ee76cb22a6ee96db932c15a5c3cf7ddfa
- TLSH T15A217766E868787ADDB0DCB8E62F73486C2F4673189CD496F7E145C02513AE4DE48B44
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 b596dca4facc271066d3e880c4602637004e9cf34bce05e8dc4afd0f67378f07
- MD5 a724b41411c3d338299412d05fafc32f
- SHA1 ebafc0918949b952bdbf3041c53424f69aaf84a4
- SHA512 47c3c6ca7765d00ae27d2585b6382c92eadf3a3e5a0963a7aca07ddae8e3f9fddfa09e1e13a0a32a99d1c727e2f861b6785dcc8b09094967f54a06b664f5dd63
- TLSH T10421A899EE020372085AE777B15E5C43DFDCDD46510591EC289D67C05C5D8C90FFA89A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 1KB
- SHA256 e49af00235c7eb4d8539c76a088a0df3f0db79a1493c6647ef4b9e30d12069d5
- MD5 e3920c761eff329013ec532d33e04eb1
- SHA1 c8dd7fd49463878ec15402ba729751ed9b194c0e
- SHA512 3948ad2ecdb262f494f0954b751ae8157c08edf9a8d9ea5df022168a652b84eba5e6d21bfbe8796d8f15434fe0b795aa17d9de34b18f5752e59eebb7c31a82b2
- TLSH T1FE310C057EE32CD1B734C9BB8164224DF1EB427D4185B7E4939D7A4A1A380786466690
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 7ecd08b71083c2260d5b9c0ef28b34603dcc7658cc58db2f5ccdbb660f04070e
- MD5 2baf9ba7e4b491f4b4962121c20f670d
- SHA1 2963bde8ef406d065e2ab8727a4b882d362300d7
- SHA512 f7eb43d20cdcab6e227c6000a191b0633ac5327c5d3662201c7978ffb1e737bf2b3e380c145d69845f521b4bfa644aea0f15577ecbd0e56501a1a53fb32b9ce6
- SSDEEP 192:NyutMq/i6C12zz6H3SU4ncXG6UEBYoRvdHrNAkG9p6l2Q8h:EuuAz6H3SJcXfUEBbNAwF8h
- TLSH T17F22BFAC98DB6F160BA46EBC147CA85041703552C9151F163E2B74FE4AF3B0A5BFC9C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 bd5b4c1e246dd0b0f6c97ac0fbf4a5f6918e28f3a3238c61cda11e8d6e7733ba
- MD5 38ce48c4b86025ccc1632edf242d54bf
- SHA1 be97c057e0fd39c964e653c34344c76654e30e48
- SHA512 195adccb2b007b8dde4178f782c1e1926f512253fbdad5eeb82199fff46b2ab1d5bbf7c5569af44d7d8fd0156e01e4f9571940c06087274f0ffc756466707907
- SSDEEP 192:y0tMW4l103TqIqwHdTLZAg73NZxS3sYH4fgbvMp/G4vgvt68HdgNB9Ud/cKTJ:IeDXqqZAC3NDEnayKG4X89g3+mKTJ
- TLSH T12222BF3FF553EED66F75E8A80E1D90B356E169C987536C3099FD930057E2A8342308A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 76db7176b80e68c87236646400f1b998d7d866858d5216d7c0727752f4b4f7e5
- MD5 a564fd493756dca9abdc5d522215225c
- SHA1 52b726f65047fcd566804f1befed6e9e73cb0821
- SHA512 c228a46c3616f6c20419d967d032cd7522d5d6a6edb127c5e44586851d39014a9938a265e7f60684702dc6d0a06d1dcca6d8b3207956f0bda7896dbf52d668b4
- SSDEEP 192:BRH63OvSjG118swCZ65tGJE0v9QTBrkuAklzvNuWQeRxfA:SOvSav8EZctGm0VQTBAvW5xfA
- TLSH T10332C01EA9C81B489BFEE1A3E75D58065CA5E8F65E114710BBDF7285F6D0C81DD03304
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 686eeb26c39c7139125b55dde97c0a711d9d9e711ef4be59ca78cad46403ee5d
- MD5 4b3ec4bb10dfa415a3bc047b1df6abc2
- SHA1 a0cd3b7309c3017589d768c8c9c5d13dc73ca0d4
- SHA512 47b617044d04dd04726ae726652261e595eb3826d96bf7869e955882bf1841066042ce38d2461dc405db0ef4318ce3d8181b6fe0e2893cdc09017c83940780ad
- SSDEEP 192:hQrzjWaDVYHoYXFZFEB1K/9WQnJhbY1I6mvZG5JIB4yKbeVA0GzXDzvpaH1V+f:hQr32TnFEq/9ZJ+1I6OZkv+20UfQHc
- TLSH T13E32BFD437590A7C81048DAC29CC674E8390D1A895AAD34611F7577DB02AE838EEFC6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 3e6f3d1454dd5bb0f01c2783885e7daa7027c6c676768c502faa3148f9cc4767
- MD5 bef23d02cde9aba14c15c912ddda98cd
- SHA1 be0fe0af23ca72a21503deca666413710435ee69
- SHA512 5fcbc82b83bf743656c4e852efe86163b260962a38cf36ba684bf46682398704826079319fadfbfc74b5f7d9538bbbdc92323b2b454bfa377d9400598b25feb8
- SSDEEP 192:WeZRPqdwUqdxAVk8Tah6biYFAxHnE7PqybhS19uwSM5vfU2DvGf7Fj/DOQkTZUgA:LSdwPx1h6uYFgnxywutMpfJON/Q2bb
- TLSH T12B32C01B2DE47FEC49C876E0D47ABCE5F6AA43E030AE4B75418614D97CADC17C86E118
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 9c077e78296e9619b787dccc19082e1177034d6188c91e3980703b347dce9f65
- MD5 a8b9cfe22e6a7accbaa9629ed246328a
- SHA1 26e356c0fa97dbba9ef2a5ea16f892c988732c3a
- SHA512 528c3663a5c69705933f0ffdbeefd3d119faa5bb14a7d2cc25b0ac38ec83cc1073ad8b644327214045003f0dbdd734c5631639b3fca070a6776b7cdb194d5b7f
- SSDEEP 384:uxki7oY1SAh6b6Bq3sonF5dZdQx8bQzA+jhZbBJv8QkyYOoMFLr:rkSAh6bW1oF5dPZ+jhZ1JEQBYPMJ
- TLSH T18372D1B29EC46A1901041775DFE3AAE6D2749088F0FE6ED2F1961C58247B8D1D03F92E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 599bafccf348d1696f4007ecc5ffa92d962da38d9195919c6d128e2ee682b6d3
- MD5 001e45f412205341a333a06749c6ffbf
- SHA1 a8621df23f61f25d7fcb94e367f05eef81efff9d
- SHA512 1f677c609cbec2f55c8666fd33047eb104f37d7e9b80078fdc41f4d1f44f9b10a93eda18f738e7e3a7384e7e781ac958cd225687d08cc34690bf0354151401f0
- SSDEEP 768:4RXpZbcxQmEdla8cufIDo6c3IMa4QGn4IXxWr5:E/Bla0f4o1vkqy
- TLSH T117B2E1D6BB2F41D2B61AC2BC2FB05B547E7AC97C8C49F38C0855D4065352E72A26868F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 599eb79f5a74bd176596543ec1638377d1f6a0e0b9c2a35ab168a89db00a443d
- MD5 da9b61036dc3d10a540b94e6f4fa2417
- SHA1 5b32ee0e92f09b6218eafafdd0e1552c991ee5c0
- SHA512 ec92301a6dc6347f1122c75214899f4d7f18599ddad84cc5dd8daffa713176279e7b5b6f97597e8ef4037069692dc177759b86ae62adcbc4fbba353abcf9815f
- SSDEEP 384:1yibadDaimZBgZ5nhvTybHBjU5mBBWwse461GEP+LOeK5Z3b:12duNBm5CYLh61ECZTb
- TLSH T1DBA2E18DD79F5EA23ACED3A3F209B15CD2042A16111710E971AEA7553CDC40ABF42779
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 12KB
- SHA256 5a2fb7ba90f79ea51fe5005f12222493002f252af24f1011f620df7bea099888
- MD5 e7cb8535bca5097267ae57e64f78e42c
- SHA1 709752b0c86f7676d1442ee27d8d1a250b480f51
- SHA512 1f6be929ec06e61c3d1f5508108e6080c6c8a9d4d689aed7ba3c3816e153c964943f2a2152c2b073c76afe803a04d3c739a5362c19c9965b175b2287b87cc3fc
- SSDEEP 384:dTA8JnV53UOev/7/zqQkrpHouw4ADbWxfAq:NA8fe7CpHou16bWxF
- TLSH T1EF42C079724C2526369EA0614314FC76396CC3E2C47E1EF8B2704FE3694D8E9210CEA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 e36a737246379f3bb6e1a5a182dd75494c5516b066ddbaa06e7559516b6957f9
- MD5 114b3bf93c74c08bec3eeb55cf9240b7
- SHA1 decd320c9dc768cce48e561b83fc4d65aa32d0c2
- SHA512 96bdb072e2308475ef0b5f2c25a21c41c8d5f3b6f59d6a59df9624aedf16ac145f6da1ff05db3ea1c81b097ff9b5a34ff7c0636b664e3af8b8d542928572194a
- SSDEEP 384:mv/FGuwDqfJNNlke7by0DQN4eOUhTKMDx48ImxHxsXqfdiw9owNt5wisq:mvdGNbe7O0DFexTKwx4uHM8LNXxsq
- TLSH T11692D160C45E2E5C5C2B29578A0B24B25728276FF23E95ED3CB056FB28674ACF4311B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 2ad947cea0aee05ab21d9c17e82b2030539082672b3aa38172176c8b15e1861e
- MD5 fd8d06054dd9198112bf16a9e2818e08
- SHA1 79b6ebc765cc12ead0dfb3b5aa680d23ce192bff
- SHA512 df05abcb60e80d1f1f5a477b5b46867725c9d462a9f376814817bf0077201735c825f88591d265df6573e1ab0799ffa79f416bce43c35c06fa0baa32015896c2
- SSDEEP 384:U4Ju43lG5zvo2pH3Qmfz+QJi6CzeLflFwLTcJIG1brHDICACIjB1Ijt5oZI3Lfzu:U4Jw5zw2B3QiViteZuXu1TICcILLfzkj
- TLSH T15F92E134EF642EE3FB12298E34645772C92AFE7814701F40356C177B2C1937AEA72994
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 498516bc58334d41934f7476f1752cb2c1d1fff0edf3113909e30a863cee2a33
- MD5 4923a166ba7c33da9eaaa5320e4b5b3d
- SHA1 b3610a7088ed2858946c4229baaf11c9b7f13fff
- SHA512 8cf8859f70f8e1fde9113eeb40ec889f64abb98eb16a58d5868e611c1622c8f3840d39fb71d8714987af76c3fa054927d90ec9956dea22668037336fdff329eb
- SSDEEP 384:at9LrLQRxPu9OqJ9FLbG8Yb1vGX8OAOnM8E4pO/azKQiG1jBCWCTwT5YvkNJkPw0:a/LCzie1+MOAiMGaqiGKB0TuMNQw6W+
- TLSH T1EEB2E0F6130526D53228B6768FD4E4F19252335F74A4482A008BE4B737A9C7FBD253DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 d6bb386519a809dc0e58afe6bc13e37aeaa7a0fcaf5e17b10a7e7fee1e689557
- MD5 525ed8598e3602c3254b49b46f243ed3
- SHA1 371c9dbf40d9a3c81d0591bb9862f42eb02660ef
- SHA512 95e73db9c3ca633ea1c5ffdf0373547c585da09e9d880d7c0e7a48b8c041b19d84714a8ae47a91c6c4acf63537c284f693d91e9a84e33b7f37a7f2cb962b7872
- SSDEEP 384:13EWTqKGy5nHEQor9dopQtK1IjKWp7iV3o3tSdY2JyugDwAbFZosJ3MvaLuobbPc:1PqNy5A9eh1mko36Y2gugk+Z96obbPwJ
- TLSH T18FB2E1524899ACDF2D333B2C5E64FC177EF8E1A88D4ADF188A8C5391BB25D97C814790
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 899ea41891b0df353d6f89a8270fd99e0350e497eb480ad419d45bbe3dddf11c
- MD5 f28b654347addb5a7aa32f8a48122634
- SHA1 add8cc7de7b33dcef371192ac78aa78d80334548
- SHA512 ef4c689a6744886207e25f9d3d302ecbb64dee89cfbb2f217b358c07e864ef617dd43d436762c156e1ed86d9adf7ed02495f461611b375532fb3d5ce9a1263a5
- SSDEEP 384:6ac1syzsJ5mwuU9ISC9hl9bHsF1ui82z9Kh3vF7m67a//E4bO/hamS8WyqJLsGa2:6/ZoJiUWt2h0h97pa//EvS8WyqJTan7y
- TLSH T1C5B2E0B7A0729F0507A5BCC53731DD02E3825248F020BABAB937068ADBF620D90357DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 315ba05a226bf4f371ec81a98586fcb065df85ef27e61b68f6605d141e8b60ef
- MD5 cddc360fbd3f14373ae5bee73152e2c1
- SHA1 e0d8d909fd8942dd522405a98dd1af1f0ebe0c55
- SHA512 92785657ace03c9f3200d694a744a393fd630929a4a48599beb9913b9947e4998a855966d57cc846635e650196fd31f7b143763496d212506e33e3d6d79b4c3c
- SSDEEP 768:RfIWJ+H01Y+4qRY5uqcpdOyOkmippcH8RnsUm:R7J+HsnqTkxpcMBm
- TLSH T149B2F1EE1CFF6E138D922008E84DAB5ECB607B17CF81B6C7F7D81D204D919876522448
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 1572c5ba3797e4dbe9eaedfeaf87fb2ebce5c7daea42f2b1480b7c0e5e024a12
- MD5 6904cd5fdb8a28ee1e1f2b96eea4a35e
- SHA1 22f386b9c2ef45585ec284f71dc1276b011e3754
- SHA512 4c3072ab3e4c981e821d244177893ee38763aed4cbbbac67ab5683dabc80c53876e6de9242512733a65d46a3d93f7dbe9718b0d59989b58ab132d6f067791bee
- SSDEEP 384:aZPfvpzv0NDe5YMIlwYdhV1v8rZNUqLginjNFoFTeHiqNn4SyeU/j3Th3iJf:aZ/2Nq5KSYd/oZNUq3NueHiqN7Ngu
- TLSH T132B2E1FFDC627AF99566C4B0A88F5AE465CCFC8D1654C14CD42130E93760739C60EAB6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 b3836d4b0cc696e4544443ec6bd9c343c050f5b2ed9ecea52a1c2ce3b99127b5
- MD5 afaa50ae736dff60c928f733cd1f3cb4
- SHA1 6f9d34626e262f7ac6bbbc93acf05a018682c05a
- SHA512 19bd67f38fd59621ebecab11e374823aa6ba454ad8287b96512eed1057fe1550c5096a2a764ad5d959b334f6d8c684ac9f5218367cd74ec0d67f27f2908de03a
- SSDEEP 384:L+iZZ3kWshsisEljENMJLD3R+z4xvo+coB9GQ8ytbW+AeB6vRV0b:LjyHpBENMxD3K4x7cov0IjL6vE
- TLSH T1D792CF0EFD80C8CE2F1214679328E96BF05D095EDAAED98E7E4190C29DD357213D7C96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 74369dd91acaca4c697d06336b5840e9f22bc18fed4c273c443297caf19e8abe
- MD5 cc56040cbb5f9ca748c866d99245ec06
- SHA1 a36b2c86b2d326198276da47b59e2c0fb4eed5f5
- SHA512 8cbb99dba28bfb2290f9123c7fd4a927b7b5bb6bf1788abd349fc9128b7584cdff642718664165327513083fe2cd87477fa5628c0f421affaa88c0795172e52f
- SSDEEP 384:TBTAZ5IKv2PYhsoRCuiaxKkjLSueD3ZVy1uirAF1WU3G48TWmWzlT:9kzzyyxtjLDkGrwWU3G4+W/p
- TLSH T19BB2E1A671EC744D66486BB16C628CF37680E1F20B3B48BB1899C6607DA0DDA187F5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 b3cd3036b286c8682d70542f47bcec460171dbabe1aa79b44d1c676983fe9c54
- MD5 2b0b7eac925a77d0969f0ad8ba78b292
- SHA1 12c13be4bda16687f218efdc5a6ad3ca29e879d4
- SHA512 6ef798a786c7d5c1f611a43fed35255359767830dad62436bdf7ae2ed59c285c22a73d696425a4cbd2943dc28411e541b33ef7751c533a05873bd331b600ffd6
- SSDEEP 384:9jivkY9NjlFVpB8C6XozmblqAK/XcswMC0Bhwch19O/:BivkoLV/8kiKjC0Dwch78
- TLSH T11362D00349659FC52CC810E4C5D6CAF71B47E2D0D46A93E4A2F2BCE87EA9B1133642DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 025a0caddbb2f6886e3205dd158401468e498223069b13ac84bd7aff3a873980
- MD5 d48875cf00c96ae943384b3260cbb9cf
- SHA1 b4b10b150605612c1f2746e7c33087d0c677cd35
- SHA512 2450980ee36e5e43131ed7d04cc168bc3fab00ebe8ecb4a9014e37c92a7350d55581f0e6eb30950509d5468677a537f8fae6eba4928bae6e85541dd715544003
- SSDEEP 192:pnJZp98zxCDSvM/n1WxUfE/U7rkEqCJpBY0NlnzQIqrM/nuC+IUyRBs:pnJZp9sxtvMP1gWwSpBPrzBqEuC+Iq
- TLSH T14F22BF2859CC598969B3051FC361D592CBF8DB65E7C00FA847606E26AECB1A7B838254
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 068762fa80efdbab7510d1575895d51ad0903bd54420ba052b430e89b252624c
- MD5 441d8371f104676527279d19ee73f095
- SHA1 c78bfa1f6614ac5bad58e195c63b74406d79f967
- SHA512 33a7b7acbf3630e188fd18197c86bbabb7c1f9739c3ba5c9922a6f525e594c0eba1d396de05dc432be5fcd4e3014cea0f7faec3411b94f9889da55194671dfbd
- SSDEEP 192:Gwghc9vfQcTnXUUacYGnCKrWb1EXxZHTbaSjpDI6AyRfzRiJ1rnUWp3BEYCfc74c:GhchQcTUUacYGnCyuyhZHT5xNgHLLpBJ
- TLSH T12E22BF09CF25448211C6C698061D25C7FF405B1EE58A6F6DE64AD3B42B22B50F73D87E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 3ba1d410de095c0ad09bdb4e4759330ff1d6bf9061289ac3ef7a7417c6d1f86a
- MD5 f92d90e13d3ad766f5b7dfbd0ab97396
- SHA1 c7f5a103043e7310ddd2637a7a4dd5c0b864bf9a
- SHA512 4e753b0d2dc63d8b86b7780b04550b661051513399d1b91db2f654566a820f72236b61b915085a0d05db80ed7034073a566f3bbfebc4be125b8e0f6c83685bd2
- SSDEEP 192:4zFOR57mHBGYVXeJIjodlpiEOrmQPBTej3E3FPBXwMXwnWQy:aOR5ihVu2OlchrJpTIiHwownW3
- TLSH T1CE22B0EC64AE791382F05031765D386569D60BD38E704D93A43EA69CC73A71A9007BF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 179d88451a27afcd8d663ce29625531b1068063cb6ebed2196273321adf6f0ec
- MD5 491b65e5e2aff65e2579ebc437eebafa
- SHA1 76a77aed2ac7ad839e0e9ae57350b034d824b7ae
- SHA512 ff9f82c7c41041af7efd39bd2686b293c7316c34d2e8c8f1a7a27c2d7f14ddc19ac8bc05eeb6c038c162f25c9181615ca0525a5bdf64ca458c2965dd1cf13430
- SSDEEP 192:N94hquEMdCea6N8VTdNMJ5dwN8do6vCysC/hEfPfPbnJ24kPBOS2uiuaBYq:XjZMdCiMZNy5dDdoIafPY48Bhq
- TLSH T13422BFF4883E97D6718B8C8C14AEF6584678EC4A68B0F4F37067A55F68F1750126A44D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 180f8fb353ed041ac873008c899380b09e15711e5a7d3636caa426311953f489
- MD5 078e2ee13d6f59abc7f9497667320076
- SHA1 b6effcfc5b528d4da6823ec89106f42d14653d72
- SHA512 2ad64e8adc018bb6304174fa45f6d88093bc608ff4ee53b52d0c88067a2e9bce7a5198f5969c20933dbbf6a492c2aa7f5bfd79fd1489a8ee83503f77fd8a8248
- SSDEEP 192:767/K+FtmVjODegz6zgaBDTs7oTKYyvSBl38R:IjvmtO5+zgQTs7Wavk3+
- TLSH T1A222C0C4FD118DC8466C2144D063244036BD9DEE8ADB8295DD311FD4FB07AE883A9B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 935d414f7561089520a6105047d7e24ab6e0756ffe41f17b613e43cd15f3e969
- MD5 57482c869d5215bdf56be0f4a101a68e
- SHA1 3ce1e5c4a2400b0b8505c5395a12a1b874ff3ca4
- SHA512 b2f4f2725ff9db13ceda7c16b7b6e38f01638fa02c67741022aff2e6b2b36ef9f6e0331a85b6c92701f9ca0112e0287740e6e69f32e6adb3c662894fe49484ea
- SSDEEP 192:p2HaYaSiGtd5f+u3HCbst2ORsSm/L7UoK4kyjpmu8HpNwfKo7BN:pUa5Klf+u3CbY2lS6npkyM81N
- TLSH T1CE22BFBE90D739F4C063B6943C02F2B3651DA2124A38D755ACA21734B85C3BA572C97B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 b0cb256304f297a72c28b1140d56664cef4d3f7b41e546f3516ab2ad3887c85f
- MD5 5271c2122ff5fdc31789716214bb4377
- SHA1 bd65bcec7d2dc36108f5a99805160f24866e727c
- SHA512 a92aed62349c9f5e8c3dcd1e46f321509c9218d0f84b7fa9e651e05ba7a1135cba6a9ab58564181698dca2481a549de586fa2c715dc5884c4eaa07675a911365
- SSDEEP 384:M444/+NeD8jViV6QaLkefWdwPXuYwciwEX9khVqo7OcgNQLSEWMqvJzHbI3:M44o+QD8jVpkefX2YwcZhVDZUxbE3
- TLSH T175C2E183F0ECE39A675A58544AB1BE1626FC8DD28D98F83131C2277AD1541F06AF8793
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 c13c0067055b2732f1d981676a9334c6524aa06ed6acccca88d7b4f5f06ba05c
- MD5 0791fae74e094155dfeebb1f22392b6d
- SHA1 b14812b0579a0329c33ef692ce097a8f6b4701a0
- SHA512 382a4171c7a2cafc4f409e850391650f7a69209328e8a583c298e7888fbc2639339963bf348fed94d14392612f04ce8db8e920670447759ea48028445cc7476b
- SSDEEP 384:UhAyOWEKqEHiswjVRJ5KOHNXSN3xYT00LXFkaceC:QAGgZ7JTnHgN3xYAWjcL
- TLSH T1FF72D14A359F1CFF17E1F5473F80FEC54783E08D82291114E065582AAA4DA475B5EDE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 fd75d72b4f43f81ba22172a5707205ddf5aa8a0bbbc4e5a4c666435f5d3d4964
- MD5 ab1b94de085802bf88021ef8b2d9790f
- SHA1 1730db1a775ebe9dca8d2cf1ad835628f8103653
- SHA512 262913d06596b7c326e0148bbf06125273e7add0c9303bdb83f370f37740909432f3c059f8ea4be2ef301dedffdb2018392c8155da212a411365456be43937b1
- SSDEEP 384:/MQF74A9FYtdUyOmAi3IdKzei/30aBVh6nwxSqwqqa+AZa:/MQF74Amyy1xYYq20aAwxZZqB5
- TLSH T18572D0DC8200D5F0BA5956D0A880C9F8DEDFFA9C69D4111F2D0661396C09E0B8C19FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 fc928085ccf221621ed93905394584c8bc587070651f3d9520e363b2e618f409
- MD5 ae98137ec763ff9564ae640a95a39d44
- SHA1 cb388c15fd7ca19e7672986c5a7b65efd1517ac6
- SHA512 035f14fd4dba53df2b1dcbe4936f427a6b090a4c9f526a143a14707436257f654569f3e89178f23c3a1ad1fdd0a95f0892aa83ddc78eeeeb6d967f383395a781
- SSDEEP 384:WFrdThy2VT0Ij5zak6IKGdvjcWv1QqjxKa2y4Y33TUEl1hn6aV:0hN9VT005zak6G2W1Qq1KP83Yw1h6y
- TLSH T19C82E0CF5CF3F318965E0AD65E4E4D4AA85EFA0E906A41B8F0E30983518E7641E7320C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 8a3c5b3791d2beae389461996ede89c1ffe8d948214980744486ddbd22fcedc4
- MD5 20eb124452b39f1f4db2e2cca6bfd9cd
- SHA1 b5637cb78d05cca30157fd004ed61ed95086e0ca
- SHA512 8a5588ee61e922e34e1aaab9476ba4fa74193b44ec5623032c86c386d4ebdb5fcbce9894a17184d36e092a056eb12cf2dc2a07c9f7a4ffcc4a81fe17d7bd1b9e
- SSDEEP 384:KAAik/s3Kc4MHgLKs8QukPKrWG3JsLoeLLbJTHh0zmV+w:Kvik1VMHEluBt3i8GdNumEw
- TLSH T1F392D1289AFE43976F723FBC8169E4A4415724892982964DD9307A62FD680543F81F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 20ca6eada0989e706a04da336102ba77994a1056b113b089294be1d6c70d521c
- MD5 30093d233715426c393944323ad7d4b4
- SHA1 6959a7e7d4a9598258ff0f5d45570e81f29e5259
- SHA512 17507613c6ef14e67671ce2a934f418d43cb9d8d04f00aac096642307c092b4d6c965aff13fe381e881666f59cd935e60a9d1c6958423e1c5a92e7be4f964ee4
- SSDEEP 384:ucNX9O4iuxgh96Hq5cQZhPAsd7NKVxGV49sDimxRgjvZ7DktaZ:u+XIA29l4MsVxx9sOmUhEe
- TLSH T11892D15C2DCC1FBA74D3F4A8A03FE0782BDC212909372A6A9E74EB7E55650548F084B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 86e89a74969ca8278f177f731f3562e839959059ff760296da1a143eb0f487f7
- MD5 7b2831ab1e2c8f729fb8669ca54b05b1
- SHA1 6f22be9f47f7a0030fbde600bae3e353001e7fb2
- SHA512 29658df025b8024f9023b265846afc2a6f4cce2ab382fc1a07ef7087bdc610a4d796993c0292bdf372a44ed57e7518242846b3e02f2a39be6febb4f01b23424f
- SSDEEP 384:j1hJtzA3LSoSgptxkrzAV5dOpPWgeqOKbpl7XySPILOn1NKLsXxh:7TMLSCtgKGegNOKfjU67KIr
- TLSH T160A2F171C4C33824DA7A18CCEC804B7A77A35E7D80A513A0FDB15D5ACEE8B391D452E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 534fef4b6650bfa1326089ff137000512724a41cddd43a7e98fbddd36c9e592b
- MD5 76001c5b9e5c41065ac9e929fcdcad4a
- SHA1 5c9d32bb2bbd540e970ee3dfdc3825dc44f94a48
- SHA512 3afffc02fbd4c7760fdffc7b6bb7f36e5b808bca5a50bbf052ff7420f3ec992bf17d2fd154d3b0445a09eae926caf12ba4638fc785fd6dff103d7dcadf3eccaa
- SSDEEP 384:WwC2OBZxVAjDJAqX03qv06aoSqllZXr7cQlBRGeVpZMRfQUpq77RLy5G1Ap4BS:MVjGOqvJSqZX3cQlX3u7pU+kAN
- TLSH T14EA2F10CFC328D71C979E2F252596538A9F5706F14651623E1A84ACCB6941EFCFC0F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 a3dc4a39902d0bffd4535ba962849c2884097e7b950daf73a877c1bf0c31adca
- MD5 3eac430db581b1f7b6a4360043bc34f5
- SHA1 7b641b388f3310d7095082a4132199615b96dd68
- SHA512 36044e2ea9344f6f8641c6fcd6f76076094367ffcb3c25da197dfbd8e6b47716c864787e45c1bef3e680e6948a0fafe528c3339ba768bdc7f8feea59b6305acc
- SSDEEP 384:flAbWi2C9U13/9NAsoLTTska7ZaRD4QgL3Yltfd/fnLw8Cah64fg5dbBEond:0Wi2C6X9GTTfaVq8QgQtfd/fnL1Cb4o5
- TLSH T169B2D091204BFB01D4EE6BCFFE1B8F1580F4E67CAF005D19A26CC55B4AB52700695A75
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 e748340acb3d2bef9faa5eba615d7ba1c0dfa26a8b3ea497f9eb27c50034e769
- MD5 d14118bbd4645af61d55fd982c7213a3
- SHA1 1fe9e234373b5a7e5a1926615ecaef212b68f829
- SHA512 c1f0238a1a3d27197b1096df534518eba09a85e082fb11a617ec56311ca0a40f4ea5eb4d2a08e28fed672d76007c4f42730bdba794f4957d1abe8b9028623ad9
- SSDEEP 384:FfokC8THVcz+o9p+KVB4ODZdMUMXEmwiPLwCDOSOsSyCXqNLf3Zb1Ry46tvZMd:WkXHVF0p+KVpcUM0mfTwYVOVyC6xNnya
- TLSH T199B2F1DF11AB77FEEEAD085958ED2BAB410B8B6EB90313172690533C10775A0584B36E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 82be62cb8a2e7ebad5e1e8b353762a804b90f920bf63b3c260e675eb385ea679
- MD5 51592c7c2a112d99270c351b4cdb961e
- SHA1 e9dc153622161b54332ab522d5120cc72951761a
- SHA512 a0a8fc55447ff6b7ba6300f719328f766ae404cf7d48cca38beaccf60e87d1d92cf60b0319913bdf1c5d42e3d731197d049132c11bc534b44261c01c493b18f3
- SSDEEP 384:ecEb6wwP6lNBwJuGRkl+hkzQOgg9P16Fo9YUCPt08R/CLqq2IQtweYHAcW0iye:w6wNB8FKle5ODP1E4QtNCmKzAcWdye
- TLSH T1ACB2D01E9A841EAF7ECB150753EB39E0F71827169481E2E066DD1475C817E0483FAAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 92ee7bddea084452c0f8c8ffd64c7d76ff935bedbdcb68dbbbea86ae0c0c534c
- MD5 9148a94b55cf0f8b4449acf36e3e5bb5
- SHA1 c1ffaf962a717cba77c8bc91cf8032b311800801
- SHA512 e61187129647a388efbee966b9f768f7a522e4a32dc392f6bf498f155dd476f471378c85c59b1838190dad277cf9739af052baec1b343204e00a6319e8a90245
- SSDEEP 384:Kg7c62CkzBj4OaBYHT96xh3zNnmExABG3ZSbQIOePia9zngKUW8pkkuIeW:ZcXxJBzI3pKqZGJOQia9zLUW8z
- TLSH T16A92D07F09D138D73B1F22A59DA92275C2058393663B465F23BAA8E054B5603F188FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 9206ec63e2f9c26725f54b8f61c357ea5bd344e851e3287c0ea5ac4ca282f19f
- MD5 6aeae9502c1585eb6528e37b240fe7bc
- SHA1 0b8a499d78120589bff36ede59a3e339e2c6e4fd
- SHA512 e0d344528bd2dfa75e5ccd230d824cd41fc2f303593c4827772ed26a0c80165041d4b0c24ca5171813aad39730d25a76ae6a66b62853ce38558587d11bd4e63d
- SSDEEP 384:m3TH1Aa3ZZZLI6uII7uT4Mm91WnrDGHW0DB6RKwNzwemeMdFLRAdij:m37ea35LSILJm1Wr+Hc19qeMlAdij
- TLSH T102A2CF0115B71266EE2E35F85C08F9D2CC4A3A6048C7A6F54113F8A1249FDEADE37EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 e5b170959f06168cd44dc2619fd5e0352d2873b2eeb16cec1ca2b69de58f8bd4
- MD5 9eac4d9ead133fe6745b7ae9e3194a2b
- SHA1 d5eaee2d2a25a3d912604d5771034e6c3bfc9082
- SHA512 e7cd85486189d93cd37305a352e0192475260d3ac4af1a6aa20e300bd3c3437ab3c4b8fea467eb95506f81f13b8c69d8361afeb6b8aee4088ccac1238a09ed53
- SSDEEP 384:s4vdQIY3dteAVCO4LVn1+q5GP9FIS0TpQZPL1jHCQ7xsZv3MKUen2peeRttJ:s4ubd9cOyN1+q5U9FIFTaZJzCQ7KZ/54
- TLSH T171B2E0058603342DFB939A723F04C0B75D386CCBB07BDEC57AAB8849E992EC71A19548
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 9KB
- SHA256 12e909403efdcd8c77c9423689fc6e54a37cb2b03204493171fbb4cf5a1a4d43
- MD5 00f80c3b29dca2058d1a87b800de2aa4
- SHA1 9c6d6a3b476abcb90dd7d87bde1dd0878334b843
- SHA512 8234f1a1db92b180a6770b772c897217b9bed7408b1f3ea8716069c193e8fbfa982b132f7fc505e531c0ce9141d06f9b920a3ce4d4de9c20830378c8f1c5f0b6
- SSDEEP 192:x9uI395Q3l+xCu52YKdpNCohCdjXL18WF3N/u8j81pdOF57899Tl3J:x9ZN5KV+ohCdbL1ZF3tuR1p45w9pD
- TLSH T1BC22AFE38C5F9B031291470CC665D1A199850DA640CC139F7ABBD7B07DC7A996BD434B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 3b741dfbbdfbd012395e79d99151542875bf85ecc81394b79ac74448426febc0
- MD5 315a13e5b24ea1784e3e1026e1f6770a
- SHA1 8aad750428524ded505bbe822fa417543a6ff400
- SHA512 15597c85f44d72279ef9247fc378ae355e256ef87c6ab529d7f6fb675d7e7912704cafff8624b199a986a7e9c531fee76e76c2e85e401250581035a5eb31078f
- SSDEEP 192:wB4JMRUfyR3uBFQ+Y88Nk05B9hwofq7YRZT6i7HZ93uKI7yFQ2ixI:wB4JMv3v+6BLwofq4ZZTZ93fwyFBAI
- TLSH T1C022CFE7312C417F31878BE191BC2A690F6C4EBA105BBC5E770ACF0B0B098561CD54E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 10KB
- SHA256 f215330f57a631ceb17288d53a4288f82f47b432288ed7648c917eb7feeed69a
- MD5 1d634ab535edffe91af8bf56f3b0fcb8
- SHA1 990a9e5bc9fa303384eb159a6edb927108a6607a
- SHA512 a9ccac5cc9cc7c9f9a1869930a5e6bc00b73932bd39d47e3ab9f32f4e1d1c5bf6c3635c3e712662fc01517e3dd091facca9947b10755609cb0bbe4dc759add72
- SSDEEP 192:Jkze4CWFXCIMYdFm2qtwkBGC/oIpSx3T9+7LMvv4AdicSKCdH+ePRTii6KkDyVq:yqGXCIMwQ2CwAGC/DpKj9qLBA+H+UCKs
- TLSH T15722C0290576D4FB0A84FD6DFFC8430562662003B24E1CEFBE7E5F99784615AB0A9C28
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 290ba7b479b7c40afda0918ad9efe5af3e6eb088f6b6dd3fabe649b4c58d445a
- MD5 c183be33706986585ac0e60f395e65f9
- SHA1 f1859075d8726c78e6cf802e9e7566c4623daf9a
- SHA512 dcde080ba976a1c6999201bea82df2b0a6f07d372857965d3c5c6250f565cdd95dfe497b624097388b0edf493e9844f479e2b4394f4450acf3cf190a6d3fd17f
- SSDEEP 384:jT3RumN+6rG68cjAYkB5D43TUlQh4bBaF:f3cx6rG61OChgW
- TLSH T19272D038E70F758597A9D3120615E129C3951C43B80CAED72B0FCAE1BC35A2A907B5EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 f45e8728a66c6663aa0ad5273e381dd53c34752e205598c5673d62264938fd93
- MD5 c9d8ff1e24b7cf1461d2b4cd6e952fc6
- SHA1 a120c2168509abe30388ab9cb53053d98a8f9e06
- SHA512 dfaed04c5f7e89e44509801fb38337eb21bc14a01270dbfa46dc71f1758d097f599fd97e28f791b492a9250366855d29502ab9eb41c804c445ec209254c3f262
- SSDEEP 384:Kwg22+aMLsjfLuktvgOXHfyoIRrWFI5dfg83iymOeUHh:Kk2+DLsbLLhX/aNW6PflWOeu
- TLSH T1D292D0F1FACB654296C01E3BC58E153C14B26A87B1A130DE9037B795F1DD75A4A1E680
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 cd4f38ce67aa6ba4b6bdfb5efa5d1c2d4b4b604233c3dc2817f334ad40730ca3
- MD5 20bbc17ac8ee56c7df9191638147224c
- SHA1 df2768dc713feac25ff634e5fcdbb666e31ea77e
- SHA512 bb4d80e7efb79810f705a9c5f693952b1a75f3a1639c64aa5e5820919b053e977fd01a40c475ee0df9fca8c61af8736cd2d371ad7d31435fce47adcf07e9edd8
- SSDEEP 384:gh+yZ2x9SENor+Wsk32T1Pqmpq7eCtyVeqQ:ghnZ2Nnt71yTSEr
- TLSH T14862D0A0E5ED47E22522F73CE8493A33C9B11E7C2C3D1E074FD1E79BB9586094A2A460
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 19KB
- SHA256 2b6c8bc991f277c1da66d64f40b736017fbb0876a7e478eb785f7581835800f9
- MD5 282aaf9d64ac86e02336e5002f9e80f3
- SHA1 c2f7925a2efcad4c72fbc9383561c286500678ea
- SHA512 0738530ca6b8b625d33434d12bc7f28eb0bd6bf094a7bfdd27b6b29e25f4bbf819f940f0b48865fb389c12d4f5bf1b3ed94431792d8c4126c31e296e814d3f4e
- SSDEEP 384:gshFYN5ba4HF3JYWmwagPhM1XK+sQ1O3wXGX1l2F5PV4lpemRZN6FBf0FgPU9pmA:/IrrF3+WzPQazYO3Xl23KLRZNVCPUL5
- TLSH T12F92E12717ED65AF1F10EC064DA4E64FDC0D28152AD8688B182884D57F36FB694BE0FD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 d8321ff75f04c9f4442b52127ad9894cffdffb1f19aa6f4cc20e0ada1176cba7
- MD5 a2cfc4417b775a317d3794c6dfa963de
- SHA1 8244ecbb2bf6ea6154eae45966206d1fc68fdf06
- SHA512 dd201560ab008808ba205969fc14eb5c8021ad5e08290b8c1a68bc85f5bf2317e2e7d02cb36cfaef52b572d2b13924394865f279006832bfd3522b6f92a8917d
- SSDEEP 384:9lVpZD4DY3AMmMKgn2QRnvgfJR5dbJnn4svv2BU0SlAvhhs/HgbK:fVpZD4De9K+2hnJXqJLK
- TLSH T11F92E1C5104447FFF502217E8A8A9F70723DB4B58B421A9EA5560F51FEE0C3E5B90E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 22917c4ecd6fcac915d4cfbb65d472bd7d33198cac345ee2fdc031db1a42b7fb
- MD5 469cd67445fa434af83478618744f18a
- SHA1 21f640d724b6a3d4357f4ba5f80f40f5436d184c
- SHA512 d75d7711cfff813deda90d6a357eda575d4b7a1bb4a774b04d4e19a4ff27f695fef99efed27114d1d60b80a0e6fcd60652f1a84b085de36a18fa3afe58d69315
- SSDEEP 384:al5IkarZpYkghxd7Se/rq5nZNZLQMn5KKiy6nutUmJQmAOddXb8xCqf3mnt22:alWrZpYkAP//rqRv5K2cutzTAOddXb8K
- TLSH T1CBA2E1AA95514F8DE324E079B4305AC5AE764F2B3CE5E8A8AC024757E41EFC1C1D2D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 d77a05ee80bf0eb62cfa035417b7923198e969631f8fea44c4b5a2dbd72517b5
- MD5 0a820946fd6d7492c42182f46cb6ec6e
- SHA1 7a6ad9eeb2b77211415830afa293faf397196b2b
- SHA512 3152e3716f1514c7cd5ff72ec96d8a5abd0c96ffa1bef77b301593751f4ce794b086c30d68530a91834847bc76938aae6c6be5859b0a616a3c8f0440af88979a
- SSDEEP 384:dxTLaT0WVz+nRkLKl2gTR4yGMxCy/eBnq6idsSSZIoT1HJGu6qsGQzWuIXzhjQ96:dRY5+nN2gFLeBqXsSe3Gu64vXzlQ9bu
- TLSH T1B4B2D03E67F62D4961C334D4DDA9ADAF88978A0C3E9176CA09F13E5B0681FF740848E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 e15c5a294a00877a155b1a8a00396971ee43864c7d3f7b957ac7cc402c970639
- MD5 019664ded91c63b251d6f7af1b152339
- SHA1 1932c608f5d18bafe72c97a87d0f4d7b5bed6dbc
- SHA512 cbe0af8cc177a67ae15f9e220df4c28bb635e1251ccfb21ae5a4f7cf714c2b168d0116e776a8616faf4f3fae549e0b9095c1bf1c02ec1bb872b35cc6a7019149
- SSDEEP 192:J2qBHfA0LIgzRrSJAdA8StdzCenQ9kNJBB/CI1qG5jRXDDS3J:JPBHY0LzpSJAG8StNQ9iAYqGDDkJ
- TLSH T12432D0BA30688322E46D157DC918FCF29C34467EBEAAE753B1FD0122D9CC462D8C5A53
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 1bf35f1ad555c06083019c232c22193380c9bf4201a8bffced326540283ad363
- MD5 215a0ca322bb1baa3f2df4843abc3b39
- SHA1 5857932c5d207034d336739839d84ebe8da39a32
- SHA512 689b9ecdc0e4cbf027846b72e3e2ce9e960da8a73dc37ed5ed7d6d52084bacebd8e1a89663be7950afaebb73e5e95414cf0217f11feaa29c0533af7903e5521d
- SSDEEP 384:OO+hGgN1xcUyRNGIbBuPmNIz0m4NjLRzJOKhLGd1sfzouEbmG9AUi:OO+oYxtWNGIbBueNCWhzsKhLSSfJEb9w
- TLSH T18382D07A3DD35493849576E439D25CCEB09A2FC3D9166902F3CE440692CBB4AD68426C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 22e3df07875bcc2c910caed9daddfcb6e576155160adf40e76c2a954d856ccd0
- MD5 ad9092be31b13f6d60cfd713745d5b25
- SHA1 9f8e7a8ac923e891c4573016f8a1acf2d288c7ab
- SHA512 3790195dc10c000deb6bc99e293b8d1964de107941ae03d12826a70b5ca727a558a41402632a5f997ddd10b427d3991e5277a283b076da4547c8b25f0870ce91
- SSDEEP 768:0g9/aCgsTpNOIWdUgLRJ4nhSJF50/1WDtzR:J1aCgsTpNOVdUcRewnDNR
- TLSH T198C2E1B545C076ACB02E13C215270076C72EBF62BB72A8A859C76A1DC53BF4A60D5CCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 3e9604b50eebcf7ba49af905a71b54583fcb24e1437db83daaf86f4bbe6c9fe6
- MD5 650e1c9369f2a0f8c6b482ccbd4845c9
- SHA1 ef15ec0273577581672794ae9c937498a5ee91b9
- SHA512 d8ef5d86de57757d1522dfb852739c22b1edc42fb0eeaa1e5eec1ace7ee3dd3e392f87f4cc0a61dccc3d7d7058de49059ae838be81665e7cdffecbb7164d71f2
- SSDEEP 384:Hq/LjS3BDsyqX8rIu5jIhaefnpEoyzLYF9lYxW7XYmTcLlkqLDK:MjSRDsrXg5QfpEvz8/CWhulkF
- TLSH T12982D0A1F1CB3D266CECE3AE597F90EC648D46F1188A9B9CA9C1492F02A76185CC44D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 40072365b2008adf4d02fbdbb9fd4517b634019e79ce178f52da7b438c491ed7
- MD5 81e3d4f42aa653c58caf4b9f36b5a837
- SHA1 b020db08ba87ff9e40e1710f4531170fa2e1c517
- SHA512 28af977eddecb08d036de8fd949c8f9f5054a07a5bb569ad95db845e3aee7b47a265d817ce7d96f3c25ca63563fb09ae3952d28812c329e680f8f987605f3e07
- SSDEEP 384:tmkz+/GFRmodcTRDoqOfojA8KJ9hx9yIRiHBoXwmKJKy1DnCo:t9bRFdwDoWjDKzhb5iHBrA9o
- TLSH T14172C032AFDF5AAD9EA70366C811DA6054480897C1D6795AC6445CC60B4B8024B7DEFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 19KB
- SHA256 a20d76856d98418841466cca02f3d33c9f5a38611eb2c9493e36c93338c79b66
- MD5 c3ce2d98d17f29f2ad7580407d617dbf
- SHA1 b8fce2d6502a6f68d4ff88a12130853f9cdd7c8e
- SHA512 7a711b080b14efe7e0925f65ba05a6646fc57cb80a5ab52cdbfb814abed42842ac050673e17ddf814d1ac572a98b39a3304205f5e196bfd73d54fd790a60537f
- SSDEEP 384:GZF0WDvEAVofmkftySfD5wL0v6xqTQM+APGGn86Hs030a/C/pr:GZF0WDv/Vzkfxy0voqT/ZGt6HRfkR
- TLSH T1F292D092C44CF2D57CC7737CA0DCB596D0BEA9BD143A60CA292B7160B885C2A79B90F5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 19KB
- SHA256 720f19b420e12f3069b372e21c36c76e256c97f12c28e3f259225c7069af2d84
- MD5 05df5f59c7c95386777082df35249a54
- SHA1 f37d5f80318f652199e164fb60a66ca13663351a
- SHA512 6572344bf0ac0c6067f768b6a9b77bca96e103817777bb27023eb5006c0bc5038ee4021791a19cd635cf22b2045491b79729793c9d5612daec2ba913e884baf8
- SSDEEP 384:L/+9oKYnfFcpwcNvnU3vuznKfTSXDCbea9s0+7cFZbud9mOjIG1d:EoPcpwcZUfD72te9kcFkDmgd
- TLSH T1F792E19BF29A75BF49847C70AF246C06091C8656B1B0B0BD352BD0B3210A6B59F1E7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 f179658b4266aca84e9cc9c34239e1a0ace23811dc14972982b2caa88601c6f7
- MD5 be850f5463be41ea700fb2d2c82c9a11
- SHA1 ce6bff164b6af24013c907b30d69c9e852878a61
- SHA512 759f5496fb66bbeca6073b96fd57fff8353744df713ce5aba7a506c32ccfd22581cb3c735ef82abac661dfdd887429ceb8f675eed147b31784d903f75afb5a24
- SSDEEP 384:83wW93Q8t7mIpeK7fawR0m/rJGti8J7xJPRxJbMhC9g16dR3GIQROdWqByaecwXj:639RZfawR0m/stVJ7xJLJghn16dR3GBr
- TLSH T12692E1C235B91A20231051236CDFA91F1F496DB3F1866CF1534EEE75A5A79C0C2A9B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 7adf75fdbdaaedc44748520c427b5372a04d70ba83f9aaf671acc6d48365a29e
- MD5 acd7b71ca22915031179cf0c73fa7efb
- SHA1 324fa2c1364ae30ca6905bd1cfc702ffb8acf51d
- SHA512 f9942d9414004586300192f923628dc0a2ee7d6d251a2c8a91bd56f970c396f0a421bcdbbb5e16dccd40dbcadb1abc7af60c664b5d7261e96c7ae02fc9640991
- SSDEEP 384:WoNmNlxueKBYuCVy1AbQtHpZqAmJa/sNkxD8cw3hvg63fqcIAGd1q:WknBYuCVySbQtYky3VTfqcIAx
- TLSH T1DC92E10220B5DAD8AAFA840F41FDBBD5EF58A51DEEB311D374DC9EA24705C11388392C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 c46a6aca456faa47024e16c9baa285a2327e16c10345be97746509d1e2d5235e
- MD5 7999997ef2557da7c63babce44744aee
- SHA1 6881eb2c2394b96ef464c7ead980ba155dbeff9d
- SHA512 d89c8c3b121731c37d5fb38322a0cdee97d112a006e00c82235d9438268c025b0cabc4b8b007952f785712de1cfebf7d503891dd5655177c25e1840e98b66f6d
- SSDEEP 384:i1cHwAArIWhlqGS5ecbtxlE+woJDdNmCIui2I4nVZhEsM2:Ol3pPqDochxlEGun2NLEB2
- TLSH T16D92D06B79831783DE50E31CD6EDDC3A10352DABD28AE2FDBD24D09683AA5761148324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 17fa10cccbb128aa04bc194eedbc4e0178f31704f104acb3cc636dc8ed7c3a76
- MD5 e7d85a670c34030bdb2fa3db3f489a49
- SHA1 4d1f6d13c5d575c90b245582caaceca89aaa0b3a
- SHA512 cf9616d609a65a3cf7b1b29bfc0723a622f31d491fea1e23f7291f9ff140d54d3ad955cc68bfd83a491526092fc46de69b7a4a24086fe628baa56ab9f999479c
- SSDEEP 384:lc52591zjjvlqLeNnI0/SxbwUuIPb1WMco9fb8y1DwhtZikZ4d3uIAHSIQ9stMn:lc5259lvlJNIiSFpcMdGLXTZMIQOtMn
- TLSH T172A2E1ED2681C20708246FDAF178F8203123F76959DFE4315669AE57A99AC9E02C909F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 3ad895dccf468ef2c77eff0d3d095da59ec35630c6e7a704aff15da9c767d49d
- MD5 0a11407fed774b8e8269c6c86686abbd
- SHA1 328ae1c10cf1218978e23d138f9324a4790ae6e5
- SHA512 2a641961d3b7f3de2f9160de927cbb08c5f36711874bdac1fd7856e2c6b02a55ffa3670dfc75ba78d6fb554625edf592105f108d6768f344c151e22de79a53da
- SSDEEP 384:f0IffJgSYNnnp9Wcbf1HcQr7NbIxJ/4IZIKHvDgDpW3Ga5pbWCsjHOGy:88fUPWcbt8QlbIxJ/I3pW3GY63aGy
- TLSH T14592D19809D314FF78B125CCA94BB72B826C6E8EB6BDA18D7207551B0F5836C6731707
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 ff53f72c86f6b9f16e70ce114abd85192f6ea0d9032e764ae36a881c382f26f1
- MD5 c1a6c6f6bd28ff48ab9480ca3ec5d6f5
- SHA1 fd787259f1eed039c091d91284c8fc49ecb48afb
- SHA512 95d11f1607aec9e4a2d3a6e381d9fb56b85f1f23e22aaf9c8cea00ee7993a9d72e734ccac5414e19c5f8630a9384c6cd0754fb426821cf46b19a1f8b59ce0efe
- SSDEEP 192:+swHSoqAmcpb1MOb2oBnEKHb2p1t66V98MggTdvuuFm56OFwARcKay+nhayoPh8J:+sMqAmmMObpEKHYa6egThuuFms1XnhPV
- TLSH T1AB42B04CDEC6C177CC8F52108BF5CA70DC42951BB398BB1E6734236B6951BBA9C00AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 b62c62051dbddd903ee56414ba2c6eb1c2d15e8cab18e8cde14256de9cb7638e
- MD5 9b1f3540ce58234bd0ca2c03ddf83211
- SHA1 a55f41af5f344fe96c8942885964d35194f07240
- SHA512 713cc7fedc14627967b063cbee156994545fae40ff0fd3af200669d28e053cbe4f9f71158a677654c6444d7a37034590685d96d99001e0d60c482b588f5f42f4
- SSDEEP 384:GqX+J1sXgVt6cj2c6Vzd+ny22tIwIFu0ZNpLUmkbnWW:iJ1WGBS1Vgn+tqFu0D9UmkDWW
- TLSH T15382D086DF1AC53C40F6BAD005D4F7693E74AF91E02D987E96B1D9068401CEB88D2A9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 63a8a73fcf3b10b43a5fb22007949ae6a0498da4c91d8483250e698af73fa018
- MD5 b5c6eb5d35863a7e6886b58f46b97442
- SHA1 cc573d1a95322bd6aefdccdde9bff25e17258fcd
- SHA512 a1e18b9511a82fc49cb1c99daa26164e76bc61360fc251806e837f5aca50da214a487acaeba79a000727bf7fe114135c9953e335a465183e77e0fa1e143b0d55
- SSDEEP 384:te7gwLtbdtQRe1h4jnbFpwZyTZTGap75fQ5Md5kAXZLEKaS68/v:yvxbPQRe1ujpCZCTyMd2AJLEin
- TLSH T16B92E1D5FD40EA66B60FA643E16F4796D60223E11D17E084ECECD4C1FE86429243DED2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 841ddc6156d0384272253ed0e711d74c67b79d89eee79de340d3af2713733228
- MD5 6020837f630506773c60cfbc20c52ee9
- SHA1 c582b64ec3732766d10855e0d1d7ffbf99e4fa57
- SHA512 73fdd02639a3a6bbc56e379d364f31bad852bd530cae3da81abb24443703f5a2bbc88867a664fdc36421c56c90e6021cfde9b0e73aa1c7d18eb402c523a01285
- SSDEEP 384:iXsnLrcqsFjmP1ndINnAFLgCIDS3w4nCvy+WgN137flPAq7bzyYM9:RLrtS/NAFLgCIwnCvy+ZN13lVaYM9
- TLSH T1FFB2E19809675DCCE72D7169C4578F0C27CCCF82987B3387A3585113E690F06CE9A636
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 d4191031ed522ded276e5d05a2fcae9dbb939b9c89d899d70606f34668a3eca0
- MD5 3040e486bcd43565c4124e23d4d66572
- SHA1 dfa7041b91bbec694a167643f6a9cb47a8648128
- SHA512 1bf1dbf480e6b39bcef7db71848f9239204cebea76126111766a855adda86ee01fe1895479c03b5d99a8de2df3e2d9bf30e18006797ca82a5864ecd446c94695
- SSDEEP 384:9i4jDBIRiMmnP/ALWJzLSuvuM+5yhyDDhWs0sofNSrWRTX17zNlFfLzrAWCQp128:9i4jDBIRCALsLvB+AhStW/s+hFPNrvD1
- TLSH T1CDB2D00CBE9AF0FF282655A5FE38E4E44E812ECF249E3D123275E1006FF68A50E15447
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 56fd6f915d2bf8090f4612a972b26ca3be31e31a6f7c0290e22e7813c0804235
- MD5 ffd278277bffcf5184a8a84635d84f75
- SHA1 5120dccdb7214792d6b2a4776a31a8e20c4dc847
- SHA512 cb233d9b779aca7aa25c1fcf28ae5c7af7d5fed7769313f801784aa7525cf0f3ae0f72924504200c70261a8901b7f6bc476529e677bbb5e84b48d0afebb7a11c
- SSDEEP 192:qkvEOGKbA6JwxT0VWcOpRqnnXoJGZ6uMjuYPKjownrWB9k/6z46DM4KigdheJ7Jy:qksOfbAo7VWcYRqXogZBVMKjtrWk6z43
- TLSH T1F832B076B0B532CE024A33770EC5049E6B32BB54D2DA5884BCDA39265D0FAE10F55A4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 13KB
- SHA256 5d0826d30f91318afc202e5cc671ada9a2ecd1293780dd2571cc61c1245fbe10
- MD5 21415aa1131644bde05e6f9dcfcae94e
- SHA1 96110dc944f55b05d2b77aab593b66499a31b947
- SHA512 312c6c40d08f3316bffa07e58f1e6acf89fc1c2d5329dcedc9a25bb0296a6f07238fb3974ac4635a54d0777ec7d0d7678dd69c19884c9cebd079c816245c5971
- SSDEEP 384:dBqcmk/Dv8hgi33C4hEVyIeg59hzvhE5vRFTESO:GKvi33jhj4RE5ZFbO
- TLSH T18952E1D7DD0233C105357B2926F70E6B521923971AD04D29331AD8E39BEAD1383FA885
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 c525a350e0b560581ad9aa52dc74648a05f5a6ce362527147a6e5f312cebe37d
- MD5 9d263ec44a5683c0d5f2e116f06168c3
- SHA1 eb102ecbf76915fba3714d5a8a03ed8369a7b5fe
- SHA512 617fec4da56aeba65a3598238adfd4f025171f225b2a684cad034c064fcbbd821f379f89e2b6bc872a656b2385fb2d6a13da380e69757c865fe18997e2be6f46
- SSDEEP 384:SaPj6aYp6s2j2cKcqIY0atMPV/11Oo9H95b4CIK7yydf:SaQpYj2cKaYDg9ouH95b4Crf
- TLSH T16082DF0D2673B31962582394D1048DBB3B2EF0DA9D347349BC6ECB1A484061FE4DEAB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 9c2651b59fdfca6b004879504eb0d816489ae040eab4a90e4a7d274ced41f531
- MD5 fb2d54a095dcd23c14d91925c39e99a5
- SHA1 196950b432ae433a65dc99f4183b2222d23c3290
- SHA512 8668350f227630ec6e91aa3b2dde5b84ef6759f8140639c7bdbdf3fbc9848dfa51bcf7abd93ef9d164b87c4bfea72c8dbe9975f77321d62557dba0b92b0b07f1
- SSDEEP 384:Unx3KCFfgGnJep5qfenCM538wgnY1H8kWztGnpFsZuGH6X/AQhhUyXrRJg1bCX+:URK2nJep5nCoJgY1LrUuMIxhhUog1p
- TLSH T10392E1420B2322E13CE8CAFD72340276107F83FAD959C5CCA671DEFDD2A55643AA5D86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 24KB
- SHA256 66b68c1440467fda8f1848c2c771fde773c06bb3a644ace041e05bfd558a27df
- MD5 4405df5a0d32ce74277de47ffc733db7
- SHA1 c1bc2e4e1922b45499705b0d4783c9509c302845
- SHA512 5a27462a109dc521fdc500d21cdf859f56470d8bd21963eba11ec2764997a552df1b19257eba0be95b19522410cfde5bb767fd8be701644d37c35d714cb723b0
- SSDEEP 768:mSbmDxyDSBT8y09eM6SX6hBNMsIsNFF1RgU:qISBT8yueMdX6SsIsDHmU
- TLSH T16BB2E18CD4483D0BFAC69E9B52123895930B5C3CE4D4CC7698A1DABD91D4AF84ED1F39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 56a54fe5caee5521c3a3ed84b8e563c2945a1ec1abce63d5705d95a58551079b
- MD5 6cfa84804c0109cc99b0994da17a0238
- SHA1 002d471953bcb03b69d802e53f337b3b0a43401e
- SHA512 8af3801c3ce69a65b3c443216789fa4770afcf1adaf7fa47046c765b09de46c943d183bc588e3e08564f2b4b9ca661fe25f71761271c50a798e6f43ad6db439d
- SSDEEP 384:/CXIH/Bo6Q2Dz9CPncYir9Z4zATlvzrKvZYmJu2+MyZT6TWJZLdtVDg:aYH5o6lz9rYixD5zrFmr+zRHLdtVE
- TLSH T15A92E00C9BF285E9BE42C36A84C338E3A1754D66F29F36A637826444D73F2248F97049
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 4df04ecec0f4267a2a0aa530869c60ac6bbc1c2231fa73f207d8be9779411a8e
- MD5 c83b420a9802f977873a8e09217a4359
- SHA1 f12a53c7863b9b46164bae7595f708e357348c2d
- SHA512 2f65cd1c5d167f3f700cbebb63836fa38840e000377ab29accdcb1109b434890de370f75fbfa39b547742fedbe5960897828da33aa0b3d21f6d40a2e4f2f2693
- SSDEEP 384:Z/LhZun7oqZD0Q/uNXOJvNe46RiEEZZxmTuLxHbcL86CGEdGE7B+eY67g23HL4:NLu7o7XEle4YqiCHwL869ExB+er823Hs
- TLSH T10E92D0C48B6167FA33A439C5244B10A0EF67D35A3FC1C58D6EA7B2748972F415865B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 6241444fe0b7ac35e99ddd2fea8fa9ed619b36ab907b60fd3b60a0b162fea7bc
- MD5 bc22fc8bd147644ce93cfb78dad3d491
- SHA1 a8dc82358f2e512a81c9a56b8b6c9e4f59972310
- SHA512 a95edbd18010dffe132c44cfa11c1c3e45cc4a7b34ab9f2c99a3296657cbf38962f25fe2e14279f4958ea154379d1fb88df0ab48fcc45a00252045226213c289
- SSDEEP 384:HykqG+wXYP90CHnZ4JU7V916WWzOj2HLWKKyimQGKW8TYYekFsSXrNJ:Hyk9XYmiZP16fze2HNINTYYeopXf
- TLSH T199A2D07638EF3A4BC04EF931DD70508C8AC0F5942CBB6E86EEA46AD1D91D86C1179335
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 84683648899c12ceace0ee1acd46ba92dcaa2051e2ac6071524e783671dd2cde
- MD5 341861e8312f76b47d52ce7612b39a7c
- SHA1 c5db34e80703d73374547c0cf4b17ee2c989810b
- SHA512 6241f7adb9c5769c9424e2994eb1ea2648ac9cea9b29a6a0bae86039100e88979c1f0499ad400783052955a728e731b804d7a5fdb4fa540cb780c3f02e17c443
- SSDEEP 384:92JNYWC+ky7bKfGFkAlQjvKk1UKkGwci4Nxjy3NaxpLZcscivi+Nsa:sCWC+ky/KfopLVKk/nNaxpL2p+d
- TLSH T1E4B2D12E715A25D16FB76805A0E5E35292F315824FC9BF6271145C9F0883DCF3E7427A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 a42f5e70f90956ca59a482e9602cdc885eaf54f3733c80f74c9dde3031106d8b
- MD5 562604006ea44d022d5f462490197e27
- SHA1 0a5e6f42e931786433b171b168ca3fb0082cc5a8
- SHA512 be5a01ba95a872514562b3d33f400b712a2415612bf6e498d69b209d65ad19450574404e1353f0ce04523a4da677b81d96d93e6b4cf86c7035a0127a794c42f0
- SSDEEP 384:BWsappewdA9++GGbwzkRNlobC/vUftCNqmo+nU6jr81ncZDUW6wOPWMOb6tcGaSZ:8l9dA4+OAxlYmLn3jr8R5rwOPW3mJZ
- TLSH T1FBC2F1F900F7FF07D0E2A3DEC3754A625406B51107F588B8C9AC14E2846587AE7ED5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 11KB
- SHA256 3f160fa5eb6453d2e78e265b42ce1590a31e981fabe99d86b7579d2bb0851e4f
- MD5 8e5ebbf33f2f22b7b1f641df9332bed7
- SHA1 039a711647413a0bcb114440fb4095be3e72093b
- SHA512 2a7e9a217ff3f70275e48d0f80167f4fb3e40e729bdfa705f00e647dd4bbfbc95f2f5826ae3bd1a9b41e847c5c9a801c784a9ba7b594d8885f779454a4d02e99
- SSDEEP 192:omwMJzqTssFQKjcp3MKxdAhhA41k6giuGybEhf6rcGWmmhh1EDNoQ+wiIdVrkihn:xzZsefp3YAoFcbpcGXmhb6NFiIdCqn
- TLSH T1BA32CFF06188FFA8501EB91508CCFBF24092AFAE1D6BFDD42859A2608E22975D53D142
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 1643dcfc8df8a88fa3ffa88c0e1fe90fee4681c0b492e78a29497252945f512d
- MD5 5d3c63ce974e538dd250a9cb6cbd4f27
- SHA1 37879a18f19030869e650c1f22de02d2c6e95811
- SHA512 1664609b1a2a339bd7056151d0c45699b6ebcc7f9001b6b64a4d0fadd31a8042c10095562c770f9656be506d1e826e1f62275a7b9c7b2061f289258c435538d3
- SSDEEP 384:i4n4XZe5bBMZuXjA2At41mSp/VoqCVUEXBu4kgf:i4n4XZatMgs2Ntdifr
- TLSH T1B972D05E4BA3ADCE53DBAF21E38A11CC4429845E07CDE187FD7C7A856468DC214692FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 f3f2ed5660feed964236eb93d2badf73ac373db331ac4ce554e8575b72fc8810
- MD5 d5346cbf83377fb4b3d06d895093feb2
- SHA1 501f951d5b5d5753020dc5112c00bd51d342dcc5
- SHA512 96a93f7d066e4664e81f87eb7aa50ef44f05ea2b9b4c11b944fab221f8d0b2e1363680cdaa3d88e050a4944f0ba301db6eb1756a75af9a6e89375004dd801cd5
- SSDEEP 384:HxScsioeKF1CVgW2JTkDREhDqwhoWFefHr5uUDrHrHjccnU:Xs5F1CKW25kFEhe6oHHd/rHn5U
- TLSH T1B372E15121A788163AF2D1F275E77D7898FDC8BC88899BBE98C03B71F905E09243164F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 2522f18f3d72ca10547f110a655a64500b49212a612b875981240cff50cf8a5d
- MD5 7b028274c94d49717649be319aaa2e3d
- SHA1 9b7ac1f00c5d315d214d997d5695fc75e5fc1f57
- SHA512 900b34abd453f771e4edcf295620145ce3c52c1bb7c5996e4226ad5f3d85f736cf1143c66253a063d67f0f95facde80f53e85f076619c17cc3b945ab4420b4a2
- SSDEEP 384:CKuYdncyP579COSAAPTi8Dqq3okpqTLvVKmAJ8Ull+DizYi8BncncSNFKwSV6tOG:CKBZc0IOKi8Dt3oaqlKQizPoncnfKBVK
- TLSH T1F6A2E1EEC69BF2201F336825FCF68A1A18201DD761F47C9276D841E42CB94698EDE4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 19KB
- SHA256 3c5f7b43d579016649c06b831a31f980d3f407dbe40a4c31e7853953d1b741c1
- MD5 96c7f4a5b1e99fd6ee76537154c3d6e8
- SHA1 d1ee6d7a9de0d1c6889af9b9970e583841405476
- SHA512 9beba9a9f89e12c14b8e687b67ba4e01c52727036575b7fced71692d96d3339b3a085dccf8af621f1b8f19c218fc4823b758b44fff630e89ee0f84a09cda13cb
- SSDEEP 384:w9cm2EkRkvR+l+a1J49Jd/UseVpkB5/AeTmxZAZcsET+:uc7EK+++aJ49T/UseVpg/xTmPAv4+
- TLSH T17E92D00252F21AC9AD98E23439DF00CBF076FA6636C57E94390B71C4259DEA75E40F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 d687ff890711a59b554405ab7d2c4c7be76027802628d87df0505e3e30f1f455
- MD5 47f0b8634df9e67d1ad3eb82f6a14a0f
- SHA1 010f793e718b959bfc0bcb67452bb7e3a92839a4
- SHA512 4f78c5f4ade366fccddb3bdf92f3869c7457b1d7fa0e1e1f43d1e70fa7822a5d8cf914e5ce772ec11b38a6a5f8abd70c9a8263444f5f041e246fa7fe963cbe45
- SSDEEP 384:VOiBn+UxFlOAQeuKxjUZhYJvmWJ5EXj4GYhfomxx:VVBnn3QeuoUzWJW8GY1omxx
- TLSH T10372D0AA2EC8F8C378C7E566EACF2FD552ECF0061F392EF111696CB146D9419908C498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 18KB
- SHA256 6d2e63b9b39d0bf4e7aabc9dd4f7cf6d147f76ec5a87bf47945448200ff79ede
- MD5 41e590b6a3d09c60bd9ba86b1594db5a
- SHA1 bfabe5ec0e3c1c56a57b742bf5cbf333132ad9eb
- SHA512 8db15a57d72d4fd7b29b372bbe819a7245b6738b6d7031cfa4667c116b97e5c9ea4827542371d7be3a7074aa293dee97a222e5d58347f437108cccdc887bfd80
- SSDEEP 384:DnnW0PRrctcbicjfsp+699C50R1eTQhoDuLDTAr+WOlf4G:DnnW0ZcybJspF99C50+QhoDu30KbNF
- TLSH T1EC82E1A54AD673EA0051871C7F5FD4EBE5834EFB081D6E9D143E0721002EA3AE52EBB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 23KB
- SHA256 36e65bc4de613bd277760defcdbf54603ba5d7785691bdc25f9ab400ba0a72ca
- MD5 9126c006f7353ae94598d17a450391ab
- SHA1 ea6c50ce1102274d3e17db19658ecc2ae3c3c34e
- SHA512 8357f378c1af6b3070ce6ffb307e2cc7d2974d3f74c48e6db74fc426fe344fbf9aa57bd2ab9a901d05bd305198388adfca3a9cfccfabe4062b275e36996c61fe
- SSDEEP 384:FXuKXLHaYXcH7/QGFi+9tszLsEzFCiXpGrmJF0uCo2xkBEfH:p7HaOe/QGFissRxFGyJq7ovyv
- TLSH T1CFB2D1545E7F58614B16276AE1F8027D3B45FCCBEB6A29D7BDCE15D0C4E8009078CC8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 25KB
- SHA256 03344ed42e33d1c9151b84413e802b99eb43b32765c8a05a3df558e39d6b1f23
- MD5 1fc227089e78c54b08cdda1ae3c7c3b2
- SHA1 275252a2ff493084cb7576eafc2bf5bb2a978b5c
- SHA512 8812337e6ba448443ed2b0505069f43bd9b5047b11799460274015445ea6d2a9ae69dfd76cdd55177ea2d038868ddc0ea8a1c6ab0bf012c0716d16cd3ab3ac04
- SSDEEP 768:y2+PUDdIRJ3gQgqIafkbHAPac/b69jg83wd6Txeo6t:y2TIRJ2BzAP/b6K83zLe
- TLSH T136C2F18DE7725EF2591CED654C78A94C48B97724D72E09DF8F08FA296643A310D22863
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 16KB
- SHA256 b1e24ff472f11567af9aec16b2a4bc53561af6c04402befa7bb596f7e70188e8
- MD5 ad79c1862b3bf86a6fcc2e916ae39fb0
- SHA1 edec92a7767b8e5bea992476f21396ae2af9ed3d
- SHA512 eaf95f5e2f25c77c3e4772a3382af10fdd71778ba1d15c05ccf50981256557757c3135304386bf788d5f6bb5f42e707dcb47a3b66a7180295fa437f873740242
- SSDEEP 384:K++xzwFw4GcHIMD/XUQucvMPQEcChs4hcbzkAxMpey:ix/rcHIMgQmIz+s6uPx8d
- TLSH T1E872D18FB911F7F3AAB469EDDD97E882B00F9CEDD809751A8DE61083523E358C394416
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 17KB
- SHA256 753aecd49f14428671d51d606f880617d6ac4f8f342d474f1711b91804851bba
- MD5 b7056f5f52cf2369d49ed01ca3060e46
- SHA1 fc59b331c07a5c26012b2257964ed6ae591fb26a
- SHA512 32b19060663ecad0e4d9ec53505f947ac3b0d8163e473a2bc1ce6dbe9428f06c897b7497a342450a1a911f20132a8b6baf3e6db5e7a8e0745e66f7c5b0fdd502
- SSDEEP 384:4zKCfPKIMvQ2AOlzzz+dObwNnoxoNuNqxhR:4zPHMvQadKObFPNqxhR
- TLSH T11182D032EF36D997FA8097351836593BA8B9054966C1CADF4167BFE42C3502C2ACD514
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 0d0a53e5514e8f894955fdd8b31c7867c8d3c6bbf2fd718baa4b3845dd226cf5
- MD5 b8ad46af9442ae21880f471b503c9cd1
- SHA1 9d945b3f2070faede36c20be99dddd12c364026f
- SHA512 734a995c3d0ee2d373fb07f70581ae66696ecfae984ef2946c0bb7ae9025629cc768d0ab518779a223dd5e7ca2c45e9dcbe513c43146febb2690b1ba7830451a
- SSDEEP 384:dRLuYixhFLb1/73jVZPMidB8R9v1QMklOioIFMFlS9fJFV5/eETtiGN:nuYYhF/1/73nMsojkEioIFMy9ffVo2IA
- TLSH T175A2E1DDB4E5A8321728B1278E216EFDD0643C4B1B9868710F9CB698EF80710BDA8359
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 6c95486ca3b6a96550404d48254b3196b4920773c90c29b0e518e7d0f903c379
- MD5 bf7a8a920547e7f4d09c4cd2173bf37b
- SHA1 e7ba271da15a38658c611add3827f7ee751059f0
- SHA512 5f24a5039eafe2de22c4c543f646169621e60ef7534ec140e917e247e12e19cf68c65374ab5175c121bb2246c8662e966dd468dafab2dd04b695cb4fcee1c55d
- SSDEEP 384:2yOjrIN6VwJcgp4q6gyorWWNeLTtqjSiwwzkoarlhVgzMt4Z7P8:2yOYxZpKgyOlaFi5qrlYzE4ZT8
- TLSH T1EAA2E15D288FE7F1661624F58113742ABA0843DE9CCA9F2F847492638FC4C525BA7434
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 5b6bd2eb4f45c2b9db7d5fd1f6d7e7d5ec12fd0f51def33f57175b77e8df0f7f
- MD5 308b20600451bfeb382cda8696b0ec92
- SHA1 1c39557fe201cab880a51f9bac06f8c4c1cd6e18
- SHA512 f4836dd710a7702f1dc1c73c3083ca0856581bed39e0d196d67db8a779123d7525049ffc2a2752c4d43893aa52bb35ca49ee3ea008eb43aaa330b95967fc8fbb
- SSDEEP 384:4TiJNPAA8ftvg2LtRUyqeQpMv/mLvLM0+E7VIl1jdK99pSkSXdJLyPPeEawo:MUNIAE4etJDB3gUEpQd4pXSzgiwo
- TLSH T1A992E1C726997487EE3DE0FC30A006C8D06B71F92698B396F5EB46EC54B90C6D82C902
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 22KB
- SHA256 43c00f37b89ffe40dd1bf90c97560af2143aa14f7feda051e599230a4b721b78
- MD5 3a6f295d8bd78c0806a0a17151afaa08
- SHA1 779ace0bbf7fa9ee653487924d9092ac03cfc58c
- SHA512 a93865b2f725f267686806443aa09c89b17f4f44b98f616deeef0d7548acd08b3407316209dfe083d56c823c50936554a62e50c93b896b4f6d25b1bea4871308
- SSDEEP 384:L/9CjcljyVgMe4D7ojWkS5S4evol0Qg3Gcgz7V08rnLz08k+wTUXqhr5CAGC4f2m:bEjRVgMxoSI4eAGQgstnDRk+wP3CAGCE
- TLSH T175A2E0ED5D3D78382DD0FA236D5E58C55A46AB143648690EC04BA4DF73BBAC32F88C12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 cc03f20d29f63b93fc4f884fb292af51afc4ee27a8c3b919ae446e2bb68deb54
- MD5 4f3a0bade62e3315e7ae745888f02999
- SHA1 1a6251832b65add7334e10b2a0fd32fcd3e3cc7f
- SHA512 e17dfbdc63a26cf9162872a76d24d90663fe0a42a80135ac81d28c46655bfb7d03c3ae93aae2666eb3ebabd9f5329715e322e0a8160e54e65766ea17566fb054
- SSDEEP 384:u16MZLKu4bEmSib5a2w9+27BODZvBlgW7RAIkRVAlb:CrLeo2w9llOFZRA5RVAF
- TLSH T1BD62BF84B20D51351794A8B10BD764D854C32D7BBBFCBAB3FB2921630A3DED281805DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 9d6a398250f60ea731cf5aaf6dbab61f4a0b909a4cc785723c8ab31cd3d5f372
- MD5 6cf7822981c784bcf0920f74ec562e3f
- SHA1 e9e4e204f80833edfcde1caa0beb7274d1fcb47a
- SHA512 467912483152654781e6ad212d3df978ef50bb5fbac6b23395d41baca9c171babcd1b0365b7d2c285ed211ec96d0c44fc216dcf21b844eeb09531f21772e612e
- SSDEEP 384:lZhfv3nyVTYGzSWFMzp6+0TWGjCEy4e/nrg9NpSYAZjV6sv56LrQ2f4:nhfv3azSrpkCGmEyhrg5A9V6OI3QX
- TLSH T167A2E03E3027387B8032789D4AA47A712E62C5F4F55C027CC988A83269FFEF70AA0555
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 14KB
- SHA256 33afb261fa69a13c2b8f9c92287dea0e6f54f4357185953689a285f2718c15e1
- MD5 eefc1b9eacb5b6b79ca8dbe39d5851e2
- SHA1 a449638c2d812aae48bcbda7f5bd91d2b3e91e5e
- SHA512 76aa1004b14dc508335b7ff24d6ae2357d93a935ed46708c7a0d7ed91a60102b01699daf3aaaa5d62c05b5a2024fa9d862e084c44d1db9d9c176cbf0322185c9
- SSDEEP 384:h9nasJ898q68eCB28SKRGHt6zvA5W5KqkGaVDM+:zaYqmYMKRKYvARU+
- TLSH T16C62C001B3F30664150717514F088AEB891D6BA2457C98F2EC89EE2B558DBC99FF85E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 02e62f7d6a048f9f358acf1268cac6afd398ffb7ee347a7b6f01d889ae65184c
- MD5 c3adef1a2aefa029d73a5cb78867280c
- SHA1 02abcb01511108b1dee936ea433ad8bf898dac1c
- SHA512 07b16f5914e9ad5e879e43dcefd37b1b15cfcd3e65e7e5c0a1b467cf879eca5e2bb6ad8362c454aa0e25860b0fd4da12458e6ef76606bf81fca8f49976a6bef8
- SSDEEP 384:/w1c3/pWgVJIjFL41+ttmdCKn1jq+/kmhJa916Yj0A3Y/OeCZmEMRA4:/wg/fSL4IHlajq+/k0Ja916YwVOeCAEm
- TLSH T178A2E1894A4355BA3792716A5CD0B30DDCF1B3228C4BF1634C27347D38259A79B0BBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 15KB
- SHA256 e1939a60440d5d91b7d6b53d92975b3d679efb454da179f87204e0f75e919ff7
- MD5 e1cc4dd4f4e463b6cb950bc2539ae39a
- SHA1 577ea3752714dc1ffdfb1a5101f1aeb47615e450
- SHA512 7974d4cffa1abe3a4122ef7ef95f954cb598eb15378e522d31cc2e11a24992a5d43888bde8b7337d095598f90e23557ad4e2469411669f57beb6c218143f5da5
- SSDEEP 384:V+mJ6nPxwPphwCbYSyNUkp7Hn6ETjNDLVubLyQGjDFyQcCq:VR6OP/wC81bpfpDLUvyQG9yFCq
- TLSH T14E62D0A1353B6633311D1A62091367332437861B9CB52635FA002FD677A70A870EBBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 550e80d19a5fdc395a112ed52f9b9ab78a82cccae6d222c054da9b13076a61a6
- MD5 716788f0115f0dde2af129323d08c34b
- SHA1 c5b86f35972df48c99ed33e8f7026c4368fd2f1b
- SHA512 ebe930c6ab61ff3dfb40c6e54a423212afaf44388dd31068a8a1310e25bedac3ca4e433d65d77ae6fcc929bd214c5517a7117436b677bc91489bb476a11dd564
- SSDEEP 384:XEqnIol+vNHuzfxy+nqGORuziTbaOPjm+SHaCtWtvn7sS18Ntz:XEqIoAvspydGHJGjmBaVtv7j18Ntz
- TLSH T1D192D050BA1045DC2F02F5F502B235DBAB849A19CE32B81448DD7E2CF58BC247AB4F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 21KB
- SHA256 31b9ad0c72d725e8b97bcd2129a1fd0ab18691ba87ca4b21e5a7345cf6a2dcb4
- MD5 f5161ff7017a31db1f9d4a4db9c2f793
- SHA1 21e444f77c2e4f13909b9872fb681e19f623bc6f
- SHA512 d9cacfabbdcaf743b541227fbeaf667db22ec87ee8dd4bc91831c7a7e0ab9ac6dc768084d69971eec8e0b2fc69fae20ad639301f415bd44cdf1e9b2fd4fb2e05
- SSDEEP 384:nTnke9C1N4MkfjV1DOP2Zmxom88EzW53DQoNKq3iFuWNtxrv1x39jUO5u3aDY7vz:IqCRkLV1DOP2ZW88rJhNlC9txrP9j/uR
- TLSH T1CEA2D1A562DC9423F32256B80FFC8F4569EB25D43632584357E8DCB5ADE6F3B24040A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 a566dea5bf81d2fbd1481ddda055785cb4e475bd1fc261c96b29c3012b93561c
- MD5 39e905f22507b0aa33be2cfd0a9aa770
- SHA1 e92743b4581c1fc639954550664408b2a5878b20
- SHA512 6e33527e44e61c10c6b0feb887bcb7bfff606555002e713d325caf0a8706d0d9324178a8bb6a2b7c0cf39cfac790ed2aa554f849f151486eab12664498e9dd96
- SSDEEP 384:4HfXwIb6Tbrp/vpDufXM5Iq3woG6+vmEIvNoSGCTd/uixzG//oi2XTPMRtbpll:egImNZDIM56oG6WmLr3d/B0agpD
- TLSH T1CB92E094D8C33A5C4906203A92B754EFDA177FFE5AC0ABD03C4BD57202618DB72CB265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
- Size 20KB
- SHA256 7eee9083b5d7ca62118e1bf1d3cf593a6eecb7a5d20997b566e425da72b53b01
- MD5 743f23b3aaf3a3589ec11a495a611eb5
- SHA1 da24e33b0d690df02d32d150e0782ec26d435411
- SHA512 bbce5f45a3f1130760286d6566be7cc4fa206b873f5b71ccb67e3e2e0b7d8d1af6f2d0208f6416a6d825bd0458ca0751b806e04a1a2de4b7faaaf5f2cafba24d
- SSDEEP 384:opa6EzxroUU4tOenP+4dch64DhHVOUwyg6GHeHaYaIaUAWq3YzsobdTzP8:4EzxDU4tOem4I64vOntBeHa2aUAWvzsR
- TLSH T17A92E158971601EA09DE61CCA26FBF2C3669CB11BF6B5490E9BBED36069473CB01C841
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c1613d07-8ca1-4a48-81c4-2f54c36daec6.tmp
- Size 608KB
- SHA256 3f84fe1fd9b115cafc7558d55250e063e6de1433d8752c420e0f694449af23bd
- MD5 9898985768f20491db38286b49445733
- SHA1 11248427d3a53da7df9e4d5e16302152bc5e6a6b
- SHA512 d0dc5b60fae3b7082c0b2445ff23463a9b612de5c1029c1f4a20f76220863c2b1ed3290b00e32fcf9df76faf295aa15905e31e87001a1493acebcf86b4204740
- SSDEEP 12288:x9Oy3IZsxxE6/DEbJc9Csf4HnHSKIMLrYEES9GZGp7nuSdN4YUc8z1e8CduztJqb:ZXUAW
- TLSH T16ED497AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\df1786a9-bf4c-4071-ad03-adf51c79a135.tmp
- Size 173B
- SHA256 1c680feb5d4c62325a8bc707512d5ff37ac093db94a0afc9cf1a1e503b9b94da
- MD5 8e93ce0a86830aab67e99d3cb3bfe82e
- SHA1 06b7d63792662a9a48bbbb45e55be5f9c891f701
- SHA512 c8f63ea48d7edb9399052b250466cce755beb149cebad470131084e1a91dbeb2ec4dcc43f6d08fdbf0d6b511e950452006b2f8d7ff97c315ac9e147a7e819e22
- TLSH T193C080D1F6D210B9DC945D7C6064F721BCFB410575041572A5DD24E502259685716F50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ffbbcbf3-1559-4409-88c6-2704d4146a3b.tmp
- Size 412B
- SHA256 88f026f12f96081756413562ecc91d5f189ac179f42b99737bdafdff981203fa
- MD5 0cf1d58f019ced23be6a22e9ded1e401
- SHA1 165aa13789135ff521615e6025676a62de5953ed
- SHA512 f32c2691095314c647453259c31c64c5124fd8e956bb8af8c62ff66199e772c8732f2992fb36b81edc8df302153060db2aba055d2bbd9e0e5994aaa7c3067526
- TLSH T1EFE0F1517C284B64EE586FD233F83853C72B4585E4E49DE208FF640E021A77D0B28350
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 3c546902a40655b077f11e5fcf504f41abeb0495cdbc6bb6450ae903d28c4788
- MD5 3c72831e7a5fbb75431256a464565f9e
- SHA1 8bc9a5ce9d9741c612fa8d112e161c88c1cf2ff9
- SHA512 ee4fe4f856630711f047c73de1b2ebd4b1f692490fa41c0a8ae12d9f5ac16f5e038dd2d49e1d9a19b086bcfcf34ab1dc65f2d17a6dcac48cf8aa9057b682c831
- TLSH T1AA31BCF7642013349E6897827ABC38AEC6B748CDB88455E6D96D688C02CF3FE44113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 2KB
- SHA256 be281d3bcf1145de4d96aa0d77238612476cb3882487faedc692ed17dd03ec32
- MD5 596c5f9ff3d5599ec8561ba7ad3d7335
- SHA1 1e40d65aff2ac227ae9544ca2525962084d6e671
- SHA512 13c0e65a870985f71b0b12612262e8e5bfa2e603354b0021fe44741009e058ec6a3a37047c3e765b3ec1e65b30585038ad22a7735a110a15508baa037f75faca
- TLSH T1D05174F6A81027355F69C75B7AF8356ACBBAC8CAB40044DBA5DD604C03DE7BD4407395
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 3KB
- SHA256 521699cd6410d1df5eae246dd8477fea025244247f2792b86807ba632ffbf761
- MD5 002e824ece0424d149a9cd2003539ba7
- SHA1 5f4620f1bf97ef1a5a073daf07aa55294f27e24c
- SHA512 b5b4e8a5cb8fb4c24f06d8b667378f4d68d079edd7da85f301a85d15d8c578fe631850a19f4ff7766abcbfd414ad151312fdb758cc3bfa3e8310fba571fe852d
- TLSH T12D8160A29C402A35AFA9C76F76F43F268F7E88D7710050DA75EE504D12EE7BA8007207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 666af3a94581e6dc68f099794e279cb00f7f21933ec3dd089e3744827dcad3bd
- MD5 dbe64657230c56437650482e0482d8b3
- SHA1 b130eab0aed8f58601ba5cbd2812c3fee3568d7f
- SHA512 4e0fd5796289f38bb71c9bc90a62322423ecad20ac4bdf3481140f633c93af3a30bb2bc2f0480e2b081692126d71dfd71505d495c856f2f7acffdef912130c48
- SSDEEP 96:sGZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew:sYwd7ZKuuB+8mn1Xw
- TLSH T1158182A2AC112A359FA9CB6FB6F53F178F7E88D3711050CA75DE104D12BE6BA4107203
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 389b9f6afd08fdfa14143f97515143202ad969b842b8e8c124ab225b1971dbd9
- MD5 ce659bcab054d55fc7957f065cc6b990
- SHA1 27a3ea331f5abdc3fcb56a5eaebea4b5d133a2a6
- SHA512 c0d537d95c0f9c1261abaa16a7cb39c39835cb3bb2baf1bb7203ec80cb425874d2a9d99370e3c63a7378a7ed44228d96254230afefdbc38579c1f19ecc8cd993
- SSDEEP 48:ELj9sZwEQpOr+PTNGUYmfkSEQ5dH3feuJP+iw5Yrvq+5pkvMFaQ7aj8Uv+X27CT4:zZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew
- TLSH T1629171A2AC012A35AFA9C76FB6F53F268F7E88D3711050DA75DE504D12BE7BA4107203
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 cd8df510be958adacd2a152836f929aabf0448039afd012968864c442f5e6c7a
- MD5 ec53fcac5c1c45de3897d8253d0834d4
- SHA1 9f4b894d8026ad6a0504465b749595d0cc32a62b
- SHA512 a8a6b3d1644dceb75f217c4b56064ef5abf53db158ee84caf6f8dea9e195c38c8798e9b154dc272b6fce8a11959b1a8da4c6e8cd0786dfddaf59c4efebd73263
- SSDEEP 48:+EjusZwEQpOr+PTNGUYmfkSEQ5dH3feuJP+iw5Yrvq+5pkvMFaQ7aj8Uv+X27CT4:XZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew
- TLSH T1399180A2AC102A35AFA9C76FB6F53E168F7E88D7711050CA71EE104D12AE7BA4103203
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 21d29c67b97f066b39a1bd3e9c7713418803df6afc92ed4fe8b012b85b843b1f
- MD5 490990e44a84e0bed983650f41363482
- SHA1 3bc1e2e262c7b543d70a672812f49d6e048de081
- SHA512 9903c9dec67fddd750f767fcf753da7d9014876a3df22a7fbe3d4193aa48a0e2c700d7a19fcd7933dc7dabae0abc2daa608d25e066e08195cbc978d90b7885fe
- SSDEEP 48:aujssZwEQpOr+PTNGUYmfkSEQ5dH3feuJP+iw5Yrvq+5pkvMFaQ7aj8Uv+X27CT4:JZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew
- TLSH T1199172A29C012A359FA9C75FB6F53F268F7E84D3711050CA75EE104D12BE7BA4107207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 268634471508e4ffa61a3fafcfadef99f81694695c0219580996ae5857fa5d09
- MD5 68fd0ee7b430a3a392f2c6dacfc73de8
- SHA1 4191fab7d7c8fab491863b9320ee7b85aa9e3fd6
- SHA512 98fe55b1f9b8cd3beda74be7ae3bc2c7b86524935aad0663727438677874e9afe95b4366cddd90d0a359fb08f39c1251b20ee272ce306aed4eb6ec83d8bd39d6
- SSDEEP 96:j+wZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew:62wd7ZKuuB+8mn1Xw
- TLSH T1B49171A2AC112A359FA9C76FBAF53E168F7E84D3711050DA75EE104D12FE7BA4103207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 603B
- SHA256 7543fd650f7d559f963a0b54ea15d0735733e9ccdbf3acb817c59330c60f3333
- MD5 589cfeec7cc8b02ac124c73318d94f2d
- SHA1 9ee9efe34f5d22f527a104badf0fc338f7af3664
- SHA512 d76620fe96f50cd3934a68b5672148f67154a7eed1fa587f11c3d248ee0d5bb41d1ca4c01bf53f7dc434adc5ba12779dca44474c5b701d68d4f2f9d752452092
- TLSH T171F0ACD6792017A19F69CBE637FC395AC7AA4485B890D8E288EE700D429F67E4900380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 693B
- SHA256 5928ca2b5836410b323806cef87e6a9d84dfabbe486d2ce63198bae3c32a962c
- MD5 0deeaa57a81448fa4f8443dc3696c3d3
- SHA1 4a2bac36e1ede26c174bbaa135bf115df56635d7
- SHA512 5a230bf230137598d66d420764dc3517d01c613709547b5033bfdbd45a3299eacc1c24572180f0c46ad445ad42206110ca9be272629e4ef7e0606c75c6121b01
- TLSH T1EC01CBE668205B618B5DCBD23BF83889C3AB45C9B880D4E2949A744D03CA7BE0911390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 874B
- SHA256 e7560a63acfb7d1b4319196c2e37a3412976bc79b14a50a030c3538d4c8d25d1
- MD5 19afd078a1bdcdc76d2eb0a317ca2a1e
- SHA1 85ce14f2ce49f12ccc72851c88bda6d3dd41116f
- SHA512 7956a6ba2935346a25c3a9e789c65e196f3b97de7a0d25c39ad0496395bf27b93d3c7c4b51544571c19da41234198989f022af455055adee445515a132fe2311
- TLSH T1AB11AFEA742057749B298B923FBC389DD7A744CEB8C094D6945EB44C43CE7BE4915381
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 970B
- SHA256 4a2e3dd62627626440a5a72cc012f4712e3d43b6213a2e4293102136570912a3
- MD5 783dd8c20520af9b9dacdd7ab52ea0b7
- SHA1 f367320be8f0b459b3c99faac343b40996705d7b
- SHA512 6732555e76e4cb49c528f6dcce30c5879fdaaa3e42bad816fc234faff844c8f86e767ca73ecb7dbc0302ecd81b0c6a8c0f66d144be3e5923be27a420cb48bfc4
- TLSH T1B6119BE6242417715B298B963FB8388DD7A684C9B88484D6C86EB48C428F3FE4915380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 39f0b0e4fefe0e8178b16de35281bf25cbc540b9a5ac46bd250ba099e145c98f
- MD5 fea7b6393ff637593b90af4cd0c007db
- SHA1 78fc92cc12baa2a80b8791f848921859e2b12162
- SHA512 14b3d3840269064ab90352a1e8dbc1373b27d289dc451e9c49b10a57a2862c83d18be4fd874b2c782ee43ad559cc1039f19f9666ad99993983c6e638abb00bc4
- TLSH T16E11CCF624204730AB2C8B967FB8349DC7A244C9B89484D6C9AD788C428F2FE0816380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 393ee895a3fd27eb4a89b1e0c5430b7604345f93f03e1826c265be7ebb4347b8
- MD5 dcb6a45255c25d499826881fa78d6407
- SHA1 8566507e525561c0877c8cbb036311007ef3a4ac
- SHA512 4719982e62e10b2e2a68bea60c2f9f1a1c6d5909e15130cfb2479a5900699927a5755613f0a6a3f193c0d1c3667dbba5b9f1fd248499094f88fa9accd5dbb7ac
- TLSH T19E21BEF7642443719F198B963FB835ADCBA685C9B89484DAC99DA88C028B2BE0815380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 002e15bf4e651aba7df4fda870bd7f6deb827e536b4e519020673c9ee172a560
- MD5 ace16c00bd8522c169da8f0b5b2670f8
- SHA1 26f4c1caa0e6ca4b458730e8a85a13e5484782bd
- SHA512 1db08360e63aec1a489f4356d48c5fa430f08a988a02e4c39064a608588a21a4fef46572821cdc2b05e50c0d20b56f15fe2e2853ebd764d3f10f818807bf6d98
- TLSH T1DB2199F7242003319B2987827FBD34ADD7A248CDB88444DAD9ADA98C02CB3FE48113C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 7596d97bc6fe0a80fb10487f6e21dbfa7e7fda602bb0fe3d722442857cbd00e8
- MD5 db12970b0b4e1f78c8791a89489de29b
- SHA1 8be27e482003a2b236d66205bed5c35ec2ade3db
- SHA512 e324dd0715ad571d8730518f79fdcd2fb745e2ab55983bd1e9e00788c585e9e85287642714e1a27672236a5b8197fbedfe9ff80164c0bf04814486a8abe1a196
- TLSH T1032198FB642007349E1987827EBC78ADC7B644CDB88455DAC9ADA98C028B3FE48153C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 c905099828a20e2965863a0b1155b7e015ef6fe47c7399ce2a505c45aaebab4f
- MD5 f60d0c5873c3f27fa01f840e9bb7c59c
- SHA1 5d3612154729e02b0f36bc6e55883edf4afce8b2
- SHA512 c3e1c32f576e272cf220b2da866ef00ab1304e0dc67a549c41b85baf31d01218b4d2c7012da3228a43da6b0750a54fdf15f6ff1fb7b07119ac88cfc2d84e5624
- SSDEEP 96:EbZwbMaPTNTjMSKurqNdQs8y+8mu+1Cew:EFwd7ZKuuB+8mn1Xw
- TLSH T1809171A2AC112A359FA9C76FB6F53E168F7E88D3311050DA75EE104D12FE7BA4103207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 780B
- SHA256 2cb41d36d67f06518e5c721f7a0cd7a937e1a1065f8fd91c75c0faf25214f87e
- MD5 9ed10d0e630a3c590bbef4500e335598
- SHA1 288c860f32ec00e1bc3b19e1dc6e9733226ff71a
- SHA512 20a253954a04efbc517918a9b6234998e4a7209adaba06182a6c24799f173f8c26f7983ec3633a8fce1273c83ebf1ea2e10c50898eba3d2326faa2e03081005f
- TLSH T11A01BDFA652057714A298BD23FF93459C7AA44CCB8D484D2985EB04D428E7BE0919380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 505B
- SHA256 89947b3d56aa5c29cea828057148ed79ba62c1793ef0c282d6966459adf8104f
- MD5 f5263f0acc0d374032a65ed72389f659
- SHA1 05e3f6dff0c40d50ec211f049075401f11018ae5
- SHA512 38934f04bb0e6762830a33d34810a0adfd55e4c10f7b1e6ed91de8afdc0e30017dd3aff3cea5c4d05bd3cf940c17156822e267580ea61a81a0a932df517f9f4e
- TLSH T1B7F00E9178205764AB688BD633B8381AC79B4481B8C0E8E3C4AA342E128E26D0B243D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 9bedf4bfb5032ea19843f0eff5e5739faf02e29d97045b8c6a940ed37c24dabd
- MD5 da5b8aa93c288392a013d0894ab2a981
- SHA1 d069cbfa4c33b4446895d5efe031932b5d07ad6f
- SHA512 8d7616a918147e391917dd98192e0c66552b9326fdeeccfa4cfd937cc7da15cfd6ad932f5812d64853df40d667855b9d6057498185ec907e1b34ea291f325a20
- TLSH T12131CFF7642513309A699B867FBC78AEC7B644C9788458D6D95D654C02DF3FE09113C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 4KB
- SHA256 b87d4dc30079a97fa0553cc5a78415a4026601e48d30a20f41c6fe0d1301779e
- MD5 290d32f7c8bd68f90b16291924b8ce71
- SHA1 6573280a73d29e036965d2c174926e23127b5e93
- SHA512 7a9500e4317032dde6bffab154e9e7a2f2f0ea14354859530d4cb9946bb9786669511d05708086fba2761e0f4ed77b9956430cf084af8855111349bdd40669fb
- SSDEEP 96:1wZwbMaPTNTjMSKurqNdQs8x+8mu371Cew:12wd7ZKuuI+8mW1Xw
- TLSH T1CC9161A29C012A359FA9C76FBAF53F168F7E84D3711054DA75EE504D12BE7BA4103207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
- Size 1KB
- SHA256 2c268bf845b7ef092066dda659cda1e8de420d4f5312d20d89bb4977f0f3d78d
- MD5 fd06acef22f8e9389809fcca9f919465
- SHA1 33903593eacaac30c08e5f66e50006d7fca8d17a
- SHA512 b5daa1aa5f1977205dbaad75a5a64853c1aa2a88fe5e65d1ce01d87e9126616bc91f5194999441a3bb780dd97cb4e23f44154591f08d82bc40c500878f4b46e9
- TLSH T185219AFB242453359F2D87867FBD74ADD7A648C9B88444DAC96D698C128F3FE48113C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 200B
- SHA256 07d0cf664e2f58290b2dfd03f0673fe7dccbe84fbf81822ebbe452e66bb8a520
- MD5 c93882be55de67ed92632a1969b70db7
- SHA1 41e45269a1a5de6b9a48f081aa19e1e59cc8ea64
- SHA512 8bc5e42dfa458b71d9017de5e7bd62ded9e00725dddd99f92d99b4f8bb2adb28bedc29c051af7a55e24b77a04280fe702bcc7525744df43491e9f2db0b515fde
- TLSH T1D8D022A87311290CBC482B3CF449B3200C622F42290F117048CE02480021439162CA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 873B
- SHA256 ca2c1e80605b8853319870e3dfa0e0008a08d87b348add2de00d7f048f5c8070
- MD5 f7443ec335ecf80c11ccb5fa5f874e2e
- SHA1 f8e935f2ddcc403e481e0eb440e4fe640b46e457
- SHA512 982637f77123494ecc62728eea7761ba1a469de629e78f4c6f7eb71741653697c2e92551bf05c936a995ac32c4808f95e64a890df21e5d3c8afaa815554ce7c0
- TLSH T12211ABFB691413344E198BA6BFB8359DD6B384CAB884A4E6C58E718C42DA7BE5416380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 5f1e008434c13c01e8832be4e90c9fedaf54792b2f8277ecca335f8a01e04c26
- MD5 ade93e4371271a7565ed1f705dc67fc5
- SHA1 eef2818dc67e41a4a7bdf664467a0277a78d32c0
- SHA512 f8c4211930f4b2380ffb8784c26404fbd153356f74d53d23a38f021e08c7825252b6ea94f47047d6005f425665e641a3823604f61801fec861ce513ce4dd4cfb
- SSDEEP 96:YEZwbMaPTNTjMSKurqCQlQxeG8muO8elY:YCwd7ZKutQzG8mFlY
- TLSH T1579174A29C002675AFA9C76FB6F53B164F7E88D7701054DA76EE104C12EEBBB4003507
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 779B
- SHA256 9e6b8e93fba4f4dd67168ef4fe0d8fd50b194a6e96a41c24283cbf6c73de9375
- MD5 866abcd090306ed1d017712f4faf6908
- SHA1 3db0ecc6e98813ca90922561c54870de47e37a80
- SHA512 610d52f9a9a82b490250d383ccb25d4ce6bbbe0cef0cd34856e6ff399580a2adb37aa625103e3bc630dcbef575876f2adf51493c2cb605d1c15cfe444463ec44
- TLSH T15D01B8FA651017244E088BEABFB83559CAB748C9B885A4E2888A714C02DB7BF0815380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 692B
- SHA256 6c6fb69a1df83f833466efc06fc9ae07f77e822c27318a5296aa5ef477d09677
- MD5 8079776255ceffac160b88ef1eab71c6
- SHA1 4aea1c22c35a4df2698514efb5d9d43149057c66
- SHA512 61dc3f4234f69d303a953a4c3c570fd338e21478337a9f3786da8e7992701e14c069541658254b28fc0b48d1586730c31f41a567f15471dded27aeb4de2fc2c7
- TLSH T14601FEEA751053144E0C8BA5BFF83509D3B349C5B444A4E2848A714C02DB7BF1465300
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 59f40e80e04e86097d57e2af303408c8be7a38cd98dff61638531cba9ea6c92d
- MD5 89a5ee535ea54bbb81885f62667f517b
- SHA1 b15cf53cafc7818a1eb8318c49635e66a5db54ed
- SHA512 c7bf739eed17ef7cf65e32bede67941e766c4f126d3b77954c8178a53592d9fd4f48a29901755e9d6cedb7eca5a7463aa9635231cf3c7ba7f08a9681ef00d35e
- TLSH T1E611AFF7641413249F0C8796BFB8359DD6B344C9B884A4E6C55E788C02DB3FF5415380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 829b305d7914c67f4482a50c38a7efa18b4938148c27520d6d4aaa08f6501327
- MD5 5632c65f0f1ab58180aef90a7f206477
- SHA1 fe8c2340ff83b49b60f20bccfe42528e1e012cdc
- SHA512 84a7585ccb5ed2931ff2e830e1e889545b4b7cce33041b103607bc348db9afcbadd48decf11261bcbaf3a5d7dfb5a9d8c1aecc5a19ac488a6178bdec0a781e83
- TLSH T110218BFB652413255F0C8B96BFB875ADD6B348CAB88450E6C99DA48C02DB7BE4816780
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 e4f4ef622c3d95559345c2d68591b42fa41585fb6ca1645ae615d04cd0ddafd9
- MD5 500faa262ade1cf68c3e1f2fa1509423
- SHA1 5c374563d98896597ac4703e464fe54a7d137741
- SHA512 aab0025b076d89249425573dab2e6a2dd30966acbecdd5752c00f3085755281b0e7f135c2b47340b2355f78a93a06b7e26b0c824fafb7e75e78f587d9549b3cc
- TLSH T10A219DFB242413345E1C8786BEB975ADD6B348CAB88454D6DA9D758C02DB3BF4411384
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 dfafc637c730ed97d5b4e226e7f9dd2bfe43f3bbe87cb2a1afa5f729952ea51a
- MD5 0ccc0ca045f114fb5a6854664d2f21fe
- SHA1 49d6ec2fb55ccd2876fcf8da3f83c1bcb0fca2a5
- SHA512 373f726a899db6aff8a127702476760bd6771d5c766e6b7330c7169a2cf1fe8db672ddf5db646b34bfc4130b8dedb50390c95e9cda1c51330897fb1117b34182
- TLSH T1C5218BFB252413255F1D8782BEBC75ADD6B349CEB88454DADA9DA58C02DB3FE4411380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 b8414f1db8bccf400d2dc7d53afb9f32a1ff22267161349c370e2229ceeceb03
- MD5 9948a6885c7d5c8329602dc0c2892d52
- SHA1 7b436468463335617f65cdb8af9ec693afc48ce2
- SHA512 6a30795421709b6f4447497a826f09bd2971ae93a5948f2c6607741d651b4863f29e598870a803685c4e0689933335a5535c6ed0201502d5bbc3a43de9b5d02b
- SSDEEP 96:O7ZwbMaPTNTjMSKurqCQlQxeG8muO8eyxY:Kwd7ZKutQzG8mF6Y
- TLSH T1338173A2981026759F69C72FB6F43B168F7E88D7710054DA76EE104C02EEBBB8003607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 602B
- SHA256 4ead51cfb45d8a1a7d5f11bf0f931aa4ddc9332460f87756454a6efd7c466b27
- MD5 b68bd49860dc98b78c8045fd2ba33b18
- SHA1 38520d9b1d7b7277ba655e3b45a466dcbec6add3
- SHA512 7d31b8c38031642dfcacb7d076a1e966f7144335777b4ba1ff3d511b85ef27dabf6757aa66a003108799d27c2d83dcabca639921906f3bfab731eae5965c589e
- TLSH T13CF0ACE6795013288E598BA9FFF8364AC6A345C1B884E4E288CB314D02AB77E1415340
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 81e4a103797e21ccc8eb59caa1dfbecc97e548b840f4fd2e98a2f517387c6d23
- MD5 e924308de627cf7544b8304255311635
- SHA1 a95f3cc58bdd3706d3ef9a3c1b55276fc4380a5e
- SHA512 0fb733555ee37c89679697f9bcc2676bb439e734268f37250cb74d632f3ec1695908c3eee3a7586a045ad65ea729dc5214eaf0f3881093fd179b846ccccc887b
- TLSH T1D03100F7641053359B6D8746BEBC75AEC67244CAB84449E6DAAC264C01EBBFE4002680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 2KB
- SHA256 30aa4120d595512aae804c930d11083197fcfc087fe667fc737f9aa5c4aff0d9
- MD5 27d4cc92526e196bab0df09d1c5614bc
- SHA1 0c3e8da55b4be38d82dc1e2dc2e374dbbb27d1f9
- SHA512 de93bcd178e1908dafe3a25d18b3ebdf212bc8d75d88b29873b3169a7885b114e9f076327565e6fff1c73de42abb502d0a2cc8ce480f5bf5e286e9f22142225f
- TLSH T1675196F3981027759F6DC75BBAF4356BCBB688C6740445EAA6DD208C02DFBBE8003655
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 504B
- SHA256 b83565c50b4c1135803ab1be4ba828e16de90faf9b14f03eba9a7ec912476b04
- MD5 e08160f42b0478c983a4f622ebec1886
- SHA1 1c4135e31f09b4169601144e82040495ec06bd66
- SHA512 9b32bbb8ceab47967951e8464256ad80694912f8de1cba691b8eb587f07f4cafd933bfeb90ab907ae43c2e94da8b8dd045732e2dd6892859df3efdf49547f616
- TLSH T192F09EA67914172C8F0C9B9AFFB42529D67305C5B444A4F3D4D6315D01E673F1519340
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 6b02617a6e1fbc2dfc59d8eafd5e8965d0277e82832f73763711604aa279358a
- MD5 9fa9b794669c72dd8359d46166bdecdc
- SHA1 42811f58239aa4ad06f0520d2f095bd495acfc15
- SHA512 622ac3de2ca27cd31a9e5d66f1393a203a6e0678e7aca7ebd82bd0be5129bc395eb585e840455f5b67f73570a537c75e719186b6187e6df41a7d089a39cc6377
- SSDEEP 96:SSLgnZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:LgZwd7ZKu+BQoG8m1lY
- TLSH T107A192A29C012A35AFA9CB6AFAF53F168F7E84D3301010DA75ED104D12EEBBB4103607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 411B
- SHA256 6e7480f4138b268dbe027db26f74f43d19f79bde2db886ec0ddeedc344c41586
- MD5 5d2ca7571035b1368e07a15dd5529ebb
- SHA1 531d750c3e0a94632c67747a807b30eb5df7dc4a
- SHA512 4d62859cedcacff595eb67eeb6643657a0c4ca89dafde5a294fb7563600838a45f02e5fb101207ddab3af1a848d78a747d7f60e9953951336274cd8540fdcd46
- TLSH T1DCE0F1E27940170D5D4C0F69FBA439208B7308C1B40974F344EB115C11A333EE029200
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 01881d7d3e4e0d46f65c01c44b8fe9d1b89f5f70c16256ed12773708593e0f38
- MD5 8dab5a3815fb5cd7d87226185665a493
- SHA1 971013bdd78d74835d95c3646e80f8095d2c825e
- SHA512 7a57aa7e6cab0983d1f63583f942ae2e5abc26b1409c8dae0c4fbcdaef3bc49dfb9adf5d7c66e794355eea169f055962f0fca5c9dfe716cc5cf3ff7bacff5587
- TLSH T1A13101F7602013359F5C8742BEFC39AED6A208CABC4459E6DA6C258C01DBBFF4002794
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 b2ca579b5cc848836731f5cc0c78b9c7df46ef520855755382c1315a3794e1b9
- MD5 c404c223aa2c8a802a29f0c70d4d04e4
- SHA1 929ac04f0fd293b5ba531fce54f2bb7706c568cc
- SHA512 9486a4b271d77361b211949e0c909d313590c4a936a03565087dcf46654d2bac4c008e585db1da89858f8c44bce6bbe6bac94a4f14152968a7ed1f069139b650
- SSDEEP 96:0SLZZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:1Pwd7ZKu+BQoG8m1lY
- TLSH T143A182A299012A35AFA9CB6BBAF53F178F3E84D3701010DA71ED104D12EEBBB4103607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 1KB
- SHA256 94a8523e570f79deef6f6d15de2e39c2dd99fee664ad0c351bc7f82cfd8beba9
- MD5 345f958b458b73d17206778f41b2ba39
- SHA1 b437bbab497c43713bf9d02783ffe1b2c0e6de6b
- SHA512 429e5043c954e36a6065e1252d6e88c1e2d28f19cc747fa276928c73cb4da4cf494ccb0863f6adf819cef7dbd210ee63f23724e8ab03437e96c6bcf53678b5fa
- TLSH T10A31DEFB201413358F188782BFBC75ADD6B249CAB84458EADA9D698C02CB7FE4411390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 663e0384ebe3d5f6a0c0d50e078da8fbd9f05b8cd85bb63139ee54fb7cd7d3b4
- MD5 8ee269c2153006763285935ca6137812
- SHA1 e877aac2c5ca195605dde98a3294b163cddc93ab
- SHA512 8d9d628d43164e36c33cf1c088338443f52296a61e8d69ec722f0fddc090b2ff11a1745488034207f1e8484441944f6fe2909c7f9898c225be762601c1f4b8b2
- SSDEEP 96:NSLgsZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:Ug6wd7ZKu+BQoG8m1lY
- TLSH T17AA171A2AD112A35AF69CB6AFAF53F168F7E84D3301114DA71EE104D12EEBBB4103507
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 5f9dd5fd8c0c3cb46b24e9f164c20e26ef283b1626da74937996353c7332b4c6
- MD5 496ff255cf81a04f3e720bd7524062fa
- SHA1 ace0490c67a0b897efc2bc8628bf63a0a3b11adc
- SHA512 78b404122c436dc440ce8f6b405c4282cf04ddc904f4901c1c8b189350ee765fe7eded65ea1a1f76c7d8dceb706e845c5689cee668cfb7d90fddd4909507fb97
- SSDEEP 96:sZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:6wd7ZKu+BQoG8m1lY
- TLSH T1BB9172A298012635AFA9C76FBAF53F178F7E84D3711054DA75DE104D12EEBBA4103607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 94103c1a2365250ecc8e6276201a648d606f832fe9193f30c4b787d316bde0a4
- MD5 caa4e2f2a24c72f70b8b42a00ecd20b7
- SHA1 2ae690b63879cbe197bb0ee82118c449fcc5d272
- SHA512 2a95822bce91d0f9b9671e623f648586b2a94b2995b7ceac0b4882ae6d949ddbd595d0cf51e7a13748dac9e620a2d881cd4a82c725b374a6a5307771a385edd1
- SSDEEP 96:+SLTZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:XNwd7ZKu+BQoG8m1lY
- TLSH T176A193A299012A35AFA9CB6ABAF53F178F3E84D3711114DA71EE104D02EEBBB4103503
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 5KB
- SHA256 2bd745604d1ec2d1496620b16fbe143c408e09bb1d118c982660ec04369953ca
- MD5 dffe55fcf375e4d8c6eddf9a9d3f5400
- SHA1 c25c9069829b81049ad0736a734d14b31682fae8
- SHA512 9970a372fb6612c100fbb9b2d2fb014deec419bb44219fa015a8d9e85be193e7e1db2ef11aa6ed85ee0486f1c6fc03903f218c93a692f36688350740810dc2d7
- SSDEEP 96:kSLgsZwbMaPTNTjMSKurqNrGfL6L9QCQlQS5G8mu3z2elY:Fg6wd7ZKuoGfY9BQPG8mMrlY
- TLSH T1B7B183A2AD012A35AFA9C75ABAF53F17DB7E84D3311014D9B5ED104D12EEBEA5203503
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 969B
- SHA256 a620acd4e1ccd3dc68b9e0d062c6a330d8fa8760d2fcb8e0e9313fcd55c213ae
- MD5 4ab9874fa6866d379f3a70b820eb1c56
- SHA1 52e2fd8c5c7f5a55a8e94e978057090f68f5275f
- SHA512 34ce13675a06346a9204bdd290f5a75e0fc5b4ca6243bb60ab0463f8e6b8f841c56e9474379a63349419a4fd9d7f8bfab0655a9db9c2c64c45c300b4ec55761f
- TLSH T1E911BDFA651013244E198B56BFB8354DD6B344C9B888A4E6D89E748C02DB3BF4412380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
- Size 4KB
- SHA256 46018180ee29e01f3efe10a42a59b804be5984189f44708956d0aa831a11ea4c
- MD5 8f50d1d26f684e4753183c3a4a6fc94a
- SHA1 2f24f5317efc69e70290181fa1fedb39019897be
- SHA512 923c55592bb13f2f7b14be0e119d05c11c4207996f8c6ed2370e09c39f9e8259de74fbc3d5f3f0bba58a109fbe8be0ee90ab83350c3246d81441019b64d59dbc
- SSDEEP 96:ASLTZwbMaPTNTjMSKurqN9QCQlQSCG8muK8elY:BNwd7ZKu+BQoG8m1lY
- TLSH T103A182A298112A35AF69CB5EBAF53F178F7E84D3711014DA75EE104D12EEBBB4103607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.2.2063191810
- Size 217B
- SHA256 91eaf64c0d7d9825d2ed8ac4a52087ca663d632b2c938e6aa611a66bc19d75e1
- MD5 37d13a2c2a6509b95e4e266d9657dc72
- SHA1 821c6114f1998171907abaaea47f6495aed77dde
- SHA512 d423867ad302c0a6119ec2a4f867ba064b155564ef4640ed699df04fec327ed9a5269424251e9ad79f5c99d5dc65bc9949611e497a4861da5c641b1e182a88bb
- TLSH T109D097E0FA91A0E4C88C0CF6F090AB32BCA50081A008A532009F24E003207290909700
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
- Size 617KB
- SHA256 1b98d917e55e16596d6cfd9e92025bb97adf7a3d8049a95547e43d5915e203dc
- MD5 bcc628b969ac4c77d5015b20a3b65e63
- SHA1 269d03c2fa6bb2b77c8320e118510124ea943049
- SHA512 c99412fcf99b80cf676fca4e6d67f45950af92e1a8dc23aef9afb8770a25c14cdf621348c28ca78987cd9ed156a2750bc1aa5a842b4b2fb2d60549209210f638
- SSDEEP 12288:0f9Oy3IZsxxE6/DEbJc9Csf4HnHSKIMLrYEES9GZGp7nuSdN4YUc8z1e8CduztJb:yXUAF
- TLSH T1C9D497AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 eba4b938297a6891c96e726fa4fffc0bd396682df66703927c17af55041b4b69
- MD5 b82fef9b8eac93ed4a9e9f0be4d307ce
- SHA1 6b5352d855fdb3371d40058fb90ea4fe7db12285
- SHA512 179c73dc23203aed266eef2d8481d58886d7a5ae3f9b0ea7ff4f6d3728b2b5b65ab82058fab1e76caac85c6247ac2099aaadaa5cd315fea83a0c062ec8f04ca9
- TLSH T1A461D83078549D7B57B6C74EE91A3F43AFA21103D1406BD8A1E94E0C05EF6AC2E17875
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 7KB
- SHA256 5ddbcdf4e98ee244c9db553eb2b5165646fab75d5f92f3511b05e1207c0846ec
- MD5 85e06fe9f7eb2d9cd9dac746f7cdc501
- SHA1 66dc53e25084fac2d2ead9fec80aa1f074742f56
- SHA512 8467c33689efe4a35d4f55279afc91ed3f451a3a10011ab345986591000365032eec259fa8d97312bb50f4a6effd65cd8cf742566dc87e1a8f8e76ae663e60b7
- SSDEEP 192:mAz55YJ/OIH0sWAgRDURK+Q4n3p59y4lr:Bz5GJmm0sWVH+f3jbr
- TLSH T162E10835E80ADD7A96FE814A630A7A83F79321134A904FE495ED5D0C01CFAEF382945F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 297bba9f0bb0e973a68099e1342355d6ad9ab7cf61a03743bc2560ebe2c37be3
- MD5 b451b39a15634b3e7d31ae0d691285c5
- SHA1 6f32bcf06732365759c6c38bcb4d26224b4588d9
- SHA512 064b9d0037e371481a47c6b8b54e062a3dd92449befe09afd34d84eb3b188b81ff8c64ed9f5a5fef364af1cc1d372b199a673f49236eacdc3b67b195f02f39e0
- SSDEEP 96:mAB9TVbWoxaAfiTuWDotonYK+Q4OKEkirKTUa2VGeAk9oN0lVezlba:mAz55xW7DURK+Q4nSFD9D4lu
- TLSH T198C1C435D40ADD7A96FEC20A670A7AC3FB93211346804ED459ED5E0C02DF6AF391945F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 7KB
- SHA256 3503b271b82ac3ce7965b1acc65baead9b00449aba00aa8eca0b6fb48c88c8af
- MD5 2761f2f0ffac01563532a5daaf923907
- SHA1 7bd2a7b7d98fd6e28cfd1d4378627fba6a60fbd2
- SHA512 0602c22d4ee8f6265f333a3be65847056943a79717d8fc632253ae9328eaf0fc7facd121c2d31330a158da23f42cf7a66e8a4a910424c11a0eaafd41b3e67d22
- SSDEEP 96:mAB9TVbWofpWJYKOIH9KsaAfiTuWDotonYK+Q4OKEkirKTUa2VabAk9oN0lVezlr:mAz55YJ/OIH0sW7DURK+Q4nSF29D4lr
- TLSH T190E1F835E80ADD7A96FE824A630A7AC3F79321134A904FD459ED5D0C01CF6AE392945F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
- Size 11B
- SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
- MD5 78bb337b5e38a8a32331f18d8a2d3cda
- SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
- SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
- Size 19B
- SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
- MD5 0ba451e89bf7a6a0144344570515f79f
- SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
- SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 124B
- SHA256 840c09c32522c72c590f895bd4e1284948f28e7ff0486abbd4d75ce6e003da46
- MD5 80671115273cbcce14dab8f6ec865706
- SHA1 c9a25c2cb34dc4bf16142dd09ad27e30645af9fc
- SHA512 8e702d114ac40e9491c35c855163814e2b5ef4957aefbda4b71e4ab645fc8a1ef9771f88ffedd133fc56ec7806e60b4f931886f16a4344f67cfba5c8b6b5e45b
- TLSH T172B09B444D8E05C11745545D45E918D9FF723D45AA575C24306550D5082752A381566D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 348B
- SHA256 d9a71ebb685bce275b22ef2d94894f21bd39f202cd31d999a088c784ecb3384f
- MD5 41673b44e5408e34580087b8b57dc07c
- SHA1 88b4ba28783b3cad7bf0e8c086cb070fe17389fc
- SHA512 ba053e0df191d379ae964e0d208c1267df900da4175355f1217de37df46393167db2127f4065ecf328cb829a4c538bd548ac442fac1d40883041615f8b229b43
- TLSH T183E0C05288895681330A182ED46530E4FFA23DCABF305C39306272C4462622764055BE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 236B
- SHA256 c72b223f22e71760f2b7f5a0c553dd84df081a5d46bfcc312c8995a94eb4b001
- MD5 30af4973caa52600dcb02f68bf4fb186
- SHA1 6e42482228037119a8fcca3ec0e9a38811eebd88
- SHA512 4e24e6df41cd860b78908330589cbbd551ed4a48afdb8a19394a9c325e1f34445a904f97e85cddd5aa5ab0d8b313d4239586b6e08fa1fd0df007f0e5e3099801
- TLSH T1FDD097428C880181321A083E80A834D8BFA33CC6BB752C39307260C44923339A50206D
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-bn.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-mr.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-nn.hyb
- Size 141KB
- SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
- MD5 f2d8fe158d5361fc1d4b794a7255835a
- SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
- SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
- TLSH T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH