Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/09/2026, 22:18
Static task
static1
Behavioral task
behavioral1
Sample
67Client-1.6.2.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
67Client-1.6.2.jar
Resource
win11ltsc2024-20260709-en
General
- Target 67Client-1.6.2.jar
- Size 3.3MB
- Sample260908-171fvayscs
- SHA256 2b6989dafb3388b98cf65b1404f9aead1977d9cfdee99e3e73f7dd78256dcab0
- MD5 7a7c272cb3e23a27f3565cabb1e08e9e
- SHA1 2b03aa9ca3412c64604b7896f2cc90c91f418106
- SHA512 d0846818af7246cc7cd161498631ee24a8ee153953e786c1f46bc503af6b1e20fc067eeec760e255db75494d5b8105f819b28ae5918ce0a56ef08e2ce94d27a6
- SSDEEP 98304:m5v8uQ0qomPDGbxM12pPGrj/OXsLGL+qG4+VRa:mOT2b+124f/OXsLGTGXV8
- TLSH T1F6F5339B1EDA6CACE423703D865494E26E764288918F5C3F040461DB19FEE1F2F4BBD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 4 IoCs
flow pid Process 138 5832 irsetup.exe 87 4416 chrome.exe 156 6096 installer.exe 156 6096 installer.exe - Checks computer location settings 2 TTPs 22 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation BrowserInstaller.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation TLauncher-Installer-1.9.5.1.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation irsetup.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation irsetup.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 2708 TLauncher-Installer-1.9.5.1.exe 2524 irsetup.exe 5736 BrowserInstaller.exe 5832 irsetup.exe 6048 opera-installer-bro.exe 6096 installer.exe 3212 installer.exe 5288 installer.exe 5220 installer.exe 5424 installer.exe 5620 Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe 3348 assistant_installer.exe 5640 assistant_installer.exe 5620 installer.exe 5124 installer.exe 5872 assistant_installer.exe 6056 assistant_installer.exe 5348 assistant_installer.exe 6088 assistant_installer.exe 1344 browser_assistant.exe 1300 opera.exe 6112 opera.exe 3204 opera_crashreporter.exe 3944 opera_crashreporter.exe 5880 opera.exe 2468 opera_crashreporter.exe 1232 browser_assistant.exe 5412 opera.exe 3596 opera_crashreporter.exe 916 opera.exe 5636 opera_crashreporter.exe 3052 opera.exe 176 opera_crashreporter.exe 5416 opera.exe 1316 opera.exe 6244 opera.exe 6404 opera.exe 6396 opera.exe 6412 opera.exe 6420 opera.exe 6428 opera.exe 6436 opera.exe 6492 opera.exe 7048 opera_gx_splash.exe 7064 opera.exe 7088 opera_crashreporter.exe 6332 opera.exe 6476 opera.exe 6664 opera.exe 6516 opera.exe 6612 opera.exe 6624 opera.exe 6628 opera.exe 6636 opera.exe 2832 opera.exe 6140 opera.exe 5248 opera.exe 7992 opera.exe 8148 opera.exe 8160 opera.exe 8176 opera.exe 8184 opera.exe 6820 opera.exe 6608 opera.exe - Loads dropped DLL 64 IoCs
pid Process 2524 irsetup.exe 2524 irsetup.exe 2524 irsetup.exe 5832 irsetup.exe 3348 assistant_installer.exe 3348 assistant_installer.exe 5640 assistant_installer.exe 5640 assistant_installer.exe 5872 assistant_installer.exe 5872 assistant_installer.exe 6056 assistant_installer.exe 6056 assistant_installer.exe 5348 assistant_installer.exe 5348 assistant_installer.exe 6088 assistant_installer.exe 6088 assistant_installer.exe 1344 browser_assistant.exe 1344 browser_assistant.exe 1300 opera.exe 1300 opera.exe 6112 opera.exe 6112 opera.exe 5880 opera.exe 5880 opera.exe 1232 browser_assistant.exe 1232 browser_assistant.exe 5412 opera.exe 5412 opera.exe 916 opera.exe 916 opera.exe 3052 opera.exe 3052 opera.exe 5416 opera.exe 5416 opera.exe 1316 opera.exe 1316 opera.exe 5416 opera.exe 5416 opera.exe 5416 opera.exe 6244 opera.exe 6244 opera.exe 6404 opera.exe 6404 opera.exe 6412 opera.exe 6420 opera.exe 6412 opera.exe 6420 opera.exe 6428 opera.exe 6436 opera.exe 6428 opera.exe 6436 opera.exe 6396 opera.exe 6396 opera.exe 6492 opera.exe 6492 opera.exe 7064 opera.exe 7064 opera.exe 6332 opera.exe 6332 opera.exe 6476 opera.exe 6476 opera.exe 6664 opera.exe 6664 opera.exe 6516 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera GX Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera GX Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" --autostart" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe -
resource yara_rule behavioral1/files/0x0008000000024512-245.dat upx behavioral1/memory/2524-254-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-837-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-838-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/files/0x000c0000000242f4-863.dat upx behavioral1/memory/5832-876-0x0000000000340000-0x0000000000937000-memory.dmp upx behavioral1/memory/2524-903-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/5832-958-0x0000000000340000-0x0000000000937000-memory.dmp upx behavioral1/memory/2524-957-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-979-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-1001-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-1857-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/2524-2187-0x0000000000670000-0x0000000000C71000-memory.dmp upx behavioral1/memory/5832-2815-0x0000000000340000-0x0000000000937000-memory.dmp upx behavioral1/memory/2524-5564-0x0000000000670000-0x0000000000C71000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 15 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language irsetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language irsetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TLauncher-Installer-1.9.5.1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BrowserInstaller.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language opera-installer-bro.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4416 chrome.exe 1316 opera.exe - Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera_autoupdate.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera_autoupdate.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333795125729432" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe - Modifies registry class 47 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\135.0.5973.94\\notification_helper.exe" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.pdf\OpenWithProgids\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.htm\OpenWithProgids\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.html\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\135.0.5973.94\\notification_helper.exe\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 190000000100000010000000ffac207997bb2cfe865570179ee037b90f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e404000000010000001000000078f2fcaa601f2fb4ebc937ba532e75492000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 0f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e42000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 4428 chrome.exe 4428 chrome.exe 5832 irsetup.exe 5832 irsetup.exe 4428 chrome.exe 4428 chrome.exe 6112 opera.exe 6112 opera.exe 8276 chrome.exe 8276 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
pid Process 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe Token: SeShutdownPrivilege 4428 chrome.exe Token: SeCreatePagefilePrivilege 4428 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 5620 installer.exe 1344 browser_assistant.exe 1344 browser_assistant.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 4428 chrome.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 1344 browser_assistant.exe 1344 browser_assistant.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe 6112 opera.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 2524 irsetup.exe 2524 irsetup.exe 2524 irsetup.exe 2524 irsetup.exe 5832 irsetup.exe 5832 irsetup.exe 5620 installer.exe 5620 installer.exe 5040 DllHost.exe 5040 DllHost.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5040 DllHost.exe 5040 DllHost.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe 5620 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4428 wrote to memory of 4644 4428 chrome.exe 92 PID 4428 wrote to memory of 3836 4428 chrome.exe 93 PID 4428 wrote to memory of 3836 4428 chrome.exe 93 PID 4428 wrote to memory of 4416 4428 chrome.exe 94 PID 4428 wrote to memory of 3876 4428 chrome.exe 95 PID 4428 wrote to memory of 3876 4428 chrome.exe 95 PID 4428 wrote to memory of 4512 4428 chrome.exe 97 PID 4428 wrote to memory of 2376 4428 chrome.exe 98 PID 4428 wrote to memory of 4512 4428 chrome.exe 97 PID 4428 wrote to memory of 2376 4428 chrome.exe 98 PID 4428 wrote to memory of 3096 4428 chrome.exe 99 PID 4428 wrote to memory of 3096 4428 chrome.exe 99 PID 4428 wrote to memory of 4056 4428 chrome.exe 100 PID 4428 wrote to memory of 4056 4428 chrome.exe 100 PID 4428 wrote to memory of 536 4428 chrome.exe 101 PID 4428 wrote to memory of 536 4428 chrome.exe 101 PID 4428 wrote to memory of 4352 4428 chrome.exe 102 PID 4428 wrote to memory of 4352 4428 chrome.exe 102 PID 4428 wrote to memory of 3972 4428 chrome.exe 103 PID 4428 wrote to memory of 464 4428 chrome.exe 106 PID 4428 wrote to memory of 464 4428 chrome.exe 106 PID 4428 wrote to memory of 1880 4428 chrome.exe 107 PID 4428 wrote to memory of 1880 4428 chrome.exe 107 PID 4428 wrote to memory of 3716 4428 chrome.exe 108 PID 4428 wrote to memory of 3716 4428 chrome.exe 108 PID 4428 wrote to memory of 3152 4428 chrome.exe 109 PID 4428 wrote to memory of 2708 4428 chrome.exe 113 PID 2708 wrote to memory of 2524 2708 TLauncher-Installer-1.9.5.1.exe 116 PID 4428 wrote to memory of 5212 4428 chrome.exe 121 PID 4428 wrote to memory of 5220 4428 chrome.exe 122 PID 4428 wrote to memory of 5228 4428 chrome.exe 123 PID 2524 wrote to memory of 5736 2524 irsetup.exe 125 PID 5736 wrote to memory of 5832 5736 BrowserInstaller.exe 126 PID 5832 wrote to memory of 6048 5832 irsetup.exe 127 PID 6048 wrote to memory of 6096 6048 opera-installer-bro.exe 128 PID 6096 wrote to memory of 3212 6096 installer.exe 129 PID 6096 wrote to memory of 5288 6096 installer.exe 130 PID 6096 wrote to memory of 5220 6096 installer.exe 131 PID 5220 wrote to memory of 5424 5220 installer.exe 132 PID 6096 wrote to memory of 5620 6096 installer.exe 137 PID 6096 wrote to memory of 3348 6096 installer.exe 138 PID 3348 wrote to memory of 5640 3348 assistant_installer.exe 139 PID 5220 wrote to memory of 5620 5220 installer.exe 141 PID 5620 wrote to memory of 5124 5620 installer.exe 142 PID 5620 wrote to memory of 5872 5620 installer.exe 145 PID 5872 wrote to memory of 6056 5872 assistant_installer.exe 146 PID 5872 wrote to memory of 5348 5872 assistant_installer.exe 147 PID 5348 wrote to memory of 6088 5348 assistant_installer.exe 148 PID 5348 wrote to memory of 1344 5348 assistant_installer.exe 149 PID 1344 wrote to memory of 1300 1344 browser_assistant.exe 150 PID 5620 wrote to memory of 6112 5620 installer.exe 151 PID 1300 wrote to memory of 3204 1300 opera.exe 152 PID 6112 wrote to memory of 3944 6112 opera.exe 153 PID 1344 wrote to memory of 5880 1344 browser_assistant.exe 154 PID 5880 wrote to memory of 2468 5880 opera.exe 155 PID 1344 wrote to memory of 1232 1344 browser_assistant.exe 156 PID 1232 wrote to memory of 5412 1232 browser_assistant.exe 157 PID 5412 wrote to memory of 3596 5412 opera.exe 158 PID 1232 wrote to memory of 916 1232 browser_assistant.exe 159 PID 916 wrote to memory of 5636 916 opera.exe 160 PID 1232 wrote to memory of 3052 1232 browser_assistant.exe 161 PID 3052 wrote to memory of 176 3052 opera.exe 162 PID 6112 wrote to memory of 5416 6112 opera.exe 164 PID 6112 wrote to memory of 1316 6112 opera.exe 165 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\67Client-1.6.2.jar1⤵PID:3136
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4428 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffaf7aac728,0x7ffaf7aac734,0x7ffaf7aac7402⤵PID:4644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,3893575186747635453,1821813996337129814,262144 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:22⤵PID:3836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1884,i,40065071061672475,4567551355350624922,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2328 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
PID:4416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,9823934687777484191,14018450722276270317,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2400 /prefetch:82⤵PID:3876
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3276,i,3517405975622616928,6599262812750829112,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:12⤵PID:4512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3424,i,17582805565485394531,5501065418352857723,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3532 /prefetch:12⤵PID:2376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4200,i,12423854108016735422,8689759235523510750,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:22⤵PID:3096
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4776,i,7310567110660482967,17630037784017902101,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:12⤵PID:4056
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,425610166836751212,9985133139305411582,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4904 /prefetch:82⤵PID:536
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5052,i,708291073618676668,3652823744998244785,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5060 /prefetch:82⤵PID:4352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,5506991686234277818,16886781802833850881,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:82⤵PID:3972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5608,i,17616809077779352264,5014326671623451614,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5632 /prefetch:12⤵PID:464
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3532,i,11760481847985360221,15645561851671978507,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:12⤵PID:1880
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3520,i,10015554522344841213,2900681220731753046,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3132 /prefetch:12⤵PID:3716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6208,i,18182575215068176208,12493608616038449896,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4808 /prefetch:82⤵PID:3152
-
-
C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2708 -
C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-2937465464-4167303362-2236413517-1000"3⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2524 -
C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini4⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5736 -
C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-2937465464-4167303362-2236413517-1000"5⤵
- Downloads MZ/PE file
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5832 -
C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=06⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:6048 -
C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --silent --allusers=0 --server-tracking-blob=YmM4OGVmYjJjZWU3NDczMjk0YTZmZWU2YmFjNGFhNDdiOWQ0NDFkMTc4YTRmNGVhMzI5M2JhOGExNTY3NjNkMTp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yLz91dG1fc291cmNlPU1TVEwmdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249T3BlcmFHWCIsInRpbWVzdGFtcCI6IjE3ODg5MDU5NTQuNTg2OCIsInVzZXJhZ2VudCI6IlNldHVwIEZhY3RvcnkgOC4wIiwidXRtIjp7ImNhbXBhaWduIjoiT3BlcmFHWCIsIm1lZGl1bSI6InBiIiwic291cmNlIjoiTVNUTCJ9LCJ1dWlkIjoiNzdjYWZkYjUtMGI0Mi00OGVlLTg4MGMtOGNjYzE5ZjAyY2ZlIn0=7⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:6096 -
C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff657751608,0x7ff657751618,0x7ff6577516288⤵
- Executes dropped EXE
PID:3212
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\installer.exe" --version8⤵
- Executes dropped EXE
PID:5288
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=6096 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_20260908231916" --session-guid=1cc9ffee-b718-4921-b225-d1645252204a --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=3C070000000000008⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5220 -
C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x290,0x294,0x25c,0x298,0x7ff657751608,0x7ff657751618,0x7ff6577516289⤵
- Executes dropped EXE
PID:5424
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --backend --initial-pid=6096 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161" --session-guid=1cc9ffee-b718-4921-b225-d1645252204a --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=135.0.5973.949⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5620 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff781b71608,0x7ff781b71618,0x7ff781b7162810⤵
- Executes dropped EXE
PID:5124
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=010⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:5872 -
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x244,0x248,0x24c,0x240,0x250,0xd0cb80,0xd0cb8c,0xd0cb9811⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6056
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=011⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5348 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x44,0x248,0x48cb80,0x48cb8c,0x48cb9812⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"12⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1344 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream13⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1300 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x128,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35014⤵
- Executes dropped EXE
PID:3204
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream13⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5880 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35014⤵
- Executes dropped EXE
PID:2468
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0x141e2bc,0x141e2c8,0x141e2d413⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1232 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream14⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5412 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x1cc,0x1d0,0x1c8,0x198,0x1c4,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35015⤵
- Executes dropped EXE
PID:3596
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream14⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:916 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x188,0x140,0x178,0x184,0x17c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35015⤵
- Executes dropped EXE
PID:5636
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream14⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3052 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x188,0x18c,0x190,0x184,0x194,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35015⤵
- Executes dropped EXE
PID:176
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized10⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6112 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e35011⤵
- Executes dropped EXE
PID:3944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,6908372712341667298,7413567528103502781,262144 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:211⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5416
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2152,i,10099105720701100523,15315210683559859368,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:311⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
- Enumerates system info in registry
PID:1316
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2424,i,2016887104785103401,8701641142715126342,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6244
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2896,i,14431369962219658529,2648885508080412736,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3336 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6396
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,17623279480237004148,16479819643562364706,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3424 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,9342773007807082769,14243759623696646557,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3476 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6412
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3400,i,3975551015476934723,5053091845108857977,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3496 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,14143844737465825683,1696049773969248620,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3436 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,7072969793629472184,6633630321257388264,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3456 /prefetch:811⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6436
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4092,i,5653647696008059873,17767514663176758440,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4100 /prefetch:111⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6492
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB14711⤵
- Executes dropped EXE
PID:7048
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4632,i,16716898855313739137,12319068012757944142,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4648 /prefetch:111⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4832,i,8061372545559595930,445466227276740812,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:211⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6476
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5000,i,4478033071891134039,11564341180576346349,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5004 /prefetch:111⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5224,i,3523233922195880251,16865426008603159806,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5240 /prefetch:111⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6516
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5364,i,7595867788356113774,2172388789731072084,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5484 /prefetch:811⤵
- Executes dropped EXE
PID:6612
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5368,i,9303684625542913078,244327670096260335,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5248 /prefetch:811⤵
- Executes dropped EXE
PID:6624
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5372,i,3885453913169344042,17841292449147002801,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5348 /prefetch:811⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6628
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5376,i,11264355050039118328,1030610808043196935,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5496 /prefetch:811⤵
- Executes dropped EXE
PID:6636
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5948,i,12304735641433444880,3919964347598564811,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5976 /prefetch:211⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:2832
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6272,i,694850205187923961,3609164969583321248,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6316 /prefetch:211⤵
- Checks computer location settings
- Executes dropped EXE
PID:6140
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6520,i,12346733498326000475,17557009536063353456,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6568 /prefetch:211⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:5248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6704,i,14377425914756485766,3474360364371563307,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6268 /prefetch:811⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7992
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4984,i,4261274929447871573,17467941431522414520,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7128 /prefetch:111⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:8148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7288,i,10211813683888321515,14848748181476330740,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7292 /prefetch:811⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:8160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7432,i,17580883033649836103,9311785070292254231,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7440 /prefetch:811⤵
- Executes dropped EXE
PID:8176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7448,i,4311519018233431215,8083825541023355998,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7468 /prefetch:811⤵
- Executes dropped EXE
PID:8184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7492,i,12785536718284276295,14268666275743974832,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7732 /prefetch:811⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6820
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7864,i,16713679339538162314,3450765488022564172,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7872 /prefetch:811⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7880,i,15718493456018166945,16075484501668506728,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8016 /prefetch:811⤵PID:3740
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8120,i,17902944426647755921,3423031798752682124,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8168 /prefetch:811⤵PID:2664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8160,i,6369792385784974455,11591559942321552011,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8288 /prefetch:811⤵
- Enumerates system info in registry
PID:5332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8292,i,1935984266038277256,16295348523419872093,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8348 /prefetch:811⤵
- Enumerates system info in registry
PID:7148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8340,i,3677515061369552355,3862569849298476389,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8608 /prefetch:811⤵
- Enumerates system info in registry
PID:532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8768,i,775790037554949946,16979222076488532152,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8752 /prefetch:811⤵
- Enumerates system info in registry
PID:6816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8636,i,4990512881228374407,17532262532313395316,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8760 /prefetch:811⤵
- Enumerates system info in registry
PID:6812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9140,i,14380181870565409609,7166014349550022544,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9136 /prefetch:211⤵
- Checks computer location settings
PID:8000
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9304,i,3807664175884224926,1133639488154757037,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9312 /prefetch:811⤵PID:7192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B5411⤵
- Enumerates system info in registry
PID:7336 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff682bcc278,0x7ff682bcc288,0x7ff682bcc29812⤵PID:7976
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9612,i,10912160774858085262,12019712225233042511,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9896 /prefetch:811⤵PID:6792
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10060,i,9062910671000788070,5867889113632857781,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10092 /prefetch:111⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10208,i,1783465870249395471,5521069361891438306,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10228 /prefetch:811⤵
- Enumerates system info in registry
PID:7284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10580,i,14241239487429434262,3370684671887211308,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10572 /prefetch:811⤵PID:6980
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --fix-taskbar-pins11⤵PID:7280
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff781b71608,0x7ff781b71618,0x7ff781b7162812⤵PID:8008
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10648,i,11771003847120804029,2026368118547424511,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10688 /prefetch:811⤵
- Enumerates system info in registry
PID:5252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10808,i,9294557878729879702,2291355412177164797,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10772 /prefetch:811⤵PID:2152
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7724,i,12042774119534879890,12398171784720852522,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10360 /prefetch:811⤵
- Enumerates system info in registry
PID:7868
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5724,i,1779110879982696334,9257591177210671754,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=4152 /prefetch:811⤵
- Enumerates system info in registry
PID:7420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8372,i,283460970979368356,11350651629971451988,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8556 /prefetch:811⤵
- Enumerates system info in registry
PID:7444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8248,i,15877593055832495317,17473123987609076665,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8220 /prefetch:811⤵
- Enumerates system info in registry
PID:7328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7764,i,12158675682907063113,9256650457341705985,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8144 /prefetch:811⤵PID:5232
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7604,i,7093601484137327911,7618231809282330152,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=7728 /prefetch:811⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5668,i,11508020247252919910,6613565206198390310,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7728 /prefetch:811⤵PID:7600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8864,i,18338357602752528822,10931965996678309949,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10924 /prefetch:811⤵
- Enumerates system info in registry
PID:8032
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8820,i,12349433212407557382,3882867397625330881,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7768 /prefetch:811⤵
- Enumerates system info in registry
PID:6564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8832,i,10061387917693265191,6284254210345850945,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7812 /prefetch:811⤵
- Enumerates system info in registry
PID:6744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8464,i,12461513829856743702,18174306466549132747,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9932 /prefetch:211⤵
- Checks computer location settings
- Enumerates system info in registry
PID:3088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4160,i,15036454534742337572,2158331029374827889,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8492 /prefetch:811⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8904,i,3365388913191283413,13855335972802096757,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=9436 /prefetch:811⤵
- Enumerates system info in registry
PID:6968
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8004,i,17279159733784357973,15218866885219171226,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8672 /prefetch:811⤵
- Enumerates system info in registry
PID:7864
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7784,i,11351628341819085496,7780039052660845861,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8300 /prefetch:211⤵
- Checks computer location settings
PID:7144
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10292,i,6175997345372341455,2302456279108879066,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7820 /prefetch:811⤵PID:7456
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3464,i,3023445515206779786,3674556217407012456,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3424 /prefetch:811⤵
- Enumerates system info in registry
PID:7252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5732,i,6444447953485310469,11342709987877281852,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3400 /prefetch:811⤵
- Enumerates system info in registry
PID:7248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9900,i,7377668144585013769,772720061041863519,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10300 /prefetch:211⤵
- Checks computer location settings
PID:8020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10028,i,17023737095832225833,3387857555354854792,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=10380 /prefetch:811⤵
- Enumerates system info in registry
PID:7620
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=7900,i,6986399547143913393,650164463353078675,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=7980 /prefetch:211⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5388
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10344,i,5173710056207255571,17191902141114742046,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=9884 /prefetch:211⤵
- Checks computer location settings
PID:8816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=7068,i,10727070059508820385,13612821830298819190,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8772 /prefetch:211⤵
- Checks computer location settings
PID:8692
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"8⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5620
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --version8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3348 -
C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xd0cb80,0xd0cb8c,0xd0cb989⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5640
-
-
-
-
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,9327344800898870054,3649258700261003843,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6500 /prefetch:82⤵PID:5212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6492,i,2893879641670614422,9121367171110572517,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6480 /prefetch:82⤵PID:5220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6496,i,726963313615920184,10109411438555286596,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6556 /prefetch:82⤵PID:5228
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2588,i,10570882145386997623,11071655993365701845,262144 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:8276
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2604
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:2012
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5040
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:3956
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7064 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x168,0x16c,0x170,0x164,0x174,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e3502⤵
- Executes dropped EXE
PID:7088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵
- Enumerates system info in registry
PID:1856 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff682bcc278,0x7ff682bcc288,0x7ff682bcc2982⤵PID:3352
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version2⤵PID:7260
-
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 1de119d74f8580b82c13ed95eeb4c554b1daecc2ffd54870aea9297fe988b603
- MD5 7c7e66a3b94134ef5c2ab79d2ec1cc34
- SHA1 5899d82d9784255ae012823a2044aeafabd09729
- SHA512 7a7c0586f76f03b5283b14d41cc3e37739919ac7120a91372b473e3e9bcdeafd070b395f168ae0bd5f9bee18d9a3e316afda8d4038b42a1bed63148df09ac97a
- TLSH T13CF09E87249FE8552E8144D81CE78A3E3D23A0BF5464145AA0A849E88B512E87C55034
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 9105662e9abde06f51558b764555bbad70a14a31cffec758274438c6e6159461
- MD5 c2014ecda83766ac94c7e8457a557713
- SHA1 01b93cb29bdb2cc3ff41adb4b8c6c7d0dd3c65e8
- SHA512 ae1fb55160af0feb5f2aee79dc22430e3d76e85b08d5898e62904d39c60c15257e9ade622faafb2696cff46013641d97b8bc601d41bff25a440016749b2752c5
- TLSH T143E0683815F6116EE9F4D8744BD9A5250D5EF02A1428A6B01AE00B04A606940EE12A34
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 18a5173aced8b462ad8b6f34a3637eba707b3c73fe991a95d10f720bc700c99b
- MD5 57d1fc73ea6e9db5a56e2d65fcae84e4
- SHA1 dc2495b67d6af4e1836150ecaad3ab792c07efe0
- SHA512 8f4d836a9882dcbc914603ec9f8aae2ba00b0e87808093bd780cdba5b91c67b38a1b4916248068071c3ad083733135ad294a0c102d0ac251e16fb8e466ca2773
- TLSH T198E022A6CC21ACB728FD071820914B45EAA5535B2A80892F3F3CC20C8FB162A4596C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 912B
- SHA256 ec236351b2154909db3e7bcdf24503a9e8fba2cae2ee612369911b8c6bdf3c9b
- MD5 60aaf8587c18ab814020c8772ffd6a39
- SHA1 5ec2498b4985bd3020d26d730ae67feef5dd1a95
- SHA512 562b83d00a6963ce8d1913c30d47eca1590df51ad1088d507f79e4477afd32f2ee01cab2e027d0b3e6b3286443d931f61e4ae7e10f21f73d90a2e01c04b10ed2
- TLSH T198112673E5916D4EDB8D08B274DC04DE363892C9BD1ACF56900CD86CE1966F2212D81A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 7KB
- SHA256 9a2cfe18a0871c9fecd0d4bb0f1b55c0ce734d2e9da64363a325a82fdafb337d
- MD5 fb8189dd81ab6d2ebc03ecb9956eecb0
- SHA1 ca32081e8dc3fb36c54732f2112c01b72cc6cff0
- SHA512 08be43922dc4303ea589e5371231080bec67839b6c0607f7fab1e63556fe4448258a4630cde33cbb4574bbcce0bea48b246b930eb9f9a8fa36b2af6ff883e531
- SSDEEP 192:D0RHixObnmRaIJkHsgNEwZsNPpaPjfPcWhvyiPzPU8So6K:D0RHixObnmRaIJkHsgNEwZsNRarfEWhj
- TLSH T187F1B1F3C3E8C57EC91656F8A7156E1FCE1D0A28431C3D26C8D5AE4BA3E2871E25164E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 555b5bbfd322715ee37eb8fcc8961cc831526df7644b7329983d79958565cd70
- MD5 8752f2d26cad6045dfcfa580a57af2d0
- SHA1 13e4fe27cb7730843bdea4f8367639ce644f8cdd
- SHA512 3fc737af04cb1632d8c364f6ea856d00bfd6008526fe9f8a5a51e862f1a988776c62fd7a64f762aab99d917b771d1cde33c1da2ea5bf4228524ae422debe736a
- SSDEEP 192:URFcBz6L2NeZiyiNIv7hpAPRp2HiPj95Hsb+WN+LQU4T72Lkl7vnvaeD9RVyIsnH:URFmzUceEDU9UXVrw8g2Ylbvag938
- TLSH T14552E81EB910793B5CDAC22AF922B717D7FB242135E46E84EAFC892C05E76CC2217457
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 91d9ac1725db44d6e186e3b78ad8e472484aab1bbe48acb029e96d4054e3930e
- MD5 92de1e9a0210771d6f095fd1dd5bc337
- SHA1 fcacdb50340cfe2854ba593f40f314c5312c5cdd
- SHA512 8bdd7078a1c39c1fbd8c8fbcbd3efe9e5a56d58a5e9d5d14b1f9df792143f2ff647513c4a81c47c17e6fcfa98561b508e043ac42c6fcfe71f9b803e36d43fd13
- SSDEEP 192:URFcBzWL2NeZiyiNIv7hpAPRp2LmiPj95Hsb+WN+LQU4T72Lkl7vnvaeD9RVyIsH:URFmzAceEDU9UXerw8g2Ylbvag938
- TLSH T1E952E81EB910793B4DDAC22AF922B717D7FB242174D46E84EAFC892C05E76CC2217457
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
- MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
- SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
- SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
- SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
- TLSH T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 76efe7af136a3c53edbe6be4b3ebaf603b7528a8494acab7d67b0a3bdefcddf1
- MD5 31ef9db22a4ba7008d05e8ece8c51df9
- SHA1 08dd46cfa09adc604c3773f8872c43971c9b6407
- SHA512 e748bbb66e70073f5a8e4bc27d578d3ce779de8b7a682869d40b088678fef6499406c7694d5274c00c73b1f0b6e4b72564b36e2c80ad69306d7ca41a62f20f19
- TLSH T1DAB0124080415503C41606F4128614C8B124DF10FB0E1B0553E0BA32CC251918524050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586992.TMP
- Size 96B
- SHA256 7b1c9bfc943ebe15a0c9b872ba297f25c59418c1b984b9c73c1aa0b932a6d137
- MD5 910f16c60dd2d81fb765c431c754e388
- SHA1 bfe87853abdca3534d12e375984d5831b9bf3adc
- SHA512 99c6de9551cf972afca51e216c3d82d8cda2d2a5c533631276c736e2d960dd59ca4cf7e983743bce1e134d48ec8c6d58d917d3f349aaef1a11aebd77d1fd2589
- TLSH T1F4B02280C002B203C00303B02A88A0C8B0B0CF28CA03222F82E08A22EC3023200200A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 96B
- SHA256 0a08acf9819d15ed7aa30c97ac3f18683baa52247cdfa1777c7035453dedfaf9
- MD5 8468d3f19f70b8d2e1af68852ed19894
- SHA1 25c86e18dddd66ce68315e04ab1b81461eea9e13
- SHA512 6088f4e2531613022d971707b1b525216dd4d1f1310d7e5735c2956b74386a6b42e8a8b0661c58424ca1b17af15f4c03068c115d8ee3d4fd4ed455f03727891b
- TLSH T167B0110080820E82E80202B0A2CA08C2332A2C202BC308FAA0AC0080A80238A8200B2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 1d0bdaf8d9cf21c832084ace762847a5517851937f661c40e2323fb370c7b08e
- MD5 73e4d8015d36ea36b6e1ccdbee4fd0a2
- SHA1 cd73a813b2e5e4b0e9b5340ceb6763cf9aaba2c2
- SHA512 1a4790fa2ffd7d26857ad14d1b65f127a39d93d9058d0a25cc63b56f8caaf4025556b34eaed28a718a60f2ad20aead80e63e854b454cb115cc967abc41fa3875
- SSDEEP 1536:62yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Jqfd7NtZL8cHQRZEQ6Sps9
- TLSH T12EC30237EBC21F335D82CB647A534FD6A7B644A99030D301AABD3BFB6C93451644249D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 240KB
- SHA256 94d14f819abc9225599b964e8dd2b47adbaa57b7a50f9c7c5b1336c113045d2a
- MD5 a8426d97d93c0c1859de1eecd27547a0
- SHA1 55cef85bb7648b57311c304cf9bbbd1dd9ff1b31
- SHA512 5c2596d17f2484afa77d414c89afee845379a3edd17554235116ed45aab0080eb7ffb99e48ddab902ab4ac53b203cabce4f3d04c38b9638e8a0284edf5ce3859
- SSDEEP 6144:M+fbgYLs5G25uOexAhS1RzFvqZ/ZLW3Exm:L8Ys5G25uOixRqZ/piQm
- TLSH T135342337CF662F33EA89CA74B3520BA657B14DF16078D70857BA679B7C83920184396C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 240KB
- SHA256 6c5050f6e2e97ac0427d1a33a1fac691e24f445d37f385a35700b77c0fdf3708
- MD5 3dc0a868185b93ed3c9db40753aa5105
- SHA1 f5750b4e460d4d7ae563dccff7e94563a6de5c91
- SHA512 35b24b8072358b9331831976466a0be01ebb2824410b3f0e818e67b31b39a420417b88a24e9489f66ce25eddf0dcb7c67d7bfa69a98e9550110557e9991dad32
- SSDEEP 6144:r+fbgYLs5G25uOexAhS1RzFvqZ/ZLW3Exm:y8Ys5G25uOixRqZ/piQm
- TLSH T17D342237CF662F33EA89CA74B3520BA657B14DF16078D70857BA679B7C83920184396C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 241KB
- SHA256 63abce3a61b381f4106a665f3ea74f9626778de92a30e1a7d8ac3bc44438f72e
- MD5 3ee1b2497210b1a72834205806c973b2
- SHA1 81f7270a314eafdd1f66a3f13f6dcfd300fb0a1e
- SHA512 b2aba515ab1c67bc7359da0566f13d7423714268074ef56a68556b32ff65d446eaf657d1bc8c27429b93c3999d9aaabbf683f5388ca2f452ac20aa3ee040ecb7
- SSDEEP 6144:XC+fbgYLs5G25uOexAhS1RzFvqZ/ZLW3Exm:N8Ys5G25uOixRqZ/piQm
- TLSH T19E342337DF662F33EA85CEB0B3420BA65FB149F66174D60856B96B9B3C479201C4386C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\135.0.5973.94.manifest
- Size 225B
- SHA256 54d405717c09ff20d23e154f22d3a3ef427d75363a1b6f810548f2a556058728
- MD5 84454219f4b7b5ee28f7a767b30d9ffd
- SHA1 4d6765f2127c6405ee2c885dc8749597b8e15f9c
- SHA512 53ad06524eba5ec986b668dcc57c7fdbc188be2f8bdf05150bce828aa41e7b5a090f52425fe27a2d0a0e00589c481c581e32925afe6c733df4b36b1df2cbac6b
- TLSH T187D0A92186C532097B2182203CAA20024118C7AF448CA24870FC7877EFA3924A1828B2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\Assets\150x150Logo.scale-100.png
- Size 2KB
- SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
- MD5 b5a21b88b3d8a42df265817ebeb742bb
- SHA1 e0be32b4fc158db4e9783094cce614922114b742
- SHA512 21ece0dcf17b038400d09565438fce8be61746daa0250f2fa9d0526bba3d1ce6f8da5cce944ef8fa685c5eb6cf857b073d2a50ada44a44a76d84813871faa5d0
- TLSH T133415CCC56657CC8CCE065760A67A72C5FD3AFAF0A335B7A6010089ED99F1453803ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
- MD5 0bae0648c3e320c4d439f158b4fd5531
- SHA1 4e860ae24f03522c89bdf37f3ccc10b54832861e
- SHA512 6a5e4105ccbe1664546798db057b93622c9cbd6d5af4967e6be4e390a18fec0ffcc807e3331f09ed0de63ed85569be7ec5eed5a7c663df6ce4a5b70e09500371
- TLSH T11A31293504B0A195E74A36CEADE49C2B449C6AEE183E0139D60E246FC430A5DC8E530D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
- Size 9.1MB
- SHA256 ae3b53ee56212e88701ae593c68d74469939a3426ab903695635b30cf809138b
- MD5 953322dbbb79fc104ddfe0ca45651622
- SHA1 155616de7e7ffc8e0d6b304e3bab466759cbbb06
- SHA512 65ae03428c97726dc1c423ab53a583016b45a0ffcba5b29074acd0713adce9d3391c5aef4febddbaafd7eb2c594165497e83e4c4d98d7035f3277683f1140569
- SSDEEP 98304:vWDNmVJQJi5BHdDE8bJ/0gAgRcYFBI3++wteEml:eDNmV+k58uh83+Bql
- TLSH T147A68D53F3A601E8D06FDA748B7A563299757C864B30A3EF0A9436250E75FE45B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\resources\custom_partner_content.json
- Size 245KB
- SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
- MD5 f68d0557a8931cf979a21c59c1bae019
- SHA1 e0bfe0f9a947916ebc1fffa52d7dff524e76c2ff
- SHA512 2f0ef8e3e11daf0ad266c4fdc35d1e6e2215556115054f635ef9199b03a6924b1aa989f052461d59b9cdf57ec5eafa918e806fbf2d242f63699a8a65b0328ecc
- SSDEEP 3072:iwK+GwaiHEaacjK+eMuhKS1d/ttUYD6W6Z2NrwYrVZCs0iUCabiKfAu/wX2OCy:XGuE/c9L+1btUYOnkrPVZCCUCabNU
- TLSH T1BA349D7BD4090CE327A561E68879611EEC21D26B0CE97C257B4C254C0F9ED6F25BC2BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
- Size 1KB
- SHA256 5aba860a63a8ac7c49e92c05fcb2552991e17e36c7dedf246e730e77ea6a94bc
- MD5 70300b6b5343c09c0a46f03f5d30f13c
- SHA1 6304852c30829024720309901f7ea515f47c6039
- SHA512 473ea05c3585720000786c09c6e648db702afeb858e0fdf63da2bc99c05a46975c7fd45b9fa1260be7a40833d11225b56b563af340d137741ec04897ac34ef88
- TLSH T121317828511A9033BE66939FDA675A0A72170442982C70D1D6EF072674D7C970BBAD17
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 2.9MB
- SHA256 63d5fddbaa2f540e9d2bfdbcee2e714dd0b02d4286346bab0a324d03d591decf
- MD5 4bd47095cb7cb80ff2540325639d522a
- SHA1 aec4b821eddfa75c0ba17301903e5467af5f6e95
- SHA512 815c2fc32664102db741a4f349366abb6bd15b42a212ef3e7da038dcc44c78efc0f3223d4de8c7f58266f11165884f75ce4ea04503b0c09cecbe407c0b984b83
- SSDEEP 49152:p6CutkQ1E9ZWJQHnv9klO8Ni24Q0U0aHRuJYWzz3r6YRxyfOJIjx:pHutkXv1COMi9HFEzx
- TLSH T133E57C13F2D500D8D01DD1798B9A9633EA62BC454B31B7DF0A90B6562F7AEE06B3D324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\Opera GX Browser.lnk
- Size 1KB
- SHA256 c681ea26d52fb1aa66384f364f66fb9f8d752013fad85cbe722ef3da380537f4
- MD5 737c4f83c867ffa55d5e167843c43c48
- SHA1 366e4bcaea0728753cb3dfcf972bda3d4759614b
- SHA512 1d45d43f9a963221b65d5dd7b6273b099c63f5302d9b8f60624c1d3fdd7d9f7187e8b95846b877ad56cd5ab7f09b967a7bcf82681ca4cdaac7eebd769883620a
- TLSH T1C2210F05BFDA2B12E3BE563985B63735E23ABC40EB520E4C402063480DF42029A49FAE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\additional_file0.tmp
- Size 2.8MB
- SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
- MD5 c9ae7802591115c9e09f72e922fc1ec0
- SHA1 57cbbbc45d8dd69ab8b9c8f55d8739cff3144bcd
- SHA512 43796c6c9a22ab0e3d22cc141d6d1d5a50e92d2c87b870b23db0c13d62ec09cc330593578956839a43e05de3f1ea4afe1bab5a0bdfcd7382727f7a3a9cb75d44
- SSDEEP 49152:5kinoAZuV1QNAsKn2UyjypYNs2wYw55JzCmEGCMZB4fonZyhq/jhLh2J7K772Xu0:5kioE815sK2rBw5vzCmEGCMzdZyhAhU1
- TLSH T18BD52312B9A58472C13301324DE8E67D69BEBA621FBE0BBF73540FDF4F54A834A20556
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
- MD5 e7f23f800aa6a864cc8ae23f9cd4c5ea
- SHA1 ee5fe5dff25c355dcb56f21f93ec812cc61b2776
- SHA512 8fdef8eb056fb6552253e3261003d6e39af2f77fd721a4f321028faa85f1e9848af78004e9f938b5476a545366c1f8cf7fe6a2ea970695d2af977f56f3644499
- SSDEEP 49152:MgZLb7ml7gDrSbYibV/7nk6KJSsrENrLSNOTnzO77:ZLb7ml7gDrS0ibVD3MSsr+rGOTnzu
- TLSH T15AC5AF01B96090B4EC1630B2761DEBBE9E345E05472649C7DB94FCD67BB86E2213B34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\dbgcore.dll
- Size 196KB
- SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
- MD5 d1085c14416e37c8b71a6399ae7945ee
- SHA1 d02998e55598c3c1b2dff3f90e440725d4e28bd4
- SHA512 6613e21ebcbf00d8892e76b7001376c17e2927db214720582f663964b0e80aca67cf3b983791cb5515f5a1b017363f06cfd2d42a61db3d864a9a2f8b6165d670
- SSDEEP 6144:gASh0NdOkBakZykbp/eyhr+SJors+k0L3nTEw:zYIqFLnTb
- TLSH T196148D6296840833DD9F11B8B29F333795FEDFB013A194C362549AE4E5647C06E3A2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
- MD5 2c089d7228076672347ce09c34e8e390
- SHA1 da94b3b02cab6b25efa6df543fe806f97ec2a883
- SHA512 93ef135c542ddc536cdb9de48de2ffee5db1b5f5955c84c761a0b022cc349b70a898a0538789c8ec5b0f7b4bef4fd7d1485ce3ee00a338a6280c7eec9a345bb9
- SSDEEP 24576:TDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsfx:TqhRcFPxhHYCBRnyHO6W6NIyX/kQs2RU
- TLSH T1C2856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json
- Size 242B
- SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
- MD5 0e0bdb864d23a576c0a145f2410051f6
- SHA1 e96404d405d5644cbb06b8eeb7b65ab553c2ef05
- SHA512 2b99cc5024118915aeee2a0e74693b04ce94bb33a96c815affd13c198c8b452d9c2e3c8b2ef6488a5cb68951a8e7b2a94e7ab6ed27dbec0fb636c1f7fa9eb116
- TLSH T1AAD02B099127C0710BA082877832328D21432E018C617885E6C712209020CA210E6D4A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json
- Size 1003B
- SHA256 c818d4e9ce35ca54f18a7f706acab3fde6991bea33b1923479a6773eb41b0300
- MD5 baa6f2b916d924344014a6da3c944615
- SHA1 34fdbf76a01e51c8a04b041c0ba7e983c90fbeee
- SHA512 db842566868792c5fbd6838130315be04fe65caf123ae27cabfb7666fdd33e272c50145a304a2fb83c8d6817def62822fda4efc40974e98739b026babbde9870
- TLSH T1AA11652961569022BF7AC38FDA7F0A0AA34709035C2C30D6C4D7493664EEC920BF5D26
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json.backup
- Size 227B
- SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
- MD5 85803bf6cb6a4fbf49fe35f71481215b
- SHA1 348229a8ae259b69231495dc5060d3a28c622608
- SHA512 5b68aef4caa0eee6dc13997f0f93c244a88425887516cb58143fb0c7150d7304cf1a73203bd8bd52e04428ab8dc9cea9f3ff48f30607ca0fde8dabf399520dfe
- TLSH T10DD0A749D127C0721BA18287BD7232CE62532E528CB67989EBD712709035DB321E6D4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
- Size 9.1MB
- SHA256 106c950add527723510ced4b1f516ab7b75b781a356063cafd578da334fb7553
- MD5 18c638e10f13faeb4e6288b855320ebb
- SHA1 366790175c7ac185bc8a4e04f8e6bfcda384c474
- SHA512 730439b16167f71b367e03d3735addd0e6788b48abd4a943497742bfb81375d9f7a1b00b782da95d6e0d2f4330abf5666f74e9a7dcea86743049210e51ae442b
- SSDEEP 98304:DWDNmVJQJi5BHdDE8bJ/0gAgRcYFBI3++wteEmF:SDNmV+k58uh83+BqF
- TLSH T1B9A68D53F3A601E8D06FDA748B7A563299757C864B30A3EF0A9436250E75FE45B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
- Size 116KB
- SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
- MD5 e043a9cb014d641a56f50f9d9ac9a1b9
- SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
- SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f
- SSDEEP 1536:5HmLYAoZllsaebGVeTZ8Sz3HjpAAAAADYmaAAGg:UfoZll0bGVmjWh
- TLSH T1C6C330260E6D3150D3992D79BEEAE3384E764D90EC6D21A314ED782AF9376EC13ED440
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
- Size 3.7MB
- SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
- MD5 05db02530acae561d2e4b368ccd45f52
- SHA1 050101d4689ee8012bcf7eff4cdbe15a3851ecc8
- SHA512 8a3e37e6d5e73fdac7f4b974dd350011b83b410b2b26b140bb53f1c497d3fea857c9ecf03e931dba53908eeada1859d4f3797f47d187d84e651b1fa42f548b37
- SSDEEP 98304:DLDSCHji8v64cym9lYQre8JVal0S8R4+h8GdspyRLndhyOu9w:DHfQbVTS8R4E8GduAT89w
- TLSH T15906F12A7A72C072C6323630969DA379E6BDB8705B35829317D01E3D2E715D2993C36F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
- Size 12KB
- SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
- MD5 3adf5e8387c828f62f12d2dd59349d63
- SHA1 bd065d74b7fa534e5bfb0fb8fb2ee1f188db9e3a
- SHA512 e4ceb68a0a7d211152d0009cc0ef9b11537cfa8911d6d773c465cea203122f1c83496e655c9654aabe2034161e132de8714f3751d2b448a6a87d5e0dd36625be
- SSDEEP 6:BlcgEMS0gjjjjjjjjjjjjjjjjjjjjjjjjjjj/naEMh:TcNwezg
- TLSH T192423A021F61C274F2CC0CA44D58244CEF10CA5B211B02C54C75073597C06D73EFB35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
- Size 43KB
- SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
- MD5 c1380329e781c0a64b39b7441848c380
- SHA1 f038908d637389cd56c2bcd524c1f98090b194c1
- SHA512 51a9dcb8955cdb7b78d3ffbf8da8ecd866d46b325b0fe8c948a2ce81302ffb11ee933ee5de2850ec92950a5a5a1b7cfe0237a3817cf5ced7029ed9bfb2464f0f
- SSDEEP 768:fKdTjAjz+7WyOYqVxkwGW/wh8P97nd6alQO/IrLXjTVgqjqC:fKdfy+76zVxm8PzYeIrzVgqjV
- TLSH T1C413F210C4CD9A6703CF5E12E46538A5B8E158C0FA2DC4AC38E6DE24552E7EF5F107D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
- Size 644B
- SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
- MD5 803fe72088e9684779985bb4bc92c3c7
- SHA1 427d3cbcd903a8ca0090914de9df0bb25f148776
- SHA512 df33b0f72d3fa7da46ecb6f3d3b0df8cb3983d5c1ed04851e24bb3e6fc68eadbf01a1ffd5d3b98a5e9f13dfcdeb6a66e3624c66ab2ecccddd582de7569fff72b
- TLSH T164F068D615D15478C20781B480C502A3DCBA1A85DDD786445180B73317D1FCDD5C236D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
- Size 12KB
- SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
- MD5 f35117734829b05cfceaa7e39b2b61fb
- SHA1 342ae5f530dce669fedaca053bd15b47e755adc2
- SHA512 1805b376ab7aae87061e9b3f586e9fdef942bb32488b388856d8a96e15871238882928c75489994f9916a77e2c61c6f6629e37d1d872721d19a5d4de3e77f471
- SSDEEP 3:y9lMll2/l0uqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdC:BlcI
- TLSH T128420404113000D5D1450175007471C5751547D5D004034C30114C14451047703CC044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
- Size 12KB
- SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
- MD5 f5d6a81635291e408332cc01c565068f
- SHA1 72fa5c8111e95cc7c5e97a09d1376f0619be111b
- SHA512 33333761706c069d2c1396e85333f759549b1dfc94674abb612fd4e5336b1c4877844270a8126e833d0617e6780dd8a4fee2d380c16de8cbf475b23f9d512b5a
- SSDEEP 3:y9lMll2/l0ZVTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTn:BlcSj
- TLSH T1DA42040F110103C5D1C700350C57C1C4F51F45357004035C1011CC344D10457034C044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
- Size 438B
- SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
- MD5 d5515147e2fd43bfcb51088cba0a2d11
- SHA1 24319ae988efd59fdd883b14642bca432cffb049
- SHA512 a54fb5461ede951704a1fdfd3ba0118a3e525412f1e9c41cceae17730d28ea2a6d22f1926c4eff50fd4a5e6caa4972fa085af1cc22ef47973a15763f4280ceb7
- TLSH T1F3F023C62F547AA0C50F6632DE1D8546C12364C73CF9B359DC04DB313380FC6A0461E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
- Size 400KB
- SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
- MD5 1698da32813956674734c753b55baa08
- SHA1 cf4e3a707e59cd6c6bc5b7cca659d5dd2c080638
- SHA512 eeb6ad23291f9bd37f20555ae8d557bf0e448e77433c3dbb859813cb70e80f9cd4d30219083aac23f99ed780ee510f31d78aedb44a548582e690eeed58245841
- SSDEEP 12288:Gwji6+ZoE2oaXKOAilmVx+igEpONKiKjZTeGV+:ViJTbaXlAUnKiKjJeGV+
- TLSH T1D2948D01B6C0C0B2D1AD253124AAA3369A7E7D205735D7C3F79CFA7A5F311D1AA2934E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
- Size 252KB
- SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
- MD5 bfa121019a2dd9f7749f6bb72570319e
- SHA1 fc48a96ad45e00815060bb366fe8f31c140ecb19
- SHA512 cda75a55119104b23489b1048c810e066099b13e12aade7cfc757ba91de7b6754edff2da561741a16c92aa00d7e4ea0b53f77ebea6aaca059a74847a0f5d4059
- SSDEEP 3072:52E6GukcxWtnwkwNBp0AUTjQzKgvyVx9QlllMS25RpaLSDk/wY:52EcxW2kwNBp5UTsKgaQllaMLl
- TLSH T15F444B0176C4C032D27B21354877D375AA7ABD618BB48287BBDCAA7B5F705C28A37316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
- Size 1.8MB
- SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
- MD5 21618eb1ebe1b4033d833eb057c3d065
- SHA1 40e80d4f0d0254bebf73ceabf28d3c471f894aea
- SHA512 4765b54fe15bb127f4f80777004276212ffb5fe2bad1b887eed9fca5c50d2b336805de32913c41ba7f726445a21b591e6494363b52b5333e273f3254fc927c19
- SSDEEP 49152:wo5xdLZj7eHEWcSkMqQjeDlSvKjoSCpWmp8728hLFhC:woDdGgbQyDlSih/FFhC
- TLSH T1D1853381E665C38BC57C483BA8FB5D556B29AFC27311C7D20BB9BD1FB8367922C48850
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
- Size 395KB
- SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
- MD5 8d18dbd14d7c233b0d1f5943226c35b7
- SHA1 57de3e8d8e1f0e39244b3528310e513c7f90c5fa
- SHA512 39777b070c6ea791ee5cdc1c8ad50015e9d6f6f96b2d8e02f4a80f97a7fa2c438770d5015eca5d19106cfce624b6a247de04cb4ce6baad353acbb298f0fc6aaa
- SSDEEP 12288:B3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pFVY:IaLbwKLDTH5+6pFVY
- TLSH T14084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
- Size 1.7MB
- SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
- MD5 fdc583888459954430cdb445138e8690
- SHA1 1557c2343eebe793dad9d71af697db9c98f7224c
- SHA512 4085953bdf51b93bbce4b2cdc1ae732de7a9a6e0b523fb794722fefef9d59be5624feb99f4f73cead9a4353d3f63c5434b21b65abcd0b3915c97d1d97747f7c4
- SSDEEP 24576:Xgojt8rfJLbXIpyxOjNONgc2gI0pRR9djPOZYVFR9MRsixD6Oo1e4XHbtSwye:wUqrdspyxXn5Iy9Rdb92s27OgZ
- TLSH T1B1853323E5340AFBD86C2E3251BD2482AD7EFCF2F3690C4286557B1311ABB815A9D375
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
- Size 395KB
- SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
- MD5 4eed99fd77f4ff9c252f56e153f9c9ab
- SHA1 995cecfe73f719c5135461402fdfb17d79721831
- SHA512 df0b514491e48e0f6103c61833f24fd0822a5b7fbaf1df9f48263bb83b1d5e5157307d0f6b7fdf3281e32886d3d8201b4a378239d2cbd31584a7c200c2b69e03
- SSDEEP 12288:l3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pu76:MaLbwKLDTH5+6pu76
- TLSH T1F084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
- Size 3.9MB
- SHA256 df5b1419d65a88748dfdb298e560ae8e2c8ed2a2b2efba0d35ca951da0adef53
- MD5 3331efdea693e1654a6c1279733b2635
- SHA1 ddc93f9cbc6493f53ff0bb852f78b08299aba871
- SHA512 0fb94ca5f8b0410777429725602f57db76f18ec293a856ddcd54d1c47ddaaf983ce080e8a82034ae4341892b1d8a27b46028bc212fdfc53ad48919e4edf6a11b
- SSDEEP 98304:JAolwgfydH3logud10Rpu+vC5p6/fReVEjwlJvEvbT82cb+p:HQdH16d10Rpua8VnrE6+p
- TLSH T1D6162321BBC554B5E97307320E65FB998ABDF0691F032B8B23841EBDAE711815E34F46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1158479418\7ee151dc-e330-4f49-951a-4230ee638ca1.tmp
- Size 472KB
- SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
- MD5 a5c805a3fd291996bf5394cfe97c872d
- SHA1 c2a9ffe8edbb59024902d235e267096846acd8c8
- SHA512 c4b0f3f60e8f67ab640ebc6411cba992b2c4e796f7168edc5aeefa4b3ddbc1dd91539dfd1dbc29b6ef0e6413eafd6224a2e01cef0a8706d775da345ab1463839
- SSDEEP 12288:rK5FbrrK9ssxYE6yvpQSbNcwTVq/8m4pqLmyJd+:rK8xJRpLbSY40ym
- TLSH T17EA423DDC8E80B44C906F53310A53F92EC0F1D07806AA3679E7A633A97796CE6F112B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1696897988\2488d01e-2971-4626-8eae-cf8beca38824.tmp
- Size 2.6MB
- SHA256 c56e30ed1b5c6eb1dc7a00355888fc1994939ba8689756fb27b30323514a57cd
- MD5 57cf29b3e4d00168fdc0c3c56e8f2259
- SHA1 3cbd4825f552889d47802c448bf85d991cf8f6f3
- SHA512 ce1f636db55d5a3b35f37c126a1dc7aa62c19b25f5b55c59a1de7739029bd435a1f08460cd928617ba8ab54f9baaba4d7a9e9521ee4a5e392b42e328360f1535
- SSDEEP 49152:ul+EasjsdhP30J17/58BSqt24KhiHOxjfGxNOe6+djFxkag0qFCPVAfWeX+K7erM:ul+ZQsdB3c1d81tPKhGOxcoePdfk25Yp
- TLSH T10BD53395F7920643CE3A817F85D77EC0232A07350B7B5A24DBB655E3CA097AFD282217
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1696897988\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1921613980\5f04c112-291a-4da2-8042-27b9067b2f83.tmp
- Size 1.2MB
- SHA256 9cc80630179e77c7425346c110a59c7de35b5b000253dd322c7853867fbe3316
- MD5 b506a2e0291558a414e07c27a6f50dca
- SHA1 140eaa45e3e1a5b195c6e8c06fca5d2c7045d5bc
- SHA512 470f6681586fd5102ede488f565417e171bba767774a69a7cd34db74e6bf32f7122a97f5fc72e8ff99695ec07a5488fe56befe8b242b18fa305e389aed3fd8c9
- SSDEEP 24576:mt1JmaVWdnPfQTNHoSOmTWMQ0VlBOn5Pzvf6f7INPRFMFLB8+OeHU:+dVWxPf0HJORR5jf6fs5kD3y
- TLSH T1185533B7147E2C59C49363B77FA1336C449E92F12281F9BF92ED2D451B25A4A0F0A20F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1921613980\CRX_INSTALL\icons\icon-57.png
- Size 873B
- SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
- MD5 71d4a33d43740012c39b53fb6293f2d7
- SHA1 f8900514661b2de7179c2ea7b520da0cd223b31e
- SHA512 f1cee3fb497f1be4995c8dd4362af9c102ad8a0b5cb74c49cb693df2e8551bf109b31885318fd395da6be2ac0f6b42fa31de6cd929ffc752e0bbb7a2cf6e33ee
- TLSH T1861192D29693847C0CEA46E40ACF923CFA65C28E8C3AC908E98BC16121C6B891D5B617
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_537968700\cfcbd99c-2600-44fa-8427-4eb6047e68b2.tmp
- Size 46KB
- SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
- MD5 a766b5a3e13fe1f2be280ef6c2bf50ad
- SHA1 43f1375be6bf4852d9ad1b927af3932f0f2eecbe
- SHA512 dc14d887bc542de73ded6a958a9a755a11d85c8433a23872a9ed033badc02f26cfa67e4dab979f86163f090b49ae2d269233f7cf84e583e62237c9225cb95162
- SSDEEP 768:8kLVTQ6GG54B9DHJ/WuwLeu/WfyyK9R5dWLK1pIs4aAKsV2YxQfyyK9R5dWLKsm8:ZJTQ643LYTLzCPU4+pIs4aAKsV2YKPU2
- TLSH T1D723E16E8831DC70E5388E32E21680DBB53556F4C825297CA4CDE2F51D13B61BBCE9E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\CRX_INSTALL\service_worker.js
- Size 89KB
- SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
- MD5 32ddf7007849c91f05bda3eea5fabe30
- SHA1 63515dbe88cd9d53c5128902b7f5049f876eac94
- SHA512 c0ec4b702fa24ad54fec658b06e7747395eaf1726e4017a6a6f75f3780fd6bafb25b2a9d387e924c15e2f7a121ffa22dfbccb2cd7e6f2f9e9e6b557bada5e97f
- SSDEEP 1536:6ka6Cka6tmcjPCPTV8QDHvh+UnHQh0re2imP7cdVG1JiQzzF+1MhY:6ka6Cka6NPC+sUOhq2hzuVMJiQttY
- TLSH T1499339DCB8C3F0A05B63A5E4802F2543F22D2E46145D8590F726CDE9B86894EE277BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\fff57482-6bd7-4fd4-9296-fd8a356d4273.tmp
- Size 4.5MB
- SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
- MD5 648988b17866b988bfb0d76fbf0d310b
- SHA1 30cf51d1aaeebdea863dd365f7b9639d9cf08703
- SHA512 98276b7ce74e58da54cd689b97dbff100b6596097fb7c71e2f8864fc3baddcc0644f5461019c3107ac2f4731793a49736a55830c58cfc3254953b6e6beb72c5f
- SSDEEP 98304:80cHcVHIVjx/3VsGx2GP0oEFOWLtn7/wUbUTn0jKTTM7S04v6Dj:80cAYx/SGx1P0XOWLt7/QTn0KTo4Cj
- TLSH T10A263378635E6161EA36C6B1810683922D4C6102D28EFE3E94B66061A5D3FF0DF97C7F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_949846235\e221b2c4-fa47-4592-8226-9dd3cd19c80f.tmp
- Size 13KB
- SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
- MD5 08f7686326baa481149eeed33dc599f1
- SHA1 291885ee6d064f0d8ae35c92bc0cd6fc35e44151
- SHA512 d5580726adb7b39fc67a2566b42ccdc4f0db0c2d5be27d027afcf005e9145ee84887d0ada93d5dad1c889112def64525ac05716a8609959df2f85dbeb42d18b3
- SSDEEP 384:NMkqXIIKqOR/UjJQrQBe6nHUSpM1L0kkW+54:NMsdMVI6BpM1Ak64
- TLSH T15652B07DAB1BA841B1CCF26FDB25C8055304FE4B9834A37639424F8199DFEA2152D9CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
- Size 802B
- SHA256 91e71138ef0a06635af847f7e0fa1c6a20b1f2845f78a9c2503dac98c44463cd
- MD5 15a08f7cb2e5678447b06024906332bd
- SHA1 6011176cc8567e451432e1adcc363859af26f9a1
- SHA512 1b66cc4c40187c49c321660239f5de4e5a3269374bc24fa9c149108dc414b638ac930b960286c5635725b76fa2160b369bfc9e4d3338c35ceeccb40e409aae39
- TLSH T1F00144438E4122AFCCA45741A16B2D928DC8F9DEB08308D48BD7043BDFB0C29BD8843B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
- Size 45KB
- SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
- MD5 b1c738ebb530ef3312b3d7209d2a8079
- SHA1 9884f02de44291f3217c03b02089824b7b25b55a
- SHA512 f79d826d716239deb6077717dd6880236eab7a4a6639bf5de678500e6d5488b5a70938988207b8554782878ff5472e23b577db288cf273007f8778ca08b8a9fa
- SSDEEP 768:FU5FNyQXHLMQk/CIEB1TGAPytWZixXgqZrPvgzfF7OBhTNj9YGhaBcROHI4QkU:+5FNyQXHQ3/xq5bytpWk7vg7FeTNuGhl
- TLSH T14523F21ABF030526AF1A1B70B91D71EA14452289FCB789888F670817B1CF9E2F64DB49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG10.PNG
- Size 206B
- SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
- MD5 5ad7b05326e53ab9d91b36331c3f84ea
- SHA1 bea6d94e541a2380b9506df97349aed1ebb1e04a
- SHA512 51dc9a6c323207e628f7494cf83451687d9a5977368d761489b48c25174edc0dcac3cea2705389001220aef8896c03c8dcb878e963545dc3cdf51f59c982847a
- TLSH T1E8D022C29B42BC3CC10FD039EAAB1250D8BA044E16638A4CA06161262310FC4C2EAE83
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
- Size 41KB
- SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
- MD5 d157aa0e365b8a0b4a72096792813fb8
- SHA1 8ce762ca86b54b91c38b22027a4a36417c3919fd
- SHA512 aedcf9706ddd901d4a5bb5096daefef5506007fc96351b44521bebbe70ecd1aa8caecf1cb76d9ff461c73b32a73f577f62330a19b764b0870c0b087828c449f5
- SSDEEP 768:pJGBX+j3ksnMoMVCv2YMgvXVwHAt8fTzwqYGtIoz8V0bWa2NrrCwyF:p85c3XnMbc2tgvmgtITzGzY2NrrCJ
- TLSH T1B613F1E881CF028DD7A552440AFC62863FD2DA58B2551F1EDD8A36F93DF34646C8392D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG3.PNG
- Size 475B
- SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
- MD5 a32b83463a6f7cc50e6be2c85ba53ac2
- SHA1 e07c81d391d9acfa5a0ccabca0cffa4bc5c6aadb
- SHA512 c32d1cd6fb8d50cf373ca96df9a150494015997424de2454aabf0c090192538e5c6a1e20e1ad7d2f520b628c3bfe5b47ef79c02e18bf044101d7c25217580df0
- TLSH T1D0F0D4E9578D456CC14F4535631B5063FCA239C69A6F57454C286D1B8B59FE84031F81
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
- Size 451KB
- SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
- MD5 c87f44be2c13b601e3c6c2d2fe07a60a
- SHA1 3518ba686c692c016dc46cc03846932f87295496
- SHA512 25fd25de9188dfc3286b2acdba323cf0e7334c650e7796ac9e7f19e8a40b565a606cafd5b00039c351ccdcf40642c73914c6174d37a206ac81ca1d0d4b64df3b
- SSDEEP 768:vdG5BfFYTNBwfaV6EzmQR/FQCSY+OpVbSPIFJJN:zTcySY+OpcIv
- TLSH T171A4AA965E139503E27B037BED616E21A1EBCED9E61A65A7C1C33D90E8F36EF0524043
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
- Size 368B
- SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
- MD5 c864e0b6888f3aa5365c1b60c71db536
- SHA1 f3b86b6dda72ba5e90e5a7f0afb4553f6b9c211e
- SHA512 dddd8d83f80ca045bd6fcf697e3df717a56de7cdc3bfcb44d92b889f5fa570bc0671b3fac05233e459e1fd9f9c998afcd37bc766cba544e9b0d98546f37ec21d
- TLSH T1ECE0C0CF5B54AC28D9CFB976071B0590E5725D970C67C69831A0A4B91FACE489487282
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 6KB
- SHA256 8f8d1858191c4ea9269fe9cea42892bfd40f10f4492c0e7296cb60d3af15a704
- MD5 f51bea349c4461bb78c504e0866953ea
- SHA1 a0a968eb920919208a2fa7a1eb1d91803e923ab4
- SHA512 38a33cdea4d80470847c705eb4724a90e7afe02709169eb6a41f51613b9d6469b5a9263fd832d527b63ab6b119007437bc507c1e0cb17d8b1844bfe9938fb4d5
- SSDEEP 96:kTf6JEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrAZ:eZVFH2VFH1VFHBVFHT
- TLSH T10CE1B23844DCCF5EED52BB7B0272503EAAA049483EC73C58C6D9A88F518945CBA735E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 21KB
- SHA256 71709795a391929964a490c1ed65fd3896202fdf3ad435e01288f9461de336bc
- MD5 dbe3ac3f1afe24dc561af9be0a25ec54
- SHA1 0c0bf8d077ee9a22a4b96d87d79553ae436c4716
- SHA512 8d7caed0604319b3536b02d3774b69b2d13fc284e09b5c4e617d38c0dddf930e77306fa9fa20d8b38a9a8395957f400b8298d757490c3b20463cc4c869e3e868
- SSDEEP 96:kTftHJEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrq:eGVFH2VFH1VFHBVFHjsuop3pUJWKiP+
- TLSH T11AA2EA3C80DCDF7EEC93B37B4665546E65B1890C3ED22C59D2E8A44F548460CBAB39E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7f6bed7eef3a853d.customDestinations-ms
- Size 24KB
- SHA256 e6c6bf76c0c85c3612489a52a56f3f0ec2595d7e42c172fbe4a7abba1ea6376c
- MD5 a6358f612e72a84d41299dc19717b506
- SHA1 9cda3aa33d4fccd482afdf075674948069837cf6
- SHA512 fe1eeee87cf2687edf0260227e764e2c35dcbeb23530e5f8ab374026fa7904f40f3f97b3fda5765b8789645f78b8c5fafdec90a3865d5b0ee92e64420ca1ee06
- SSDEEP 384:sJoJeJMJZJN9lXfRb3EJqoDhDVJtJQJyJOJL:s6MaTRlX548oDhDV3OMgZ
- TLSH T1C8B242503EEE2552E2FB9B7586F63754EA39BC81BA026C4C5050924D0DB2F01ED5AF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7f6bed7eef3a853d.customDestinations-ms~RFe59af80.TMP
- Size 24KB
- SHA256 8c47342a4a3b8dd21dd24a06ca2963052487765de7c156c52cd8797b1ce41882
- MD5 ff5a2f1740bb18dc130319e9235bd0b1
- SHA1 f5e33268456838ff1068c6e27239fdb771164671
- SHA512 170160e609c755fc37e7f42776951eb5d9002b33ec84d71fb2388ecee168aa0dd41b685bfe3d4d4f4b66eb1529133cf685ac75d8416c58f9174f8132599a82b7
- SSDEEP 384:suoJeJMJZJN9lXfRb3EJqoDhDVJtJQJyJOJL:slMaTRlX548oDhDV3OMgZ
- TLSH T104B243503EEE2542E2FB9B7686F63750EA39BC81BA025C4C5050924D0DB2F01ED5AF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 84e9ae1fcdfc3d327edfde486c3c0128d64d59e6a050080766b57a4c7a733167
- MD5 7632878b1a7f70e57751a819734252d1
- SHA1 048ca3ae4fd290bf96194ebd8f7e28a9c7e6b40e
- SHA512 611021fa42ba755b9cf5bd6388a1ba22ebb8fdeae4455aeada18470dd0022520c6b7a01e2b3937a8446a13e66b04ca4d73e6db11471585269a00afcb32144246
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0dd77d57-321f-4ea3-957a-bda7ae4db841.tmp
- Size 12KB
- SHA256 7d2cf242c96622e970250382a3cd19de86153e29f44f983760d6cf006eaf6012
- MD5 ff9a7b8ca717617439081e480f8cbfb4
- SHA1 16cfb36fd0ccbbf32c130952c18a2885bcde2a55
- SHA512 5c8fcc76ac3e95a83beba578838d4e05decfac3e66929c63690ae3c1e62dbf7287e4ffc81683e424dc5d0b15c63989948db0393f15369aa1a286bd2fe4a1532e
- SSDEEP 384:Hue9JND7eAcNXz1ca2P7GoMVe4+yFIWAigSjMHc0p/hlAM37OWi:HkX8a
- TLSH T13A4244469830ADFB08D28625F691F717F2E42030AA66BDB6B7F9C82C14C76DD34129D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\186285cd-a7db-40ee-bbf2-ca87b7d821ff.tmp
- Size 125KB
- SHA256 6953025342f1866f389def915373e0ae4d3bbe0c6a25935383a870a37c5f9a90
- MD5 50156253b7d00309901f9237b10a61ba
- SHA1 0dc10b64e4f307c7c5e09157eddc49b49a231eeb
- SHA512 d6f9f2d2399e01f2da43711c56da89f88c56761cb1286f306efd93d50735467c938be1c8f04900ad0635f176cc064a9642cbf7f5e54a7aac6dc66c751e69c411
- SSDEEP 3072:wX3wM4d7DERfw9U8BRMIpIcd4RfPqFpeDGtE9W:u3R8su9
- TLSH T191C3E8EBC8CC8E798ED98BF8DC36AB5794950115AF9C9E15A7FA404C03C2789207F54B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1d8e6b1f-0ff3-48bd-b723-6523d0fd16d1.tmp
- Size 357B
- SHA256 8f00756a1e5722bec4a3f1612fbfaedf2471d5e9d5d4fdbd4a1d5aabb58c2064
- MD5 58f261fcf3cb48a2e8c4e766a019c989
- SHA1 20f49d4e2b2e7ca3693320aee355ce4c0abf7878
- SHA512 9481ea0f526120d90c55f9cde094986a5e409bd7cf3200614488b79bfb2a9a089d463374001f14ee629fe6a726c82164a85ce629999818e9d92971fe4587e59f
- TLSH T112E0C680FC688825E8981BF631ED78A1D7AF08C4A9900AB98CFE304F022821C062DA20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\957cbf16-7bee-4957-a0f1-c09a80732339.tmp
- Size 171B
- SHA256 e602eef05fae125f525efd77de70f0c1cf3c725700795a44a398564f38081255
- MD5 77668c45438bbf35724c491ce7c6edc1
- SHA1 26c45e5cc543322dcfa557665490469f51b9817a
- SHA512 72ade25436080806709fbaff09acd5b458d9ad981b30ce7d65d49c08b76c43e924256b98dbbf0aee7b27ca31b8c06a072682d3ca71d13dbdbc8c28d3740bb18b
- TLSH T12BC0C064B880592F1C1E0C7AB189FE17011B04040441902000C802FD01050B4E15D700
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
- Size 1008B
- SHA256 4dfb016df539fb86da5d1116a95522844de3079d454c099de9880f9165dae899
- MD5 7e8967ea4053616f87fd67dc7b5d1d4a
- SHA1 0fccc060508c9fb7f5f245563010e769333fd261
- SHA512 a5b0c7aeac404d7e76fc7a42d0dc30e2c792125249503cc7085b402487adcf5e499586213de990466a4622fa89827ef5bdf52eefa7c95ee776f36e44fe857723
- TLSH T1271141FBF4E90612FF4F0230499F1D021254A2579D1E834B157AC368AD829F842BD62B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 ba9af8ef4932dcea7014aebadce23f6b821687de67781fabc31909006632ec18
- MD5 0d3a3b52ae8294e0bf6cc0bbcee3c353
- SHA1 dde865ad84956945cf7d6d3aee8784a93fb6863e
- SHA512 3c1971ea670a6d83c628c9ff40adca1509777445df6dac6719616219642bf80f4421da7bb1b871f53bb963b3d950bd25a24017b68ca92f3d322bbe0766735011
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Scripts\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir6112_166987412\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
- MD5 8abd6e223554a1321ccb8413c934fcdb
- SHA1 7aff7dedea6665109908a4a2095a8b3d5441b6bc
- SHA512 34b1648048d404f6c1aa1753fe4a656ad93adfc63bcdae89201ae3c41df1f9dca12ea405bb9d6efea12111db316bff91e47f24b7c15676bf385fc5009c9abb16
- SSDEEP 1536:Ska6rka61mEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6TszmxnS9lbv93NddM3prX+wH
- TLSH T164B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24A6A62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir6112_166987412\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
- MD5 fd39145f27f2a2e6d5d0a95f671db0e9
- SHA1 6ee417cb3c4a726cd460d7fc78d5c845014fdbb2
- SHA512 82823444b84f7bccc94a4d8b87bcb7117cde40ee0d876b573265bf4fff27c19f57b23e3050bf675a20c6f7ea189500854c9b11b6fa02599785d5e7708501b573
- SSDEEP 96:xSVa6rQaSVa6v38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuis1Z1TTta12Ho6Io:xka6rka6v3805se3m4XFzVJFsL1wx6z
- TLSH T1A1B19501819C4C7D8FB5029ADABE135212DE2287786BD4C4EFE3C47597253CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
- Size 2KB
- SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
- MD5 f7b9c08913fbb4ee164db4de91a1cfa8
- SHA1 ee748920b53e30beab4925c3d4aa30bd7f667904
- SHA512 d39802a782fa37146bf509131d98d8e2ff121bffe7d5b37e6300b60c0acd6dfd80d2154825753395ca231493162b5668f2c752d125e4fc810cbb3d5d77331260
- TLSH T19C517F1AC850AD2B41F742697CA4A216F37443BF6104D45B7EBD918C8FB2AB3D4E7B08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
- Size 17KB
- SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
- MD5 d35d682b17b1efc0528e351d5da2a63d
- SHA1 3e0723bd0389fe65d68555ab6c1c7e23cc945132
- SHA512 b0192b5a9faa3ce9e50b5d3aef967b2f0975e7e62c48b4cd0c7902d7bc833001fc50678affb28294436cdbd6d4193f3eb0a2cfec08a40e29b4a498d59bda7128
- SSDEEP 384:+EVS0GCdigHBVrF67GAoDyD9X8zLAFfIEsqqUAmHS:+EVndRzF67GAL9X8zsIsHS
- TLSH T1778233291AFB142559A7603D1F8F92027224901F381EDE1D7EBDC6E45F8127849F9BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
- Size 370B
- SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
- MD5 b40522160b071581a7bc72884ade2d4b
- SHA1 ab23615bcaaa870b78e54e4d1061612282aec406
- SHA512 6a58400e6aa7eea02477f00de667515f3d8001d628dd8be1c4b5971a087386f5ed328e87a0639add1c3482cefa637a2d1d7196c42b55e8aab4b6173df979f011
- TLSH T12BE0605B9797E8BDC352C0B302B388502919FB09AF6302220D68796E083BC4822A30BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
- Size 921B
- SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
- MD5 3c287b3c8c01ed2888aece71cb04bdba
- SHA1 3ef53a36e4746521a4fdf845c54d05a4ea2ff0ee
- SHA512 984232ec2fa22271fff7aa0de4228a049d7a267239be1cb153a254261ee27bb0c4857e7c0cd8b14723aca5907d50faf36b0e42a8a04e1d4b7fa31f7888aff4a6
- TLSH T1EB11B31349144EBBC22C1CB6D907C10785F5A8C4E6009A3138F99B3D66935EE603833E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
- Size 46KB
- SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
- MD5 3a4b577e6f2150e055d503fc17aec243
- SHA1 6ab613cb92850a343caf28887301748c73b34722
- SHA512 d4fb08f3423ddb5501e2d50c4b3c6cec5be34c9b149d469074119b144fa54a317199f485a8dc7eb650fa7762a0be79b49a2d99b4cbe9dd8408a632baf0cb2537
- SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51SqJ:un8VEbWXxYNG8/A85DQqkslr4JPmCHLn
- TLSH T1F22328996269687E0BC2D2ED925D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\background.js
- Size 365KB
- SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
- MD5 c57835f9eb7929af491d7731c5728ab5
- SHA1 c54a7ea7967d683785bdc9b6819e67f47ddc1807
- SHA512 e00821b5ae8e4d80045336b0cde124f8af61b1cba9c35042bc691ec0c5e58280cf0bd41adb35aa8ecb4db8e0e5041d468ec474babd28f8215aa9218d4621feb7
- SSDEEP 6144:wiD3W1I+lJPeR0ncqr/QQggXtP3XLfKEOWfrGz:wiD3WzlHegXV3XLf9OWKz
- TLSH T17B845DD932C3FD7753EB61D1C03F160BB2391956A84D8505F2A9C9D5782A889C33BB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\icons\icon-57.png
- Size 863B
- SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
- MD5 f7a968351d5c17163f9cb3c89c7a966a
- SHA1 932a7402e17c71c5267310d6eb5ca61b31796fb7
- SHA512 d67b2d7fb4e1381ec9f85ecac058adf657b7b31dee4a0e07abd941cb8d8f61eb7730cb03a6c849c8b57bfa3c7848723e999798cd919058fd3a9dde63689e3192
- TLSH T1791156774F8466ECC143B06585966C128B82512B7475455500E5D91B526B146E3B0FBE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
- Size 49B
- SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
- MD5 4924ae3164cb599ef50e43d008a34cd5
- SHA1 09ba9cc17180bfa2c2edeb3ee367dc545a1fdd3d
- SHA512 2adfafd18927c17fb11b0c7834a99fb4df50ff5f97873f424bbcff392cabdbbfb8f2d984575e293a531be14a602ed090ef2c348717f090a5de851d8818c344b9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1423.js
- Size 88KB
- SHA256 a09175bfa9a89ba07160d457c4d9c24b0c9e0a019ee8f99eb9eaf342252e58a3
- MD5 d282e3220d6a0ff40b93828ebde1fa13
- SHA1 852d9bfda1482c2ccabe840d5799b250d506036e
- SHA512 39a1cc973e7457c0a35626402c548198b28e6a645add3c8d6ff5c3139b25e91e6a6b557126f55637d9aa9e99ef33438ab03035f446a7f330ac565e6632b9e916
- SSDEEP 768:xka6lka6bme2pU2o8ajP2YDoZn+5ZQ3SYrV27qCCoykoyiZN7Lf2gbLdP+P6vjAF:xka6lka6bmzGqh+bd2tBj0s1gS5a9
- TLSH T1EA93AB027D3ED620DBE602B7341CF11945780B41A1D6A72C5EAF936BFA8BE7E4483635
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1622.js
- Size 46KB
- SHA256 9480b6ec53c1b8d17385cc38878117fdf09c198ae51b84f9f7e6ad3647e6e2fd
- MD5 9ddcec9fdee8fb6b90759bca05b6e921
- SHA1 c1a5227613146fc99f5705339efb999befd5c095
- SHA512 4cb510d80fb40f91841c45f133fa6cd431d037d894ad8ece9635f979b7056e16eb3120b189234051225a0d71d7cb99bbba9ba1b7066cf6af0a48c1528fb6e9b6
- SSDEEP 768:xka6hka6bme2pgE4Xban+diuXTg1NgNWckYN6fZr5BGRFjAPUryVzmJh0zezyeNE:xka6hka6bmO1LM+dxgTgkF5q8X6zLe
- TLSH T1BD232B1AC7BCCC3E066663DCBD5A250741E823559AF18C7AEE8D987C09D878EC1D3963
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1904.js
- Size 8KB
- SHA256 991173842745dd32cd6c1f81f9f0f444586403eecb8116af5963f4014b6c387b
- MD5 672362506d01280534facaea2d065f94
- SHA1 50dd794cbb996568116778161a0e94127e057f34
- SHA512 87665c3ff43b5ccd882d64951b38d3ad351003a5fd2814d273162673077c6757280793899b5822fff0e0fba962fa5677fdf1f47e6b5fa475cc5ee5966c229856
- SSDEEP 192:xka6wka6Z3805se3m4XFzVJFsL1BA2pd1smk50gI0Hn1IAh7uo7g4PQ+C:xka6wka6fme24Xzs7zpd1WC
- TLSH T13212E71141AC3C79CB7E415B857B021A62AD7205395FC4E4BABEC8BE57143CDA093BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\2667.js
- Size 92KB
- SHA256 c51f809319d1011836d066290648d08c65724e27ddb44cc0876f88d89849dd8a
- MD5 4e1306bf558dd5fcab920cca8daa3188
- SHA1 4cd3dd6308ed70cf9ccd9b799399499a4f6572f7
- SHA512 7140042e99aab1c4ed39f2e7847d2a52a5660c21aa50eff44d7abff44207db360d885bf98aed6ecc570439052a6fca81086c148384d88b42db85c58a4a51184a
- SSDEEP 1536:xka6xka6bm8Dyu+Kx636M71JLPy8ggoWlbTMaUsmif:xka6xka6cxEW28NnMaF
- TLSH T18193E1CE823DEE990F93288F531D535812986215D86AE3A2BCB55E15C8DCC9DCF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\269.js
- Size 58KB
- SHA256 b6e239560bdb3553d0eedeb7a864273da95f4633e274af344d933c435e15a67d
- MD5 aa8584824b35dcd95b45c591169adfa7
- SHA1 0a611784fe54ee04c05c9d18f938df06ed349407
- SHA512 02cd63df3d79966a9a1195290d6e5fe6ab92a9b0754bf1b12d6dcc8abd69915fcff34082316286d3a2e9d7c4971590ef6c185504754536908d553363a04a9aa6
- SSDEEP 1536:Uka6lka61mx5fQIn+cBDPvWWs0Sw6IXeyaTZd36Ua7VNwi8lM0DKGFjbkpjrzIsO:Uka6lka6aQI+cVPvA0Sw/aTZ56U+LYMC
- TLSH T15043E71307A4783301AF4B9DD8CE6909CADAE41AD7D08DA6FA8F043C56D17C6E123B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\2934.js
- Size 93KB
- SHA256 3ab28af7f12ba7557277a5480cb6d6f8a866d93f3f1263cc4a67b61547893231
- MD5 f869cef3777171d3ef054938bdb98a0f
- SHA1 4ed3683f3dfed50ef9a2b9a829a435b8467224f6
- SHA512 e769485f4d098c753500b320e5d3c5cdc68dbb08de3c0d102e7eabc95fdd7c6dd108b585ecc52411a1909fd13a1993b307fc314e8235a76dce286b83c52a36b0
- SSDEEP 1536:xka6gka6fmVIYYiONkROx2PGLq0oUnBkSvtPlN9NldDSayh/FGAR+FIXDytzKaS/:xka6gka6GIYPekON20zH9NpyQAaS8dVc
- TLSH T1FD9318D573E3F5324BDE418660790001F37D9B8418AD142CF629D9EF6A89841A2FBF72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3168.js
- Size 52KB
- SHA256 6b39e5e390840dd56e2dbbf7c9d50cb1fa816addd211d0575ee3c0aea8a05980
- MD5 2558239fc02c078151012fb76a2a9282
- SHA1 6b9046c72948a470d842c15a0a04811462110085
- SHA512 31d04431a0180da1ee9d8d37841a5b49fa1be1e59e7085e002d40bddb8c45be94b2c6d711321c9c2ac57c92e73b0b2543298c022a0d72e4898403b4f5891b2fe
- SSDEEP 1536:xka6Zka6bmRBX9Bw+ifgaHJ9Di6Cw9jP//WIunU++9Q3iF29viuF/S5x:xka6Zka6E9B3uhbDlCwLUMFVuZC
- TLSH T14C332A1DCCB9DD36436662EC6EAB6906A3D4714083E3C866FDAF447C41D8BEE8127706
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\326.js
- Size 83KB
- SHA256 1a4a463e87b52a9e8afc749ef8c14d1cffac548854b35c5ae271245c45a54dae
- MD5 a287e7191f2e0615a8011fdde90e6d30
- SHA1 c0a179b583a88fd5b549b9404cc88908976df03a
- SHA512 e723b454a8c97c04ab877d269cfcedd4b8b1ef30b92c30d197bd566293082cebf9e142ae4c6ffb3232c1308aeebf7ed8f63fe281c87be96903eb4e68121a3f7c
- SSDEEP 1536:xka60gFka6bmM/1Ja8+Vwjl0gzcSI+jkPkH6+va7e7KA5mNkkIiR42g6HhiuP:xka6Zka6sbruDK
- TLSH T16083A7208C6DA472A8D6CDC9574C63748113AE97CBA2F758DC0791283CADDBC8CADDB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3513.js
- Size 133KB
- SHA256 b8ab2cc14b22181f42d1d4f6e95f9090d1883fd3c470a77a03162c3610050491
- MD5 164ec1af0a8517e26f9b68f066e9c3c9
- SHA1 728e5c88649fdffa0482f4dbb950e1993098a9c2
- SHA512 ac36d1e82011590202be2a158c9a8d0a4987b9f9b96de6d899a5bbf39d89f788fc928f372c58d6cc3a1e5015832aa3e568aecc8315e83c8d223d05b076dec19e
- SSDEEP 1536:xka6kka6fmulVfvLv4vkc3jepkOHvwq82Ey0U+ChsNSQp6Z+z8Hs1+zerorvLy8q:xka6kka6JfPw/2Ey0UbhsN7V8TEd8G1
- TLSH T1CAD3EB4DF15FFEA8A56304E5403F500EF12E2A06891DD460BA79BEC59C640C9B6A3FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3554.js
- Size 430KB
- SHA256 bc8431e5204a7d41dbbaf67f09f74715a2f40dd186e4214b7bd45cbbab52a5d7
- MD5 84ca96fd24cf6c28b4ca6bcedd7e49e2
- SHA1 eb1cb0d1c8f2ae9b71505c72974d4a993078ff5a
- SHA512 dff2ca61e6bddff32689d5042ca785df3f6b6a2b8c8f28de1c8be23ee41c1dadf1b794bd7030df16f6f8eb03afa8e87f65eaf7ea4918306b16472cf90752bfc2
- SSDEEP 6144:xka6Uka6qWUHoRXkDp/krdzf4x/UQUevl88HzHYT6X3JOZBW0DTayFr9T1kDVZ5l:IeoRXkDp/k5PmJ4WfrL
- TLSH T192945CDCB187FDB8566354E2402F300AB27E2A44DA1D89D0F639E9C928188D5E277FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3624.js
- Size 52KB
- SHA256 0c742126a96f74e2f16dc4e7d2c3319d448d19351ac8514da386834e944a6d49
- MD5 abedd7fef4b55de2610ea66e84d27f37
- SHA1 a1f291ca1f7234f1a627162834fcb4d0eb87bf62
- SHA512 b06bc977b7c96ef61c5ff7770f80c3288432f6935be88cb836e464d7fdc62064364dec9466e67ec43611f5b6f60d4fb833f0a059d8c676b89672a20992fdd880
- SSDEEP 1536:xka6Ika6tmpAYR++CG9VkuJSkWrJrclAsJ:xka6Ika6ovc+X9VkuJkrJoSsJ
- TLSH T1B8331A0A8D7DAC2D0BAE13FFE9B9AE15F0F70752A170A415DD49883F91847D1C2A3E16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3642.js
- Size 51KB
- SHA256 a0e91086f7bebbab3f6d0ec9ef8a0df29195e67a805cddc253c6bfa793b512a6
- MD5 478bbd4c8f2f670d6f2fd7eb636ce7fc
- SHA1 c2811d48afbdfa3d596cb7a70793932fb4ed8f5d
- SHA512 a142caf9480ac777568840c720ca138932a6970746a62be41f2d5cab24374d2814fe2a159adebda2d65f825630a8e1cd90fdb074022b93b17766d986e66efc70
- SSDEEP 1536:xka6uka69mrVpKE+X3Et1O9CmmVffJeHWCUokwWl:xka6uka6xDkt1tNCUJbl
- TLSH T13C333C0EC678CE3B8BF546DDB99FAB5658FC814191A0C6AAEC4E403D40DC3C6C1BB596
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3937.js
- Size 71KB
- SHA256 d2d843727c4a3f153537ac33fd4788fbb7bedd63659ea791c81598bbc2d4a30e
- MD5 e004945e408e953340a74af318e76bec
- SHA1 67d8c58c6aa6b95ab44bb78f5f22e65397428a44
- SHA512 84234d77997af60bd65f3311b7393e261a2d23c5db2c72caab479f301089c16798fc1cb0269eadd12f1133618e1c78d77d2fa7750f9359d22aefcea4158e761f
- SSDEEP 1536:xka6Bka6bmIm64I5+MjyHS8AeSgL4A8Pp5Qnf/y9M8uXy65BByvHpxLsX31b/UqT:xka6Bka6S64IkuA8Pp5Qnfa9PSy6rUvc
- TLSH T1F17394DFF1685DFD4085955784D8B03D27C61D68A799C6E8AA2ECA347FF81B08222D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\395.js
- Size 4KB
- SHA256 3f5faeabe9916dbe827ffa81fa05a0229c2397840ea77aa61092b1539dc62879
- MD5 706f44b9e1b6ec03e8907d5ab692fc05
- SHA1 dc4557f752f78590853ebee1f9b20be42edbff41
- SHA512 9898d35d687ea9ee62875a728bc9a1c8f92c1d51d30b6fe6e657d04fc41592a12d95b8fd6fe47aa3967bbf86a770f2e4997ab868ed574753283dbfb93b2469f1
- SSDEEP 96:xSVa6cSVa6Z38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuis1Z1TTtzTNlJNlOFsg:xka6cka6Z3805se3m4XFzVJFsL1FTNlG
- TLSH T1A3A19401805C4D7D8F75029A8AFA131602CC92437977D8E9FFB2C4B9D6623CCA1137B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3995.js
- Size 49KB
- SHA256 166f540f31076016e70a17a2638245664c9d4792006650ea64272a82885babda
- MD5 062d5a4b19bbf63000d06197582d4ad1
- SHA1 6a51823144283195d4ca524810c3f9791bfcd6f2
- SHA512 49a9d3125f5b45811345140fb0842025e5b49de1510e0c76d5abfb5f46cabd122f0ad3e56e8c04c83ee7fb9b79e8f82d0b73e98922d7efc5e82500f6a78954f8
- SSDEEP 768:xka6Qka6fme2phDJ9cygBn+JkduGVcV7NB1gBEDl4Hph22MAbxrTrcZW7ObcBINP:xka6Qka6fm7sJ+1pHmN/owYTF
- TLSH T1D6331A0BC9789E3B4BA643E9B49A5E4B96FC4205C294485BEDDCC87C00CCBD4D1AFA95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4294.js
- Size 49KB
- SHA256 2908237fc429ff768c560b0e2af6a5216907997a0824e499ae6735493e7327c7
- MD5 3297ce0b724e1e83b4059ba8f2089f4c
- SHA1 4da4b8c2d79bac969a1cd1065adf69f72399251a
- SHA512 89b8f2d85ca085e48d224e776b508c8f1bd8f71e845ab482331316932e6bacdedc64b9e772601de3bf194b701df992196b40fd497fc8b2575c211ee11ec2ca1f
- SSDEEP 1536:Vka6hka63mhLtPJWO8iV+DSo11vCOE6PC2BmO42HPf1hTTTg0zN3BV:Vka6hka6KzY2T6Pu+P9F
- TLSH T131333B1BCFBCBC3B0BAA03DDE9DA1A0624FC135193919D6BCD988F3801D83D5A257956
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4398.js
- Size 50KB
- SHA256 448003708a996e6901cdb3bc522ec637a584e2ab1a85e5dc51786ab293daa21a
- MD5 d37f17cfa2c315064a0f00fced0f140f
- SHA1 150c40ea5cee538b8f18e44b80a6af8cb7fb7bdf
- SHA512 a22f78f813f408ca16511c37266041ff3e8e7623d636f04af5edd0716428323bd81d103ec4bfb00f7d9221dd9c37204532785eea384fafbfdf1d28d2cc43be3c
- SSDEEP 1536:tka6Yka69mhszqZr1+8ugncyojruJKFt0l:tka6Yka6F248uiE7e
- TLSH T12C336C06CA76DE3F876613DDA9AA8953C5FC02008AF14C7AEC9EC13DC0D47D590A7E66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4583.js
- Size 51KB
- SHA256 092f1618296656a1356e64adce17bff61d618b54eea54f04baeff0ce14021f9d
- MD5 f47f2cde337a226e25d6a2c23c16cba5
- SHA1 748f84fffb06a19f0dfad9990186033062cb23cd
- SHA512 4985ecf7da009d13ba9082dea1c7161be3e4a81266da8bf7853b0075b1443430744c6d299668e5d5a3af6a75b8fef16dca317566776ce474d1622d75b660040d
- SSDEEP 1536:xka6qka6dmhXOvk/I+HmFyEmxSefOzkZfcf:xka6qka68PHmWkzkZfw
- TLSH T118331816CEFC9D3647B303C9A597FB07A2E4C14486A8C467FD9E853C40D8BC9D2A7A46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4669.js
- Size 48KB
- SHA256 e9e4c61c239a31344f29df325adad1557fe25566c5fb4203ace34ac4bdf82dbb
- MD5 23e127d3a2be0537a59456221118f40b
- SHA1 736f38b94bb2b85b38aa8394f4a067fc5a533a82
- SHA512 a49269cc3f1f709512cfacfad7866afde99e5980526d69fdaca129dcd6ff3615786de024752d192a79f5c424f04857c0af840d6330c4cd6135b563f450eac871
- SSDEEP 768:Vka6Vka63me2p3+n9Cn+SpRhzgc4vw7hDzb+KAgqlAeENUdnUQoNmiZSd:Vka6Vka63mh+n9U+mRh8nGxzUlMoolZy
- TLSH T121230A0B8FBCBC2B0BA603E9B8DA6E0634FC13529795556FCD588E7801C43D4E35BA65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4696.js
- Size 144KB
- SHA256 b64fcab27f530caeb4172360ba5f7b1ba515f62c4d917040cd8eb5cc30427950
- MD5 50742a14d044da8df4966ae36ae01a34
- SHA1 b31c46bbf85474eb85f1e275e706c07f2346a786
- SHA512 6717c609ff7e1d5fb2fa68fc285f44991c35731353d6ec6a9d6bbb821d4c321bb15e3397bc940d6ab0c8e637af625a736ceace566fe664436dc5a09d744b377c
- SSDEEP 3072:Ska6hka6iPM/Wh8WNSyB817lTlnWvtSVmHoAFJRC7M6w5t7I7sSXa9idnblSVbK9:Ska6hka67/hEE7lTlnWvtSVUoATRC7MK
- TLSH T1FAE3F8D9FB91B02583D360A1447F010BF33D6A68640D40ACF655E8E6B9B988ED13BF79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4730.js
- Size 80KB
- SHA256 8648113cef393b74fa410641b81df52eebdb386bbedba19a01f52601a1f0443a
- MD5 f9a25059254b763c4082f91d747a6978
- SHA1 1349ca9c7e18349600d6836b298972bc768f55dd
- SHA512 7c193c1ff190b721415ef06095297ffebde79a0c573d2e6220335298ad69115ea1df8518f649437628b20f95cc6938b67ef3daeb539c28d96ca6ce87101851a9
- SSDEEP 1536:xka6Vka6bmh4PZz++TLJV6Z4i6dkrCd1s5wGeEJjB8Y5ZjV:xka6Vka6TzhT5dk35wGjFB8Y5ZB
- TLSH T115832373664ECCA875481B4F252E77856679AEA53F73F8E084C9142E62F4709C432EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4829.js
- Size 67KB
- SHA256 edcac4bb70175687f2bae10f802921ccdb5f381f6e68e73bcede5a3d73d717fa
- MD5 970dfcf4f47d1c9a4d39c4d2f17f5bfa
- SHA1 b3cb1801a45f9844668293d4fe1c146e5ee40197
- SHA512 da1049a2c41d7f302053da7acca910b6e98d29fe817d70baef00937284da6d866ef8057334791d9033dede5552df4a3acaa32ced8cf260d43e56056c3efec605
- SSDEEP 1536:xka6Bka6bmhiIhjh+8NioyCp+P9EIkeLR2uEYaynaY8ovr8/RZ6Nv:xka6Bka6+jMiyCp+P9EIkeL0uEYnaR/q
- TLSH T15D63342146AD78BE0245B05BDC087E0B7EEA41FE3FAA53665D642C7E34F2174C23E616
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4958.js
- Size 51KB
- SHA256 3537796f60d426f5d26614726b39dd9da10ee6f256c243face5276d390e12357
- MD5 def59b1a72e521ee712b995146eb654f
- SHA1 11617ab8b7d73caa2c29d6322dd043a2366b3ff3
- SHA512 88fb16dee3b7a5c3cd8320bc663099aab2f82a46a1652f6a9087556f26d98d372017e322e8723f970c0409fc1866d9422a2a3eaa4155b5683db1e70e7998bc84
- SSDEEP 1536:xka6aka6dmh3AQyl+XdPlZoSDjmjWftxo:xka6aka67IXdULjWfty
- TLSH T19D331816CEF89D3647B343C9A557FB07A2E4C1448AA8C467FD9E843C40D8BC9D2A7E46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4984.js
- Size 380KB
- SHA256 a05255774dda5ca5ff07e772ea6f7e15795f479568eaeb4b7dab82bfeee056a3
- MD5 a27dfef29a9e92cda8c4d974c22517a2
- SHA1 5d5d4b94ee317bd4079db029dcafb4cc1a9c231b
- SHA512 aa5912a9e3f93c90c3d2ce3b09a69a5106263be938c8349ffe696ed20086551bd6a94ea1beb582c859990e8017144993b615af8625eeefaad7f2eef8ddc00970
- SSDEEP 6144:xka68ka66cQu3G8CBDjtD0iqMuNxTfYXHdTdt45+ByNt1A:6iqMsgY5+sG
- TLSH T1CF8419C8F197B96A956344F5402F600FB23F3E00DA1D8961F679A9CD28584C9B363FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\511.js
- Size 80KB
- SHA256 7a60dd43e607456a4e60407b5771ef359ab6989dd4e8bb158e270d2a61e271a0
- MD5 1fae85793e59aef6ceaf2985b122a517
- SHA1 4ae5b27538070abd493d82e8a05eb778913a7f1f
- SHA512 325f6f42f448678c6be2ad144b83e33a6781245fe57804302e9c91925fb5d035f66a4893bb75d41ddf13c560901e9c9e87b50a1e42cc20c33fc432f697db8beb
- SSDEEP 1536:xka6xka6bmn4K0/bOt19+FMPoWaYfV1iQc0A5BhEEFAMRKH5kW2APRDdoex3hXEI:xka6xka6f0A2Rtk0A5QliKHSAPxdP/SE
- TLSH T1FA83AC0CD7FDF7B50DEC388E364D0D3B8DAC327493E541678895B3EA4888DB452A6692
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5336.js
- Size 46KB
- SHA256 b1724146b6f98e6af7b08b56d23b3bf8b8faebb52527dcebecce87d027e6c653
- MD5 06604f14de47da21d564722faf24f27c
- SHA1 5f5119e6c8527390f75167b4709df4b143d19c8e
- SHA512 898178eef9b8fe71fbcb8307cf300fefdd648df2feeb0146eb347eb579779dc4da3ec853f399f2e9742da74b02bda6fabcf74db484f4a0e066af86a79b4313f2
- SSDEEP 768:xka6hka6bme2pvf6zR2n+meMzzh4aVt30bTl+BAqAga5fzCRl+YQjNe/:xka6hka6bmdwR4+mLKaVpefC+Q
- TLSH T1CC231B1FC7389C3707E702EABC9B7A46A7F4015593A44576EC8C807C41D87D9D2ABAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5570.js
- Size 46KB
- SHA256 884bfc4c4baed073577fd5fafff8255f7f325e29d599f26c7684d460e007e038
- MD5 84f621c662da27cb5a002f925809a69c
- SHA1 0f98bafda1ac6fddde9c1adbd477579672c07a1e
- SHA512 faf6ce21ec6b4e0253a046d1e40efc09e2099b769ccdde8bebd1fac5a0871c7d53772787914baf4c83f51c84ed551413c910b527ea6c0e1db8005af9a2283665
- SSDEEP 768:xka6xka6bme2pUq9Wn+aSDu3ByP70wJdYtXaATIG49qs+ps/zNts:xka6xka6bm2YY+gRW2m5+44
- TLSH T1E5234A19977CDC3B075A52EC6F2EA90A51F4138295E18CA9EFC9847C09C87CEC2D3A53
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5649.js
- Size 58KB
- SHA256 56703e042b0ce3505c0b67b9af31e3ab5fa3b15109bb182c9fa2578c50790199
- MD5 c9e4c5b063d1aeb2e2bc0c9eca8a0bd6
- SHA1 1e6eb210aad1393196a8e6ca576a0591982d0611
- SHA512 493d88cea0e8cd51f507c691452aa8394d2ff59093fcb5b53c10a85741e3ad70daa71cac4abe99d4d786a488e34342b99cc0e39f1443cb7967fc4be75266f3f5
- SSDEEP 768:xka65ka6bme2pNmmsSkn+1QhPg9wTQGW3Jf7umP8dAq6t6pFI9fNC6:xka65ka6bmjmmsSm+1QhPSwT5mBxd6iL
- TLSH T11B43D82DD3DD9C368A3503B6685E39C160759C8BDAA239B9892DC43C99F07CED142FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5907.js
- Size 46KB
- SHA256 b2118967b819006984c188b0eb257c7cb2c2620a66e897dd3c39c0d5a25b34a0
- MD5 0efa56244f7cb2b5d81a6c4f227d99cc
- SHA1 839e704afb7fb988553de2c392b9802bad48c9ee
- SHA512 f2072b0198405201c430307f829343a608ab0d88fc254527c9d650876f093eff4f6b585c2922ea97887109356827c9ee9173ca235568c467c84673f3cfe166ae
- SSDEEP 768:xka65ka6bme2pffJGR2n+yeMSMh3BVt0qyCA4rACHWSdaqfe1El+VQjNe/:xka65ka6bml0R4+yp1BV+tzAJQ
- TLSH T105232B1FC7389C3B47E302EABC9B7A4267F4015593A44576EC8D807C41E87D9D2ABAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6046.js
- Size 46KB
- SHA256 6bbba078538ef52a641284f839020e7e6b8f311739e8df0e5d4474b04df41ede
- MD5 734289718346806ed56af057686be5de
- SHA1 59a956d0e491c0e904b98a49645ed1615abec711
- SHA512 b716725e6a4d79b02e3a5de602b97bbbd1e0e9baf645926d1dd19def488d72a157abc2455217dcc3148a20dda63891cb64d09b5aa2a98088822c933f9bf28316
- SSDEEP 768:xka6Fka6bme2pgxjIq2n+r2uXncHeymNWEk0VWQfVRiQ/ARrLDVTH7tAyEQ4Ntv:xka6Fka6bm+xZ4+r5cHNmpccRCnhbtFg
- TLSH T1F8232A19C7BCCC3E066663D9BE5A594740E823448AF58CBBEE88987C09DC7DAC1D3952
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6166.js
- Size 67KB
- SHA256 85792f376b0ad02d76f2cef268c503e0ee3c59e3f710ec0c941e03bfa4861472
- MD5 b9f3cc86e897c10d8af0c8c211ca94aa
- SHA1 f3a6221548d61acd719aa863f8ac45e7be19c2e8
- SHA512 06ef55de5683fccb289d7edfb3230dfc97f6fb7afe2e26222d5d8a135ead287c28b9ca443594ab5045ec8fbb92e22d918ddbb9570fc8557a65a0cf5aa5cd9680
- SSDEEP 1536:xka61ka6bmW3l1Q4+xEOnWZdHJFV67xFT12Rx8DuJ:xka61ka631QfyOW7pF2/BAme
- TLSH T1C263486586AD98FF0106F05BE80C7E0A3EEB01FF3FA6475669B82C7E24F11648639715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6214.js
- Size 24KB
- SHA256 78ccc6feb9f778bc3a0fe6cf8757d184a9e98b1d5f107f29b1f488b5723787ed
- MD5 51fd1225d208d7676bf9182fb03353df
- SHA1 57a8c5815bf26f5831702dccc7a60581b2c4b361
- SHA512 7b0bcc2a4d5a102e140c8002df0f916054d6cab7b1364ae32f0e1c7c0c8b080dd2ee26bb2fa0d74cd370401be847e4766d490144cb129f11207f7c2eb8bafaca
- SSDEEP 768:xka6Aka63me2pHpnzqaf3PpLHj0XZj3S93Zdv+Q0:xka6Aka63mlpnzqaf3Ppjj0XZjEdv+D
- TLSH T116B20A91A142B938C7AA0257D07F416AA33E3701740EC444EA7DCCAD3554AECE3A7FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6260.js
- Size 49KB
- SHA256 463d4fae3c1f31e4e43f75f59725649479f0d7e5eb5d64b5b6a6cbdbda09ed32
- MD5 1a5c474ef658e3bd7311ec466d0dd600
- SHA1 115ccfecbfdcadf725f591cf7d3bd82172b140a6
- SHA512 d7e224aeb0dfdf2d8114f3fbea990470b4f883334682447582d0eb6591695ad5ebd9f36ba8ad074c3d5ba2fb5c163f50e60818bbba468f5d066d3d77c92d0414
- SSDEEP 768:xka66ka6dme2pSKaFn+WvdH9u42ZVs3OozsMAAKYINrFRVKxvGNWF:xka66ka6dmY1N+u9u1UbwIKvNrFTKxuw
- TLSH T131332B16DAB9CD2B0BEB83D9FEEB574256FC0248C594897BED8E843C41C07D881E7616
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\630.js
- Size 54KB
- SHA256 df0fe8fc8fddbb9b800b8422f8020411f192b473762a437077a039e01994571e
- MD5 ad2f1e28076bf1a67b2dc7dadfa59271
- SHA1 40b12b02ca5ea73e505ef5d245335768abd02b9c
- SHA512 35ebddbea916b082b082ec42653f2b555ce59b1240cb418312a5edf8c52c77af1dcfc33f5c3da33a7d468346167ccfbf049f58a1b0b0830b4ad3d85202fcad57
- SSDEEP 1536:xka6fka6dmYr5dLavXm+9aWq4jEMcwBAOY22xINBk9Z7CwlqKQpFEtoPxopDtMAk:xka6fka6V5dLavXJ9aWq4jEMcw6OY22O
- TLSH T1D243081BCDB86C7B07E303EAB957B70781B8C245E2908520FD99447C02DDAEDD2A7796
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6777.js
- Size 436KB
- SHA256 e96ff1c6040769fdf366f0ca2e5f6eef28e4295a1c9bb17a1437266bd9ce050e
- MD5 6182f74ae0e66dcf4edcec6ffa6fc23f
- SHA1 03ce4427dad5b5a62c1171e35399f41fa5a43cd3
- SHA512 dafec73eb1fbc5da909a74ac19c37f9d560f79994d8cbaf3f4835f83d05f5e810d8cd71a2f8533fc787fc342c06ed9a2621a8b926bddb37b1216dfde353bfadb
- SSDEEP 6144:xka6Mka6j4+vLZLnWSk30YMd2Cfc5FQ4EgG+Hh2InFnJMxpggS88jbFkfOksgUgd:MZ255FmInFneggS88V0ugII
- TLSH T12C945CF72241757196D3834B946F2707622F6AE8B008847CF77AD8E73C5698711A3BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\685.js
- Size 51KB
- SHA256 49890b99ac93d6446922ca9dff1eb2a19ec3952fedfcbd7c76263749617b228d
- MD5 288e2d9318aa699870280e29e929e16a
- SHA1 fbf200ff067380f372dc4db7073bc87ff5fd6247
- SHA512 061d1bbe8c668e0953cb766522caf7f5da7197506af644b51f881676bcf58890c272b8096880c2868500e0ccb6b87b9ff57f0dd53a763c248eb5546650c3f008
- SSDEEP 1536:xka6Ska6dmKDoT6Ur59M+64UwsG2vKglbMYGRhEKjX:xka6Ska6XD+6AHL6ryMKqmWE
- TLSH T109333C3AC9BD8C368BBB03DDA566B506A2F494C8DE94593ADD88413C01CC7C8D1EFA57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6980.js
- Size 49KB
- SHA256 7bf18bd0166101123968cea7c871afee7396ffd925f5f16e3f3e2f8edfd20e3f
- MD5 30fec8f651ad49701058d39cf8416a35
- SHA1 8c5892397b7c8fca13d3dd89372488753c919479
- SHA512 23f47e676e95ebb0aaeb3f5e0e886c51c40fcb7962a439d19fffbfd4255b674f6a3571f28d04e73f3eccfae8719d1f7f83ce228264211e1f88c76f7fb8c9d43e
- SSDEEP 768:Vka6wka61me2pgxmtitjn+4g4q5fho6RGTMG1JcSHAG8C/iHCmyVPYrEyd0NXG:Vka6wka61mq9j+D2QGTMGMgB/CR104
- TLSH T16D3319268934DC378B6A13D83ADA7F1607FC479C45A65CA3DE896E3D01CD2C8929BD06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7090.js
- Size 51KB
- SHA256 2f7bffb329523f229584ccf2c04df101d89770c6fbfbde2d25e1053bc1456d35
- MD5 a555ce086967b340d8887f7056d0f862
- SHA1 0fd4a534f2389680f90972e509aa3fef83fd1a56
- SHA512 e5c0f1a48f3588d87bf7122a3d1051212702bc54d8cf53dce56a287259116a071b3b4bba77f7103bc1e9ae4e329875b7b4d9e61787676127938365b472a742e3
- SSDEEP 1536:xka6aka6dmtCCUXg+vK43uPHvk/VROB0Q:xka6aka6DCUXHvn3ufMtoBL
- TLSH T162330B1A8FA88C3547AB03D8B59BEB03D2D8C15442DDC86BFDDE457C00D97C8D2ABA56
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7103.js
- Size 51KB
- SHA256 f1b534fa65313f66058c483c97390e50a60f57b11e2964f39f6107c657aca3a2
- MD5 0d4af89432d4b2cd89eb577a0df72869
- SHA1 07bb53b0f3646c6f4721f0d9212073e8ae612e50
- SHA512 54ffbc5637aae7f7ea5c4a393ebe2af782c6bb56c65601225baca8317393dfeb223700cea8caf93c486c8bbe240be58e346c2fd73f2238c3132ae08624347a00
- SSDEEP 768:xka6fka6bme2pARZraRtPFn+BlxR+y8Twp65/GxRSmGt8cAy0Ry7OSnUaztV1NMb:xka6fka6bmKLeLPN+Bjp6fKhRMS
- TLSH T1DA332A568638CC374BA202F479AB7943D6DA03959A9584DAEDCF88BC00D87CBC167DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7219.js
- Size 56KB
- SHA256 0a590488e8e43cb46b0c5f354bc2e9a193c633df787b6a0e770ff516ce30ec42
- MD5 5aca485899ae3465816179289ed98f99
- SHA1 411bd7b1776a25fad08e77fb66af8ff137cd4159
- SHA512 f4bdcaeb7dd9f35aef8296d6629c33d245d551c38906cafcc8b88589097cf74fa7788c5c6d60f0ce7781e3e00f7fec3b623a64b1b4a1d98b16fa81c873cee9cd
- SSDEEP 1536:xka6Bka69mWwQ6/3+3UDt8wTLmlSvLbW7j+wDR:xka6Bka6mQwu3UZ8wTXjXwN
- TLSH T14043F915CD39DC664B7553AA5ADF3507C2E8E244C7904866FFC9887D89C8BCBB013B26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7390.js
- Size 48KB
- SHA256 efa85bfce179f96197176c5792f5d808569f04636471753fcbb83ce96076f422
- MD5 092b0973dcf85eeb1f0046982e27d1b3
- SHA1 4ef97b876dd5133820fac9f888f4097d579a29a5
- SHA512 3c945f987303d1b2a55b9940ffcde8e0350077f5cb1031e4c0644a362aa349115864bfc6b0ac3beb145bde5913ed6db22a3b56d075cafddee5491c5d29524aa2
- SSDEEP 768:xka6Ika63me2p91vr85y2oHVSthEn+JLiKyYMUeiwrfMKpwANzK2pWhc1AvX8jQj:xka6Ika63mLmowG+8ZVzBjH+Ocp
- TLSH T1E0333A06CD74DE3B47A643F9B8AA6A475BFD4205C2A44C67DD8CC47C04CC7D8E1ABA92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7946.js
- Size 51KB
- SHA256 066fd66a75e7a675f4b11c791ab112a4a4f0f8464a8ef3108a1b38852466af83
- MD5 1b55ac8be41ea8c9a01d9932c424fb27
- SHA1 e84beea46042545fb719212394dd4e4c9b4283e6
- SHA512 eba3b481dec4f5f4d9a326d9df2a11ae662b6f9bb8ec78ec0ca6006ae2891542a6c70060c00cad59c95bbaab6b17536da54d1f75e4e796c7b0a98e86aad4119a
- SSDEEP 1536:xka6fka6bmpje7R+K0bnAStYVtg5F6Vm3LCFbr:xka6fka6TcK0swYVwF6Vm3LC5
- TLSH T170331912CAA89E3B47A313D9669BF60790F8D14066E4C86AFE9C447C41CCBDCD277B46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7997.js
- Size 52KB
- SHA256 efc0a98569d74b68e37597f51d926a7c13d38f0ed22e6bb57e7790c03f7cf0e5
- MD5 e618f0ff4efdb55e419df876fc59fb7c
- SHA1 794e0c45a8d83c834137918074d727fb3de2840c
- SHA512 16e6043347b1aaf745daaa44f26fd085cf598114d421f1716dc86d477d9217cd409ad4f3c1dfb96f71090473d50f4d3e3fe047fd98feb8d3891b68bdea6344b4
- SSDEEP 1536:xka6Bka69m+DNna+anbeM2WbSreUwZSIVSp:xka6Bka6XNn1anqMIreUwZpC
- TLSH T12B333B268B34DEB257B693C56CAF6D0BE3E0524581904C67FC5AC87C44DC6EFE123A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8122.js
- Size 8KB
- SHA256 282620bf33360eeedc20a3e22a28f723db83cbaee1c522a3f970dc36187bf6e2
- MD5 689d28a204bc618e5c992fa2ddcbe6ab
- SHA1 d9ca060eb5f993f1b886bd25e10514cdac0e6d19
- SHA512 829e8dd245c61eaf6a217c4338b140a55780756bb5a2149c88563367135f845c3927ddb635fc0a8a4423900fb4628d7647a7cb3c792fd2ee46fee0f419687333
- SSDEEP 192:xka6ska6Z3805se3m4XFzVJFsL1Ao1PP3HX3mSO/Awqj3E/w0r1Q4N61iLyJ+g1o:xka6ska6fme24XzsgO4dl
- TLSH T16502B810B1086F7EFEB2017F44BA418D52ADA200E966C8D47FE6843945937EE7203FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8345.js
- Size 50KB
- SHA256 8d648b173a5268f646d7dd25d8f41a632542aa7e01a92d72071eceb5a12b64c7
- MD5 9c7bfae2cc16bc404d312218b6a256ec
- SHA1 6e0cc268912653b699f29c8286cf1b1da47b7949
- SHA512 a7d53e711d9248c3041d9ea6b0015b3a5c3deb7d0f8a1ae117fdb95da11cdc1bb112928a77566da49096a98b9bb2e839a898fcb9dd203027f3238596f4c60634
- SSDEEP 768:xka6Gka6dme2p6X15TYqn+cYmbDeD+rQJXnuQgZLm1hkAAlQxluPK/NPV:xka6Gka6dmAXTf+FXuQIi8exlJ7
- TLSH T13B331C16CAF9DC3B0BA743C9FEAB5B4256FC025CC6E489B7ED4E483C40C07A451A7656
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8395.js
- Size 52KB
- SHA256 9ddd58f6b33d57efdf7ac1c31726ff45eb3da5ab417c5a2ddaf927ef69273426
- MD5 48003d164b0cafd47fb9b4256ccf1ec2
- SHA1 4a21008786c1d36927802639987af51df9fdb59c
- SHA512 898d2bf76659f284abdc87bba668970c801568f856e0f5b19c7c8ed85fd74816da152d1320dc20c1d0b9f0df59488f1e8d28edc2f28306209dbc7264dbba7dbc
- SSDEEP 1536:Vka6/ka61msyjwXA+Dxo7McIBH5rM2M3u+XZDA:Vka6/ka6JXnNo7McuZI2M3uiK
- TLSH T1A633391ADB384F7ACFD642D965A56C2A22E411A83B80887EDFFF407E03DA5D4C173592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8671.js
- Size 51KB
- SHA256 34748d11dc2d6c927f3f45d2514805abea3269219c53e92972132342f3c019b3
- MD5 96ad549e7c7bd9693c20c479d771c923
- SHA1 bb00ea50d20e173d578bfa6d1075d206b6986456
- SHA512 cf144a354ed9a3cb92878d4915728fb04098fe5f53bcb2d7027843df76f8accf0aacaedfff2e5bee9edd61f1732ff6575e5b545c7dcefeff4e4232fc02e6c793
- SSDEEP 1536:xka6Aka6bmPAEJ+bvyPE+pOZD2yQcJ8Lyh/x0SiyQBOuy/sv9U:xka6Aka6hEUbfXZCcgyhULy/w2
- TLSH T1EE334B17C9B98C3B8BE763F9394A9D4B73A8431692944566EDCEC03E00CD3E6C1AB951
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9025.js
- Size 42KB
- SHA256 5c5eb0498e2555faf995e5a0cd04a4a7e9a5a045574bb72f529e3f531d0eac0a
- MD5 5d8ab551b18e7dec74673ef7d5326617
- SHA1 f8c87f765e610e8b7f18e7cfe083e6efc126b3e2
- SHA512 a46b6d1dd0daac6254ee1d324758abac1292d5b064d147dc6c4e9c7091cb94a7233823230fc513fbad1d4f4ac8ac155a9ce001da66a4de147375b9cc1a4db0d4
- SSDEEP 768:xka65ka6bme2pEMoVET8d77aTfhM+AeaQM2KZmzePUI6N/A:xka65ka6bmmMoVET8d7eraf2KZ3UFG
- TLSH T16813080F9A38FD3F05E661E9B58EB90544E440B442EC832DDD5EAD3C8AC93D583AB943
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9028.js
- Size 52KB
- SHA256 356adf63749eb936ad106429cfcb66d836202e6d6f76611680803230d10fe62a
- MD5 8d458827ef305ff22b66750a10352a68
- SHA1 9990d433639eb3ce728341f7e2875116dfdc8618
- SHA512 f9bf30396484587329c8f3dd6c58c04383dd4a2bec8e0b7236ef60be2e2f5aad2d27089599175391c4102a8ba841c12ec00dbca87c884229a24d8151997b7075
- SSDEEP 768:xka6Fka6bme2pTch6YR+vEn+EUYzIJFOpgRowVjJs10aCpUAKkb+kdQq2MeKcwJH:xka6Fka6bmZceG+9NOpIKkbHPV4uiK
- TLSH T176331ED2D9BFDD6A059785C56DE4FD4282E482A3E3A300B8ED88CC3CC8D46D740879B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9135.js
- Size 23KB
- SHA256 0fe1091a430c7293d82d7a240b3944601492a8b021622775b5589e6dc4c509ed
- MD5 138f31b630e4c155f485d55262b7e591
- SHA1 09e62d5ae98263bbf844fb75d29b27e7c2aca5ba
- SHA512 830c25aa8216e14e21663ba1a5f28d8129e9c06983e8fa58f974d54303d4aadcad56796b812465e2629eb40448a5c11dc170b2a1ffdb7be87618dad1c2b67792
- SSDEEP 384:xka65ka6tme24XzsEHSvFNwk7K72EgqCbFSoBGv4PMJY2qP2NFZtPnbhy8PM847:xka65ka6tme2pm1k7K7lSFb0wPMJY2qb
- TLSH T180B20B5A336470219ADE5267D03F120A72781145EA0F94D8F5A9C8FD3DB92E92237F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9432.js
- Size 52KB
- SHA256 c8d159018576225aea5f55e5955fd1fccef8aebac0111ed50be91f2907fdf6e5
- MD5 195a0ec7151ab817c77168431447f220
- SHA1 02a1c37048fc9f9b9ad4342d19dcc3eb9b28c2ac
- SHA512 61a75cf3538aa2d372656ec604f2c8c73767ed536a2d3a73a526146b208267eedb2795137d8edb16ef24b2bd4d6e3d79aa79276dc6d225d9bd140507c0d9e2ac
- SSDEEP 1536:xka6Wka69mb0w8oz+WBFkw1tdT3HdFjQWMUZA8ePahO31sGZCMaCc5:xka6Wka6Q8oyCFbY92ODZCM6
- TLSH T148334B1E8E788E3A87AA43DC7EAB6A4182EC518047D1C875FD1E447D81E87CDC27771A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\951.js
- Size 67KB
- SHA256 76a83f2582ca0ff53a268e43bc4a9fcbfb4ce65f49d2cc7883057c9f63a3cf0d
- MD5 f5fbe308d71de3b87d00826e6e95c6a7
- SHA1 d45f110fd1acf06afebb9daae5a3bad3a7e337e3
- SHA512 199f5d2d9908a558303f3b6b87b184aacd7a3311793fd72384f3a0652fd86efa895ba01464a080c1461b963b26948b3c8b9cdbc7bac402f7d26571bc4d51c8d0
- SSDEEP 1536:xka6Bka6bmPGHfYD1+j38oG0GTUl78kUQ:xka6Bka6rHfYD478oG0jlInQ
- TLSH T1BC63EE6147AE98AF0105F05FDC087E0A3EEA41FE7FE6869285745C7D35E11B483BA60E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9600.js
- Size 51KB
- SHA256 8dd8e965c4b41fbd3c2d148d153cac80f4b6b019b79a3d7891d31d5822fc9334
- MD5 df8ae82fe848ba4a4e8e09fb3b549c50
- SHA1 5cd5775861e8691dd3022ca11de7d9b1570a8b8b
- SHA512 53c81fe300cbe0781eea04edea15e8a0707ee329a4babbe8a68cef36320e720b64e2a350380098e420b22e639e355354688f72f2df1c90bee2099a89e6bd1544
- SSDEEP 1536:xka66ka6dmbCccQ9L+SGXjFgj6zURiHqfv:xka66ka6TcciqSqjFc6okHu
- TLSH T186330A0ACEA88C3647BB13D8B99BEB03D2E4C15442D8C86BFDDE457C01D9BC8D167A56
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9736.js
- Size 49KB
- SHA256 e0512c803de9d510e1b63f804a75995fc3875f81b16ada40131a602069993daa
- MD5 b65499619fc3627e79d31b283efbc8e0
- SHA1 4551cae8fc3af4acf8b6557c9ef5dec322fb506a
- SHA512 25bb8ac7eae5a0701dde0ec6fb662c21b4be3d12962d436343df7a238aaa8ed3429ea70ae7a947cd416dd3d8cd0bf3b647cb4cf96b739a5cbc8bf95e8dfc90a4
- SSDEEP 1536:xka64ka63mdOtS9bP+EMgGeZWjgDlr/STf99:xka64ka6UyS9bGEMgGekEDlr/Il9
- TLSH T1A3332B0BC978DC3B0BD552E9B88A6E0F67B5421886E4C9BDDDCEC47C04C47D991AB9C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9844.js
- Size 50KB
- SHA256 937568845cfb1960772d889fd619f65e4b89fa40adce439503380dc9d9068cc5
- MD5 56193de5c48d7f82efc78fbb20ad872d
- SHA1 a437f78600fd57b0a15c89809033482addf9e950
- SHA512 2dca07abb4c893dd985d9dddf98fad107c6cb87a85d2823805a53b81bcb838c4f953d909a8f684a6c93d40274f7062541e412d5fd33a0775eead6656fa8d228d
- SSDEEP 1536:xka6hX7ka69mFnGNq1+JhqeETj9ywZKCWwE:xka6hX7ka68mq4JhqeYjQvCWT
- TLSH T15C335C29CE79CE774B6686DEBE6BA61291FC830089949876DDCCC43C81CC3D851B7992
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9901.js
- Size 50KB
- SHA256 b53a1c353e559c5f78bbab83643979081ae8d7d3bfbfda6a8491fbb098e9f8e4
- MD5 b0e6fb63d3c5a8f2d7140032ab14102e
- SHA1 d1d40dd6b836891ee74943ab4bab2f7ced8efe5f
- SHA512 4796d31a7488cea063a793f4a3741b3a12468ad702f67af95ae6d651ab82d0f0d8c4d459cb547aee25a51e562ab4ec3c17109b16d2d062c93e384a848846a22b
- SSDEEP 768:xka6Zka69me2px0nqXRm6n+YDHeqmkBK/FTwMxDQnAVx+KgAeVoT58XMNtvs:xka6Zka69mb7H+2mkSdxOqNNHY
- TLSH T16A33F817CD344D770BA302D9BEDA6B06C1F8450982E0889AFD8E887C88DD7D59177F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\aria.html
- Size 486B
- SHA256 e7dcbc2e0bbe6de18980b3093dd01930dd54f32a8fceaed8561069c7e83eeacd
- MD5 30072c8c4d7a7a584d2ca90297e06a0b
- SHA1 fbea67185e96a7ffc459cce2383c24872d4eb09e
- SHA512 f77c399e5ab9d9769f87179c7b68baf0300a6c8cce9ec654066220209a0a2c792cc01c442ac908b9d67c93e39222d9caca180523d742d381bf68041883f42f8e
- TLSH T11BF0DCCDC4A2445F12238DB45C31B72C04DCB706C7918E007EFC20B4AFC0F548882A86
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\aria.js
- Size 6KB
- SHA256 38216ade3f67134cce9ffcb0c53d2878cc10084f8627428fbd2608f79d8d2a3c
- MD5 49bc5252077e26762c5165aa583797eb
- SHA1 8af4fcce1bdcbc08daf05839b1775de8cecb0a22
- SHA512 0593fe922edefc3f843ea59a6c1b3e783d387d6957ed058756eacec35dd4828e6daba3b81e708c8eeb7b26685e7fd3946b5e7f3c6dc4609e2943d0a3b4423cea
- SSDEEP 192:wka6FrDka6B3805se3m4XFzVJFsL1FuvyUcFSTbl5u:wka6FrDka63me24XzsjocFSTbru
- TLSH T156E1E902418C9DBD8F76028AC9BE035263DD2257397BE4D0EFA2C4B5D5923CE95137B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\018d39b3bdda8041.png
- Size 402KB
- SHA256 4cba43e087f6ee04c32854e8231da7a487e975cc29788776cac762a9a95a5585
- MD5 afc0b31e84fa93622b6a80afa22aeb00
- SHA1 f6726299faa54f642421e7cabd7d0ac5e1c05e0b
- SHA512 6b3b7faeb865aafcf783a6e2f52f23245f4c898f461b1ce91daa74c87a3b11a9b91ac8f0a46facb5b7d660bb2a1b46f8bf081c7ce144d1035590f55ccac5f249
- SSDEEP 6144:GW0siw82z3Y3aUQM9xC22ATVf9+Yh0ocrZY9aBnca3PFjYr7Mjem0FG8musaz5Lt:r07wO3afieATLfh0729rIF87M2bmuset
- TLSH T15E94230BAB89FC95D1579F62A88893322C919D7138CD7E9C472464DC2ED37E47EC384A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\045499a2e328133d.svg
- Size 861B
- SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
- MD5 ccc05bc315600b2b2185d8b0b9acdded
- SHA1 3a70cc126f90bd32a895c0689afd17e2719d8538
- SHA512 25f0cdff5798145cc429ea9a160b7e48528b0e0b40adf1250d49c70a08a7f764e5c9602726966074d45ccf9d3404b118a43e2e58027e2bfbd0a2ee2e909be2eb
- TLSH T1671112FAB194C9A474C7CF14EE7AB40B396674B22A52D24D40B5D9787520745C41FCE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0561eac25d821104.svg
- Size 779B
- SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
- MD5 9481b5491e03bc2b078ade0bb61d2fc6
- SHA1 242f4a08666f8ff02dd3ff350b2033305cb45c60
- SHA512 f483afe71b02166908cf200f2191c70100f63783937df4c09df7a9382ecd468c3c528c6a06df71913ebf40891f2e236c9313af57ac3fbedd30d4cb0d44f285c2
- TLSH T16601BDFCA2F4F694B8B71304D233A578C46F68F527E822A08450F6D8A2231587D77CD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\059e8a27e58989ac.svg
- Size 279B
- SHA256 a86f98c3f77841e716fedb8637f74b06892b1920eb868372178c1053029d9406
- MD5 e0442e9b5c84eb037ec2e8b94b668cdc
- SHA1 a3b972a5a495d71c6c4ce9797c7d95b858d712f1
- SHA512 b2c7373476d069a804a0f5714a7e359a31159f1b6f24eece8ac246ab4207e2efadb4f9d5d61d799eb438e25a88757578e40673ca863576412ac52ef70ffdd04e
- TLSH T113D0C226704DAE248104805CA12FA0FE10AA409B070942A4E4401A3BB154AE73D733F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0647aa53f7a1ab03.png
- Size 4KB
- SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
- MD5 a8452af8b8e45b771d16c62844947bf6
- SHA1 702137ee563eba2fd1ebba9e20b6a74d5ef41e57
- SHA512 1c616468571cb13a2770222dc6bb73ec6ec02d400f808ae2b9597d6f9797789975e68039d75a5e7cee5d9a8309d12a1b6ef81dc2b99bec3b81cd9d1002d9005b
- SSDEEP 96:KIX4eDi3xoqD23XLdbyYrhIsT5N0rhjSB+mCODv4RJVNGoqxsDodC07352T49F:MeDiaAOdbyYyKTaj6+bODvuQU27sT4F
- TLSH T15FA18DFD8A20CC226D7F251F548DD5610EBE73214F9161CA73A29BC4EDDE843D3A4584
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\07e5916f8c42413d.svg
- Size 346B
- SHA256 316a84549860cd1dd865b4db4fb7403d46f56782738c30788c019b5b8d1505d4
- MD5 bab08956d3eb8c5008be5f433a755584
- SHA1 7a148d4b4a3f8ab1eb230c78a9fbbf3ff5b772b0
- SHA512 e05f97cdef1114e6c01c701a2c068fc2feb40fd5b6da1bf65178bdce9ad85eb764039e14fb586ed4c0360f40b168985764f6d5a3f1b44e7d1df8802b3bb45165
- TLSH T108E0C6A6300CD602C11ACB00840EA88EA96F90FEEF0802ACC1D23681F0830E5E721EE4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0c065981a363e375.svg
- Size 2KB
- SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
- MD5 c509b68776129a86e22325b55a6253b0
- SHA1 53a96acbdcb25b64a6b0fad932594516994e7a1d
- SHA512 05e21b404a332d532cb376a70d3eaf8ea618b581767f60f6506778f8caf2e3fe74c8f4461e1ad34410a471245e063af1dfa7406d737644a50b39f9ae3b8db208
- TLSH T1A84188F480F6AAD6448B7738D67BBAF9F00AA8FD7B0809E026757BD52AA0071850D5D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0c31e8f306b5f2d6.svg
- Size 686B
- SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
- MD5 8b2f479d49ada3b503848316e449b7ce
- SHA1 a60efc76e8079aba471a15d07e446ebda8929e45
- SHA512 d48eec879d9b239406e95b38aa15153a59ea787f36670659435a00212169a8c8856472ea428ad4c268052ff1d262efe7ff1ba69d67693f697aee591ee8cd9f68
- TLSH T16701D6EA2585F6BC08968731F52995E0BD0F45FCBB6C6259A110BA58B78F0638A84C82
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0cbcfc6fe4cb443b.svg
- Size 200B
- SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
- MD5 c05274c165c506d13b466843cbd3cf13
- SHA1 3ce6e2181772ecd032d8bfa1a05a2ae021e8cc85
- SHA512 79b0bfd865e3ebcb6ce0a51976f91a3baeb6dfd67148c8c297cbc879b7537e20f8faa395311986a9271dc9882c295ff301ac4b99fb1ad23757b180441c8b0925
- TLSH T1E1D022F9410E8828F0198A60E238282054F62193019E22C8D8153A33A982C86BC2F6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0d0d0fdaeacb5e45.svg
- Size 670B
- SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
- MD5 f4d6744ab4d013a6071ca1fc38084b9c
- SHA1 275a28729b8586e5cbb2e784f3d806018dcd8763
- SHA512 04788c5b31b481ae2f759218211eccc3d0bfe2466167cd55ce2c08290cb0f8f3992230d19bfa9a656d69bd8ca032eb30fa55d5ac9920eb3aee7a8ad59e0f6852
- TLSH T119012D79D6C8C984D19B8300E3339228E40EB0A3A7C9A08DC122D031629909E6C7F8DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\103eff58785ab58b.svg
- Size 534B
- SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
- MD5 efa456c80932304abf1b46b9d0161a76
- SHA1 1c29a9813e989694ea367f537a0779e47d82d333
- SHA512 b4f5cfc6497e0fa8243e8b4771e2b7ac372835b4448c37e355e16e7fbf4a17d93ca34c7c311d977491ac436b6d670fa6dc07ee34a3b97c32ac89b0b0545242c4
- TLSH T13EF0C0E110794128C8268334B768779231EB6CF87F04C9E511F03DA5AD5166AD89CA48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1046c13174d8b145.svg
- Size 653B
- SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
- MD5 0e11bb9ba97b509226442b9fa98b9165
- SHA1 02e76ef129c17b6eff2d154215bd1e164d6a8895
- SHA512 3799502c8cd8390ffee4c7f0a99084e3f054be2b9a188905ed137a0c39bcd85488fd1a1db322820b53077088959f729bd087b81abf8004a4acee7d81727db877
- TLSH T103F0F4B6738C8D2D7FA70B14E3773536C0668283060D6144B532A278505959E6E3FACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\123ab2cc0ee9e515.svg
- Size 22KB
- SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
- MD5 f26fd1f099416b4487b44cd06f3c45d5
- SHA1 5765e188047616f6f23c5f58de4b12be951f78a5
- SHA512 b785d69d94398c3a57d598e1ab106a830dbc53507cce120d643b580bd8c1e9406ba2c2364200fca61478e2db10cb2504b7851fca2167b896ec6f80ab479e532f
- SSDEEP 384:7+enRerPuQuiBylmZDV/5YGheMeIVIdhiI4hfIIIwIW:7+SRMlJgaR/5pPv
- TLSH T1B1A223915B148B3C3FC907B1D7B419025667D1EFF83569C8AA5A993070F3E2D88BB887
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\12e3fff4ce882c02.svg
- Size 706B
- SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
- MD5 83bd327da6d8f72f8c9ca6451be219a0
- SHA1 95eb1b4346f7f156d2f4eae24dea727529bdb66f
- SHA512 56998f72e0a3870826536648f8660ac24e44901e4ef5cad00a5f13cdc9621990ab919e2ea48ea86e94082c6c468b3022375ebecb5962c0d3941196d6a89df4d0
- TLSH T1BE017B7D0B5D0D3DF213816CFBBC76B55B6A10D3070CC228B46019B4BA5258E6C375D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\14e91cb3dc3fa6da.svg
- Size 467B
- SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
- MD5 6c5976afd1244ff971c91343143b99fa
- SHA1 fd4b71444aca0f33d1aad1169c96afacf1d8e6b6
- SHA512 252d8d66c427eb857ad2f935122ae990b7ebbbee17d1d7fd9528f5e1993719a5a6f90f3cf86288409a525ae53e4a0475f41fb0cf64661efe429116a4ddbe8103
- TLSH T15CF0DC775208EB2463C2C314F377B2A8E1BF2097131580C98020F534B1000BE35B7ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1670e5d31a4fbef2.svg
- Size 452B
- SHA256 f9122391c5df2eedd175f993bd89f589384d7b7222ffe0fc642e8fa42793fcc2
- MD5 a1872c5c20ff028966a675a82b9b173b
- SHA1 8094c1a1e3015433acc76ba3f0d4e15bbe875cec
- SHA512 ebb750e5dd0fd7ba81e8415dfe058f8c19accf7431bebcdec78fd4ee15c0c94594887a0b8cb317a071a7a7b3bd602eb07f825c710508befaf07d539f12e06793
- TLSH T110F05C742198C7144148E324222FF8F5101BB0E6FF8B9050C747181AB11D5B61C357A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1688c4091f2a2e26.svg
- Size 2KB
- SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
- MD5 d08005d00ce075a471cc1487106fef7f
- SHA1 7ba28922957c99acf6b6a90bf0f7d466c3969054
- SHA512 487720063cf12cda94d63f8cd17cd60874576f20b88e0956debadd48e9dde1b6b3d45ee53f3e0b3017116bc378e1b2134f0de516bc49b7b84da318ebe3bde287
- TLSH T12341F1B79842B8E0E443DFB0DC369D916627EDB73EB781884048989AF6D617D8A4DC48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\17cbd66168518049.svg
- Size 308B
- SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
- MD5 d02eb950982ea35f6ff1cd8227813e51
- SHA1 546e4e3a32e5a53cdd1be0a45a9f54c1dfb6a969
- SHA512 208d237f9f64c32982a540bab2206d19b9eb62ceda5ece241661c306fd5884035a3ceeb215f50a87851b6227974d6db177518b6890d453c858f67f414b0b4e00
- TLSH T1EAE02BAA63488D2CBAF30728F37A363AD4B75153054C2284C832A03490155CF7D7BADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\181d51d89dd58b1c.svg
- Size 619B
- SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
- MD5 579800dbcecca36672ef94c9beee7c95
- SHA1 8963d8f1bb18c8245ba1c79746b687c094f68c9d
- SHA512 b161bb2a9ed7394e5024e91f28d0800f7477cf6f0ae00f54f96d03af72a37cb4c5b08d1947a6bb4bc2b8ad1cc83ebecd81cf92d33338205559902782b5bf0362
- TLSH T11FF0ACFAE7C4CAD456E34326F7223455D09FA07D328D82988530F170EA566DE691EDC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\18b4316285d3185b.svg
- Size 6KB
- SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
- MD5 4fcdca87f7bdcb024e79730a515f4df3
- SHA1 6bbe73fa964c8e4b6067c851182ad5237e56a410
- SHA512 273e61f7c85fa50637892d4de76cee00b2d361370cdb7701f90ce3b91f4a0508d3fb7e7b334fe764edfbd39a9c7a4f6329e533293154378a77c85812cb7330a7
- SSDEEP 96:LS+0Ur8NRLuNRLNRbNRZNRGqNRPNRxBLwMdABEMNGCwMen6FhTkx:L30Uy5MnrVMwXzBPdA9NGCwMkKhT6
- TLSH T144C194E8A2A8791C15900379FFEA8492A026F0D3C605035DD51F3B366217E97FE2E6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1c9159e6d6d5b88c.svg
- Size 1KB
- SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
- MD5 0283ffb52a4537657b2efc007a58f500
- SHA1 583b542ad4196293fb21d1e8892ba5a3ebeae09f
- SHA512 5160920b5c6a4911f5d0153cd3639584be1b756127ea64b7808113ffb715505296c8aed4b04238b4ed9a63ef882bfdaee013a6badd0d95a5df02fc7c357d55d0
- TLSH T14931DBEF1252BCD4F7538704DA737A39906724A65AE4C1898872AA3189142F8587FFC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1c94572b8a82384e.png
- Size 6KB
- SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
- MD5 272d1e6486d51c8e82d9616363f31f5d
- SHA1 1bdb2f58f790f6c00832c3dfbd949161d8b2dc22
- SHA512 26881b1ae413b2e001e0b7ab71b6b162a5fb913475b45a7b42a31d6ebef6523125bf30ec016a91430bb31a000227f693d30a3bfb12abd98436a47102ff5cc902
- SSDEEP 192:yJOp8jc3sgYde7hZOG+etcwEiAGJUqNNh:yJOpaccgWe7Gv2cwMGJb
- TLSH T122D1AFC9C1F3092C5FE814F6E6E31ACFE66E84B8B2C8D4B45C3261F84C427694069EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1eb51cb7434ba396.svg
- Size 2KB
- SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
- MD5 d21011c9553b3101bf9cb2ff9e918385
- SHA1 6be8abcf9e4a9d318c8c44e7ceee2adeb5647e2f
- SHA512 6adab9c100de245aa5185c6efe2f1098783690150d3d740c17980c52eb142c3831abc4f580114e3154c96c569d282836cb1f1547f85ca13daacb585bca61fe87
- TLSH T1B951BEEB72546A29F043D7649B0AF978A00B51ABBCFD535E4577D8B2775048CB80EDC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1f8c89981dfc2af2.svg
- Size 266B
- SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
- MD5 e89f994a581ca879e957254a6406ed42
- SHA1 73c1f737eccec59d608c6093d02ef9727941fcde
- SHA512 f18a21cae7c66eb41df2b94d5e841bd5ed28677edb69ad42e8953de94a538542e4588234e4e7a913656aad667e6f7bbfb7254b5248d4f19928480ebe35ad4434
- TLSH T1B5D05E36B388CD1CBCA24A32E3A67125D0AA5042158A12E4943EE135A05598EA9FB5D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2108d437d813d94a.svg
- Size 322B
- SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
- MD5 995e2a5d5a3c53ac9521ec6b032ac62e
- SHA1 ab982e8d640b6b686b266de03ca9d244b25583cf
- SHA512 a0d345b1716a4aed44edc08ac801f3593fb9d0a77b184c7c99643d832b2c40714ec3af78f99135a1972e559b55a399f33587de3715eab0cc288fe3d710afe6a3
- TLSH T12FE07D7D1314882870964318E37A35E9847F0026034C03505911AC3DA01B6CF3D777DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\211b3eed2dc9a97b.svg
- Size 196B
- SHA256 bcd78b2da7cecb286b2cbfc6b86cae98d958ad7227f385fe58340a19984114c0
- MD5 a33b0a67e70220200c34911dbc3afb12
- SHA1 2d5fc979cd8d38e7e1727815689b122d18e598d7
- SHA512 4972c12067998b431be8de8eeeca4a59f3b7c8509089cc3ea34cd63ef9074d260f05b67e55e5b5e49a3db31b643be707d9de99b0739e1ff21cc35e7b680df2b8
- TLSH T141D022A92129C908F2018A30E62872A210A7E05741CC00A8D9297423F4057ABAFB26E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\22d2121364e44949.png
- Size 1KB
- SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
- MD5 fb1e9c1b545c97ad94e08f8747d62858
- SHA1 e26fab47b8f1351e7cbf757f5838280adaf4eddb
- SHA512 6e7f782ec8c996ed58e2dc81ad59c6069625fb066d7237f69216df2e942a4a105315a24ff68758e82440c863cf79adb4ff0473d0c6cf85e481ee393cf40086e0
- TLSH T1AC411BE46FD32C7F371B6A5B092642960F0357ECD71A16248D78341FF7E1DAA2091C80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\243e789a53847976.svg
- Size 585B
- SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
- MD5 ef7cdc2523c32170cab93e4b831669e0
- SHA1 7606e8962814a80ee4e5ae002ff15eda604c920c
- SHA512 42fc11b7e31f309c8f174f795d55157fbc207cd30080e5ed31e8fd763f47650aff5ed49761f37c6b7e54d207328e454d3ba3da846d361666f2d867b6bf5d1999
- TLSH T159F0B4AE7348AC3CB9B3463CF3767276D8BF410312592254883294785105ADE76BFADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\253f1599e4c715f7.png
- Size 10KB
- SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
- MD5 8cc0ac7aa217088fb28ce39ed548fa3a
- SHA1 339ef1bf8b20321e4a207a8cf181d9932900f87e
- SHA512 b08cb12f07caaa3923c30f456979ab842aa1a5ec6521ca8b05e6c0ddb8aec4f1ee0f66fbbf65a886cc24bfbc1d53907d99fc0e747308af42035f3643bc8d861c
- SSDEEP 192:wSUvILkX0Reka+8/WNzWfTO1UkEQPPHkbXlcKsI3Un0Cul73cB9HFsCC3U:XUvGkkRNNafTOpE6HkbXlcRsU0CqMBZ7
- TLSH T12F224BC326ED240F04D003B64763E4DC0AAF7B63A93335E9EDDAD615146E28C4629FD6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2dfdd8918d195c58.svg
- Size 6KB
- SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
- MD5 ead204ff2d87fa70238e636c7b7b2e61
- SHA1 6b9c5fe90c399f249001bf190c0f062b7a10c68a
- SHA512 3a23a08e80225f586a28dd134e6a8ef654a269088986f2871d3633ee4cdcf2c9407122f62cdf939c0f9b39e4b5a7d17fe9253ae9b2fb5ae750e8b95293990089
- SSDEEP 192:gUeEDGjnnPulmcMGQsVwqB8fEGpnmnhdKUmUCQlmlT5:gUeECjnPuFSziMWhdhFC60T5
- TLSH T12BD165ACC7080CFCBF8CC75CD3C4115519A953F7D66A48E9EB4E9323AA05BAE017A746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2edf079df2181fc4.svg
- Size 1KB
- SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
- MD5 3e2dd88baed90f7d7f3af337af01c46c
- SHA1 ce2bba1476948d1361bc7d813d3bfebd5e15acb9
- SHA512 bf741f6df91efe71a0a1434dbf84322cbd6480d47543cdfd5237adf2fdd420c376b962a745720020e48c0125003705db97ec35a8cd9c872c9da13c1e042cc46a
- TLSH T1973131F5A1E196FAA149DFF4C92B54F132213CEC7E60C3019360A92AE19346F8D8D49A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2f4d0c616cea0666.svg
- Size 589B
- SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
- MD5 3b451231fa25303dd9b84d110a9a157f
- SHA1 aeadf763c4a3ccf22b16f0601a28842e98df0d3b
- SHA512 f2008aca2e15c12a9d417b7df77a16efed5021f159dce4c5894c2c8b63cfbd3b6891943b6137178b25632193ab3d185c1ac432746c099ff700593d9a154e89cb
- TLSH T1B7F04677F3DCDF96A9E2CB35CB232471C0AE60A21408B2E8863AC120B3502A94816488
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\31ba446b2ad075f0.svg
- Size 635B
- SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
- MD5 a53df4ae230f93ab80da45e49d8684e0
- SHA1 9c71c3b2cc023b378104e0332e3c240c17dac449
- SHA512 1d4cc35d9cd9c41ca09f43679ad42262719dab200c754e3b47755e9ee2bf403744252754fd6a7007f35015c0966bad804692205cc717cad84ca776db9f9fd190
- TLSH T1D0F0EB7850EC241A8836414AF3059B5C6E75E08381249900B88D2DA0FF059E3F8DF9B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\33bd9ebd264104a0.svg
- Size 2KB
- SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
- MD5 34f2e59e593e252d27a2a9814a25a482
- SHA1 3eedc32e952de3aa464a8ba4bd95205ca37d6222
- SHA512 0e071711c1d39cb65c06413f9c05da879fcd7eb505fb155a13a759a27ebaf48f9fb2106bd2717436f135f4add7e2d61cce9ac0ef5b7ab93942e823da2e49b13f
- TLSH T1435183E7B5D460D0E403D7F00C1A5F6A669B2CFD3FC447844EAAAA427FA06BCC445C90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3607fe7f996c064b.svg
- Size 4KB
- SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
- MD5 3398b0b53ddf50944f7a9c63fd729af3
- SHA1 a7e7969a0f8995c602e0eea6a40c7d3f48fc186d
- SHA512 2debf3a827e847ec4f0046591009af1b1c5f7b0d83a37f6b7f3e5d1aab12f60c803334ff84d56aad8681d629b129838278d757c2d05427be6f7831fcd6d4cf8d
- SSDEEP 96:c9EoQaqq4kMXKKN0yoqui7cBZZEZ55/hVfoZq:cCoDqxkWl0LPY5FLwM
- TLSH T1419186FBA3E4F5C8C587DBA0DC27ACBA661F387C6F5643D64194DA812B140D4CE49C94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\36bf914fc5de6f1a.svg
- Size 3KB
- SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
- MD5 e7334b5ff3ad14dd85461bbdacc46bf7
- SHA1 973d466835017fd5d4f610e6aa2106f5e13dfd13
- SHA512 c569df223715af42ade4c48ad569a3c3adfd2903dc7e5c483ec655f37e093057b9a2d8cde121f637ca74c4f2ba3c333cb2bdf924cbd3f1f52c97e15d195784a9
- TLSH T1D58121FBE2A4F6C0F003E7F18909997667A728FE3B6947C546648AC1FB500A4498D9C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\37192a2a129f5ff9.svg
- Size 224B
- SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
- MD5 1af25ace4dcf9b05b2fd5b4bd6bc6210
- SHA1 c8a34538730cdf1c975ee89ba1975fb87b83a597
- SHA512 398f48f090d063feca18371e3ddfe590f7f142cdd0bddd8c4f335b033e6fde45c8c9c7e2833de7b7c125db9a404146d3cd89a3bc5743ab87b0de5fca4b20765b
- TLSH T1F7D0A73663488C2CB5E34A20E3B53135D0A6404201491194E4329034A00558E79375DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3a2ea7738b340340.png
- Size 6KB
- SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
- MD5 853b6f0280dd89603351ddb27a4804f4
- SHA1 41c533ff4283ba85941a7d748c5f5bab0e4a6e8e
- SHA512 f7c72552a9b08a5f5c3e37b5bc4081180828fd2339b3766c01a2bc1e7955250a347cc60c552dfa66bc5b1e0841f6c9cebc4c30cce4493ed16f8185b6976e62a7
- SSDEEP 96:gb3rVXQ8IK1nnQUzPkjDx+cUlE6cA7zve/T8hqdXMZcoW/JqwQaBfwcdBk98iZUz:gbbVA8IKFb2GEnAHvsZ6WcMqZO
- TLSH T19DD17DB3AAC66DB7A05B3243128CF2565186C726BC58697E31E04A72C3C0A16659FB87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3b9545916efb17d9.png
- Size 3KB
- SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
- MD5 9e3f648549ca9b96af38e6792a257e1c
- SHA1 2adf2c53c971cd7e5005699d1e56f9f62af08e28
- SHA512 6cdaf606e5c3ec2ad113d83bab317e72f2adf8e10f604b26702558af04124ac4931605effeb5c65664484539469425f2e58eca0cf85cf96eeb1b509dfd80af70
- TLSH T18D716C9E01C1221F906E58F9A13B299CBA761E402917EB3C9805054D8B43EED6E7D3A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3c91fce8ee8453fd.svg
- Size 3KB
- SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
- MD5 d49e69adf27da6ba89ded69c908d7e71
- SHA1 d1842b83eeb465a18e5420cad23d382fc6c580ec
- SHA512 6e25478bdef2dc250c26b5eafab399335abc4af80faa9504d109c8a2e514a3ffccabd98a99c7ec021b9ffe599f3cfbd7e320fcfdff7b9b40a7c17f85a5bd543c
- TLSH T16C61A0A903F2C6F1C13E8F3A84649D6D99BE3436294443CC90EAB782ED661610638DCF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3c9e7cbca1e6a295.png
- Size 4KB
- SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
- MD5 357f3695fe200dd10cea5a1024879e3a
- SHA1 bc52dd32815769a390a6c6d4b3bca65623185592
- SHA512 f283e952f7ffb80fc3d9616fdfcd83627ff86974ebb0dc39e3489be5526e3bf66edb9dfddc503f571bdf36536e897f3577203d7006667bd65ff3ade0a46dd6d1
- SSDEEP 96:uqajpTnvdtgvvvVoA+ckLn3nOw6a9aE+V3yKXcRgWkFFaPcS4A+cCW:uqWzvdsCnBT3f9aE1YcKHC0S9+FW
- TLSH T1C2A18EBDF913B8DB09DEFD2C94D80AC0200ED9AE393CB8532A21E8CA7595707D8D4201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3cc0c6f21a6016be.png
- Size 47KB
- SHA256 c4e06de6de100feb53ef5f43d038bb779b84d3ace33f38ca4d62e64463f34f3c
- MD5 0f71ca69f99af6b5b3f6f098bc287a94
- SHA1 032c870a06cae1ae7928fd784e7ca89d412d0c8d
- SHA512 c384631342fd1cc52fcca4e6f3d6c2cbd7b1aafe3a4d7ef87cc1cb57e5abdc4396fdaa34ee671bd34add344746f36d8a79ca6c94c65534ff63f2e2b0e175d0ab
- SSDEEP 768:AXqQLDgWux687iAS6Hg6jI9AWamUSM01kHbNNTsV+JiEJaVzW1gnZbB0NJQRjYW:MLDgcarS6A6spzUnYReaZWab0NJQRz
- TLSH T19B23F2C48042E6653EB652ED3B60576F9700553F8CDCFBF3CC6408872B21126AB297A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3d5e7395e9ffbdbd.svg
- Size 537B
- SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
- MD5 bae51c1ca1bdf9386f8e0e603d25b66c
- SHA1 ac96e0446345444699009455b019b1a3561f51d6
- SHA512 df9db41038d6c2b6f6ed2d83c70486ab82454e20f39d53096660dcbe8b9d0ce290b8b03b5de26d0917839ae46a26d315004d25a4a949e1e12a721b3704dbb31f
- TLSH T1A8F0C9A7321E2BF874C3C718DB322228A069255372CC43B440231B74F0081ADA5BFDEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3dad3b5da9993b6c.svg
- Size 767B
- SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
- MD5 fd8855faf19a81dd768c4a394c954014
- SHA1 f8d9ae485f73468ee1d9405f36827939c3c9add4
- SHA512 29facf391512b61f46743c3f758bc563ada6e1f87e036b85354f1871b7bea148b5c3d36b3be9cbb38d9ded504682baec898b8219c0714830038c9ff7f014d0c5
- TLSH T10B018EFCA3683EAEB6134313EEA1313806B741A715552ED0812645B42A0450DF72F5D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\40da13d190d51b3d.svg
- Size 565B
- SHA256 5c62d6a5be206a51368b1a8f92dc7d12614f89306d21c73512bb42f596f5fe31
- MD5 feb682d68c3f78d98ec5a7deba7bf8c8
- SHA1 a70dd61e843ea1444958e577d4ece67e6e48b1a8
- SHA512 bbb481cd5ed2d0da3fdfe8d90ed66a7dca58557b0f1fd71297c190e57e80198fa263241e0dd0c600dcadcb651c91a6eb677edca182e031f48b1d857f2f2e0d52
- TLSH T1F5F04CAB724CE91CE115675C930491E820A7D5D6DADC4248DA41331FB21A586983E6DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\436b779e283e4cec.svg
- Size 304B
- SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
- MD5 c5f36b06adb5025088949bb400705acc
- SHA1 af071daf9c61762956ca3cc7a8e3ec015d9ce273
- SHA512 2a661460d4c1aa7f55bff53f027bec3e160490e4c9a341b1e4a91b3e9c521269cfb3240d830a2227e484e41260b6bafc180c4bafbefb90794b92367f3f470be2
- TLSH T149E0CD7D157D5E05D03D8345A1F7183809A5E0F1035458E1DD109016915B8D93526DDD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\467465eb8fa50b5b.png
- Size 4KB
- SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
- MD5 5d4e62f84dbfe756a57a4569dedb7515
- SHA1 07590ad6d4465ec03de30d1cbb346eedc12cb45a
- SHA512 9628f627d96a5487674d8690ed1983a69557e07764b362f76a468145e51b3eca5e975970b3d58744de6dd6f73b6456291dd787e8564a665dfc86cfad1e4c8e2f
- SSDEEP 96:0GNNUtcznI/umkSFny/XhL94nyQ0//m1EGDJuJfEs7LXAiKzItdEm2:0GNN4c7I/umDy/XAyp21ETJ8s7LXy++L
- TLSH T198A17DA9473BEE7CF78420B5AA3BC490517550F507430C4EC956730C38A2E42A677726
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\48d7ceaf46faf1a6.png
- Size 16KB
- SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
- MD5 15beed1b084c4a5dd3542046a36d720e
- SHA1 856477299874f5d62b2ef1f82f212dbb42c78c8a
- SHA512 64cb60c0851f7da441cb80a1ae1a2f7c10764abbcc510b081b459c0787cfc9d6d6fd2a19dd7e3f04d674af14092b2bda45a0f910f86604ad0e252da5778824d6
- SSDEEP 384:Xc3YDxCa5nktUs0A47oDAK/Wqtjh6ULTkkdCIY8/O:s3YDxCa5cUsZ47+A+t5TkkjO
- TLSH T186729EFFC12DE090871B1E2AD4C9AF1987FA00604129BE1868566E0B7962AF51302EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\49c99c607978a8f1.svg
- Size 343B
- SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
- MD5 12233c1ea34c03d3c3f3599aa48a935d
- SHA1 796d616e76136868f4b9152f133944b46051e516
- SHA512 98863774aafe2d5ee340e1e22f1445eadb5e838e255208fbfc1c2a052977c57fe28df03e7a651a30d9dbc8fdf673875e0741e981f07ab1b7c5c60326e7711ad9
- TLSH T136E07D5DF2446A1D78D60320E336B325FC774093008A31E8CC3191B5710148DAE7B5DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\49f7d977039c303e.svg
- Size 1KB
- SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
- MD5 9ec0ab13bbbec45be34a1489a3ec4e0d
- SHA1 6c48bc2d7363de4f25cd16a30313d215657e0f94
- SHA512 cb325ff07fe01fd2ef27ad1fe7c532d96a9dfda5e8d65342ed1cede281c497adb06de2a10436a4275fd9f06e782af5482e21f46fe3ad7d1c4e369aea14b68fa5
- TLSH T12531D06184FEA82B4A3E014FF281CA5979328043C70458057DAFA940EF0EDA6FCE719C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4a39a099362c32de.svg
- Size 477B
- SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
- MD5 fc039d059dfda6acab5f601e63ef26c1
- SHA1 f34d3984711596cbdc8aa86580d93507aa160844
- SHA512 0966da83add99629af2f8d1eef35d77e1562e6ccd1a5c167bf353b64bed12a9cc866ff49ea41669d6d5335f448354b9322f9503449549c44b354b1d00379af28
- TLSH T181F0203022ED48CA790ECA89C89ED71D0D50E583830A209CB30D8E06EB10C23A4173FA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4a903e15f57d70f2.svg
- Size 608B
- SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
- MD5 930b07dbfe6bd41ed043d9a535fa7cfe
- SHA1 30d85af8f37b0f82b78ac20eec18d53f8c09f384
- SHA512 da28c4937f6e59565e8ce3549796318d6224d882698ad176c7c74db2340b04238abb40fe47e77a52bacf7b7bffa86c93ec518b4335992991ccf60aa13b60bd49
- TLSH T11CF0905A63445C3CBAF30B1CF73B3578D4BB5043025A70C4C9316139554A69EAABFADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4cad3768b65a46fe.svg
- Size 8KB
- SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
- MD5 7d6376ae83ce3d2e8e90805b37fed731
- SHA1 0b121c20c3f87a738eac497fd4349b60e6734944
- SHA512 4dc52ee118d0ab53b47669d51f2ddf84a1482814b0b01680ec1143e64ce3420a1e4e901add96bd52f4401262166f1f00b6b9dd7e623120848d077c1c5be430f6
- SSDEEP 192:gUCrtTtwteetGtwtMLtu0tfELXDWlGMMRjaAc1RWzeLDFcENpe3vr:gUCrpa8eYaWLPBEbzcH8e/a08/r
- TLSH T11002AB445B001EBA78C41394EEE9195A0C4F81F3F91EF6DCEA460E329C65A2F6837D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\51f491f244f5f86b.svg
- Size 13KB
- SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
- MD5 fb8225778a13cffea291e06726890873
- SHA1 f08874364b930dbfa4a895e77b5b85cf00eee15f
- SHA512 08c7d97952bf8deb81b12e83355716745c429b2ffecdbc4ccbaeb35dc0429016c990d3c1ecf903e624778efc54e2ffda1d6862f8ca8ab62ef6fb24bcfae1b64c
- SSDEEP 96:+RUv0BIrDxVg52hnv5EqB/kkFht6/c64KA/kkFEtr/7krtJT/kkFfEMB3tBFiQBw:gU/sCx2/n4A/7uf1tKQETSCh
- TLSH T19952FDBA85500A7CB8CE8717C68A4C20B518C1BEB5D0CE65CF4EC77B148DDBF8662A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\52630788a25809fa.svg
- Size 503B
- SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
- MD5 7c364d2766a83a723731bd95c6cb09f6
- SHA1 06ad4bbb593f98b9fc35b1b1dc41b5bcd8db869a
- SHA512 98b0ded2f7a02df42d832ec53f4fc914122bec8df0fbbec46acaca32e7f153c09390037d43275648ca3f0eaefb7b85251f33c6f57ea9acf0a8c3f55100acd527
- TLSH T13EF0277B63C84A2CBAF30B59EB2731B4C0EF7292014860D48A31E039622569E2D7B5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\535cb5713fe4ca16.svg
- Size 365B
- SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
- MD5 820de2288ba5428454058675dce83917
- SHA1 5ee3d53323d0ca2683ad9f70343bd756890fb553
- SHA512 db2f1032ba1749c698e8f0c6f8f08a79d3155d5b7d3e1cbd86c6a48f5ac0d9b52f5712857f49b447aee0d3dfa93cd2d50dd9b202fcea0ece001ca5843537f150
- TLSH T18AE0265DB314CE2D79E70328E325B62969371093028E21E8CC3151B5324858EAE3B9DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\53d73708b13075be.svg
- Size 1KB
- SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
- MD5 13a3445999a25934b985fd552a714d9c
- SHA1 73eb1e6408d92bf3c842b227ba82150b9b975a27
- SHA512 a767b17705fdd8d1141a9da613b6f5d072548d7d643bec6882eb2eb5372ddb863964e43eab7a01592650d10e7d4b9e90d85428ec1ffb4fe48bd335a8fd39cdf1
- TLSH T14E3165FBB5A4B9C0E543E7B0DD276D5A66EF78BC6F0753C104C8AD4DD1522E18888C88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\578e94e35aa16d97.svg
- Size 2KB
- SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
- MD5 fdad14981be59a1bf967fd207a5cb8a8
- SHA1 8d6e0c8ecc27ba987b50d1465e8458aefb9634af
- SHA512 1162fdca5eb003b022d322139f7076e48aa2cfffec6762852ea62242e135440217461f1aff88271335939abeec622025a35768ae97be554fbe2d24be42649e4c
- TLSH T1BA5184FE2568D6E0B64BEFB4DC775D44A80F30F2BF6962D0438399E1B2112D89D05C54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\581fa70608c7fb8c.svg
- Size 2KB
- SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
- MD5 31c68ab3d960417b36eb9f781588217b
- SHA1 6f4fd70386b67fbdb4f9879dc4b57a636d1c7995
- SHA512 95ea29910787ca8802455a0e9d78a6fa74d268741e82861418c91ee078def379ccef6fbca6f67384c5f2765c5706dc3fcd212d63d2055938f50bfe5788f76622
- TLSH T1014124A9C5520C9E1CDAC1ACFA8C249252ED92FFD64D54CFCE05E6375046A37C826BD2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5bddb929efb23217.svg
- Size 813B
- SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
- MD5 38989a60674557794957d8970ea0616c
- SHA1 ad6caf09f64766883a7142a35fdac0cb00b359be
- SHA512 84c3e3aa4eda247dd06f7007731d09cfbcd4062e32e3aadfad5071a65630bd2247d3e34387c18672a7306ab3d50f28f25e3de1fc0f426a5e7451f2c99d9295b6
- TLSH T1DA0171AA33084C3CB9330B2CF7553239546662435D8D32408D37297756155AE7A7FAD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5d5360751452a836.svg
- Size 6KB
- SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
- MD5 362d6500721c3c8a8d580972f967576a
- SHA1 203ccd2096365bfc043577d3a42905e244495765
- SHA512 6dd67610a245febdf9e562da5d3792449ad31bf9cbbdfea773c467922055997b1c7e21e7d4be21e7da8c62d77ca107dcdfa2d2f0578caec54603f93238d7ff63
- SSDEEP 96:+RUlkkkkkkkN7egkkkkkkkVkHn8hakkkkkva2WOIc4B/v7hVtM+LrGRhMhju5UtO:gUSXWIc4B7hfWhMhC5CxZLwQpyz
- TLSH T1C8D10E5AC31409A87A8F45A9DAA91E421954F2F6E808ECDCF3199C33E063FFDC13D582
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5d690726b5ef06db.ttf
- Size 97KB
- SHA256 95837e182baeeada83368f7748db28357f0a1b75c6b84ff7065b5edf933c8e18
- MD5 b0ea4c1a4ffde563a4d07fb343ed77bc
- SHA1 2d6f2aad0983dbd94c546ff29e474f7b01a782f3
- SHA512 4482fc73e4795de3307bd0231512e3a9eec078421ca80d04bcaeee4d73e26fb8356439d86bb491a27ce4dd1b599cd4e762dfc7aa6cb332ee75c04c3d878e3d1c
- SSDEEP 1536:TV1fLFHoiO1hzY1aIZNhuqS7VUSEDxyon+1UOuJTq:h1jFHoiO15Y1asfcVUSfon+GJTq
- TLSH T185A35B07FB0AF34BDA170E79A87527DAF77CF9ACB65B434741893E6DAC87050081624A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\625b924eeceb153e.svg
- Size 3KB
- SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
- MD5 c64f89fab020cbcd74c935a27409a4f8
- SHA1 b97b5db9661ccab8c86122336840f43dc95e59a5
- SHA512 a171f5d43c1f4c023039a5e36ad8332ec2588191c257f10c197e62cc7fdb66f1be0d10f57813d2237699a8dcc958a4d92c33f907c258c604b6953852bb9fb074
- TLSH T153813079B6400D2CFCDBD6F4F3AE3436A52A82F79325A4CE9E874736C0866268063118
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\62b733d362f51663.svg
- Size 505B
- SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
- MD5 1906fc87115d852fee4b1f56d179e6db
- SHA1 5ac16fadcc3b88895876ddc3e15cdc10b58909c4
- SHA512 45772359fb1efa045f86515e453ba5918fd8d2c5f8a178fdecefa127db2b285ee79c1c0f79b5230e9d5b1e4de8090faa13a8a0ece879073a0a065c839633706d
- TLSH T1F4F08C652289AC3C7EE24218E32B71E4E0BE4092425A128084719939B9095EF79BB7ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\62dc31e3f318054a.png
- Size 4KB
- SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
- MD5 15ffa7be7f9859345203dc23bd3014a2
- SHA1 51ede507c030e11e887d65d39a2d768559e72ac2
- SHA512 58cd8fded32527fabe5a4dce17a3a415e79565f03a0828663ee3da299e3098c77d0cb9dfd460e5a7f3bf09f7687fc7f5daf3b56939f953fb915b12e6d4a98dad
- SSDEEP 96:1x2X7gcJbbQAcesEwmzVi4lDwLUuXOnGjISvkLLyMGy7+FEg7:HKDbUksELzXdwJi5qkLPGy7Bg7
- TLSH T19FA15D0767672D075DEA04E70E153874B9BBE15D49ADBA3A0F81C4A4C4729A4EF80A4B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6327ab0f8e3c16d7.svg
- Size 37KB
- SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
- MD5 e1a63ea271bab3f89450b44d75598bd4
- SHA1 5356e09f75249f1f4fac76b841eb90ab5a02db8f
- SHA512 fa9491fe42bd69a3c6c3d54e166936d12ab585fc603076ffafaf5c36751cea7ebf052da65046b852237adf3194a1435755c0824599a3d3c4af3d9e16908fd4b1
- SSDEEP 768:LGZ8SxbymsMaJnOuKXPUp/GawV7ChFa2xSQf5QzAcYm6Ay4W3HPANWbBMTAfuQ7S:LG6msMaJnOuKXPg/G17ChFa2xSQfGzAi
- TLSH T1E40351FE1FF448C46AC497E77F1950AA1D1992E3C9898D69F10C0B0C6BD246E8DF6AC1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\634f72a779327aba.svg
- Size 249B
- SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
- MD5 97e51ddd74adeb8530f22d5b50fe0f35
- SHA1 cc0d8c8487f69337c839b710e3c1cb68dc3a94c1
- SHA512 699dc3703c068e981d17861e75631810649dda153ac928c6a9203e9cee36f423382435326729e6e2cfcad36a176c038de0d984e711cfd329e62a42f8e3ec5e6d
- TLSH T1DCD05B9D1259C554B0928770F375312490A650C26348114498629575F05559F263729C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\692666c0b9f55408.svg
- Size 2KB
- SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
- MD5 b3452ccda9c0d42323309a1510561ece
- SHA1 479a8ebe418771ce0bb9b03ba2c03854191b2b1c
- SHA512 906fdac757a558a5cfdff6c92990497c4f3594f69700e077f71f62661a5cc356e8e3807f377b82c5f4c7830fc9de40125286133a426293dc187ddf8d3e226145
- TLSH T1C24115F75360D8A8760F9338F7771821B825B0F34778A588B4744D365A5899C58BF9C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6b1f3d57b04e487d.svg
- Size 3KB
- SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
- MD5 84f784b2e4097adbaf09ef4614a4cb92
- SHA1 134012f4cf3376c45ae718c13dc68fdfa155c7a2
- SHA512 41aebb74a39b8df2e363603c0bc4e20da8c461493ea60aa91edee99149fac2e10303fe35884116f2fe80cb8547b416cfd41529ac988e4c80c06b0973940805e7
- TLSH T1C36197E6A39972C0C2414771EF57A876742620F5CF04C74E466EBED0722A59EE81E8D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6e3ebbcd0a39edc2.png
- Size 4KB
- SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
- MD5 fe6370161f94b5fb9aafee2bbd9d5ba7
- SHA1 eabd33ceba95384c845f2f77178c6c6c3e5f3e06
- SHA512 52e178409f392ec9427413a0d9fb40dd691c10689dc32b9ea72fa7172162172c3b6f59a0c1eccc1d8bd990b362029c58d1cc24215a4e8443e953153f28baf5c5
- SSDEEP 96:9UcqcNfTXRqw+2dFK8L1ywDNQLEL/Y7wvSvAUDxy1DN:acqcNfAerL1ygOLkYwqvbNkN
- TLSH T100917E4C65A1401A674FAF32C65923993C3B166F2B8B7890990D82E299A3830B8079AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6e6472b3e10aeb93.svg
- Size 224B
- SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
- MD5 d25e2f322afd677a68bab1779e2bf2f2
- SHA1 32ef6d3724f9ad79aba204ed018672b0c3d9badd
- SHA512 9676f817f9c2747027c3cf838cdbeb62cb69cbb903b229331d2a6683827a6a462615bdf85c5c58448e95278064d046c3f4895214ad9768004dfb947fea3f9d9c
- TLSH T12BD0227EB3488C2CBA628620F3BA3279D0E78083024C11A4D933E034A1055DE7D3B6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6ef20e0ce2751205.svg
- Size 202B
- SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
- MD5 ba80d7c61555d55d76b071157c67f678
- SHA1 d9ecdb38f47a4c002419993781a18adb2e2e5da4
- SHA512 355994589fbf930ac7066d3421adda341d366cfea843346448bab1348ab7021bff763debed36c5c9ed4a483a75b265fa0e97ab07889dee56b7e84a87573af24b
- TLSH T1E4D023BD3109DD14A8115110E63CB05310A750D343CC61D4D4433133E0555C9B9776F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6f76682df45e26ec.png
- Size 40KB
- SHA256 9a39a3af854b47b0aa23e3fed83e09f6fd2eeac29d5e5aad160d76e094ddb812
- MD5 aac766af7a638ca565544d715686bd00
- SHA1 d39f91ad9d8e550aef9caa9b863bed5bb98acf17
- SHA512 c3c1c2e11541cbfff36d8cb8a5473e80ac45234c5f53afdcfc8f35149cb9d5ffc6d2659e900bcb84c042b6314efa9fe463b2f4094c8296a4ac1b707843b45188
- SSDEEP 768:yCB690qJWTHRwaQtq7G69ETLDpmNMMbyKLWZdhyfQF26uVULE/3da27sOGMT:yE6rcTHRwaQNoMMb5IdyefE/3db57T
- TLSH T1EE0302FC7B41DA0EFE02895FD96D14D060A7D0C2AAA4DD57BD21321D571BD3A0B2242E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\700fa70309836a11.svg
- Size 804B
- SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
- MD5 ddab01322009a7f977fddc4f4f9e5912
- SHA1 ef9c659d4ddeae06813e34fa73566e0a996147d9
- SHA512 dd86867ad05917f1c0218345e734642987c070c169cf8654a90132fefe4d51311e54695b7c4b55596614e9642d03ae88ee3a205562825ca6bf54169b841cf182
- TLSH T19501D059A314987C74730B10E7A6313AD0CF41B31B8C625004B2ED38611924DBDBFCC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7179a1df5787b209.ttf
- Size 95KB
- SHA256 405e73d41afb7e5906efce206a326af5c956f38e255f35421c260e861e599c59
- MD5 d6a2ed5cbe1cefca7d7f14c49b3ac57f
- SHA1 1eac97db6fe44c07e1acb8369099b14f340de4a2
- SHA512 6273c0b68e08dfbb0ce13ccfdba26bf9cd248ad435f6b6c86676352c80efd6e585df41661f64dca2b3bb62fde7b0aea307becbdb73dbd47c503e48bc90eb8a7a
- SSDEEP 1536:JjV1fLlK1rjFwwL++b03cO7Vy7k0bfoNIr47YnGp6msxm6UOuJoE:Jx1jcNwU++u7cuN3kmAm3Jh
- TLSH T1B8A33907F745FB4EDE270E78D0752BD5A3BCF8ADAB1B464751883B6CA8AB5A00C12149
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\717cc4781a98e1ef.svg
- Size 517B
- SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
- MD5 62c2001339f05323a70c7e8615d9a3f1
- SHA1 27403b987c322e90a15ebf81e79ca33deb0e050e
- SHA512 cafca99f9e063cc9ebc77ad959c730554c9d3cef4d42c1ad55fa5ea67a000a8270b63747b71b178b13d7afa2d53e3b8cbf35640de06fefb261429a174013c490
- TLSH T183F027B3167CBF81C06EDF89A2B21838596AB0F203B94EF243101165605B4D6381ECFC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\72c1fd3caec7d678.png
- Size 4KB
- SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
- MD5 24ebfd7bfc876300fb5e1c14389a0199
- SHA1 d35781d9d3b59f68fd80723bd71a7ed2df7444e2
- SHA512 b4832d3a978f064e4e099d82f7a0713a30be6661d18408215631c30739fd26e8d4fb4a27057ac6d1b5b57203b2405c330d8260a2399d1e54cda8520e8e5d5f25
- SSDEEP 96:fRSB7T1oPeSGO1a4j/eqjNh1KSjzWDjeK392XskWAcSW:+7T1oPeSy4j2qNh1zvsEXzWz
- TLSH T17D816C18FF9E647F211B0970149F7ECFAA3C72A21C60D95ADE6135B03907E426BD8310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\72db340eafb58783.svg
- Size 515B
- SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
- MD5 a2dc425931132d7c17a8fb5e3033232e
- SHA1 88555531a1d1c07fc147660e951055b9220aee64
- SHA512 80b5fd386eed7be242ec7faa04edde8268af7d2381671761d7557ea8edb5022182765ddd2382b8ecf7efd72ad15442724f0d34bca946115003e61533b30ebd90
- TLSH T1D5F0E9352188BD1EF253DF15DB737919F8A980521388215C89B7197D90050DE7977AEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\74ab371d1003b3d3.svg
- Size 609B
- SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
- MD5 ba1eb00b3c8c547ed41bc5411e07c7ff
- SHA1 7c8ad74e9005245fdb5d038c5f57cb095e3db047
- SHA512 23551c81f10653eb50d526455739a63a9ca9a8ae1a5c1a391cb7fa87fc760e0ba4687ff870a6c1db867b9c538a0661567e51adb5b90d7ca178dce087030dacb3
- TLSH T160F0AC38E3CC962DFA624F0C937324B8D05AA48747492084CE70B03A25690CE6CB3AFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\74ef97b398a3165f.svg
- Size 1KB
- SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
- MD5 4630a50507ca8415fbf5b11aee92c6bc
- SHA1 c35e4f1e836c4c7cb320306e045b2440b32763fb
- SHA512 cdd20a080327e23cf97dc80dd8cfea3c851a956ed666fee85fdd781e6460791f8e5c86564383f2e68b59ab4cf0abfff4127b2ac08e35a7bee04fbb5da350f67d
- TLSH T12911CCFF92D448D58204AF84DC138833B9597CF67E9E194D64EC616942312B4EC8EAA8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\77a9dc64dd93830f.svg
- Size 568B
- SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
- MD5 536af5d1866d0ba555cf4dc22019ea62
- SHA1 3489394d126bdfd584883774f70c479325417e32
- SHA512 a4cfb72c5251568837716967dd97ddb70ff917ae41467a61b867dae706a8e610957b823f3fd51eded5208095348e337a7b6b2ad366b36aa2490b3048afbf4294
- TLSH T152F0507673A84E2CB7B3471CE3273571D0BE4086274491D0C8769474910519D297F9C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\77d97894772b8d2f.svg
- Size 5KB
- SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
- MD5 9b4c6f25ca110c09cc4c9b73bfa62e1a
- SHA1 9eb090fd2efa6382607a0d536c49384cdb24fb66
- SHA512 41a363e8f36379db26bab2d60e5fc257516868aad4b70f9b9273fedf1c352bd02089d505e68a9b3b30c9fb4827e219acb128b346dfb923917e584808a57c31eb
- SSDEEP 96:cylQOP70251/6zuDLAY7NrSzF5iBNTkGZCfcQNdeV0aiCmY80Xxso5cSTUf:cymODVwSDL1y5M6cm80aizB0XxF5cSTg
- TLSH T176B185FA9688D9E0D787DBB1CE13A9B5B95F34FEBF8193C90150D8E456A41EC494CC80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\791eead8725e14fa.png
- Size 6KB
- SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
- MD5 5c5ee848d30d3d57c4499320cc18b208
- SHA1 be470e3f8fbc64c6d0d612dc0bd1475aaa624b1a
- SHA512 f1bf1aaf0e0ba8ca4fedae425799206bfa365c1723a03b3d77119be878209e45616bf77a7a8fd48c4c37f9a79b3b9346649a57136da9b300427b00b4d946843a
- SSDEEP 192:VSAoZwRIBh0MWtMQy7Zmstmm759qHMlmb2E/v:XoZwWpfFmsp77dlw2En
- TLSH T141D1AEC68C548655164A1747BB03509EBEFB32E29B312DADD8BD3D9CAF6402CD11F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7bc841d9002787a9.svg
- Size 573B
- SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
- MD5 7b77a01abbef5455dcef1ae5dd1a6081
- SHA1 d6590f7fa8a62d35b948701ba4049fa387b3c0b3
- SHA512 188769d1ab07e6bc67aa15aa8f3a9d60b71805fa4d293778deab1f32c7e9fd483e55f4874d616065fb31be42950f18602096cc14bac7439d5a349b3b32503347
- TLSH T15DF024B8E3C08A1D3EF31B0DE72BB564D5AEA642118D20D0C432D1B471146AD69FF6C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7e16ca1274952ee7.svg
- Size 8KB
- SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
- MD5 b4bd5e64195a14e9513a258aa94a7b0f
- SHA1 620ca304c4892f988b059e582c0ea07681fe7f0e
- SHA512 eeb4fd83d865033a689ada032d774c93ed6570a5112d97b208f377eb76aa78b45caeb5d258e84d3ea06240a8b786160cbb27620e9583f016e5f8c38dca621e74
- SSDEEP 192:gUdM19ZOSA+ATALAutzftzQALANfgdzdg1dUdGdUd3D3cFNpemA9vEd0:gU6DsSA+ATALAuZfZQALAJnRL8mAxN
- TLSH T1BD029CADCF180CECBDCBCF4ACAE6569506DE11A7A41495C48FEF022730627AF6433589
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7e28f70725b144c5.webp
- Size 17KB
- SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
- MD5 cc2016506ca46f0e04ccdad76a7cd5db
- SHA1 7ca5e0cbcec4195332392cf3a616e09aaf87acf3
- SHA512 e89f9a70a9efc110c356ea973c3996e357171c952eb8ca0572abe12cafb6221e35e9b86e899d2bf93a7ef39a5fdfc6bd2e9e7f33a5c682b6167fb98ead086df1
- SSDEEP 384:NRFBxFF/zuvlRcltOZSipop0dQ0+pim3TvDVDmrjmqiGobHj7:HNFkWtO60db+Y+DV3jHbD7
- TLSH T18C82E15386CC40D2EFC67857D8A6974D5BB399A1F1EB7CE929C283560560E381303CAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7fe0482b83201fc0.svg
- Size 750B
- SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
- MD5 2eb9dce7bd04ff2e0e315969ae7edb92
- SHA1 f73dbed701731094614361ec027d2d498e56b13b
- SHA512 81392903eee888684ddf8cb8a15de3c385395ddb57d8c10e7b56ec2e8fd93f97eb915559e5f9b4781d381fa2f32232c789614c0a6d6d2c8e2a962c01b1df5cda
- TLSH T1D1016DBFF3A58792B6C6EF60F3262167C03F19F45FC602C114A1C598680944A6C9A79C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\809a1e218234bed0.svg
- Size 1KB
- SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
- MD5 5f994f0a682f6799951ec84285f44c18
- SHA1 227328c087012661186ac042aef6c3657997b5dd
- SHA512 3d6f88c1dec543b16c8cc607f8dfa6dd3d0ad4586b7860872298eb09a6e3a7db37e3285c8c0f841bc74a5a1413f3d6a989620dfb207977cd785c54f02ca2aef9
- TLSH T1B82141DF23D0A2D4A8C3C768DD0A3E6611AB01FA2E2D82808923F5FADB041A4C45ECC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\823861837143cdc9.png
- Size 3KB
- SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
- MD5 64f40331141db5daa7d9a0e532750dc8
- SHA1 6056727e0260c8658a7bd52f6ba2905e0b3e1f8a
- SHA512 859ea07989ea172d94ade163493bf2c6e02aa0f7da95415307cb3ec6a26c1dd675e9bfe35f77a0affb736bbde80f9092365ddf3704cfe3dff81e2be5eb48d518
- TLSH T1CD816CB6A2E0BFD938359175454A92BA18BF23FE5483C81250335C1822F36888597518
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\833aa64d0b4e0fae.svg
- Size 25KB
- SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
- MD5 2dbc8f8b3ca75ed9ac5a869e23591525
- SHA1 87f712a9df018a8356e2da8af412e26467462db1
- SHA512 8a6ef67a053d4b51e37be308b954527d6c4acc9843ecfa63dc0b2e791fe3afd2b0885ff09fdbec69ab5f4f01db27eac5ab70af816b394b92748d52b394a730d1
- SSDEEP 192:gUtCunnslmQAbwtyRKnpDbwwQQQQQQQQQQQQQ22RdFXRdFXOTyIySxLRLGQQQQQL:gUtCunYmQA8tyq8P9OyIy987jDTtvF
- TLSH T1EDC23B20C97D25AA1DEAD650CAD81470EEDF51DF6620AF2478958B3EF013CE950323BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\83a9049d6e0cae5a.svg
- Size 251B
- SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
- MD5 ac23cab059662ced0b6ca1c5f06bcc17
- SHA1 8d5c7a9cc642b966a2e237e1a8d93e890f63d638
- SHA512 017c411cf345822ebab30a5621d5cb5109946cc6662e3f47f65fb8f950ff0fe16264d4e665ea2ead73ba18fd4d06c58f3f491fc5be5e2f9ffc0e20e0f1c58b10
- TLSH T19CD09EB5602DE9355840C118526FF5D6F06E94D5918542A450A1DC25BD449EF34353E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\85004375da840fda.svg
- Size 694B
- SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
- MD5 9a104bb6f305c360ff275a8d1415f6af
- SHA1 d90e898e4cbc863aef5ac7e4323c1f810ea881d0
- SHA512 930d14fd584233d1805924d0792748e47db8edcb9ed6b037a4361cf285a9861bf32c14ded9503db7d5536880bd24d25bd7ac856b5a5feb5d221aa4a94daa30dd
- TLSH T1FA01A4AA2318CC3CBA334A28F356363D20222653565E3154CC336179061915EBA3FAD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\86235b4464b5fafd.svg
- Size 2KB
- SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
- MD5 9c7e0868176b9454fa25308a053904ce
- SHA1 f8257e2abaeff2167a817a693330df86ddaa1c14
- SHA512 f22caba59b45274c8babf8f298c008aa8508e0dcae7061b0e5413ed7bf310083eb463c013efe70067a24b7e6f6a5c1f312ef1137b7963eeced1c58e5dc9516ba
- TLSH T12C513EB98B150C2D7DC9C594E3D93906311ED1FBB518A48ACE1A46737007B7EE433A89
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\869ca107851f570d.png
- Size 30KB
- SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
- MD5 17d68ab7d0199d5bee574d54369ca4a3
- SHA1 843493b0ff62ec3d6d56d7b20cdb1a649d5ea118
- SHA512 b028548d44b477ac5870ff687a8904c5d95fa1eb848ea7a5e10be9e91fed32dbe7adfd4d2280a3b81132d5cb916be621fac610658d8b6e3d1a1ec9721ccae4bd
- SSDEEP 768:iTeGt+eZRcF8AuwDCQH/V6E8QWuHzADDkQQBWUhtn04eEznAsETwO3j:yeGt+eZ9NYCQH/sEJGDlzUht04ZAsEdT
- TLSH T1AFE2E170B928D1BE76C5E1F2C747213CB4004ADA95D39B36E299590A93F14EFB14E1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\86f46fb860e9ed7a.png
- Size 3KB
- SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
- MD5 3d0dd59e1665b27583e760ddbd5560c5
- SHA1 51e8504c46d94704717094a917e6d1b34e7cddf1
- SHA512 fe8a98efb29dd8f2cc46f7677401204cbdcdf933f99f127fdb19d96704e96a25492aa2d18ce3ba418b7de5556df671be5deb6b43429f048f7287ef12e54e7433
- TLSH T18E816D794990C9F54A332E1387F1DC7CB15C022543A4C54A4C9BF2108BE8DA12FA64DF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\878f446ee6de2255.png
- Size 7KB
- SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
- MD5 72d220a8eccb47399a3e8ea297067e51
- SHA1 f5673c263009216248dfae9261673cb52af68767
- SHA512 23cca38b14493c1c3570acbc7c1ed189b1dbef6119c1fcd25271e730dfafb7f0aed7a78c127581d607c9c078ca4ef78d918c49455c34ffabbb61add50cf45806
- SSDEEP 192:2jKPknU7E0bvoEko79Fpbe+rL6MWp7Qnq6Ja:YKsnEcEko7/1e+36Rw9a
- TLSH T1EAE18E839616EB445C04D07CC7DD5F9A373EB21242CA6A62A98CAA457D73F11F67020A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\87dc241b2c0177c7.svg
- Size 42KB
- SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
- MD5 24f6ad0429924c3e33a561165f3da2bd
- SHA1 7186877c137b5d86bcbde22157efd87062f72f9c
- SHA512 1a09f1ebcbe1a0c69ff837f57228dfff980204b10f3fee6a9277728ddbf43a1e75d05d8ba28df5336d70beae79cb3f061292a44353b646a36c220b8294687b8c
- SSDEEP 768:1i2z4uhB3uJxb+7yN6s4iYQc09CjAkmrcACaCzajRY7pv:pBeJxb+7DiYQxCjAbRYFv
- TLSH T14C1395CC3B744A9489C847D7BF46A0BD682772EA4EC48848C05D6F4D28E19FF4E69DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\881503b944af06d9.svg
- Size 1KB
- SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
- MD5 f9db57f31b39f6da22bf9d9a72a2ae47
- SHA1 c81e3a8b595702ce2c78505c371da2a3dfe54ce9
- SHA512 46ebc638425ecdea3933e2b0271ee8f696832ec2afadbe9d841c034190314cb8cad0e4bf7520d17af6c5554a0c597f1c13d70a3f210c0b8300e7ba7db309a8e3
- TLSH T1782121F333F17A97A213C722E5BA2C0A21AF44F52382499240F45E908FA14AC7B8DD85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\885856d657cdfb17.svg
- Size 272B
- SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
- MD5 51351754c26f9a3c41f86f2d2e2b52ac
- SHA1 b0c8ec4e2e97bf609b2e3dde81c937763b317332
- SHA512 314a13de5cfb45e816a6dd9f9a735494a645a3418e4306865760b7014ee706d0f4fcc9e00c2748dc81467da86194ab0fc3c9f3e0ca924b8b3c54f5bfc58d1194
- TLSH T185D05EB96348C82CB623471CFB653568D4BA604346CD2184D93AA9377045AEE7E3B6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\896669c7450ccc86.png
- Size 6KB
- SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
- MD5 1f45be0094bcb4ac8ec9d827da9af706
- SHA1 0f1e3d2f7722858317d64f1a74fcff5b5c7c00d7
- SHA512 ddd11d49428c42962b31da9e6f99537d37f3d956fad27d396398757967bbe034015c5a35ab272ac6a612bb042a3f4de2aaf7ce548462fc4eeab66d7e21b47621
- SSDEEP 192:wWumlSGgzMt4MlzYwHonVQHCAHo21+Z15:w9msGg4Tl8nn2CAV+Z15
- TLSH T10AD1AFF5298E18DC0274B16707D3F935C8491E0D37498ACB64B7438F90E1C7A1D03E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8987293ae7ba4469.svg
- Size 388B
- SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
- MD5 c73eccec9045a469690bf8d25f1b0572
- SHA1 1efa1d7627cbb95bbce5278f123636e830e2effb
- SHA512 a60150c1c6e376905cceb5f61527a25ba31d685bd5ab62caff1c809f69e722e7c28a999d168598f43f57587062546741ed8b84a2c30bc2c010e89a12ba8657fa
- TLSH T10FE0D824EB0C4B3D9A17C1A4DB6DF334075EA292325C0438E8ED1631515B74DE837AD4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8a62bca7498ca4cb.svg
- Size 343B
- SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
- MD5 0d31b32c08dd1fbc6615723d67497f5e
- SHA1 24d9c66824aa5b906aee7838293d022cbc358ecf
- SHA512 0378b40c5abcbc55e56dc450fd5e2e00f8e458091235bec482a30db90866f2c60cbbd8c67cff08505f5167df10e2e8ad8522aabcc85a70cc86681d71a50ea327
- TLSH T19EE086797398CC3D7A274A29F35375A9D06A2012578A2120883AD43450149AE39FB6D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8bf0bcc9a3301fbb.svg
- Size 798B
- SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
- MD5 1f7bcf3e43446e202df261fcd5ddbac1
- SHA1 011f0cecb831445f17b395f57a814c2c918b048b
- SHA512 ea49d3bca31871953ee7ebb883465cca7d97a8666500b15ccbd75a4b7de05a3523ca78cef38edc92502b34d0f55b122d67101521f56fa1d1c7c2d69cf2f04d36
- TLSH T143018EFA23D4AC6E62124358E7D7385950EB2031435B61D0443296FEDA808AE0EBF5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8bf79756f58263e4.svg
- Size 3KB
- SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
- MD5 e497663405ed33536122ebe5d487a6d1
- SHA1 887bafca5ecb3826032a9d195da4e4d28c29aafe
- SHA512 1dc057920f2a3b29e066889553227184400a46171bd90c07d82602ecc0f3a85fba71f9fac2e9333e9bf76e2cd6d0823233713473ebe7bfe5de7c8a07c8e178c6
- TLSH T15D6199E5A3D932C0C2414771EF57A876B42620F5CF04C78E456EBED0672A59DE81E8D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8e2cf4504754d310.svg
- Size 272B
- SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
- MD5 93fa396a892528d66410df19e86cddf9
- SHA1 25302966743278d2618d7e4fd48c4df25e6b25d7
- SHA512 4a46f81d2eb7fa983462b9574c250df74ea826e2840bdf78b5665625d42f09d5b140c648b2fe120ce404c93c6b67a84ffec28794365f2403285813961b65e39c
- TLSH T1D0D02B782309C83971A2452CE37634E9E0BF4001038A119094219439B0099DE397B2DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\91ede6982d00ebc1.png
- Size 4KB
- SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
- MD5 bd87d5ca7cfe7492e0111cae4d06af8d
- SHA1 945cb3826ba4bc43576f5abea0c706ef652c15e5
- SHA512 0172f738f9e433b296f45b0928008db613c3a32ec14cfd0d22a676cc0cb19b25de2bcd8f041e8bb90f29a9da52223d8ef9b6f717e1fab25133fe9d51648e001f
- SSDEEP 96:aLPWZnmjAmWoc7+MPPPPPPR/XWSDPlKFEimwRwRBt:rZnPmuPPPPPFXhYnmwRAb
- TLSH T1B3813C4E2382E98D75DC4DF4922CEF549E3DFDD87850A2586CA999F8242100E2B7169A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\931d0abe7a9ac97b.svg
- Size 485B
- SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
- MD5 0a4087e9033cd3f504802369a292bd89
- SHA1 cf5be0762ab84d983d33210c73f818858b24f37b
- SHA512 583df81897003198420390d6b0791e0549500109934409302659c33c402bc10b184c17872320cd22b6ef91b4ee8b181e52fbd40945029c0234f5a099b1c16528
- TLSH T1C2F02738D3E889846E426771E7B17438E85F88940609488C9534B928B26C6FF587A0D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\96cc5bea8cfdcdd1.svg
- Size 1KB
- SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
- MD5 b9f2f799498a4f6bf9bd6b15fe630521
- SHA1 259e1af04e40983cd2de683e93ac3de1431351c9
- SHA512 b057bd4250122d4f1cbbf5b98251cbc48209f481ebdd75743bf239ac1d5ddd20909cd0380feff9960d188ab58971e24d734fc4f8f41c706f19f5f17006f1d61c
- TLSH T12B212DEAA340D7C0848BDF3CDE2B6D20F69F34B5BA014BD57205C4046C225D89C89C90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\96fa9a8683ad0a32.svg
- Size 534B
- SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
- MD5 c55b3c4d31a8b329f1444302d61b66ad
- SHA1 30eae0b1be2936123f979ff4a15ce66cf0364c7d
- SHA512 6bd55d96d9c3a5fbefff662bff236f76a5f5542c9f16023fa987ea6b28bcfa02707045c4e9ad4eafb0ae7590045ed7f580aab266a9cb41385b1a9f0310139d66
- TLSH T135F0C0D210794179C427C334B7A8369231E74CF87F04C8E511F03DA4AD586ABA8DC654
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\97e3abd934c12f4e.svg
- Size 2KB
- SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
- MD5 686888d9e85462d367fcb4b15a111782
- SHA1 e330c4b13e3beb0ab1ce1c681e231df270114d6a
- SHA512 2f2767aa6c3df1d013cf77874cc3af04a57b73b3deeb360d4a7c512c333f0aab621d42983b78f3c02e0b0029809aa0664584bcab8f6a270fb735c70133e3222d
- TLSH T1EA5141EF3384E5D0E48797F29C266836759728FB7F81878109E49B91BA142B54C08DF0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\982d29750cf2efe8.svg
- Size 1KB
- SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
- MD5 6b478b36e8bed97c2f72b99c307d97e1
- SHA1 089873f7acf704f95e6e5bed3376cfb0c45af191
- SHA512 33e3a9e530fdd0bc98dffef3750edac594ada22416192fc9cf9220a921696897fdc66a82066ba0a4c5a9224d299bc838e200f64b19d60e61f191f1bbe7128834
- TLSH T17831E0F579ACC1C695458B3CCE3D2AEAA1B378FE2F980094B2D5AD58EC743F54C08285
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9a23d988229f3c4f.svg
- Size 501B
- SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
- MD5 24f39f97dd5dc6ee527a38bdaa1c7c7c
- SHA1 82fd9f0a91bc4e1b7b25efe5423f46afd04685b0
- SHA512 4b8a012bf052cd1cf619d1308b6bcf6aab055a3e4a6683a1caaeead7f847320479366f657bc89908c5ddaa08a67510f136f6643b43191e8d29ff7e9524067cd3
- TLSH T134F0E2B997D98B058AD1173EDB2A48E2D26FF19A708842F0CA3596B671502B14C5C2E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9b8afed344c17eb7.svg
- Size 196B
- SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
- MD5 3aba1e29264a8cc23af09bbf602edf04
- SHA1 45adbb722051b6fd01189aa163142a6460c83203
- SHA512 6ecc87f7a0c370675f0323cc3ddc0863dc63f57234c066d54e3204710165f2d952b451beafb005e61266c2148ed9fd3e2c6ce7efd2c54646aa4aaab14315e047
- TLSH T12BD022B9B108DC2AA8208620F23970A104EAA0A2448C40E8E814B833F0465C769366E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fc4cb3c560c02fe.svg
- Size 190B
- SHA256 3d851f03777a7ef958c15b38eba255ad44e654275a9e594a328840cccee99f5f
- MD5 42d3600ab482d1cee4a604423ccacabe
- SHA1 3b92eaefb8cd5c12a6572533b0e55a2e68fddcd9
- SHA512 1491560ddd095f5a5484eba2134d43bf2ea429047333497e250fcd93f06f43decd03d605500470d98b0ecb2add0b1df800f8cdf03b20cbff365cad7e00f4056d
- TLSH T1B2C01279614DEE14C20485246728B49954A6E0C59A8C0168E645292BF0559C7A9321ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fd27840422642a9.svg
- Size 365B
- SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
- MD5 aff6bd6fc9aae8e659ce753a10a56c9b
- SHA1 ed60a0a1c9c00331c69b7ed5aa282e08e8cb11d6
- SHA512 072699f25e2bad65f5d7822a66b5836cf8dacccff464d47905db9ba7060da67742dd2f793e484660e74b64bcfa2a3419e3771ef18a236b9da1bca423b6082ebe
- TLSH T130E0C0EEC1CC92D14008C311643C1891F86630F16DCA0494E6C2B5E1B01A5FA9C85DD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fe4e4ead173d4dd.svg
- Size 643B
- SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
- MD5 e24076dcbc50a46cfd1a3edacf16f7e2
- SHA1 ba34de7c502f43c3913ef7cdf335097620a28585
- SHA512 86dd9beb77f7e747d6c5ff93c061bbee5bed5689091e60fd79b2705cf399f7bffc6a2148be351a66057426efbf1c713fdfabc814bcbda8750adb9dc562b4a220
- TLSH T18DF0DDEAA3C8CD2DBB578730D353A426D13F38BA260911008831E278150428C983FDE4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a0ee19f03b9940aa.svg
- Size 227B
- SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
- MD5 474b4df812974db350e641b4b0290204
- SHA1 3347123b5e243fdbea75585361d80c4bd1653d3b
- SHA512 0e5b5d90a3cde0eb1e2d675602661dd7b9a0a1cb5e203434e55d37dab51502ac7d19aac095941013447247b76c3af9e9ea47e5cb12959ba92d44441de0c95a0e
- TLSH T122D0233563C8CD2DA8D14614F3B53535C556C053014D10D4A472F074B0445DE7C772DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a1a3ecb5c68b205c.svg
- Size 166B
- SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
- MD5 eefdeb195f6d7b895ac9bb6d65461e88
- SHA1 c60e511ca5cdc8752d9ae0debe5a108f66ea05a4
- SHA512 3ebb83654d9f1d2584d4ca478ba422f48a26fde8ef52d64b759c2c93e7591ed4970dfdcc0dfef76cfc2faeb2d25b82173ab0dd545c41bdf59abbc39643ab1d08
- TLSH T155C08C76A46CD908C104862491A8B89A2693E0C3978C0058F692713EF0658C37C202BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a49ea8daf7467bb0.svg
- Size 599B
- SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
- MD5 b8a6e66755a9aaef650eef20e03121d5
- SHA1 0cd37377b96f4eccbab78d4532945a9da045b03e
- SHA512 8d81052a3367ca5179677c04d61e65ef48d880074ae90d766da29bab49fa90de9182330e731e7a5d94322bb52d77bf0ad2b08d8e2b70880cd7c75092ebebdf85
- TLSH T147F0ACB992806458B682CB00EB23380CFCD62436478AA648CD2B6AB882010EC543FCDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a58a2e93a4b54988.svg
- Size 304B
- SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
- MD5 2de8b091bb780333b06debd79d5f5321
- SHA1 487072ced909650f67e5acdc1ba9286a3e1e36b9
- SHA512 238d5afbac1d73df7e02763e174b378a128f34a376f7f99bd0dbf1083ea33aa44f0806f4c48b6ff6f257bd949be7e7fa1ef0e3af968d792a598c3faca446114e
- TLSH T194E072F3A0DCF689C08F833180B9180382A244A18A8C048EE78A2205BB144E31C48AAC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a658c46672ad28f5.svg
- Size 198B
- SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
- MD5 1ddf2c975c7b93fd75763147c7310002
- SHA1 ba07ea431ad635528789fe1b5858bf64ad786db8
- SHA512 9f1005b781759d3a8a7ad438e0db494dad2dd1b2656e5fbe3398775e5bbc3de22f28618358856e8d188a9ebf011e538b44ee8318289e4ce76c746ab13833c5fe
- TLSH T1F3D0223AB18D8D18E0548120E22D203224AAD0A2008D00F8E8222036F0091AABA37AF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a7a18b10642bfd5f.webp
- Size 7KB
- SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
- MD5 4e5360c443a379004fe0796a97922eed
- SHA1 fb812bb975bfe68d7993561f7507f52a10f0f9ec
- SHA512 97c812d1417182ed427d2b2897a60e13a095961a1f2efa491ed8c15734b9f7aa699b307e48951ba8af7516173cd76fc8f16fc9e1a23e2cc0c1ca1ca8390bba2d
- SSDEEP 96:GG88hLYzOa33TbkSGrpQkI2tmBPGJpUS8Xg6O1/sWi3ITZeZJ5QNvYsDRUIeGAV8:58POaHToSKTIWpJOS8wh1EyMGvYEGGAC
- TLSH T1C6E1BF07F8ADA0C7F28EA2F20729C5C7286AF6566B7D493430C63ED840F17A5834C90B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a7dbf1405144b262.svg
- Size 1KB
- SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
- MD5 a5bae8c7658dcc9b173fb37a3b706130
- SHA1 5d77045996898b5280b5afa25a57e9b98c560ed3
- SHA512 e6b3e071d8aa4a3a8b893605acd61e6cf87d38059b2556e8678f565d544491f61caf831379e21cfe9eed03ff5fb5946418e307f689d64128498588d6d6a9fd8c
- TLSH T155212EFB8A487984F993E704EE1B3839FD9E54B6121AA6008E269E3857000DD081FDDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ac28779d03531772.svg
- Size 452B
- SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
- MD5 5321ffe6b12de01b95e95fdc515592b6
- SHA1 a337fbd79770e63089ca1ca5577ddf46fc2b89c5
- SHA512 3d404eb19b9d84341864d1b817643affcc63865a4a0835304b151331d7f40fb72c696af7856183800b871bf828988c9d4b90a9a16659cbf57a84069b50e0d0b1
- TLSH T16AF0E56D2304AC2CB2B30718F37A3428E0BB8043025E6084CA23A239505A5DE7A7B6DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ad827c7ddb8dd0cb.svg
- Size 324B
- SHA256 689f991b5bfc36e706928b329f1c36cc51464bcb367b555f388cabac16ac7c91
- MD5 97a5d98ea221183791e9eac2e1385edd
- SHA1 115b6c82e447ab964b18e6901c45ac91ced6592e
- SHA512 9f72ad35b92fd8d30a4e42748647461dc4b6bfb01ebd80965cc88ae05d4a855a6da272d2126e9a238ebab724e671194c93e0137cf33b311c4deb4cdf2d6823d1
- TLSH T1ACE07D74216DAC28D009C814E27B706334D280E7020C43EDE4521832AC4525E753B2F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ae846f7eddd04278.svg
- Size 1KB
- SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
- MD5 0b3299be8b4cb19444ba84a7d18cf957
- SHA1 e425ec928d7047bd332f7b2597be41fd9a282bce
- SHA512 1c8ba769c42190a1d1083fc1a2c24f4c7849587ed8bce0705fc17bd5ddcfd2f3469385b0a075307462b9ee0ea2c0846e982aa56b1352f5bbc6a8220cd698dd0b
- TLSH T1E6112770A3DCAB28F692074D5762A4B6E0AE978357480184D920557DF4254CA5C7A1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\aeba9f15ecf7f43b.svg
- Size 224B
- SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
- MD5 0b82094958c8b660aef4652371b21898
- SHA1 4943be7c464d13f465834cfee1f6616bcedf576b
- SHA512 d4328e48073fd0d5d9a78a6a639fe80287805308e5b39a861f8bcd335a0a22b3536898ac314d0bb3d7991c4793fb100e7b2ee56148e0d219d06ab281806fcfdf
- TLSH T1C9D0237963188C2DF5724630F3F93535D0E78043014C1054D573507491455CE7D375EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\af5f97cd7e418012.svg
- Size 973B
- SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
- MD5 09970ec3a3e40fcf1ae64596a4821257
- SHA1 4d665bf30b678eb3d9213fb1934fccbebafaf2cd
- SHA512 7f435aeff4223794f8fa1e6a12cd73eb0c16bad82d3fd1769bec699dcecf97aa7d6406eb47f7b520860424561e209e34c761faffecb8cfe0146fb53f3fc90bff
- TLSH T12F11EDDC33488C69E88282C4CB26323DE17570B78A8D4065EF517A755E4A2AB18337E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b294d3d2f70d508c.svg
- Size 515B
- SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
- MD5 9541a2955a0bf297c841c4f135d0dab8
- SHA1 48a272b857250e28ed73bd7635baf64ca984a1d9
- SHA512 2c2ea27967142de624db1d8ee40aca78293282e025c744c454b5c7ca2c32a756ae931f2428fd981d9202afb13b35cfca8f1d3d18a8f34bd556801152fc21633e
- TLSH T1B1F05969AA2CE919FD519212D22A61F40673A051168DFB10D222EF32B90A08D253EDC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b37bf551ac569d00.svg
- Size 939B
- SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
- MD5 bdf4c4279d555a858a27c0f68e05511a
- SHA1 6ecba8c0aca6f6cd5314cb61b8430dc9efb0474c
- SHA512 7043b9fb7b3ab0002a43570334ef4bf7707b1c3fce0a705497b6bff314de77916b19da5d5cca260e18e584cfd51fd892e07bbe8478d557cafc60b7662fc01a4b
- TLSH T16A117DFA972598D83923CB05D7376C7E1056307E5D25610D0833E87262245EA25DDEC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b4e5db2f8e466503.svg
- Size 534B
- SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
- MD5 e073b511ec1c2c0a51867d6d0809e00e
- SHA1 959db4b8abbe219a0482a82f1e71722165a0dc3c
- SHA512 9c0b80cef603fe2843422563376c0899088342b2c793b84fbe1a3a1722e91d72c93e35afdf107f999a91bb4504833fb9af0f22451525a4f0f8770dc2dfa1443b
- TLSH T131F0C0D5107A4128C4268334FB7936A231E35CFC7F08C4E421F03DA4AC4066AE8DC684
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b631c209ab478391.svg
- Size 913B
- SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
- MD5 4b40df36b925e9247048a6add67985ff
- SHA1 0dfef21a4d555bf37bb7c47461cd76e8151393a9
- SHA512 72adb9587ea581e3c7322df9317b36b6300cdd218be48cdc9494dbd914b44dc4fa62c13094dd8f5e664b92c4c391f84af1c27a999acc6c41f248621c9404aee4
- TLSH T12D117AFBA3A1A8C89D428737C1D6356FE2AB21B5041101C4CD71CEE16BE48ED0A9EE94
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b80fc20fe385bc09.svg
- Size 870B
- SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
- MD5 64b672c5070c3e2419c2be0685b75732
- SHA1 0fc7cb96fcffb31b1152226ce5ee927a89f9452a
- SHA512 51c94af12a91d3e2536e366b0c1450b00eb15a210cc9758b2b472d127be3c6d9a794a2df2b3a909d9c934b094a3323867ebfa610eccb19eaa812beca0e9b180f
- TLSH T12311407167686E6CB6AB8F4DE3723538C4A6A0B2034465E0CE309075020B4AD393FDEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b87ddd7d399ff7d2.svg
- Size 795B
- SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
- MD5 29dc7d2e1a7ddd06f41a5493215a2916
- SHA1 3e31138b55c736f6f1bd1983ddda06bd5ffbaec3
- SHA512 f201473ab71ea2731d6dd474b5e0f77db5f3baefea08e4f733cb30b459c6485583562d76acc8f9827aa0b318fe46958aecd76a44c3b7357c94cd893528a49665
- TLSH T1D3016D7273F4B6293AA74374E3D4303ED1DB5061111A04B09571A87461428CE6BFFDCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b8ddd3b0a5acfb1f.svg
- Size 916B
- SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
- MD5 65b67b30ef230d1fdf6ddecfdf8e6798
- SHA1 b2b7f8630dd6b54d4202ebeb8cf80a27c4ee14c9
- SHA512 cdbd1a5a1619726b303fc129d75ddb11291fbfe4f3d456058bb824284554bd41c70fa00df62c3811dc4849899ac9e5e83e95184fe8a1c2b549d5c6a91898a0e6
- TLSH T1A8111CF26388F1C40509A730E922A8CB600FA0F56E19408442A0AF69B0A73DACC49AA4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b9e2526d946fd3cd.svg
- Size 2KB
- SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
- MD5 da1d6bff9ea092859b8f2af19892a51a
- SHA1 a4e4a35e19b629bc51ad690c986e463b1543c2b9
- SHA512 300ef0881b7363a95bb3acc26f9198f5121e07b928aced0abe030c24231a908f1d188d0803944a8fc8109154f2639f9cccf9a1bcdaf8a8585b831b5c184276f0
- TLSH T1B2518ECC0338BAECB82456ED9B6635B8A8911CE72D339160DAA305E5106185D5D3BEFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ba9bf1c3957e59f0.png
- Size 10KB
- SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
- MD5 59fc427e5c4bb9d6672e09c4cd84c9ad
- SHA1 997d87eee437432ff8e9558e776b92395dc27695
- SHA512 99dc306ec1ee734abd8f3ddb0a0b70b41ba94e7991104a5ea963dfcb8146510f0920147e5b704ff0ccb8291167ffca6b4bea8a1ab90037bf184e23f92a89cebb
- SSDEEP 192:wSxPCUkL2wtudO2AOVF6swc1eJGMbvmzGIv+81bg83epthkZh:XxPS12AOVF6LcfM+Z+8tH3ept27
- TLSH T1BC225BC73EDD660F09F203568317DDCC4A7B638B58333658DDDEC71902AA2994B166E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\bc4e54d6f0276d36.svg
- Size 8KB
- SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
- MD5 420b7f6246589947f326067bf9ce3725
- SHA1 e7146140ca1aac3b9e47aa13791d59a980231714
- SHA512 b7ae78cfb896ee4a9fb57f5271a8b3ef9eef46729fd76fd7f22073c311fc8e87bce8d8bc3e30d7e7acf4a115bd1dd0f3f30853de56a394503b1351eb7cf63feb
- SSDEEP 192:gU9Q5e7M5e7Ar5e7d5e7h5e7X5e7z5e7vRiupAppAxoBiGM5e7nvN:gU9Of7N
- TLSH T189028EDE861207AA18F6C2FCDAF415363C27C1A5B9A97DE0CC7F57E6C00A3DD4462568
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\bccd629ae7cb011d.svg
- Size 217B
- SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
- MD5 078d33346ea8905025012e5ce35bf0ab
- SHA1 cded092f38c0881aabc7f2d78840f9bb96837f8c
- SHA512 39e908c8880e4c6d4cc5009b4be6ace706b8af65c12da747c14e15e28444fde66d5f093154e173840f8c12c8d860deb24356dfb7a90e3d63be4fb625d87d7c7e
- TLSH T1AAD02374719CCC6992078110A33B705564D6E08F414C415DE520D431F5156967F775F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\be50ce6d9253a5a9.png
- Size 30KB
- SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
- MD5 d78c527a67f1b079d13cafdb39953355
- SHA1 9c3d29767a33680bea37b540ab60e37bf908998c
- SHA512 822471142af3546917a18dc16833a71429952ec6323bdaccd9fb2dde2ab187018e536a8fc7675af0c0736d7ba76c15ff6d77866fe3f20328243c92b52600dd6b
- SSDEEP 384:XFnihQJHu/QGFfO6srruaOkcQ1J7zGrH7RnbLnzfAn9p0/5+jeqVkRWSaC/kuqqd:1ni9/jlcDf7z0H7RnbzzIExWVrBC1Qo
- TLSH T118E2E190B47D17964FBCF8D69AC160F0051EDAC221F0E392B1F580F12A8F99F24496DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\befe724adae4279e.svg
- Size 297B
- SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
- MD5 0d972fcfeca13bd6e44107f96ef69a13
- SHA1 b99e0f567b1adfda5fdc9917ecc8ce60684af51b
- SHA512 a1dd4c5efe55414f2c65bd0d6d5b777c0f9ed1b0ae1cdc3eb3b5ac70eb0ff615b3fe6fff9347a498bf4c43df2e2c656ad19a1422a336049dd60af2043cd9a5f8
- TLSH T19DE02BB9235CCC3EB2374218F35379FD207B2012034D221088325438600499E397F6DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c01afd7dfd61f804.svg
- Size 198B
- SHA256 ec4d631df4fa2114ffd8d9be28067aa58c8314e7efa6e9d4a6458b10e7e243cf
- MD5 9cdf5795b4ae91176abced6661315dc5
- SHA1 520a162ecaa1bfd96153288b8c62f9c4edeef554
- SHA512 d4f23a59b612473377a08c9b710c154837d1747a61b44b5c16664a095a5ec46b0c068a4ff98b2edd8f11332c612a0228a618dc6eb1de5d426df302b50a75188a
- TLSH T1F6D02269216AC948F2018930E22C72A310E7E0A711CC00A8D8267032E4093AFAFB26F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c2975b0d0a40a4fd.png
- Size 2KB
- SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
- MD5 9cdf89587732904969020a862b7574c5
- SHA1 6ad9fbb1d0ed380a529adc13f750803f500eb222
- SHA512 3f677bfffe1162307ab887b6d7f7dae89fe082fbb0e5e38b60a51f9ee3e2aa02688502a0de41362e7871a26ee53750da83fff6847befdad1b63eab3248aebc41
- TLSH T1B2512B039E49401F86272A058E67EE56BC284FD3494F5E2CAD07AB4E58518888FE0029
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c3c4018a4fd62a9a.svg
- Size 520B
- SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
- MD5 7d88be10f22bad34e4770cbf82467d38
- SHA1 d5ba8579c567538625bbe092901ce4cacf4aaf8b
- SHA512 116fefe71be78ac5eb08d5ad3323e80a822cae28e75c2cfa92eb1ecc01f972b2eba35ef9648e54c1ed278180ce39817084782451b542693b029e331e6b9e744c
- TLSH T1EBF0E2F323B49928A9E78F41E39230E452673D12738C52A65471ACB4616C38E9D7BED8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c57ac42a27678f77.png
- Size 1KB
- SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
- MD5 00a42dc8f8c76ab763a31e7546b8de7d
- SHA1 c4bab33008be2578a304e6a91052bd88f83cd80a
- SHA512 0f35f104cecda130f4028c6c0dd7072e7e6b634b49820cd48f5b0362f00dafe5d0684b0ce2339a3d4ed167bbae45bcf3be9a9ec834de02e488b80062caaf684a
- TLSH T1FD218AD4F71B0D06806CCDE1711A2BC0271AB52D5B7773704F29291F4526DDD35469B1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c5e2e5518ff4a597.svg
- Size 884B
- SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
- MD5 0c328010811ae6af8daa9d5bd92d9746
- SHA1 421c2c5ca21828e33280b3f6b7d5a3cb94bd4cb8
- SHA512 a67bfeb401f8d5d9d8cca99d4f7e4ce5fa727212b63fb4804bd041eae58095aa845215811221b85ab6e9bde707d0ec768e441e717f9076cd33e21458373130f3
- TLSH T15D11C0FB428DE5C6F103EFA1EA71906C11AD387C9FD9636444D4A765B3900988958D58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c5ed42bd4f1a6974.svg
- Size 394B
- SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
- MD5 3378d65d135a45bd597602fa2cb15fff
- SHA1 9ced7f7805ecafafb8bf1ab49fbd1bd2afb47211
- SHA512 873bb7e138b3ddb8d2a937b3381b1a8f0976f251c0922a42287b4ec67a56fe5bc87f6abc6031aa866fc48cb3ac91dc7331d48472562c11a8281babca65ebff8d
- TLSH T1FEE0687E83C48A18AAF30B19E37578A4C07FD442120E0190C530E2B9711A2DD7C372DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c6b3624b8cf9684a.png
- Size 3KB
- SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
- MD5 f51b14d920415dccbc1c5d3b90e96afa
- SHA1 bd5d59badddc325bb4747418845a824b1e5ef1d9
- SHA512 ba620b850f329be6e2866ce456aa86e1790e7c1c11dd5740aaad567e953d07a61d7bb7a9cce5e526d0d70977b5137b1d299e5425cef2e127b92e6d19f98094af
- TLSH T1AA818E9AD035C0905DEC2C67609E020FFE5BF907466DFDE12D4298A3214A25FE47A193
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ccdd22e861d21d30.svg
- Size 936B
- SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
- MD5 78ced8fcfb11e0fa8cceba92bdc84d6a
- SHA1 f6c219bb724d8a47e28e2c72386163d71ecd3195
- SHA512 fd04124e67fa9fe834adf5d4e9a9ac4c768a03cfddf0331a6e540febfc9f40e96f140884f3603711b2195470ea8c5f574d950694f3bfdbad480e243b93426374
- TLSH T1C51159D663068CECF6A30FA4D7223271E06F01536A4863A0CCB699F4701929D6D7FDE8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\cf9e121c611b5d0e.svg
- Size 2KB
- SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
- MD5 5c8e3fee67a1959df017e4b6e1cab5e3
- SHA1 2f85f6d29068ee32aa7b6fc419fafe61f4dd993f
- SHA512 14c2d370e34ec93b663aaecb3e06ea198b4f93a62fa4ab9401a7dfa1b63b9418409d25ec279e293128bf0debb044cc7fcbadb42a770b0ce6654635fb1abbb27a
- TLSH T1B5515494C1D611566A7B0678F79CACA1ED3054CB8110039DF85E31324F37DA1E9EFEA8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d05dd34996b64d16.svg
- Size 16KB
- SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
- MD5 7f91673a342ae61b72cc80558a1b3cf8
- SHA1 e343e0a561bb9072097ee39be1c1ef1dbe661b8b
- SHA512 703b247cc8e3857a463f240843b04dc97ad7c1ef9d95611d77840c984323ea839aa7feeb7d2969a5634be248996bdcbdf6d986f30b979dad4eb8a50bf6edab38
- SSDEEP 384:+A7HiDidZQ1HIoDv3062H+9fxSt3Hci5KL6:5CDidZWoPQ9fxSnYm
- TLSH T1BD7243DE3B744CE498C9D3DBEF0150BD781791BB59D14B24C62C9F18389289E9D2AEC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d065dd41270e47f7.png
- Size 4KB
- SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
- MD5 91c3a4fa0395d9977890bc7677453b07
- SHA1 ce027b37582383c7ad313e4b559e61d239cd03ce
- SHA512 3b9ea5909dd02ad77524dbdae4dd99f56f58cb995dbdfff6a62cdb2373ddc50689a4dd76ce3288fdd8e594fcb70cf124689a71aa64c9420af4713d98f73f72f1
- SSDEEP 96:XdUD7yW/D3I7cN/LjpKpvEUQGdFzPEclx30/qJIfXyNhj+IGcImZdO8Zc:mD7L/D5N/xqZdBPEaaiJIJ8y
- TLSH T1ECA17E73F429CA08963836F41252DD5CA8B2456E8B3BB62FF46143D23CD5414F92B78D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d28440c6dc230bf9.svg
- Size 290B
- SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
- MD5 34ad08b932e183b48616ffa2a92d5191
- SHA1 804010cf0d8b0db78792761c3f2fc190ccdb9b4b
- SHA512 1cbb02594d07bbb227dae001c5172c2b2794a884b1304e2de866d3a3cba4a9764e463cc70c2b5ab6d64cf912c6b055088026cce6af5445f83db443c7e5935f1d
- TLSH T128D0C2A65059DC0551214B34C43C39C22072B88A2DE9009AB1E02925BB586E29D482FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d2cf554ccc93ffff.svg
- Size 263B
- SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
- MD5 068a54ddbbe7c996938526b3fe64b668
- SHA1 03d9409f55c29ddab23f0972169684555057fb5f
- SHA512 93fdb28c7d672589fe6e513886eb16e7ebebac09c0dfa57feb33d1c71b31f9673a591abb15dcb9fcfa5e41a20e37e862af85f209bd7114dca435edd379a58a76
- TLSH T1AFD02B6811088838B1A18218E3B6B17890BA40510288104084A11478B0195EE3D732DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d2e19878110efee6.png
- Size 3KB
- SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
- MD5 418a3102ec0a854f1d8517859fa37a29
- SHA1 0b6e9768aeb3e658ed2ecc7335906418e6a75975
- SHA512 96442ad72823c867a4cf15841d4854917225afac76079ad9fb5a328316c8ca38d0d152813167ace5157048b3ab4d3927112986be27c874026d236fd83dd8952b
- TLSH T154615C9D712BCC049E9CA3EB4F34522DB2BFDFA51CE14B689A81D7E9404223475C86E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d46d147daa1d2f79.svg
- Size 945B
- SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
- MD5 e4d5f84e187908d2f0f7256abfce8f8f
- SHA1 b8a2ac5e98703dd8382bffcbc57101610a37e110
- SHA512 a7a5c87f1a0c5b7fa95de1cbb3d9fdaa60efc91d4d3749244a339364789b1928da744425cdbd792a26346910baab47f3f7b3cb5edc19987561c07d5f4670387b
- TLSH T1A211D0F3B788EDE43CD2FB68EB271039D54A4CFD081CE2486C26D4B9A71008A841B5C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d59a1307c364439b.svg
- Size 674B
- SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
- MD5 76707cf7830db3b0268558614d0d95f3
- SHA1 da39106e23c8be5fdee30543274c363ecf0ae7b0
- SHA512 07ef948c556b7e24a3d90a34847bcac64b811a820491e50fc1120b0d922f73a86e9107627730bb27f5d6a02314a3ffe6d15595fa7ee7167bae9e4dfa8583ba20
- TLSH T1470123E6318CD21C54020B10AC38B9D476A239D98B4E8009F0C1557EFC9C292DFA175E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d78ba875312ee059.png
- Size 17KB
- SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
- MD5 1d3f4f42d3b3aa8f7f4923e340d62095
- SHA1 504f880a935a030c28c2d1be25e3e4e9f6cfa2bf
- SHA512 715d2460ace192a43cf712cd17ffd5d5d0bf0f4aa9fad06a8b56dd3b0da8e963cf0500931a7fa0102ecab40e6a5c0bfbeab773a3bfbe5f5119837e9fb127448c
- SSDEEP 384:XC7s6ounfrhHshunIhXP/dLYDbLscd3DiKjxbWc6PF5/MC:S7s6ounzJ06DXscoKFbWc6taC
- TLSH T1CC82AE5A096062F183B78C9E797F6734D094B120222A906702FCEDBEF07579EB9B5202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d7dc8f3dc0f234e6.svg
- Size 1KB
- SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
- MD5 59e5f687d736e690c037addf385a355a
- SHA1 f81d61de38442fb066fb45923d61d06b5ab3900f
- SHA512 1c696617cf4b617111ac6280cf5a11886f7792fb21014907b8685a5e20e71cff4296b020598a64ea655787240c429647f25b64138097c0c4d60089a8f8d9158e
- TLSH T10B31689D2719CCBCB4F34A50F7423538785A173B1A8DA3E18872E0741A98D7DA67F8E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d841f4bcced2e8bc.svg
- Size 614B
- SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
- MD5 7b0f43826ff67a011696684508cb57b4
- SHA1 a056941714748cb7a7b498ae0c866bafc0d834d1
- SHA512 3b357d99b547f9322ea5414e738bc0e307e4f21f475780ba5ad7504545c2c4ba0eb41acf9c8b3fb7dca020a0d80956da258238d863018c8dd9bbfa67c85ba4a4
- TLSH T193F02269B3900E3CFAE34B2CF342327DC0B7529321082154D93A9435350098EA93FAC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d897a6873296312d.svg
- Size 234B
- SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
- MD5 239877033ecb5a79173ba24e4a85545b
- SHA1 83a310870e416ddd3427bbef1115ba1aa74e5f14
- SHA512 ff6658661ef3050692c531ac5ce338e20e77994de1672ac32632c0613b29ff5207858823d426d5687120dca4061a56659286a7f93e28055f75efdc8e0404306f
- TLSH T1D8D097B870AC891961309130F779A20040AB40B306CC38BCE6813033F051AEBAE2A5E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d9b97322b3dc4aee.png
- Size 6KB
- SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
- MD5 44f2e58a76e7be054143e8714bb1e55d
- SHA1 f52a9e861c6add1ae86d89cd20c1131a1baea076
- SHA512 eb060212519826b1e65bf913a0a01f2602801b6b885c64bac048156a3dca7cdbb7a37a4c7b9dbb91c591baf5c937985ddb19a85493ce7bf530ebb84f86292943
- SSDEEP 192:+VK9GKhrvp4TgSAv+Ukukt8PtQ6sFdzA/uHAxhXj2VFw:QMleJAvWgu6uNA/FT2Pw
- TLSH T1BDE19E3C43C324E74823495F25499B34D0565003AF3ABA6CC23998AA5ACEF89AF8E174
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\dcbb2fc627b41963.png
- Size 36KB
- SHA256 60884a555dcd360aef6f7ce8f8dcb66815376195ffd67740c7c239d87fe49424
- MD5 c45d057979159bf5f9a263225849a0cb
- SHA1 bca58b91c0c0d4145d42df9a66328e01f79a948f
- SHA512 3bc2178d260f8c3f4b7130c82193582ee61c97eb3d2cc87ff889df5688bbf465ad5e08a2d109d2c62216845bfc374b1334e4030e80d240cf1173202ca9cc5dd7
- SSDEEP 768:xdilYl4mvrAxQAFae6mYn9y71nqCA8724IuAKdv3ctJo:D9l4mvrWakIk1iYr5dv3ctJo
- TLSH T19FF2F1447444FD2B04EF13C1F5E989A0226E2457E97121F98CE89FB8889BF2257FF809
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\defebccb46e071fb.svg
- Size 6KB
- SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
- MD5 7b0373e02bf3d8c44d1e77107f9c8311
- SHA1 a2a9f41bd0c6c77344617870853314db24922652
- SHA512 4c2738132148e1e7d0644a396f4c4ec1b6c6ac3b5f4bdbf4b817f9593867ddd3974ec84a009bcf7181541b7d5ba8e9d7af28ec98fc74ce12f2ed372854a873d8
- SSDEEP 192:3B2LzzcEA8lLzzcEA8fLzzcEA8zEA8ALzzcEA8oLA8oLzzcEA8ETUI2LzzcEA8l3:3BXEA8+EA8gEA8zEA85EA8R8xEA8eXEh
- TLSH T18BD169F99A7119F02DA51F91F6DA1C062D1C13B68B7CE9A44C15F9B2B070FCA4363C69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\df04cc6b3471fe0f.svg
- Size 494B
- SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
- MD5 62f51b2790198d5f5c6e5044d4f8dd1d
- SHA1 2add35ba929f48221e6005a8a23926842a341a48
- SHA512 759c7c7cde272e0f908e66374ab6dc8ddcb90451bcae79ce9a1ff232fa393b9b50ccb02f1b2dd8c1992991fdf887fde19b81751bfc38ec8d2ba299ce9bc09c0b
- TLSH T101F027BE53C58A39AAF30F2CE33679B4D07B9442120E2184D930A1B9711A69D6D7B6DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\dfcd56774003574f.svg
- Size 587B
- SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
- MD5 10e57eba1e1b7b671c25ef60570de97a
- SHA1 b1ea61c11fc6e771552cd1982ce26305c136747b
- SHA512 23098cc1a9f1452e7974e0cf563b8360b85e2060dc5a8893b4ab21daaff992be053fb0a8e5da424f01651d8e0ba41a65c39d56857e7ed956e80f54ece2730f56
- TLSH T1E7F0C22D63889E2CF6030A08DF05B0B9606ED01762AC7008DD25213A912649EFC7BAF9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e0355e3bf0f86483.svg
- Size 318B
- SHA256 e71096281ca6c7c1abb7c50e6fa2c3486f78b1dd4b5f5f5537f38bfefee317cb
- MD5 97504634b191a7d259e12fd5f8a3a586
- SHA1 ba5ae576909f33864bcb9083279664e44254fdeb
- SHA512 6cdcce4cb416a0067939d24e358212898280d6f0ed659d3c00c7ad83b775f180e2b08b27dca2b3abe2505bc6ebc571718e9185bc64303304901c80d00c1f3384
- TLSH T1DEE07DB4212CEC28D10DC828D667706278D190C3828C93A8E5511C37BC4555E75371F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e0753f4e4fd1f172.svg
- Size 2KB
- SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
- MD5 207160a30e5b758ca5f254553f038f3f
- SHA1 5e7f0d3eb2ac7519594ab9fadb21977ca6c821f9
- SHA512 77b3c1d5c1055331b9d20cd851629efe191a0d887ec3b1393967ab6c25a8910778ef81b6fc3aa67e65f152b4c95b5343b2650ae30e87120ca52f54c03276265c
- TLSH T17A5140ACC4E51006197B472DF7D588A6F830948B91131788B84E35225F33C62F9EF998
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e117838d3c5eda37.svg
- Size 271B
- SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
- MD5 33d3fcf5251a72f1eef80aaa19f7ab55
- SHA1 57f0db39d1fcc43c91ddcca15509242220eea7e5
- SHA512 564871b8f09c200cb2cf0350b73199732c5accc8675b8b291f90cf979fc0cf509330914865169a6fe42e5481dc322de1768d468a1763fcc4f7a00a231e29a40c
- TLSH T13CD02B15820C5C3CF9138561C7587334103A51C2474D121CDA710231121190E783BEF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e337c07cfdb9efce.svg
- Size 352B
- SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
- MD5 ab0dbfb188975d9639d2221c31a8aec9
- SHA1 fd4c817c539ae2dbf1553d0c733658025b6dc984
- SHA512 f71c74b0448632bc9ff8fa8696171be615fc667e21a5809d14ea1be38b960be9376b43409110ee29f19c1a832805217630d19efb9ec5fa4e9e1d16ace3b49bc2
- TLSH T15AE07DFB4288C8E9D073E715C274502A19BB71AE76CC31ED46533161A9845DD7C2B5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e8a8ba696fae21e8.png
- Size 7KB
- SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
- MD5 d8196d8a2d105b011a606f00f243beaa
- SHA1 d46ed5e3536f75388c140450e9cfae37549088c5
- SHA512 bd9c328cf69d7536e403ff71a5bdda29f0de53df7bf7c16e6f4001036b40ae45875515aabe08e91b7094ac5578ba4518178b6120da86e1767195560f743113d1
- SSDEEP 192:KZ4X63dtPh+dB7ibJ2L8SxhzcCwDjOxFg5IGG:KUsz+pxhzL6QMA
- TLSH T1B3E1B039E7DC3B6F2F32BC2DAE2B5184725D2F78A711402D8C2D06517C09DCB57852A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e8bb6bfbe58f9668.svg
- Size 10KB
- SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
- MD5 cb3d5f953d3b0fcd8632686573326ec5
- SHA1 49592d970dbf0c334e6f603440086948e1f7aaab
- SHA512 646a8b91255532bc8b3606b3e8fad1d900d095ce0c23e0eb981edd05c59e9f0803a6dd7678209e52c5930e0bec03d356c66019774f42ad51f3edefc0ff322e0e
- SSDEEP 192:gUDrZXRH0rZ/xcUckmvw2RHOMRMRTeBAHSoyauI98pxx5kCTBkE0TjBADZHLvIXu:gUfN5qdVcm0oyc0JPFkFpEzWFg2y0gwU
- TLSH T137327956970004B83ADF0D51C6722E2D4C02F4FDF6589ACEF33B49A488ABDBCB575586
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e95ff90adab8dab9.png
- Size 5KB
- SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
- MD5 8c7ba694f35e5d61a0c61ac15e5ccd4c
- SHA1 e4824fe5c812db17230e0b204c058274005d3e54
- SHA512 b94a4654253389fdc295d89bbf731e259c30582b474ac17e271671b801d48a97e7b51b7bcaec531feb46f41a609cbf6812535672a2fda62e95216836aca9870b
- SSDEEP 96:gm0i/UdCsPTUhYonUmQj/gruR95rSI/foO6ey0/q1G3daC4CGXENKeQpePFmHawu:gm5UpZowLjp/NcdSJtNK9kPUHawK6u
- TLSH T12FC19EF425B5DABD7BFEA203AC5BABA20146D7782E1167BD3D1F121C79228509C0EC0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ecc19831f5fd7269.svg
- Size 891B
- SHA256 34ffafd6aed516226f8d012ebe517067f3e4a5d1c29a44adc63c64645e3b4bda
- MD5 6f66369572736a2e4640769205c94bb6
- SHA1 3891f6e688308ca6e422bed4f577115aad6781ff
- SHA512 60caf5aadc2f788f5b5b28c7ab284df8b5fe41ccf6714712cee89ba0fd49b037f5e9cc32ea7ba194fd1050b47fefc05585c586112bfd023382bf3052d4f294c0
- TLSH T11F11E7F33188C1C58505D7A49D1FE1465F339CC88D1A8294EB885745D477B32A51FBCE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ee302686425de6d1.svg
- Size 1KB
- SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
- MD5 5f79f6bb09207233ad266a8f883107c8
- SHA1 00081f49a4a0c1f07590d0b2af9027ac5cfafdd1
- SHA512 f127fd5dff3b6ee9e963af901c7026871d4530a779b75dbbfe5a2e4b7a421f621b39540fce26bf8338e2f5cd6d6d06704d5786a4868b2832ac1d158bfddc2868
- TLSH T1A73142F1B34498E8B5478B11D7237876C95F60F72B4822514530CDB4966419E8DFECCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f0c9814d841afa42.webp
- Size 18KB
- SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
- MD5 2671593725538af8bf6f29acfe494f8d
- SHA1 943176426b02479480ae9c35475b1705f6d85be7
- SHA512 873bb9d71274ea901dbb5ad8a3c9b2d8ce417bdb03115f9dc48980954ba902d78f4f38896eb97c50b7ffcf56a0a05b9bf4df97c378bf24fd9d455887aa0ce2cc
- SSDEEP 384:6RFBxFF/zuvlRcltOZSipop0dQ0+pim3TvDVDmrjmqiGo82df:CNFkWtO60db+Y+DV3jHT
- TLSH T14582E163828C45C1EBC67887ECE6960D5BF28AA1F1EF7CF9298143564650F380703CAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f156fe54a5a79b77.svg
- Size 514B
- SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
- MD5 1cc441d795ee243512dbc355da9e87ba
- SHA1 573a536d6d9adf6e37548a4c3299fbc0c33b8df7
- SHA512 b976ea33b0f3c68b0d46e895952d0dc04e8a4708c5390bcd6f023bd1d6edf6c959dd0207e00b49aab51c80b4999b3630ac917ddc460c80c93ad8f4409c4f1605
- TLSH T170F09E9522198468B152872DF337383DF4FB4432034559948A31643E99C599F6D7B9EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f3bcc22345312f8d.svg
- Size 3KB
- SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
- MD5 76e6d3bad5cf00e036388addfda5ca4f
- SHA1 00a3844647e873a324e003e3108b3f96a39a7b40
- SHA512 7d37860f08972f74236b8b8fe4caffd32d32d3cfcd3d58c47d8ca8e2c06ba55a8030fece3437e2de112d7d012be11abe79b9d96f539f7044c7c3830e257746d2
- TLSH T1696173EFA744A4ECE647CF90DF233938942B3CB9AF4B839045B2D1A4A6141C8951ACC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f45cbb00d6bb82cc.svg
- Size 322B
- SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
- MD5 01c7fba0431f6101097afe82825cfc23
- SHA1 ab1e6727d65bb741cd4d2505c41c423ccb50cae4
- SHA512 bc95c77be1bab905a95a756b0c77cc59a4e977aeea33e5e1cd50c46189f471e3158bfee072e3cf592fa7622c1645b026eeff32ce2985f7c0b90f01dd6d17e4f6
- TLSH T126E07D55924C6D2CE915871DD7BC32785136A1C31B1C001EE931203E553150DEE7F7EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f515140b598dd3f7.svg
- Size 481B
- SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
- MD5 2cf5de8e40683bf9bf5d402824272d95
- SHA1 68f0bb14ae20607b481335f1934fa59aa3ccb07b
- SHA512 a454cec2bef9dfdb9f34fff88510430ac276e2784e3a38870ad112e389c46e58269dcde1fbb3a7f3f25ef7d7c062de0b6962f0acc9c93486c45c522a43bb10b4
- TLSH T14BF02EF62688A698C088D734815AB49B21A360FABEC54105EA501D5DB4234521C18EDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f7b78d9433c9d476.svg
- Size 406B
- SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
- MD5 1ec1b8301ecab06fa975088ae36179d1
- SHA1 854fa669c15264e79fdafff43bac6a52548c64f9
- SHA512 248cb0c7161a4b9e220b3beb4c6ef7f394c16f897d1c5c2eca554411fd2c906d772f17c47fb457d2470a0e50963a2a479d733955080747af5a6b07b355c94048
- TLSH T14DE0E5E8136CDC35A265821CE757386831AB2062571D12505C605C3ED8595DE393B2D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f7fc539ce7a13719.svg
- Size 1KB
- SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
- MD5 8e6bcb1259e8ce2da2fd11af3787bc4f
- SHA1 42f2ab3cc6a820aa0fbad2f54718b2be0f73e9fa
- SHA512 a595f1fd4e9980739c0d43bad1167c554605b4eb921219484863f16351c70db66a8cd3503860c6a4ef57b6e8a0181f1df5d34d115690ba65d83861ddccefb9a7
- TLSH T10131BBFA73F699E197070365E6D431BDD9DB20B91BA601C0E032BBE46805CD94BEEC80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f8695cbe3a95268b.svg
- Size 870B
- SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
- MD5 9f08a59505fc0bbe901f032750f10ba7
- SHA1 214dfd0e342203c6b638badf60393846cc02be55
- SHA512 28382f9018199c247163329d9f37b202ec70daef02c7dd54cf2fdee0126444d1f5b8dc660cee1e70e100c81f01dfe578290639124fbe429590f11b9a18f5e6a1
- TLSH T117118872A3CCAE2CFB930F0CD323A875D0B981836B842080C835907971554CD5CBB4ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f907caea9dc5c5af.svg
- Size 1KB
- SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
- MD5 46c828d2784a7df604e6d626dcd8ed60
- SHA1 d8c34e406e5370b12687205689fd6c5519a7c0b3
- SHA512 95cacac79ce3d6bfcb9761a6eea87028990159cc5e2b7837d534fda0d8a6df4a9bd2a3226fa173f8388ceb71e30d8047e984474801214f18af888d7f0f6b5ee8
- TLSH T14621C655E70C961CEA23870CC338EEA57063A1C6872A5304D872753E55981DA9E7F3DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f95f5a575299231b.svg
- Size 402B
- SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
- MD5 1b6f47bb9166ef34598eaf143f15a070
- SHA1 044e5fa564f796aac4b41e3f917431bdf7a1835a
- SHA512 65ddd0657195ee27149916fe4a10e0d5fd66425c920a1e58081fda5697e58395e4c431610fc435fc50b8e0f43ab5eba568e993790ac83dd29a4127b3cf42ad80
- TLSH T13AE09279A359A928BAE2465CF33BB0E4E0AF4022034932908531D87D604599E39773EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\fc431416b1024934.svg
- Size 2KB
- SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
- MD5 545aa919b1e940ce5b19660082f2768a
- SHA1 c574234eb8d71b0a26fb0b36ef88db4ab4b40dbb
- SHA512 d727a785f3e35dfdfe596b8730851c5ff2e826f270b829558cf29eca087ee9981ed742e029b3244e8a59d5814ce45d5478d4d4e91012be6d33b30745b266afcd
- TLSH T1044125F723E998E0550FCBB0CD276C7E9D762CFE7E40C2C24581A560AA341E5C94ADD0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ff8d935c2abdcdac.svg
- Size 2KB
- SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
- MD5 5bf5304ec1e3f6fece2ab5d8195bfe86
- SHA1 81b2b4eecb1c8ef1cf8ed9c746c9f80c4b30d472
- SHA512 750c6d8b9e6bfc81a2da1c3dddc28d46f5c5d33dbe8829a6017332bc38db0adaef1ed90fa74a6bfd4cc12910740e93769db37de97845f44c93a4e0849b923fa2
- TLSH T17B5178E465A4684C18C80775FFE945D62826E0D3F604079EE46E366A1157ED3FC2E3E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\blacklist.js
- Size 76KB
- SHA256 8d20217d3963d9dc785c7758bc14af57ee92e5b151dddac858bbfb0d800f5384
- MD5 c33627afdbe69d10c4b1df0b1a21966f
- SHA1 2b785c1811596b13ecc7a9e4de7d75284b704005
- SHA512 4ce4f9f373d66dcc5d843f6e1133c195ed1b7221595db80c5f5b81959e98e8a5ca22b58f9d449e445514a7a0fb831f986d77bfa44191abf7bf1fe0c268550c3e
- SSDEEP 1536:Vka6Jka63mJK4PMihQiRAiNJRLbhhND/CVt6LZJqi0SyeSf/PToIGLCZKRjXxSUR:Vka6Jka6ywiJLhu32gsJ
- TLSH T129735020A05A5C2A9AF90F85CC9B7F0710FC25A0A7D2C6FDABDCB5AC1355744E1D09EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\common.js
- Size 2.1MB
- SHA256 69a4b408592c0d0b4ba5695850093dcb12373256b6aced8fd126283170a3f246
- MD5 a09ed821383e9b3dceb37fa2fb433053
- SHA1 0568208e7d8b2b4aaeb2f97f34b3af644cf5acd3
- SHA512 9cb32163e4c342a015b1e45b7ba6a25a33086861bf146345c1edaeb1ec261080ad76333967e0c30f73937c345ebfa761b37e2009f480c40318802bb56dffd5d0
- SSDEEP 24576:wMLA/vIvyRB6PNi5qpN0dirbCgHd/E0chWM:wMU/vIvyRB6PNMqpN0diruqNshWM
- TLSH T164A55B897183F16A93539437604F304AB73D2902A15D4922FB69CDD2BC9898DF3B7BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\devtools.html
- Size 489B
- SHA256 fb9993c641b228e488b55001e611f05767f98674c16c5a4530d01327b1a24de0
- MD5 6f08b196659637a4d28cc006d41487c1
- SHA1 16fc61ac8ae29fcb222ff6a0f09f29ca808b44c7
- SHA512 451aaebd7558c02dadc70908ce3876846d72ba04e637a41cc496ebfec9ba2816ebdc64772b8b298a194e45886ae094e19e9c81fca5a71dfe9668d6bf5ce558f9
- TLSH T113F0A7D68CB5DA6D82284DDDAD30E41C4C8CE34AE711EC105EFDA0F9A944B884DC3B8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\devtools.js
- Size 280KB
- SHA256 3d2726903c748649fcaf215c81bb92a9eca5e8ce479e7c2db6bc3ba3e31e0728
- MD5 79cb294506edb75709ddec6bf22566b8
- SHA1 7634a7c2fb6f0e6734087c7f8aac9656d91eb73f
- SHA512 541632b43b5b76bbfd2041421506d18aa643c69116abd53826f8a8d5d04696b6197988f8f4147aac58d44a94f831ceb966a7bc2c960b96371ccd1d3f4354400b
- SSDEEP 6144:qka6vka6XbxtCu+Q2MF962+mq5J+TTRRt7:Qbx1+QXFE2A5JcT3Z
- TLSH T1CE54F8B370A39634E96301F7B64E509DBF6E2042EA4D5DB0FA98A4948ED0FBCE543744
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.ttf
- Size 62KB
- SHA256 68534840bcfdd2bffb6f0e8deb48684dd01e7f04ea2813267577afb906de1d13
- MD5 56573229753fad48910bda2ea1a6dd54
- SHA1 1dfd0ee6e30f8a1c23999d9d965db8700b5a9f2e
- SHA512 456634c8b2b87bac6ed10b3f8393fa01040f73fa3a5d66c868b13ca1ff8e04961347455f3dfe9fea50dfc6945c7996ff31827a70f1c09461ca16faaeac2c0364
- SSDEEP 1536:Jmht5PieNKntVPEefbJbH1I2CYmixLRffac3Eg4fgmiqZFAPNfLT:g16FFrtmiXfx0ZihPNjT
- TLSH T170536CD6C3F6FA1EC97BE73146946002D0EAE420FE79963EFE43968DD0575D0909EA01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.woff
- Size 32KB
- SHA256 30da91e84c893f875e252689faebdc590b2871145e8adc7f9a9d4dbd8ce0b251
- MD5 10824af77e9961cfd548c8a458f10851
- SHA1 99ada2de3200e795143d639232c3444b08018235
- SHA512 f4e4e65c3894c93642d74244c706ec7fd8aae4b071fbd97b0fd0b8ffa8be97475ffaae159a846e064aad386b1026ae809379678a4bab36b5db7e9a287a63515b
- SSDEEP 768:lwtLGVnFPkmlTw2Vm+6XCPXZ3UI2LtAaFHiFqOh:lwtECyTjVSXCxEptAUCMOh
- TLSH T185E2E10166C31B2AB618DBBE4245FDCA5DB98CC067E7A7DD701E1E8F140B2B83A63449
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.woff2
- Size 27KB
- SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
- MD5 66c678209ce93b6e2b583f02ce41529e
- SHA1 34494743736fda757197d16fcc6a6e1a79317c86
- SHA512 80013c2c97b163a15be1af3396e4b1ffed84e2ecb4f66d9c5384b66946dd2553216229dee175e46bf7a168c6083eca3e2af123cb6d8dbbd2e270281e7db17f82
- SSDEEP 768:WacbxMoRJw6qDcfeSNHvQpPujir2Uqf7/eDW:obxMo7wYfeS1UPqUqraW
- TLSH T12FC2E1EBAA04E55CFFB242B40EF1827D4F38464A4CF6205BB4DFDF13942B45856E052A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.ttf
- Size 12KB
- SHA256 07d8e303ce4fc12b4bb54f1004170dd190a1f3db45d400fe68060df3e0897268
- MD5 497bf407c4c609c6cf1f1ad38f437f7f
- SHA1 8fab738a16ba8fb7e7002a075f036a455a45c6e8
- SHA512 e968586a792bac38c0d1ddfa3342f845b99a77a8fa958d6fb97a7fe00a1c98874107d570592577ca8dfa2bfca0902bde18f92f65134999f06175a4e00cdd2bc2
- SSDEEP 192:0KDRWsPUKoUoKTNrqKUkis+wKXZ55wJkgcwQfLFp/ROu2O2LkFEr:0KlodKxjUTpr8kgMfLxG5
- TLSH T1064209C08362EA5DC2EBDA7406E0A257C7F3BC51FDB9D32CC91245E8D0664D8945BB86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.woff
- Size 7KB
- SHA256 1ae6bd7475590e97e7f145a89e09ccde322f7a6bc0b91607b1c8b8ee28290fed
- MD5 de2ba279933d60f7819ff61f71c17bed
- SHA1 dd23ac0fb0ac469b0624485ea78d700f63614203
- SHA512 75f5267bd42d7f22e85ee9208454a74ee4e52ec43ff0ee980b44277db7097ab992e017274b8c969194f53049033cbeff3949d51dc052b8b96f3db410be224b1b
- SSDEEP 192:OEU9cXj7NPWDjT47BqzzPvXYZqYOFPrEYxinnv2ciqd:Op2KjT47EoZilinp3
- TLSH T17EF1BF43E4F30A13FD1A9B7461C40E0F33E303B0A78DE2EC588E75260D28AD450A0B57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.woff2
- Size 6KB
- SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
- MD5 a9e9b0953b078cd40f5e19ef4face6fc
- SHA1 5bfa49cac46cd1d7ab1351388d37c11af59ba615
- SHA512 2e37f9dc968e52d56401252c7fc93db69bfa51e34bf3530af4b47965ca3aa9e219ee5ee82f785e8784a04f99a58dc71870f790dfea81d091bc18b3a2c9770d02
- SSDEEP 192:eZOvu6Xt8t6LKfGGGqGWnaMZlRCpPSIpYno3:eMxu2KfGGDbJno3
- TLSH T150E1AF604C991D55C680A0B56656A7D2CB807E6C8B5DEDBF0520B12F9F39BC23D43F93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.ttf
- Size 12KB
- SHA256 ed0b74372feefcbb9c0666b2e210da37b7e49fa7fbbf3eeb11db5f693dacfbb7
- MD5 e6fb499fc8f9925eea3138cccba17fff
- SHA1 26f26a13e6a7d0a69b48f62acd31a8196bce7f6e
- SHA512 4f616ef3d60cbc99c95c473f4c610020416a3911fc1e74e55d854da1fc92c88e98862ffb12bf991f91694227844b7773b71412697f1a68648755e726031d87d5
- SSDEEP 384:kEW4b1GSLxPnejPKa/3RDzpr8kgMfLYhh:91/LxPnejia/Dr0MfLYhh
- TLSH T1B04229C08395AA1EE1DF9B3406E4D152CBF7B951EEB8E71CCD820589D465CC8491FB87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.woff
- Size 7KB
- SHA256 3398dd02302557a793f2863f88e02d96ce10df2abffa07c8e9fa90775116e65c
- MD5 a25140fbe6692bffe71a2ab861572eb3
- SHA1 1a6f39bd70c9b74713078df5f7dd6108f9bad38b
- SHA512 df52edd6bcabbed432171c2b001c36c598a88c6180c600dfd688d0155cb5d66ce69497e7dfc4154b0c484a7b9d65506bb25b07c9a8680ee64aeb006b6b227f2c
- SSDEEP 192:It0lOpC+EvcZ6aTD36PSw3R2qYOFPrEYxinnv2aNhJd:It0Ok+k4l/36PbR2ilinP/
- TLSH T1E3F19E0F2AB5420FE72D76B42582D5596261B3B0680BA6D850BE6DA54C5EB3C4334FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.woff2
- Size 6KB
- SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
- MD5 08d95d99bf4a2b2dc7a876653857f154
- SHA1 9f8077e0b38a290cd9b7b136b0ac29c8375e81a6
- SHA512 9715c7764db9f5f7c28def1390fc22f6fd23b49ce59ddd8ee0529883399d3ce18715d13374cfbb16202e992d029473eea94f742368534a6a437299884ff3fcc9
- SSDEEP 192:p+CjOw7LaU69JcXtBc36Tiuns0ukdo6FF23flSzC:8CjOwqU6nstu36TfqYF23fOC
- TLSH T19EE1AE7D9C6086200632BEFF3F329839897115CC9958140AE7932E8F32E7ACA5C5902E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.ttf
- Size 19KB
- SHA256 9163df9c7122432e6495b4229fa9071cf9ae86a758ae5efc4924ec2e1a6dbce1
- MD5 b9d7c4497cab3702487214651ab03744
- SHA1 4e08dd00383124e7cd96970ccb0fbe35c9efaaa3
- SHA512 14296d0a12b7a1747e71db0721a543017c11d2cbfa3c8485490f959660dd67257f1a007e5e34e1d864c363a03d482ceedba3d1a8ba0f48cf03140d4da5dbc836
- SSDEEP 384:k2zFaMfGXGz/DXOvG8+jK0p1kpv0IdbCg5m8Wp/2epr8kgMfL3PyEl:7hLfHzyvG8+jXIuIdbCg5m8c/2ur0MfR
- TLSH T18E927D40E3639D9FE1D7FFBD4A90A1B3DAA3AE06D831924C4A53405DA1999B04CD7FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.woff
- Size 12KB
- SHA256 9be7ceb88004ab8ad124082246fbfcca4091e36385d4ec6ed1df67375dad50fb
- MD5 40934fc076960bb989d590db044fef62
- SHA1 5bbafd501f262219426af7f20c1103bb4b732592
- SHA512 6db0e3d500339de09317dfffa278b5ac8437c0a8ed317da419b4ab61a54d24e08e3ce1d60fe327f1908009000acec567597f4807c5f55306b3ca3cfde6498f02
- SSDEEP 384:27H9D4SDxHkuUWF/ljQYecDre1WyPilinmn4:2BH5ywlnBrHnim4
- TLSH T14C52BF5126A21933E53E4CF40156989FCB65C344EDCBD96CE57BD53C0A18AD2A39C8F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.woff2
- Size 11KB
- SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
- MD5 796f3797cdf36fcaea18c3070a608378
- SHA1 f98f89272eca11ae417672c59a0faa6a88805a89
- SHA512 cbba625fef455a7b1d1dd9fe65e21b00dcb4bf729e08cc1bd1882af082a766af6d0adc85c8493d3529aa49cfad872d0c4b241484762174f0a48d21e28c76c980
- SSDEEP 192:TjJXaVyX4SjNC11RSqMnXzEqg43IvWU8FrHAzqjZWhWWgtYWyn56xhAq1dFp:TjsVyX5NM1co97y7Azqj0gtc5YA0p
- TLSH T13732C03ED2E005A5DFA8957BCD24DEC55D8391623A62E03707A7F3E0BD8315C1B5245E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.ttf
- Size 19KB
- SHA256 1e6f9579e90e2cac37f8f60a597c436e075c114385652b7cbeb0dec0421291b3
- MD5 97a699d83318e9334a0deaea6ae5eda2
- SHA1 17db40882dd5f140625f28dd94c43045e1893e98
- SHA512 13747eb5911d17302923e9d54640acf6bfe533f020d535713a1b951d96721d7aac19c7705440cb7d0a26b384258c2c5190771961e2622519d99c17998a37bf47
- SSDEEP 384:WfsAqO/MdyFnajLrmL/GzOpcz5ZDrTpr8kgMfLIv1G2:ShEoFas/GzOpcbDrtr0MfLIv1N
- TLSH T15C927D40D3A2C50FD09BFFB44780A1B2E9A77E539E76822C5A22415EB085C6598DFFC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.woff
- Size 12KB
- SHA256 5e28753be717dac97f559f49bc10be9cf3c124ddcabda6659d11cb68febc6463
- MD5 e435cda5784e21b26ab2d03fbcb56a99
- SHA1 6f756376360f0815b44862f57f795eb7c1cd4db2
- SHA512 6e9843b5a5d86e29819244bc008cb0d1a05b0d6a0c564784230027cfe45ad4badcad9c4f09aaa257ad793f783ccd1bd609489fab57cd040aaf1d82ea9217754c
- SSDEEP 384:bX+KfLf7QVrRVmYlMQ6zB3Yn1C/CyilinY5H/:jfjmrRYvon1CKDiYx/
- TLSH T18C52D063B0B39643F20FC3F408688D8F3EA94107DA9E6652D1EE44C4027E34E6353E84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.woff2
- Size 11KB
- SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
- MD5 f9e6a99f4a543b7d6cad1efb6cf1e4b1
- SHA1 a5764c6e2784d02820c0b904089f3fac798be4fa
- SHA512 b1cc99df5d5e2833ddb4ef5d9eafa3f2bdb56a14da8b2813ae9444d787bb63152cffbb6332feb598203e7292c0cf4fa5ceb0da668c8cb82afcc93bea82c497e5
- SSDEEP 192:78eA+9M1ccRhZQHRhw7Tagg/34PXMqtLFEVsX+zDGBD+K5664utN4Jr/zYlsCYMM:YlZQxhw7egg/3jqJIDOD356YEJzz9vMM
- TLSH T10332CF350D6E41FAEFBCD8E5B20A7151F1BA84528A82F52611E35A1BFCA98300333F06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.ttf
- Size 50KB
- SHA256 138ac28d1663b3037e9c5f52371fa5c63d8324f4a38d22cd573e6ea3a3fd0cf8
- MD5 8e431f7ece346b6282dae3d9d0e7a970
- SHA1 413ab3dc3fc3a5752275bae2cae67eb58f2b32f0
- SHA512 4347e693e276c8baf6ee8413c46b1bc2bee4eb8ba4ef4ffb49fd5fcc6a3da2cb84e7654d87d2a3c640ec0a906ff64e2ece55c45d450753b82055a1164cc44215
- SSDEEP 1536:bMqnbuev+IMrhg9nzhO/9SvwurRcfMdDfL68xD:NnbuZ+Fk/Mhj6s
- TLSH T1BF336A96C7A4F90DD11EEB35CA86A213D1E7B614FFB9837DED03498D88AA4D0848F741
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.woff
- Size 29KB
- SHA256 c76c5d696297d51b9cb1639c7da4334f0e7dec81b42b11213b5e25ef671bb822
- MD5 4cdba6465ab9fac5d3833c6cdba7a8c3
- SHA1 f69a36250eae6e8a02173a9909aa628428ba2060
- SHA512 f941865e7e1faa24c8e63f6f6c72bba4683502b4723f52a3335d2d4f24637445d45e5f15612f1516e29c666ed363348051b282c8c44ea4c6abcc23cd761c1460
- SSDEEP 768:ZBht1jPbcFAi1RLpVBjUe52dawyDBGCLzacm+CxBcnFA+AmoVM:ZB71fyrR5f8SNnaV+bj
- TLSH T122D2F18651E88792D49D2BF300D2C5E72A27D00010DACDF8C7B7598D812BE9CFD756E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.woff2
- Size 24KB
- SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
- MD5 a9382e25bcf75d856718fcef54d7acdb
- SHA1 31050a1b1b123fb2c59cad1f74b7dff90deb8fce
- SHA512 1fe376c2a185cddf8629b3d62f66ff3f610c0b6c7dc47c165a4bf6aac6f9eaf48c41903eb3146979b1de6c575d36ade449776513b6e1a1fcaea443be1fba0f96
- SSDEEP 384:fErO+j2HDm9KIwKlIzX6g7k3XeFOwgJbzINKvV2U2UB5HM2ivNddFZQssZvhb26:fE696+sUX6/Xe8ZzXvZL2ddPQsghbp
- TLSH T1D9B2E1253933B3FBA764372B2D2A39489E006535B6C55F18DD83C2C1BEE81E28579A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.ttf
- Size 32KB
- SHA256 70ee1f64a20f2048c21940ef46d0144fd215baa953ca69afd1e31e98544f708f
- MD5 52fb39b0434c463d5df32419608ab08a
- SHA1 ba6464e442fd50aef7678924ba0f2d9581ebbb07
- SHA512 ec9e2fd832ce22a5e1b0f16aa016284a18144017b955e4d5ee7040f9a1877551029108eadfb1e038d94d896e567f29a8aef547a7fb8806c4d34b3b953c2e9a41
- SSDEEP 768:dYM5khBrOEgXmqdTrSHDBBDVJGzPix25plshTYXrdyMfLxur:dYgk/rOE9vfSPiCplsh0dDfL8
- TLSH T15EE23A81C785A99CD20BEB39C5D2E622C6E3B920F97C831DDD435A9ED8648D4D05EF82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.woff
- Size 18KB
- SHA256 a6f7ec0d846ac7ad975adb8959c37ed49b94acbc4ae436db9ce9e20287e4a64c
- MD5 5f875f986a9bce1264e8c42417b56f74
- SHA1 038bbdc8887a9730ad94147fc57c6ff4dfb48411
- SHA512 01740167b08510f9948531260f6f746b06b2d4232c5c6fba07533673490a7b0405839ca7c087bf16bc97ab874dbdc4e1e828ede0fa8c32cb3ca22f799348ad4b
- SSDEEP 384:F6m/Vu6fZIY1pNhfKHEXle6bB+nT+Gjl2dkMauwry7wJEbMCe5yq9OtKf:FJ/z2ipuEg6bcT+ElNuWjqNKf
- TLSH T10F92E13719EB8143DA5F95FA099976861FB9467002DC91C6E0C8FF027B2D3E4B5588F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.woff2
- Size 16KB
- SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
- MD5 d873734390c716d6e18ff3f71ac6eb8b
- SHA1 a4a4905b8b126f9ffd553d21a72a0c24e9480345
- SHA512 47c70cc7c7f277230b60909a0b0b593953b97433455ebefe1d0e24dda9e1104c2dd43fdaa68f121d5c7a3fdcfed1bd568820771dac909109965a05b7f6b2acb5
- SSDEEP 384:64WbVCMf9h8ipIiPh3L09oDYriZOi51915PkNuDzdGDG:l6UMfeYFDDYM0ufdGDG
- TLSH T12B72D024747BE293CD28A7E5EE224208C501349DF587A739C0E7D38E415E6E076BF972
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.ttf
- Size 32KB
- SHA256 0d85ae7cc30f23790a7f1a58c4a112fdca8aae769b6ba11429af1d98b1b6cb3a
- MD5 39349e0a2b366f38e2672b45aded2030
- SHA1 1d5668a2b94ae7dbeefdd7cd68d98fe9d5825e07
- SHA512 b3191aff76f38c75c7c8e3ed4b82c520e7d03eb1c4021933013f54906d7ea166eab7ced7369177dba0df86b2fa9e7e77ce2ce0b9b9a8a0518089b9728821509d
- SSDEEP 768:mH5kjyXWWcme53V6fGXDcRwn/Byv/RM97UW5YIXCTGrdyMfLQLJ:CksqF6+XD8wn/4/yAJIXckdDfL+
- TLSH T146E26CC28398ED1DE55EEB39C991D051C6EBB820FABCD61CDE434D8EE4908DC499F182
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.woff
- Size 19KB
- SHA256 f1d6ef86f3b11a528bd5185199bd2443ecb2b0dead96d88674b5a2c12be24bdf
- MD5 8ffd28f6390231548ead99d7835887fa
- SHA1 7c8589213bc7003e2c2334b51ca4152858987abd
- SHA512 3a39963134880e54dfd591a1390899b19010d5cc92a38122ce1aac853bdbbaa66481b52d574dbdd610bf40dfa8e3e54573b381c5a29661a2608c546cce9427b8
- SSDEEP 384:Fd2HPakh3w/mgc5jJGNx2JViY1nX+72xtZYSWvfEVus5yq9OooE7:H2HNh3w/TUjkNQ/1nX++H8vnIoG
- TLSH T16E92D11581A67B32D8F8D9B34E401E6F13396278A4DA930A515EFF9C37E638E0119BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.woff2
- Size 16KB
- SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
- MD5 652970624cde999882102fa2b6a8871f
- SHA1 c9b2b5ffd2f27aa5c6b6f9ba41a7b2b4e66102d3
- SHA512 48d760c41762fe1df5130ebbcceabb1e93781cc49ae2f70239b6f8a84cb0a00d6db0c3bc57e1508d932bcd5820a24fd920e2b9e2660e641c0d1cfc6224bc2197
- SSDEEP 384:JiZVAVJs01R9oWev6H6IYr6Hljb/xozd3ouOWQsXBk/K+ZWn:JiIVaVwfbux3ROWQYBk/K+ZG
- TLSH T19B72DFE8428E32B3F95A65F1D75274DC3905B9223078B18D8562D188EFE0F1DCDB91B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.ttf
- Size 52KB
- SHA256 d0332f52868370fd83ae7fa46470f90c8f2eab2fcf12bc4f88080b340c95a830
- MD5 818582dae57e6fac46202cfd844afabb
- SHA1 8744db6ef8c309e3dc85f1bbe980520ad8b7bfd4
- SHA512 fc4a33bdcdc48da1d387370f55ea7e69737f85f7fea25d0eaaab620e4b278b63638000200f1700f5019e8fdcceb67aabb2e9ff3c347cfcdede97dcf466ba4a73
- SSDEEP 1536:c2oUVCqROnDgt03ljHOAvVy6UV3vlUNUv/f0DZ5vBmvPzldDfLf5z:c2nOnDgt03ort/8alhjN
- TLSH T14D336DA6C3B2E90EE46EA3348590A247D5E3B411FEB9C72CEE139DCAD1855D4448F742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.woff
- Size 30KB
- SHA256 c6368d87e8a1a3a5d337623d83d8dc4b868f242a9ad476237d6f8d1e0f168cdc
- MD5 f1cdb692ee31c10b37262caffced5271
- SHA1 fdcae54ba1d4635ee85a5462cc1c97e521cfd515
- SHA512 7bf47a13f931a5efd924ea1e94413f529d65b88f931a09d993bb2a0f95848199e2de64fb4ae2485de83e4ddb3a690556dc453939daf3910832ed22af82697037
- SSDEEP 768:yRvm9ltyZLNA0q37Cs3IM5nkO7yOZaIpxX3Y4G/tf:yRvktyQd3u4ln7yOZ3X3Yrtf
- TLSH T165D2F15306F66976FC6826FB69F08BB4E5C5463142C7A8F9400871E486D3BE46B35A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.woff2
- Size 25KB
- SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
- MD5 f8a7f19f45060f7a177314855b8c7aa3
- SHA1 c884086c25cec8558160b2026f906ef7da3570ac
- SHA512 1bfa9f1d2c39f4460d200403f2e2a327d2b964ba4e00d61495e9833826cc804144b7536860704f741694935d8058ca350586f97ccb319e57d14723100f488620
- SSDEEP 384:r5RMCvgUpEc5jcq3kByElj8REB7hcyXDFQamIw3SoXnkqx6zDreFDjcE:luUD5AlOEJhVhQFCYLoreF3cE
- TLSH T15AC2E11F1829886EA11C0AE7E7BEA3A0FD5DF203DF381B0988786B99551E8516F58360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.ttf
- Size 30KB
- SHA256 f9377ab0271cda59af24bcffbd46a4d0c8a3572ffafdbb38de2ad5ea7b0d5ee5
- MD5 6589c4f1f587f73f0ad0af8ae35ccb53
- SHA1 e80cc4c232d2075f762a52d46beb4ffbd37a5f1a
- SHA512 877edd67dd08990794fb4f153509308914b087d7d7d92c698b3c9a93cf1ad75aaefecea6c9227e192eb8a7bbdd94358c810f28a6097f319ff87a91811bc67328
- SSDEEP 768:HrDqekCKYnYviw3SNoo0A2p9FnIyATLrdyMfLLFxO:Hru+piRSN/Z2TFBKdDfL6
- TLSH T16DE25CC1C7A1A65DE21BEB3DC682E216C4E7B911FE3D571CED13598EC8648D0E09E782
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.woff
- Size 18KB
- SHA256 850c0af5c2238497febaf5e461d880bf458c341f42f4f330f1b1ab5698b1998e
- MD5 48155e43d9a284b54753e50e4ba586dc
- SHA1 d54e6480d6d4046c6a5619aa383baa5971fb8a0c
- SHA512 bce52e5abb56aecc2aa3a6f2697a5d2975322550108d9768bf18d732ab7677ad3bee13973f86ee0fdf82106ce088974538b5e0572b7aeb7420db857ab6aeead2
- SSDEEP 384:RTycdkV7rbnINOwZD9qojbjtAbIbPZk+BGNZq/aU5yq989HGZly:TdWIN7N9q8XyIbPa+BuHfmZ0
- TLSH T14F82D0108D92DF25E08E4FBB23D38BA563A0C609648C12AC64517DDD9D4E7CCB2CC6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.woff2
- Size 16KB
- SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
- MD5 1320454d951ec809a7dbccb4f23fccf0
- SHA1 8fcb9d2de65ac71a0c4fdd986173db730592ed8a
- SHA512 b11ddf42e60a54b95fe8e18230fec593f4bc8ad2d82c3658ff237d6000c30cf11b634222dd768e011d32b4e4d480bf277a1c2305d682c3e88c5ccc13d2bb4aa9
- SSDEEP 384:jVJKlNlu5KSYJRZA9Md7dSonWjEXS51aBmhW+2:jGNlumJUMHnuaI9hh2
- TLSH T16372CF907A983D58DEC7476A1885058A042C3239FCCEE710FCF26CD177A41BB7B5662A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.ttf
- Size 30KB
- SHA256 08ce98e51b04d58945a301e639e02b6998af29fdfd61a7b8afdd07bbfc479d4a
- MD5 fe5ed5875d95b18c98546cb4f47304ff
- SHA1 9e9a10d8fa5ad88c9ecfa4902addd4d92580b2bc
- SHA512 37eca95ea4704525b727ed29c19a993ef22b54658931cc58fe5a2f7d3a231fb18da6d3461141e054a941e2639c4559c0f4fad8bfee89e08e1077077ffc773a73
- SSDEEP 768:iCM/Am3RjXaXNUFgxJL+htKHObpS0Hl7TFlrdyMfLMoRO:i1/AmZXaX5zL+htsObsQlPFNdDfLI
- TLSH T19CE24A80C352DE5ED62BDB32C191E512C6EFB920FEB9931CCE03599ED4614D8989F382
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.woff
- Size 18KB
- SHA256 8a8d244581371912b8f3f5a23e2437cb2a59cd9bcaebb0346e722c05737a2571
- MD5 ed7aea12d765f9e2d0f9bc7fa2be626c
- SHA1 1c1b48739e1cb4be13ddd8c0bc279dde851bdba0
- SHA512 4d4cb5eecf613e0b0ad217b7689c44b69bb8b5dad7220030491d3026792be1bd0134a48401aa75a2b87b300d90813fca395e686fa64e58eec7a9bc3043d19572
- SSDEEP 384:7daHi/25lGu5h9GUA76bmQWlsH/wyew5enV2QU5yq989HASXZly:7AC+lfP9G76b4lmZ5oJHfFXZ0
- TLSH T16082E1E42813C366F47DE6FE4119630B99989710023B9220A71C13AFCAEECC4ADDDCD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.woff2
- Size 16KB
- SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
- MD5 d8b7a801bd87b324efcbae7394119c24
- SHA1 db4883d0cff95ecb5c03410e3283a737c51ed604
- SHA512 2d1c9be2a5fb303557cc3254c5a8c59bcc37c9c23fd2bfb3e85e2a63c73f61b654605c76e3a2361e235e41fa6c4c26ba9ec0adac5e146a1e86d2bcc985947eb8
- SSDEEP 384:lj3mhHOJAC5jwYAVQQfH2uL0+cJOukA5B/hOSCEcISRR+uq2osp:lj3mhHXYSLH2uA+cUukA5B/hTc98up
- TLSH T1EE72DFB11A3D5380FAF682E5907C967C4BA6118A9E78BF3361C70C7DBCA7074478E124
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.ttf
- Size 23KB
- SHA256 1ece03f79f95277d57dc7f6b435a74e1379b0d46104a8530286b60ff49369ea0
- MD5 f2ac73121357210d91e5c3eaa42f72ea
- SHA1 20b45f5346b686d52c445745393d1707bb88ec1d
- SHA512 aa1b4c8161441d57339f9e7b6a7e4726fa7a5edf4e306a15f59cf7f3d7124b2708d7b7864f329a34c38f2caf7b8decad9b1eb5f12806d85d32555378cf143f5e
- SSDEEP 384:CaBGPYdZsxFHLDldfACuTrDs+nmhZ20FkKoIYP6F62Lei8+YaCrdWkgMfLqjDx:/B0qydnLfAHnKR9qDXKYprdyMfLqjV
- TLSH T16EB20880D730A90DC05FDF358AA5A64AD6B6BD51BD78C32DDC03909D19578EC88EF782
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.woff
- Size 14KB
- SHA256 ece03cfd83e22c212cdef66feb8442d25a083beb988db3f1883f3f9738d750ba
- MD5 0e897d27f063facef504667290e408bd
- SHA1 a2beddc8a3d4d08028d707776edbd4d24f2ec0fc
- SHA512 c7c5c3bd4d455ad577552571c2ef73a62a015de8823d4e5e3d12629eda31a751ee3e0dcb045d170b45fd7ce9ce6cee951c4b50b4ac3329f7af34b86b416ce2f7
- SSDEEP 384:G4gJfti9c5SgntvMqmiuiub9Jvwd90rKT5yq9OYUv:c49ccgOiQ9xwdSPv
- TLSH T14552C0914DF1C204DACE28B446C490772FBA82A002D5F1DF871F815A6F6B7CDE2769C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.woff2
- Size 11KB
- SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
- MD5 ad546b4719bcf690a3604944b90b7e42
- SHA1 886e61797a525d4aafce0aaf57414fdfaea1b873
- SHA512 5560de886dff8f6d61f27afa2252b721c0fd493f604c61d301a0c2d2114c22a0aa5b3b6bccee87edb549d8658e969f6c7aaac5090be4adca042942dd601c5212
- SSDEEP 192:CnT/JQKjvG+BwWXe9UqBp5+Maxq/UYwjceBGJHW2necmCkq/wizbRHPQ0YNcY7GZ:edC+BwWXe9XgQDeBGxWG1ZkqYinlZY7A
- TLSH T10242D081F0D2B50188688AE5A699A91B33C0B045B27F8CD69DF8C93784D7CA0F6573BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.ttf
- Size 21KB
- SHA256 3931dd81faed86ba021bb2bbdc36f5bed9a38d6b4f4077aca59b265aa1b02083
- MD5 f60b4a34842bb524b562df092917a542
- SHA1 991fbdc03168bb14a4447cfa3e515f09a6ecfedc
- SHA512 bd96804c21c6896d99be43b95d449e990128de74c135a16a8b18148fed7dc3fac1ab60d1f850a463f242864902e52729d1e23494d8c2c73870dac9a33184678b
- SSDEEP 384:498b6aOH8MJ4avOk8Q4EE6trSF7/XobqtMgGXfbdXN45WvclNXCrdWkgMfLI8Sq:4VthZOjQ4rCC7XoKCXFN4SOgrdyMfLIm
- TLSH T101A28D409345CE1CD06FC73916D09342DAE7FE64BEBC931CDA8395EAB8804D1A8E97D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.woff
- Size 13KB
- SHA256 91ee67500cc0129aa0ace3ac5c61ff1692102f0f31d02b69347fba35dcb75bf2
- MD5 ef725de572b71381dccf53918e300744
- SHA1 7564a366b76fd837041c24beef4c5580a5add40e
- SHA512 58d1ffd474f3ab2fb3649a7d52e4f8c8c48aff29c3d1fd96778698df0d262947b3589b579fdb9469aded01dc39ac4edf8a7003d924f2db80b3c1592efa5739c6
- SSDEEP 384:n+90aUBcewkTlNckGfTNaRO5yq9Ojgvy1:+90aUCR6Nc5RaTDgvQ
- TLSH T1D952C002825BB300DD1EC4FA205D8B1CD9E8718D04DA75D625F607DE22C7EE3A86AAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.woff2
- Size 11KB
- SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
- MD5 e934cbc86e2d59ceaf04102c43dc0b50
- SHA1 3d5fa3cb309f8d83b4dcbdd27725f270f60f3eeb
- SHA512 859ddb066f1c65544627c96edc2f4702f19b04159cddae602bb3d98f905c50f98fd331f10a7510c008f0e4cf748f6e8dbb8f439861dde81a540b7b4645d81257
- SSDEEP 192:b2d0WOF6A/0eTObfAmyPS5H76K3u4LC87vs92JBdz5ubiblYrNrLUgq1LfAmgZlH:G0WOF6ApTObomqm76eRLJzEublSNHjZx
- TLSH T11B42AF9A1EB29700DA4B5EB16908AD01BCF7F6042E3256AA360568E76AD360DF8D341C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.ttf
- Size 18KB
- SHA256 f36ea897e19f4a2e571d1e900e4e3710e438deb05a842486045ba0a3e616a4ad
- MD5 3243452ee6817acd761c9757aef93c29
- SHA1 4a8e17a0cb58a8228dd4417fbd1b899e41dab045
- SHA512 bd924acfde1e4d013f7b0316aa0056554937ea97a509833ba9d7dbed1479d7d6341c56f203b45e2cd2263a421e94ed9fddf0c4728e8926f6c35fb5193c87a9d6
- SSDEEP 384:aLtjIsQmXmyLGjJiQtyMfPRSf3b9RXvDbgnCrdWkgMfLxESq:anQm/LCJj7fPM/b9R/HrdyMfLxEd
- TLSH T10D925D01C3A1DB0EE46B9B3C51B4A293C6E7AD19FCB9C71C4DD35155AD86CC084FAB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.woff
- Size 12KB
- SHA256 11e4dc8a6471ff6d6ee561d53d10fde8f7489e798257ff449c5d37c197435605
- MD5 5f8637ee731482c44a37789723f5e499
- SHA1 804610f4cb2e2ead9694b8da2ec84ece8d09c38d
- SHA512 3b89871f359e98089b2f56150531b494f65645d70d43f41b9f6fd2bd0e60cfd091107af7a56420acb23b56ea9272e763ef86b3775bf44b861488dba8163c1fa0
- SSDEEP 192:G+BKlJftseS2v0uhv0IMvWyBupd+64QfDp+CP6qYOkdYxqEtofWM1Cfq31:HBaJftrJMuhs0pY8fNni5yq9OM1+y1
- TLSH T12A42D041B3AB8F12F52ED2F0221D45080B34A747097A79FB11B48D942F0D6CD79F7969
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.woff2
- Size 10KB
- SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
- MD5 1ac3ed6ebe34e473519ca1da86f7a384
- SHA1 e45d5f4f4a7f2ff3dca9fccc2f148e781e23f292
- SHA512 13d2b3e916ba817892d9d10674ec3ab7d6c3c30a9868b1a994ed2c630b6c87d6af795f71bbf8f49304a4af455927ea2daab48fce8c7ab09293bf39558d0b50b1
- SSDEEP 192:DtmJKb0zOSfggu/SvhGJiL7MoNvVFwSLuNWiX/jmoQUrV4liuvdjZafb/b:ZkKb0zjfggu/ML7M+v7nuNWiX7Yrvdjk
- TLSH T11122B0C40ABBB540D37AA17ADC3FED0227EED601392D265E1A4CB11D7CA56ACD1AD106
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.ttf
- Size 16KB
- SHA256 1c67f068fea8bb09bf099c088b1cf64bd27516a6e07f4684344873564bb66a67
- MD5 a189c37d73ffce63464635dc12cbbc96
- SHA1 c6f675da81ad29cbf24b2cf770f795b4da2c648e
- SHA512 374df932f9c98a6025c48e8747afb0f702ee11fac6ca669edc4385b2df69b16a01aeeb7754ce05f3fccb4d01f7d3a2e50933c23f46ad3e566c0f5da461705e40
- SSDEEP 384:HWx3pzL83MrPcR2Dn1gjtR6qTIGpr8kgMfLRJ/L:I3BM4PcRK1sEGr0MfLj/L
- TLSH T1A07229C08291A54DE5EAEB3485A0A103D6F7BD51FEBC9B1CDE1319CAD0754C8C4AFB86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.woff
- Size 10KB
- SHA256 d96cdf2b3bdd4d64a8fd5f74a4c467f123a8a73931cd435889f08ffaf9bf947a
- MD5 a82fa2a7e18b8c7a1a9f6069844ebfb9
- SHA1 6a05cdca4f1f7085e607dc38bedef55753f86fd8
- SHA512 1a767acf7f1069a44d99f38b6a29287b9c741e0c50d2a85f8b97863ba4337474d77468935b157e46360faefa16fef73d064fc17551fdbc1708383857b70b1866
- SSDEEP 192:UPTpg95R21+dmECPCOwm0z/lftGneS943KobFjULNzlqYOFPrEYxinnv2AECd:MuLIMdgsm0zdknh9aXbFIVlilinpR
- TLSH T1B722B06ED971C241E059573946068CEC3E4864357672C3F4F97EED45462B31CDE48A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.woff2
- Size 9KB
- SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
- MD5 1b3161eb8cc67462d6e8c2fb96c68507
- SHA1 63b80959f1fc56899ae21ba0cbbcd39a6cb08390
- SHA512 fe385fb22e77b84a4b789a505da3759f335222e473b5992217ab59d7afca289eb7d430fad664015fcd0212715a43afadeedd9cbaa4d41f6c51fd6a18f31bef3b
- SSDEEP 192:g24BpUkBy/o5EL+0LvKjhuJVrkyrRTCpT9HbEXuJHjVsuT1dih6G8ZUgu6Rve9Es:g24BdBN5ENLsh63R+DHwORsuT/AZuvej
- TLSH T12B12B079EF099237E95C37FC70D406E659B38D0F60886143A3BAB1F45D9509F3892127
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.ttf
- Size 11KB
- SHA256 95b6d2f1a50173bfedb8c63e1d1c99b10427d0a4df4201cb44513b226951a22b
- MD5 0d8d9204004bdf126342605f7bbdffe6
- SHA1 3280bacbcb1245971fe01017b474c76c337c10c9
- SHA512 09ec1956348b69fb16aa33c1fd6774230cd2978eba3470618c9aab3c8fb006ff4b092318416d29f8772804158d8993d65229cf2669631076af055f83c6326e3c
- SSDEEP 192:UgM0JKnDigtle3n55RSnDSPXM55IJkgcwQfLq5OYR+/O2LbFEt/:UgMlDiuwNPcrUkgMfLej+/A/
- TLSH T146423C844BB19D0ED8EB9A745AD17597C7D7FE70EE74823D8DE204C8900B0C98897F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.woff
- Size 6KB
- SHA256 c943cc986384f59e86bea5fd7dc50a9c4dfe567a7c05eb40d6790720dead97c9
- MD5 4788ba5b6247e336f734b742fe9900d5
- SHA1 aefe6674a56533627c739cd7896398f14487e01c
- SHA512 5e43a366f9bc3a4eb7cd0e907d930c158574fd61b9f6ac72f3e9fc22ee95ab36e8f52f8786fb14a6840310a2ce4bf0652e6bd64318caa03251770ba1b795cfec
- SSDEEP 192:X8NgemoliTfsQsgR1BK4j0wcVam5qYORbNZw+nx/:MNx8XR1B70wcVam5Eb4+nx/
- TLSH T143D18E64CEEEA3C3D5CE2630FDF6D2606ABB83C812DA4B63D5D395B44E046062447676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.woff2
- Size 5KB
- SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
- MD5 82ef26dc680ba60d884e051c73d9a42d
- SHA1 57fa599974a1bc0b37d5f0e5cc8602302f02b573
- SHA512 2d6a4609c83332c99d52b9ac04837939a60f1696e9629127f989ab9cb7e209b76af2ceda353b4da9dc94c66131bdd676568d81cfcee97f38ef37ec6d2f8f894e
- SSDEEP 96:NufmKSPvcTOIeoeCin/iaMFyUwRXmd3o7HeU1EPwf2dDYCVYG4Yl:NuzSXZNoeCinaJuRW47HeY2dDJYI
- TLSH T165B18E1DECCDEA90CA52C0F93D39222ABA96B82CE00E54D1B15F1947AC606947D2FF25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.ttf
- Size 11KB
- SHA256 a6b2099fb555c60e3a0db3a08842ebf1d732c6eb4e4bf44913613bed4fc4e39b
- MD5 1fdda0e59ed35495ebac28badf210574
- SHA1 faf73ff3e795184e5431666ffafeb8aa0e28834d
- SHA512 9efa6449884dba1e18fb2207a296481ade8441f077b019d4a3f304d298442a6e65acc8d5f436edc3e496605185bfa89eeeab31e3b3baed1a91550bb05992b633
- SSDEEP 192:4Lq5FdCpQGnCnT/YCc9CXM55IJkgcwQfLq5OhWO2LGFExj:46FdCORLcrUkgMfLePZj
- TLSH T17C325DC403F29E7EC4EB8A341A5422C6DDD6FD82DFB59B2D89D1458860128D8A077BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.woff
- Size 6KB
- SHA256 2014c523c3210bcc166648c4d4cc57f05b747df07a24277bf71c51e67dc79e3d
- MD5 b0628bfd27c979a09f702a2277979888
- SHA1 46698ff1819bd27826fd5d2dc4ba4e1f63cacdf4
- SHA512 f25712b2afb43941d0d6dc4638efa16d79514fd1e31745e67155d4d6dae02ad0c9c7e7ead9e8c8d34c095ff25dfaac3b7bbd01b0e22e86f858ffd3a0e701b18b
- SSDEEP 192:a00sEpsJhzmL2QYufCYKTFqYORbNZw/sY5:oswsraZYW6Eb4/sY5
- TLSH T19AD18F014B012AA3FECAA731623B90A97752429C13FEBFDAC1DA98ED0D346E9444D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.woff2
- Size 5KB
- SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
- MD5 95a1da914c20455a07b7c9e2dcf2836d
- SHA1 ee18713634a3be8c997276808552ab195a598f43
- SHA512 0475c7d99124976ae88ee96da30d332cf14aeb3e02030e1fef362d3024cd85a5d89e610bc07b9f8a723c57731ce3970b803f883f0b00f61a229ee80c4229aec1
- SSDEEP 96:+7aNn5LBJ4EV4tIfHZC+ipcKcJNSpbhVcmDm8Xl3Wd3AJHVfniVEJ0Sz9sapxqG:gO5VGNSZYyfAVcmXlGdQjfi+0SzG8qG
- TLSH T14BB17C7BD1277787E4AB74BB0CBF0E6CD280D1E82EC60C48495526758BBBD08A569485
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.ttf
- Size 7KB
- SHA256 500e04d54f0d51666332c9d2089aa803be22aa878eca539e59fa53c6e522b082
- MD5 963af864cbb10611ba33267ba7953777
- SHA1 302a61b2ecdf82d39e6780f42bd07ee4ce67b8d5
- SHA512 f0b1a1f3b5a6e3e286972a02586b6a1aa442ef44c9bd9bd14319a98293c07d61c21fa344ceb98c4242c80bfb83cea5c9c672ea23ad3119f632eab338e63f6cb8
- SSDEEP 192:gvxUwizK8ZomXM55IJkgcwQfLq5OeeO2LRFEsM4:gvxYRZomcrUkgMfLeW/B
- TLSH T157F11A8513E2C62ED0EF5D780FE03186CEB7FDA26D74633D8591819860168A85873FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.woff
- Size 4KB
- SHA256 6ab6b62e9b62dae2c00dd90f791bd10950be0ecc3490d7d6045f51c2e8fe0949
- MD5 4de844d4552e941f6b9c38837a8d487b
- SHA1 1da1905a6d1d9bcab92b059df72b528dea708bcb
- SHA512 128df9cbe651785a6646066fd0dd9d280739820717184df09eb09fdbcaa7bb91b5f8892f7b0d0816474260dd48e859c7b0f0d39d0ce325953bf85ee8058bc729
- SSDEEP 96:v76om+A9DNKvsZyKt40+cCOdOpEmznbKJQZLFwfsjA:eN1UvsZrtqYORbNZwfsU
- TLSH T1EB916BA89D6336D3C9DE6370A506E11D3AB341CD23DEA153A0C695EC1DED38112AF328
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.woff2
- Size 3KB
- SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
- MD5 9108a400f4787cffdcc3a3b813401e6a
- SHA1 19a7caadfb66bd2757810ae47e5c7a0e005101a1
- SHA512 6afabee5853509df4ab49d14ea1ba31648787cc355642e7d63f1cf96a51793179495671ae059aa9f5600f162b5d7cf061b9f6a44706da19cef4600bd93d7c664
- TLSH T127717D49A390C078DC5D9B3CBA683D75C8E0D7DA4859FABE4D52C26D3990009C49D4BC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.ttf
- Size 10KB
- SHA256 c647367d1dd4e162468717d020e1fc0f1dc5c26ebfdffbe55261713bf88c5877
- MD5 27a23ee69999affa55491c7dab8e53bf
- SHA1 3d8d9dd58a03b7a46d497f5761e60d8b844a5199
- SHA512 d4774014a4aa73b58631ea21c39fbd545342769f9743961b2e436bafa3590abe002c7f13064641c56daecd1fb3c77d0179550dd5a1f399bbede5a7eaad2cdd55
- SSDEEP 192:s8GUXfjbwiwAWIvIJ5R26oASK1K4VObiouQ0+s8iXM55IJkgcwQfLq5OnmO2L8FV:lGifjb7WIvIJ5rXViuQ0+ocrUkgMfLeA
- TLSH T17F223C468376D50DD4AB9D390AE47382CF67BD51AEB0D22FC75380C960134D6A833F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.woff
- Size 5KB
- SHA256 99f9c6750b489c9462bf04900bd3f939df9b829339daaaaa99ef5495cdddea58
- MD5 3045a61f722bc4b198450ce69b3e3824
- SHA1 8fdddb83513ec226231ebee05079ec45fc013578
- SHA512 627deb0a7d3fc21ec8271a9393120c4261364755aea28071d4d5e5b2b9a6a1d5189632a85c3898e55fc435fa9abf865a5681dfb9a85fa90cafc10f06c8c82d2d
- SSDEEP 96:dJD3hKysdbyOdHMTNh+hGouQkbT40+cCOdOpEmznbKJQZLFwSbsj4fal:LDk11dHMRoQouQk/qYORbNZw+sEyl
- TLSH T1B7C19F886B9503DBD1E8E5314561D6A77DA981CC22FDEAC2A3D38CF8117C092534831A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.woff2
- Size 4KB
- SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
- MD5 61522cd3d9043622e235ab57762754f2
- SHA1 9bed17fb92f2650501e229862c40c6407e1c5528
- SHA512 17aae5931eb6425c4d5bebc6b318505a06a4b4dc3e1b36fa7e6345f5f133c793bf15613ee8befbd754398ca8f331055e7a011d892792aaf9dc6051378fcd43cf
- SSDEEP 96:5ugtEPZm+ntyI4Wvj8pSZ1smhblb71YsjEdhB7:5ugtEjMC9Z1zd73jEdhB7
- TLSH T12FA17D74320E4B9AE81F5971A03FF8564447EF98BD88EF42307B7025269393A6735AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.ttf
- Size 26KB
- SHA256 f01f3e87d9c6a61c0c081ceb577abd864eb00a612f7ac1620dd6915fad2ef5aa
- MD5 6bf4287568e1d3004b54d5d60f9f08f9
- SHA1 629b99faf18d97529f21a1b1018093e60bcd058f
- SHA512 334ba0c8d5c909df85a9dfbb364403c134ed19234d6066f0b28b19bbcb6a004df09bc098cf22f81acc7887f8581557d400b726b7c23478ee659a78c2f36c1810
- SSDEEP 768:dz3ml7/89RurSjSN1J5Ap9voVluAGrdyMfLAn3:0lo9RD81J5Ap9voVluFdDfLg
- TLSH T144C22844E7B2DC19E46FDB35C2E9D102E5FF7515FEB8868ECA47128C98690C0889EF81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.woff
- Size 15KB
- SHA256 e14fed02b1aba7ce9f5afd5844b5d0321b22351febc720e0de8b8723527609f7
- MD5 0e0460587676d22eae09accd6dcfebc6
- SHA1 f5e729fa4ff466fc07e0c7ab1979ad70c45fa5d5
- SHA512 075aaf86ca957a82baa6816c39d5644a8006dd17152e295aea84c4f06791c6dad1b064c5d9e58ac1d6370ba4ddd428a36e1e94be392e9c123fda9596ea609a5e
- SSDEEP 384:I4QFzRKNs+avySJ/kJesGfsgSPCM5GG5sef+5yq9OMdPxJLR:I4QFzRY9ZSJ/MRGf0wopsdPN
- TLSH T10E72D0A127C2E000F69F42AB9AB333D617604019C4D6588FB04DE6CF766EFC6B136D95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.woff2
- Size 13KB
- SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
- MD5 b8b8393d2e65fcebda5fa99fa3264f41
- SHA1 7a08883fffc6958c71cc01a75a0b99cca3e4b475
- SHA512 4b476187e6d6b30f5156e1bebbbc2e7fe30a52107a168cd9328a13735ef6540514fa0d638d70248bc77effb79ca61ae6a36ff8bae981d9b6cc7566ef539bbfa0
- SSDEEP 192:we54Z34Ig7Jnrv1zS38hYdgAQiTo78KvGbjSKKQPUyPE9yFelRBF57x:LiZo7Jnj1mNgAQim8vCpO+yMlRBLx
- TLSH T15C52D0ADAC814D43F14D756AA37C01648D01E44EE7E0729F74C0D2A18988FAA7DAE98E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\handleReloadUI.js
- Size 4KB
- SHA256 fd2b0c555ae1308c04e9ee5c2e83c5b56303303ad55a6c227281612b8dd6a1b3
- MD5 cbb9204c85f5a446e725fb51ba853b11
- SHA1 f97d9ddc3d13748455c57d74c702d6daa886c5d0
- SHA512 405b10cea95a532a957edc70dc3da66418c2360f90da496dad06426c8409557cb14f91d062d6ba99bd842b575a82c8c495ff0d88fb8269468bc30d917728a9ff
- SSDEEP 96:xSVa63SVa6H38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuis1Z1TTtG+B2r:xka63ka6H3805se3m4XFzVJFsL1I+K
- TLSH T16AA17202819C4E7C4FB5029A8AFA134603ED62877D77D4C4BEA2C479D6663CCA1177BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\html_preview_sandbox.html
- Size 3KB
- SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
- MD5 8135d6ac5a3d719de99fb268d8693e69
- SHA1 4209e222f07d8b2fe96e6d147fe3b8605a7c24e0
- SHA512 052f608e7060e98e85eb5b6b50cf64f199fc2800826c47a8a4b545c97df45f836d39256edf2c5f39cc227f30c108ec5b66e0d2b539d4c20eb057cc3d85a9ce5d
- TLSH T1B1614E0EC9B64877026375642B9FB009323681576665EE063B8DD3B07F80ADECC253C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\manifest.json
- Size 3KB
- SHA256 6b70fc5772e6b7436d754cf27ee66729730979870b354f445a477b1ac8ffa685
- MD5 1a984c5e88a97c4ab2dc6cf24216ab64
- SHA1 c5eb85ce8003b885603c9c0af28ba9171f09338b
- SHA512 aebf3ef76c26459a3397096869827459b12dcad1096dba3e3b645cbd02c56ea454e9fda1c488f65c1d72225e65ccf05ad2a11e7c10f33c353e8e815a7df03f85
- TLSH T1E97140B6E4DA596706F457A89CB50707F200936B878E5C4F7BFC90888FF9E602059A1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\neon_tab_update.js
- Size 6KB
- SHA256 69dbf1f5e8287e7e2b142303f430671f35dcd50d9274d318ff1ac9458886499c
- MD5 032a1f8318c561091fd8a800b20859c9
- SHA1 910f3727c9cdade9f732662be90dbcd631256524
- SHA512 1c32e9b1cab3864ac196af313e5d15dea5f858ffe9cba30e3e53793dfaddf23500800a9cc05820723de612597b8db8a5bb83c82e45944bb540313cca44891820
- SSDEEP 192:Dka6Oka6f3805se3m4XFzVJFsL1sPhTfaLlx:Dka6Oka6tme24Xzs8TiLv
- TLSH T128D1C712418C8DB88F75028AC9BE034253AE5257397FE0D0FFA2C4B6D9623CD9417B76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\offscreen.html
- Size 294B
- SHA256 a15cf99abbab3275ed29b1be9ddb30c379fe2b035c3ab8571ffb845da22d945c
- MD5 4a24f8fc3a1e5b8a96310b262ec66d7d
- SHA1 38826033c5e53bf9e3400417daf02e5612fdce66
- SHA512 01dbd225cb9b44c1f1d4b0b63191ccbccc424241cda95101b9eda3a02e309110808c7dd2c331a226365ae21488d0c9e6948bea26329df902c8e9829de1bc9e73
- TLSH T1F6E012D98CE5DB69866C1CCD5D71E50C4C4CC285E720ED100AFD60FAA900BC80DC2A88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\offscreen.js
- Size 12KB
- SHA256 510e7c22b6f8eabb055371d4e246949472547ba253b7fa5b18a85e3c0902948b
- MD5 d6fdf02c9c0e8f86b7b200b3f73df5fa
- SHA1 ef862820291f5a4163b37273a4892de8c5367569
- SHA512 c3ae4221d16eb6923bdd61281511dcadc0cdd0419e2b9eca1f6ebe6fe61ad7a4c7217daa8c904ba570f92c24c1e99949409c22d40ca69d49b93a4c327094f6c6
- SSDEEP 384:wka6cka6Fme24XzsWvRtd5OCDoWKmJe2svdCO5HnD:wka6cka6Fme2pkjOCDVZi95HnD
- TLSH T13852095C72C7FC794B628195807F2202A2AE2155387EE4E1FB32C8B1AD2468DD137F79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_animations.js
- Size 8KB
- SHA256 9a27810e558da9004d6cb45c75526f36c388869e8d0119cff2f8c836730656a0
- MD5 0e4910c53f12085f94e0214b3147f38c
- SHA1 09c963bd8db9833237abadfba08b1526f55b3249
- SHA512 99144460870486baa9bf6602114d2e3c77fcc5ce0b6d44a40074892806b14af0a171b3a6ce45b971acfca07d1a6997accd0077948be20b7594c2a9d4f67cb818
- SSDEEP 192:xka6Hka6v3805se3m4XFzVJFsL1T5FDqJXPY2ANh/OdAZpuZlNt:xka6Hka6dme24XzsMlPUWdAZpuZlj
- TLSH T17112A6455089AC7D4ABB434781FF034663AC61036C36D8D0FEB2D47AA661FCDA213775
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_startpage.html
- Size 844B
- SHA256 e11105c10babb037790554298c492ba4c84ccb93f327d4cb1fcc477d54d31da5
- MD5 c649a2e38e11ae47ac4ff153d3885f76
- SHA1 1a8c64e25b9e72d5c8170eeeeefb4c12b7360685
- SHA512 a40d4cea35ba8cd4b48e3abf1451e114a827f1b7ef3dc153a46a666ba8aaad0cc417b4d4022fef1065b3f9426c6d17071f451a7700645b0b5257b205e3056168
- TLSH T1A7018E89CCE2D56B952B49B869B0F51C0A9CE207D3949E103FFE60A49F80B804C81789
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_startpage.js
- Size 351KB
- SHA256 a63c90e575ba22e5baeff54ceda83d043d7ebbd0ab6a99e67573e4a4d0780496
- MD5 f9d1823a8885d2e497441e4011146576
- SHA1 2f316f7f3c4e8ff69595e3f8e887dcec3791f640
- SHA512 0ce64da0f023751aca9e38d6d3d3380855ab8e85e76a8997ae0a01b7c69eef6e32064118bfed42ab4701074dd1f14c04f2b2badb63ba46c23046f08bb4c915db
- SSDEEP 3072:+ka6Fka6sSYzy7LqW5K62+m6e65J+koWQzlxp2zCKeTRWUNUZtGTn3vaVoe3nt:+ka6Fka6ph2T62+mq5J+BTRgt
- TLSH T14F74B663A1924036E42747BF31E9D09EBF7C7002D95C5E79FB8991A08BC9BFDA493601
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prevent_new_tab_opening.js
- Size 7KB
- SHA256 ee9206cc52fb3b298ff506dd9f1427b889db1e8fbdaf4932d8eeff4f9d7fba1b
- MD5 aaec148bea65591429d8a347d7433a81
- SHA1 eb4ed6ac57f6d1e2435409992476864c33ea2bd7
- SHA512 5846e3db4823a6e90e2ff928e55e49fd1da64879154c9ee5b8e846e2fcd962722d552ea096fba39839248a1dd1e29b0976bcdf45c0b16560bab9454c1e602132
- SSDEEP 192:nka6oka6B3805se3m4XFzVJFsL1y4S5fEqwoR/xoPGKheM/upsDZE46:nka6oka63me24Xzsn+7jgPGKAM2YE46
- TLSH T1D9F1C986A28C6C794EB743A9827F1306539D2187146BC0C4FA71C8F5DAB57CD9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prompt.html
- Size 443B
- SHA256 f54f339837e1b29646d56733bfa7945f10fd5372424a0055c5f8ae0504281815
- MD5 f3548ba62da434e19df250c3c5e504ac
- SHA1 9a0e2bd5704807e09fdb109926ee21b818c32421
- SHA512 3a11c963b2b1c667b2369e2e5395f31b0ee04539178751268a9ec9b61be087860182bd1ff437a6f7a785114511da1b04da67dd0ea6305f1abf2e922ea752a131
- TLSH T1ADF0ECDACCA5C62D43380CDD9D71F51C4C8CD349E751DC101AFDA0F9A985B844DC6B88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prompt.js
- Size 11KB
- SHA256 e2767a1449d4e45fd88be3eee6a03ad7b1282e69450600e4f0b4fc0ef1c8f5cc
- MD5 ad7398eeddac46d7e945bf562cfbba39
- SHA1 09202152dea74acec3bbdb62055520134429e99b
- SHA512 f49289314417629715220e6c23dc40b99fac67b61eca3b29abada3d3524b2af8838560704c1e1259b75e2c4628b0ab1284400cb16da04d29a5daf605a9f6c138
- SSDEEP 192:Yka6Xka6H3805se3m4XFzVJFsL15j4tiofR+apcqGvZd1UbrmETRcz4a4Ylh4anl:Yka6Xka6Fme24Xzsnj4tioZ9cXZ4v/n8
- TLSH T16F321A0575C4ACBC8E770299C67F0285E2AF2256393ED8E4FB56C0B5D5603CCA127BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\shaders\operator-scan.glsl
- Size 6KB
- SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
- MD5 a569d4a4a1558e84c77c6a135b3f8b26
- SHA1 e689d614b4742ed517f8e1521232ae470c75c0e8
- SHA512 a8e983251a0c6291680e9a6ed5de437a180ef03fe9e939c441dd8b0e778bcdb1b8837dc8894344baf6789c39aa27e205f5e24d2b6832e94c7437eb7cd2f5267f
- SSDEEP 96:J6oW06H6pzfsW28CscjHcoWywtKXZBOCs/Ou/uYrvWe5mGz:JpWfH0zchfrbkC4RdreeRz
- TLSH T1E6D103EEA65705275C6B71AA8F43400C976692D32937C689380DA30F4F9709FB7127EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\vendors.js
- Size 2.3MB
- SHA256 6f4d8ca46d311713e81ccf685bf821cb6fbc86b98a4a86f94897084aae26a167
- MD5 52fffe79b53b8fd03c16e8e6b1df9103
- SHA1 009e5d9173ba577831c47ee4e70c3fac441a9843
- SHA512 20ad574c4c917ec96892ac469405b6b4886cf443d640cfe46f8fe5359c800fb2972fb3b9a374de6cf158899b7a4be626c89f6d62cd7ce2e84b21cda3450b2f6b
- SSDEEP 24576:9dy/FWG027oUH70/sN/PgnIuKd3Nmu1kJDHHMcy6LZf26XGAiOsU/AHx:9VG0KdHo/sN/PgnIuKd9My6LPGA3/AR
- TLSH T13FB59E993697BC7A87E711D7607F0406F3BD582A780C8818F1A4DDE974B8448A2B7F78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\voice_capture_worklet.js
- Size 9KB
- SHA256 0f798788db49f2c397d8113ce08ea55c51017ad85330bd2ca5a53cce8dbb5c9c
- MD5 dcb5211902f33aedaaea23661d347bb2
- SHA1 3a14f3b4faa6b08e9918881d8ebb7bf9902b0f02
- SHA512 cbe00f1c155fe787319e8c7b4d36c47fc94c61c5da5e3df339ed00f53d7e0e938a0691835588a05be52dd5cc39e87bb3b7078dfccb0195b7bc2473f68cb96d16
- SSDEEP 192:xka60ka6Z3805se3m4XFzVJFsL1f4u5PAnSNU97HAjPBNJCpICV:xka60ka6fme24XzseLnBdHAjJLCaCV
- TLSH T1D912B684B1D5F8748BB2526A807F0607A27C65465C6EC0C4E662C4F49DFA3DDC22BB79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\background.js
- Size 144KB
- SHA256 0f770704e2ff8de44b53ed7972b8a3e10f45e6289bfee8cae8cdcddbe7bdd416
- MD5 98216c2854be0097cb754f160e9503d0
- SHA1 10be218b2624b4f6ffc5b606b82d840f8519d553
- SHA512 507b6f5ac7f6b2cc7934e56b639fc2156105edb6b63a58832fd036bc73d3f82de8d5d30b2e05ef0cff7c954c9003940365db615a9d70120ea9f87944059e46e8
- SSDEEP 1536:KRHixbaii6cwPaiJPcfcTTLPJhV1cyn95HWkIGWM19e7KVn2XV++aWorfWg9qW7B:KRgaiVTTt191BFG05B
- TLSH T113E3F7CD76C3F27357E380BA803B510BB2399915740D8454F626DACA3C6988EA277F79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\098bd0c5-3730-4c53-8df2-832a9620d137.tmp
- Size 27KB
- SHA256 35f2a396e255a1ed1779b56fb097e46f6e17119c2ba84fe609a01cccbdfcc18c
- MD5 3a653fac7d3fe26f0192577c03bb2305
- SHA1 fa20e2b08fb18c71925a4ba1a09945e997edac17
- SHA512 9a3a5cb62fe5a0d86b605c000e77fca8cd2939195f5dd455b1d06bf2ada939333725370aa8ecd07d2ede1b5c900b924119a913c0b7d3670ef0b687f455b64da9
- SSDEEP 768:B9X/gPxQkxmccj1HkSzWtL3OUlSqBMuT7MX0Lu8eBh1:BRgP+kxmccj1HkSzWtLeUlSqBMuXMX0q
- TLSH T10EC260C2D5800264EC686F3550734D65412BBEB9BEB4BA9C9D88B9727F732C35036A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1b88400a-f4ed-4607-837e-243502b97542.tmp
- Size 27KB
- SHA256 68c23af61ff2bbdb2e2eff18776c62cf64ed6ce0a9a12d1def8a2c884d09132c
- MD5 928b3330553b6867c1f2607985e626b6
- SHA1 043348c32f771a3f8368f928eef6206142ed5a07
- SHA512 0bb640f43f65dc30fc7471ae7da5e046a5edbedd9eec08364fe0ff486aa59640bf5343d3c918154f86f3b02b3ad467aa67da8da2322ee6e0cfcf64306b3e7424
- SSDEEP 192:OIBi/m7Lm7lmNid4lWXOHcluqtIpHoKeDDaeSND4GJSfVC:OIBi/m/m7Yid4lWck1CZoKeDDaLh4a
- TLSH T16DC2FF90FB58EC06D34B3EF896954B849A55DC920E230731B23CB21EDE352A3DD6769C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2e58966b-7b4e-4533-ad97-dcbe301492e3.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\874e0c76-0614-4d8c-b2cf-10821cae64d0.tmp
- Size 27KB
- SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
- MD5 020c1aeb8d8e137a03d5244491a1da9f
- SHA1 fbce07337cb53a16c340251c7cf146720c0bb408
- SHA512 ccfa08ed2426517eb85969d9bb482602c0402973aed5f46fbcf9fbd66647f9a65f60fcb037f0328ff04644f44d69a0b03cb6d79227d9b08ae27103ae58adabb9
- SSDEEP 384:OEUBizljf867VPsLWqJAtyF+G64zJCNz8gWaoSwFSk+M9Ol:uB6jJqGUE+zJCForQk+M9s
- TLSH T1C1C26FCA1F3806B9CD6416B4CE9BDF5A0A740DB2BCD97746CB6038920933EE515B249F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\b004453a-2152-46ce-ba28-f50dbe058f5b.tmp
- Size 27KB
- SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
- MD5 ccd9f3e1f74f2028805e3fea6ad9b934
- SHA1 f5bc2ea0c0c3d89c7f37792cc43fe592f8bec748
- SHA512 ce32e58b002e2f7fe1649ca2ef4dab2a3ff9c738c11f010a9a837a5e7eb338d03672c325636c87659fa19f75625cebd9dc2602b428bc6d1e2d0799230d81c824
- SSDEEP 768:3F1F0kh7RCnrrh1q9i1coUSeJ1xM9eK3ZSk5:3F1F0k9RCnrrh1q9i1coUSeJ1xM9eSZL
- TLSH T179C297B2D8081F14E698B835EB7B9C0A81F8AD2D1439250FB767BC507D9F64EC983746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e1078c49-7429-4fe7-be47-d9bcefaa2145.tmp
- Size 27KB
- SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
- MD5 fafd40f7fceb49324821acd292290bc7
- SHA1 0c3a32c4edc6f4f4b6b4e0ba371cab917751885a
- SHA512 1a18133b6b2371fad37f53e5a23439124403a49282ea0df14af982c32beebe49ec5ddca1a32c7854d2001b2d1ddfee45dc180c1f92fb7ce55cc0ea76417c8008
- SSDEEP 384:Ogao5jgnaTCrfbwkIjxgrVybIfLEpH+tjG:xDe3rfbwkOxwVybIqa
- TLSH T174C2FA84D9F22938C37648BF51FB5908BF3F5E625C9B0462CD3A5E91787280F066F892
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ed977725-780c-4dfd-b60f-fa96b66beb53.tmp
- Size 27KB
- SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
- MD5 73889af3b383a202fcedabfb464d4480
- SHA1 c248a6f31c2f49eec312d8ae516eda260b647f01
- SHA512 84ea287342dcfe50fc62eb4c14e80ebee0a452d3c39dfcc22eee8b0a45ae7be3c6bf9fdf712457741de9966a23792485acd216e7c3a82b52aa37de98311deb6c
- SSDEEP 768:pHQG314Cl6vdw20S0NzHBDXnkKEJzPRAf:p2Clww2SBHB7nkK0R
- TLSH T12CC2A3A561522444E6E98F31F10BC85984295F5C45FD4E1F2C903FE6BFEE390BE1AC2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
- Size 12KB
- SHA256 92364de16e7aaed50a23cd7e0487c70d0d927bb2176e7829d9001996e3d4c265
- MD5 68795cc6682c143e02438caef2fb06d4
- SHA1 c1e137cdce77550fa6084917549864ebe6471134
- SHA512 bf89000d73267f7f6a0c0af41409cf1623798ab4774a386f5d29b9e09fe1fdfff8d024d5fbd9297906556d4da59e4555379b8e7a0300b651a8b6db1a3c56ccb1
- SSDEEP 384:Hu19JND7eAcNXz1ca2P7GoMVe4+yFIWAigSjMHc0p/hlAM37OWi:HpX8a
- TLSH T1B14244069820ADFB08D28625F691F617F2E42030AA66BDF6B7F9C82C14C76DD34129D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\ff38d6da-a44a-4a8e-919b-f6535ee44661.tmp
- Size 72B
- SHA256 4f9959504b6d3545f635aecc65cfffc695261622d3070940b9f95a64c37d0e73
- MD5 0808715bb5a800b6ecc578ffed9a5135
- SHA1 5a5fb4e3723649189878c850429a5fa98d3a5ad8
- SHA512 2c24934c3225d12c1da651f5c520b5ab6698a21aff82aec58305d0fe0e171b3ce384e4e1c988602424f67b935a123938a833914dbd5f9700b3100165cee5782e
- TLSH T157A0025142409170C14407F6390583891314BD258408862376E58347CD600A16929289
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 552B
- SHA256 5f76cc32c49c672321860267dfcd544192f3a9df67978f81a316e2d06d65b3a1
- MD5 e6ab0f736093e2b302e70f2dd66094b8
- SHA1 c6ed78ec019645469594c8cf555949c5c4a0384f
- SHA512 6c0810405e831b0ddfe997bbbe3246423fab20633d57d8712b480d4e7542659d7307d1ec931c5ef3a6a1bc25b9a15fb406d025af68367a45dc5166551ea8c476
- TLSH T1E0F0680B9A8F926EC0A08271251A1058633AEBA3DB1473CF4138253E8CE12364D27A8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\72918939-305a-4a0d-b5ee-34441b1e199d.tmp
- Size 11KB
- SHA256 72b72625d116669011f6633e91f81a684ebf48327df310c76179db054522299a
- MD5 3627517886d820aa2120e9f39a4abfa9
- SHA1 8a66a6a647a6ecb69aef2a9e823171756caa925b
- SHA512 57ded5fa1cd0742fa5dc817d340ff8bb1dea3b79b559a36e30f94ae209f041dfc05be0578b8562f6d8d12c6bc1a239ff728202b4746079d04b29254fed2125ea
- SSDEEP 192:fdfCxWSB1daxaf5zc2a1CwKRfl0bIigWaNmtJWrk:RCxzBraea1Ch5ZIaNmH
- TLSH T1D032C0969D393CFAC47ADC117045AAB3038B601BDCD01DF0F9A8AD841FF86B165944F9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\ccb47f5a-9648-452e-88f2-d68d7d752fa3.tmp
- Size 10KB
- SHA256 07c4d03e8edac5b729f536192176465b523086d08f3f6c41ab5bccc35002de42
- MD5 354a17d3da8b0deb132dc6b390805d23
- SHA1 8b785f5a5c6a5b4ad1b181e29558f5c56e7166da
- SHA512 c14d80a4b257f0a2b721740a3a3f547784e320ce332e57d9242095db26a2adc3e1533133a392358c66a3741e89e37b28d492a6acaf34e15a730bcc1ceb5bbc85
- SSDEEP 192:6L1ZpPXiL4vQtb70184u94rO4gh3v+ntKmGABOhNp7wfTEwcL7eYqcTj/GYZUi:OTVioQtb70+4u94ry/UkmG3/RKT/lFmf
- TLSH T12132BF0987573E114F0825B7EF4120D6613ED0F12AF9C059AD4D8235EB5921B7E7ACEB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\cfa21dd7-205c-40ba-bf4a-a2b0de4754a1.tmp
- Size 381B
- SHA256 631ca424bd1f7bc34f492326d1a85a48fff34315d7e532012e1e575b24f9f40d
- MD5 835be9db3adc4d7efcec5e5a6df1aaa4
- SHA1 7ddf170954f70c7a0dc03369554811556600cfb3
- SHA512 ecb68a65462db9a519faca59872d41a9279dd96006f74e69412e9f944efdc1470240d4762221a0d5839d1638800741637c150a677325a05c1c96cf59106e3940
- TLSH T19CE0F159464B414135D5DD01390F00B3093D7761CA50C30283DC3AA90D80E30B28E262
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 733B
- SHA256 47512a481e6f52821523c8077505cf1209307c0e55006dc6d303016ae2087510
- MD5 924120c6bf3c72cbe4842e13333e137e
- SHA1 7aa89e220e84fb19d1eb021c321da1752fac2089
- SHA512 b7f4b984c33643bc95f6880a61b2f491a45abe56349553cb2dba7f1ca7814a6ab2ef089a9d4f13342f7ef5ef609ccc7b557354ac7e8ef6c65e6d84ac40005993
- TLSH T1440115491C5152A247DDC383EEEC645ED72A26100E64159D9778CF085FC75EDF312709
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 909B
- SHA256 86dc84a03bc60eadc489384ea47c3e49d1590e4089b4b451c82feda7b27a4dd6
- MD5 d375416b34fe7822ffc3d845710f3acf
- SHA1 2ce3a8ff5fde5bb12c6dd1ab4fe9fee7b0f63992
- SHA512 80a5a092268649a61ef6719c1dda40a3fc5ff0560b7c169f802faa21d1dc23d3b99a6e2b881e44101c1f5e89a1730454169f2dbc3ca8c26df9549c06a291f5d8
- TLSH T10B116370143C483DE5B691E2D61D0BF28D8C47E928B6EA74E42153B848A6182AE95DDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 762eb3a62db5a0c89955f636937975708e33a1b56125886dcf8349b4316ab612
- MD5 a9b31db403ae3a3f1e8509d49f6e3d44
- SHA1 802a26da7b82364ec0d12008a8bd9ef3c001c948
- SHA512 cfea01405ac8dbf1a00d551c21fcaf2526f3de8f91429119a3424eb97eedd987b7428b23c01f0f9b91640f6021c92d31f41bae288ff51b2b9909d01c14f10bd4
- TLSH T1A4514DA578CD8856ED42E0F88B069C88BF60500E14FD9F49B7A69E5CF3C93D06254F43
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 4f7c5798ca02f9fc46161ff6a454d75d68a4b52d948487f61e9fe6ea51450194
- MD5 5c10b1ec3e668427397bff41448ea3be
- SHA1 e5c521a2cd764a7498d0a71fbda8af7b5e07e6d3
- SHA512 3c0e70b0150656ac8ad8dc7a19dd1ce08e24991458b39f88967f9ed78611066f467043a9138093c0d39cf0189fb09fc76b7fc90ff832cb0a17f77c3346b20744
- SSDEEP 192:F2WueMlgwU3sAY5ls8+tJnZVpjsK7FQUVainp3oizzvZ0waUmB73o:8V6H8AAS8+t9ZrjZr4inxoivB/tmB73o
- TLSH T17002AEDED6AE6DA6CE6D6A7426E38F194C30C3A11E5F1C4E900D6401C53BA4E03D6F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 929bb6867efb53d7123f53ac2dd7a0714e0c7e23dd4c6036fc0046db466a2e11
- MD5 0c5c990d38e82095c178e5fed8fba2c3
- SHA1 2d3f1281013a590d0bec26c192325b2e27e76929
- SHA512 69a9bdd0b4194f72159670aeb3b8f5412fd45584d6b3d7863ccc835143d1f788bba63b2ce4a7844c5840a7ff551f7bd7b630d3695e7b622e1b42dcfeed32b698
- SSDEEP 192:LGCQr1O2CzkiciJLeSjnNYSEONCPn1lzksBp48dhndJRgbFMEkqh9Gd:CCwNekLMni18kYsBpzdJqe7q7Gd
- TLSH T12912AFE0063A8E4FE0D2C0817653F3A3E25EE2A2711B66191B555F1B704BBD3D423B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 ee8ee2237d8c73daa8c5ab63ffe1dad3a521429552a3b63c0b40aa1b553c183f
- MD5 3c2f867b0a51ae8ca7abad2ee701f0d9
- SHA1 29039d732ad68097431f6d0efe6f47da5b865bbb
- SHA512 0c30625acbd93874584f5d552e238efe48258c9b136b1a983fa6104e2d61196682a098be54b6d532b3ff787159f8d62cfcbfaa2c1f799b5ee2f4dafcfc2ebc22
- SSDEEP 192:lAXnWEQwRbgLzDFzt00UGn2CZ2Mn5A+3jRMJGlDGnQHuiPlQ9m:KmjdLzDFpwOd573aJGUnslf
- TLSH T1C522ADA38CE64E945A3953504ED312FF58EEEB2C415F272C82026BA7553EFD08BB7085
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 dc45a39b39f7364c6789cb5cb9582630e6684e850ddd335cef627af6580bb754
- MD5 f21493bff66dcf449a41bd2c45c340c2
- SHA1 07bd73d39d901a840d934d647c1b4e3b2d029f9b
- SHA512 a82fd235d122db3a72f90d55972d7e60ddefed7de79ec100b696cdc89248b773c9b86547c5807777b0039d50a8d50b718b9753319d999915fbb294f745c8ab1c
- SSDEEP 192:YV1Wae9sTCeO6WZXfqSovE0fGBJywkE1YgDuYlQ2DM7O0oQCDeynQxr5njvMyHs:YXWaFTCeXWZPq9vb8+E1YguYlQ2DSOvF
- TLSH T1E822BFBA12C2876D68D10AEE9CBC174E862EFA733350E255E843CD3E46D80BF54C6567
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 27a46baf97e88e7263db18fa6895ca167a4f11092304f0ee9b6da59186e958ff
- MD5 a0bb53f3764b582d8bd344b4d63a7e66
- SHA1 ae0e0c3bf3e99d521b2168a8eeb9d6c6d1404013
- SHA512 68e74a5d83a4e58ab8c65379dda25a062946c189231073bf98a7592538b4ddde7ed07907c8900af5b3421afb666e7a8e41ee186ce208ab13364dc0966de35d8f
- SSDEEP 192:YWR54tzO3Satju56YQGEDn1MZ+N1ZHSnuVtpqVE+jUpvQYbBR2fazmUEE8Q9XWl:YWR54o3vSXQv1bN1ZH9tpqMpVBVpELkA
- TLSH T1B622BE366EDBEB774840D8816DA9252826F75BCA683F2610736705CC55846B883FB88C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 493B
- SHA256 0695a62834c19a477a2fad1362fe932c4bd9fab263701f339c13c59b839ad5e2
- MD5 dd9b758d44a7fb51f48e036fea956d96
- SHA1 0131b23efd6b313747e7bd187f990c243422dd64
- SHA512 16cd8e809030ed602b29bf2a1c5e2e80632b8066422e2a0ece17638c0eb9a31dab0c47871fdc31a0c65af7df3eb67367368e1dcc30d5cfbeba22cacc48bc168b
- TLSH T1C3F075F728150DC708EDE094E40460C225B60280CE93380E8D5563D07564427A691529
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 605B
- SHA256 95e1f518654373cc026471d182768178b7bbb3206d5ff20aad718521bcb91898
- MD5 62647704693e98054f2f570447107a42
- SHA1 f6679db599f8d27dff69dcac9f935577b9b24bd8
- SHA512 05ae59bb79be8fdeac1c21ac40bc27acd343b13cea6cf98bf4601bbafea67b7beb6a105f94447b2d78d8af4f7f7897f6f5cc928816967586513bc8ae06872866
- TLSH T160F00245E06752AF5B2684D87F8D31010A84912D9E0C7A7836AC6075C9A66629AD11C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 8347fb10e5e3a3c3f3d873f7a61d48394997cb3d93848d9626905fc55e5be1a4
- MD5 6f2f220108f494fe62bd8262e0084f25
- SHA1 0c98b533cef1c78b987398d22dc5db2c87299ed6
- SHA512 138ab024dee0273371095e406e6d24cc15070117efe3ddd10bf962001928d0391ff853c7e1cfdbaf8a4cbf5b7c186c178024bc3e51486a7efb88885730cd998d
- TLSH T18A11B698E58DCD5AB10731A1815580A0021D7C1CA293F303CC4236DE53917D1DB6685E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 76e97e290a9b2d3ded105b516a14d9e8aab185afaf64fda5d3f7ece95e7b7cc1
- MD5 32de092a2d9b561c2980166827803bf3
- SHA1 b515b46aa881224766adba59e265325d90e40603
- SHA512 a5d26dfd9fb21450b4adfce4bf92e3096f6ebab96a18d8d3beb8e84026d05adf4403b801016c2f42872151a5eb35bbaa4d25644e348045764ea1e050d13d2368
- TLSH T1E1211AB8291AF01F5202358AFFE2C42C81743042916ABC59784C84DD2740A18766EE8A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 8e44d1869f0c77585ab349e6e8e84e2b2acd0fbecebf00636c7d3fba49d7ef95
- MD5 ed56af658eba75f7abe04cbbcf102083
- SHA1 57a0a33212a553852d5adcefe2cba8c15e23fddf
- SHA512 4218708be1ef4e04612aa3dc8109599000b76558327b48e3c2c7cc18a1202dbe343b703baaebcf90f46f722e31886d2db8d3c4eb27d19fb61db61c77c3d77501
- TLSH T16C21D6C0D493DFCFAE567DE88660FFCA27F00A285F740FB4A10A00C89859AA37575A95
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 f7749013857b140596db8783066c948fea3e86ee95876fa082ca089213991a18
- MD5 4cf4fbef5a9122a17ea50788c3a372ec
- SHA1 04cdf0cf15cc0dc08a6ab196a31f1049d076e21f
- SHA512 bf7de07b4824e873bb214c15f0d493b90aa5b9ec261b2171a44106519d9df57716f7bc37c631d6100df8688ef69bfd59e7769f6e28f109e175b58f057c25b4e4
- TLSH T1D131EAED0E002589657E1335498FF47952E5F742590788DEDFB2FB2030C75810C85239
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 917d9eac9d006f0de91a1e239a6618864720e0a680d36813d2365ef069ef82e6
- MD5 7b69c15881f29918ac72333f31389c72
- SHA1 ea2d4018ef2a5f750eae5a00659e2ab6d01bebe5
- SHA512 85c6b65053378836317fea6ad560f44ea4da4e5332478efd30403ac99f24b05e6ea694b9e716f4f0b046475813295dda4e1106e19f0bf25b78640343258c5f60
- TLSH T18031FA25CC64684F73C99A3CD54F36E6FA6D72B3B07621DD05844A5051660A35B84B70
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 692e69f06830bf685d77f66322713863e2b3b430f331800bf411109885e06d03
- MD5 01a6b9dc9c7e4b801d6516df4241e666
- SHA1 13e4bf7393788b4d46d333e94d23f524d495502f
- SHA512 e3209596241b468073f6a4ec4207c70c0419d560623db1006f3521540ba0a29a9a0c00de05bc656f41c81f6d6b0628028a116c389d7ed7b9b52b97fdfc6d8746
- TLSH T1463128B146C64C7BD2B9D90D0F0F8AF0C36A8E02C621413146BC8A2C031B8B19DD3EE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 2a38824bfa87a8b3d39c8dbbb2f613debdb2f3d01acf04979f76de41b43c86d3
- MD5 1ebc84b75fe66098982db487a40118a7
- SHA1 d7b590d162321b241b7b33fbe98dec541e013b3c
- SHA512 906433eb2513d079ed42e2f3700c9a87fa4b22fe1ac83ba5dda01d53a40952b6d0c3e2f11f3ab7f0a802cde32b54a9e81a6cc5038fdd262269f08361163c5afc
- TLSH T14531D7714C0F81367A6A056045A4AE0E5948A7EC32657C6585D1C4C624BCB58829E0B3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 2d7f3726d2bbc09f47ca76677e36b8b8bad5a4f328f187ea346422257b4637e9
- MD5 0648bfcdfe70f7319ccfc014d8d617fd
- SHA1 ba8774296e414c07603e4110c50b0831e3e34218
- SHA512 d409855367a0cec87743e4a62bccdf414ad66e02f7540a9a6d339c325ebec47b74a3166687f9557e0feba23406b897461b05355d55eeca2f52ebb66b33689d23
- TLSH T15E31197808BDA247217E9B32B5D6C269A775506004F507423F6FDCF0347030D94CE9B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 1KB
- SHA256 a548be226d53cf8de7e01da4a5a118e211e394a367f4f987e004637e9ae9f1f8
- MD5 0283b7435540416d55812c83b848dae1
- SHA1 c9ae221881aa5b99da30519ce11fdd6482f443c7
- SHA512 d70277d41ba79abcbe96f449c227fa8dc4697715382cb22356b894dea1fd1b70fa2f33f74f02f688205791c6f5a3e83562faf7b8f41c007d823966a3b7d6c1ca
- TLSH T1C4412C2BF25B437F345F5B928EDFE9075242C61DE06B1465D435A4EC103E8046A82403
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 038bee433159218c1b94a4443b02f0bb97ccfb4abdcc9699771ec38e0ed4a23c
- MD5 9a4906c2fbecc43d3bdae1f26e9be321
- SHA1 e6ddd7daf6a9ec6d05bc53036d84fa2b1686a01c
- SHA512 85dc9354c36136dde36414e96745b6a62dcc9d08e4f773c7cadafce5e1e7a6f06196626d2466b7aa5775014412496cc1d43d531042709c4dd17fc377bdbdaf82
- TLSH T12A4119133A8E97A750AF3488DA57E9A6AAC65F120017F7213A139EC13584D0AC6037F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 ea1c269cb5ef4b03ff38aec3d398ffa883a9610a974ce3c4b76efb67748afa1a
- MD5 8162cc431684fb570be7ba80d851e9b8
- SHA1 1a22991d58dc05ac24c9340c8a9065cc8490e5ef
- SHA512 7d36d21ba1d19f52206e9e988cf8c727b1a0aa848a3916600812e850c90046492d260187249fc9104a5a3c78d17be5ab3c934e247175f30c353cd8758ef3ccfc
- TLSH T123411B17099091EAFA20C20BC433291F7E500EF684828D7BC55E6D0539086DBE8517EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 0739171ecb4e6f98a98f46ba20f87c5850f86aca1e061ea7562fc0c8a8bb1314
- MD5 7937f55f4ac17fe4e8cce05b4868ab79
- SHA1 4b37eb3c95f0241b69aad430f765d7a42e04012c
- SHA512 c2c662bf6b165e6e269dbd38d961632fe59c0c8f7d5b2766fd45ec1873e15c3c628f7584805957d0ccdc0ef2f7a21ebff2c67dd02fba431ee65a6d6657d37c3e
- TLSH T16B413B0A4AEBCA14BED9E7318E1711A77F488C476B4E2A7F405AC2A21D7F50400861BB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 86b389f25138aedab3f5c7d78bb8a49de0267ff9806c63b63a60d1f259030663
- MD5 e7ba9313af350bd76297ce5030569e98
- SHA1 e93982ff3b466e57d605872d99324ae23090739b
- SHA512 33448ccc4109c616b6f0cd2cd4667d028f8611beee041fe9e19773dadb0f808d74348209e8f320d8c7183d93f8ebc6ffb77126d29a911a15c3c30399f1de13d9
- TLSH T1AF413AECD6B4C7485F492814FDC78EA19A89491043CA22C61893DBE71C4827FFFFA684
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 759a5a45abb147f3c7ea4dd60645d4feaac4605bf20b60b6300023e41ae11dfe
- MD5 1622e3bee4b2509769576bb4d6ded4b2
- SHA1 2225f80ea4bae32b47276cb8aae6ce5fd265b324
- SHA512 dfbcf01189cfad9ecbf28f0f0bd7143a9b1bbda222a1afaf4a865a3ab0f77876bc0d6ce35c458fb817bec314e86d04f265e0dbeff2ee0d9f6d771a94527b356f
- TLSH T16C415B00103224ED45623EBA7128959092BC1CE3481ED1F2E9E108B364BBFE2CFCE1F1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 6b5881466c03e1c24e63ea9e8033551e81330dfa5ab9b3648d5ac99f49455c7d
- MD5 20fff1142490e696f4bf555162c4d82a
- SHA1 3f9e8399fa827e8a7a1afd05e779bfaef17fba24
- SHA512 49af33b419a77a7d754f1b8531cf7c302d02223bf0e0293cce29d1b2ff99f30ed65d52e34f9377644bd0b518166af4922a660fa29b54723055dbcf3fbd0543db
- SSDEEP 192:EWUDAF5UsmddSPRoQUHGiKkgNMnzWQT0iFkSj2rWOPUj:EW4RvddSPRoQUVX4CzVZkS70Uj
- TLSH T167028ED5C371BAC0A0992F17A9E9B90865C560593FF172D83775A26CC8527330FFC962
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 9KB
- SHA256 f1b9e9e13e8871550961b49c17a463d58cc1cbc997ce3d369a203779d7897fe7
- MD5 c1508494e8da0ff1a0c87d862c8b71a3
- SHA1 80ce132f6936ffe07442378c4f93cbfcbce47b9f
- SHA512 420a79e5e2202ecf3f67b74499743b7fc7208af628966f58bb77ebcb29bffa35ddf201adc8acbb40e54f2fdfcc790175eb05c28ba548a8f629c9714335f4a6e0
- SSDEEP 192:Vyqz10MCf9xf38d0KxF0Gn0aU4mK1fyua2413agaXo0lmT:VyWPC1xf3oRX0OtUS1fyb1Kk0UT
- TLSH T12D12BF9713F0219FE656ABEF0423A9B4D76E3E0D3D1217D91A382FF1359B0006D1A22A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 9KB
- SHA256 a678e3a1bb990e160487426b450e3c0432a9fb68b6a1076b53fa9d5a0990f6ab
- MD5 f89cef46490b4b109841f58b42a00238
- SHA1 5fc7e304c8e61b1ba30c34998326e2dd1bf95859
- SHA512 184ebf169ab87ae2e70a13d309907cca9a62de90ac2823bcecaec8985ffae54b071ae062f9b54daf672b9a3cf44b2d11316329d8a638e8f67f2c749187e66273
- SSDEEP 192:rVKCFXTjsCmxcDqJjSf1IB1th1IX/mZKbIVar/WqQFCX:rVHFXTYeAjtB1tAvyN2/WqQIX
- TLSH T1B312C0355702B033ACE02B2EAEDC21CEE275DB1E9219F5846533E0BAF57EB494C1E118
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 45808567a9da92be086326a6f08964b5311ca2d291c2a5ecbbd5fd43d2209a93
- MD5 88a181c237e3569d63769bf0634ac874
- SHA1 1eab8e491f785fe8f703e8bf25c79941f2f5e567
- SHA512 76c552513e5777cbe5153364ce7a690b24616d4415208628ee885e19f07ad8b2ac528bed703efaff571afbf8dca684d09d8a7fa78ed10f8c46d2ab385632cabf
- SSDEEP 192:ZKYlqbabMrLFECxhobDYakKTIEzVtydFFh3Xfk8o/Fs02dYHE0UiRYAC:ZVlpMvSCx6bDYakK/D8nLpiHj1C
- TLSH T1B722CF4059325B4AAB209679F3076E560D3F9E9230E503C85E88F7276D7D8F4E8934E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 7caba50d7b4a45bfb54f0ee5acbe39297b8d0d4c495010d1713cdeae86d11d56
- MD5 695f414bba08971aa801ba2df47a81f2
- SHA1 b7736b68d7b9864da9dec4ad8275ac906336c421
- SHA512 ca7ce86c2613f66eef202cdaca6c8da45942c74fee5f833bb951c70cdabb5af916e03a4765dbe252a568020de8a3aa415018eeb3fe799babe09a5e3acd8729e8
- SSDEEP 192:7BxP3WqfYB//NxpdewlLhNwaaSmkHAmrlx6+XTsMo6e04LLIvtWt4KY:X+iWHNxLvnmkHXx6+XTxrEIvtEY
- TLSH T1A322C0B14570F251C24E183688E9999CCF0EC7C351D59773402FCF9CC9EBA11C599279
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 11KB
- SHA256 cf8c262f46d633e8ef68850b74e5179fd9ee900363a95802a25446007c606b81
- MD5 c547a4b4e5b578830efc4e979b324863
- SHA1 d414e53d04fb45c82ab0c968670e5ebfb883cb27
- SHA512 15cad73d7f7903245e84ccb2d6930aecdc33bd46ccb3e790c1dbb67329e04019fc87f306bcff47165b2c8f1b3c2593f30a3bceba4c18aee017d4e4a666fc8f6c
- SSDEEP 192:zcSa/hWtiNwLMgUaI8sQeGU1JbA5yNH3EKE5UM0esK6l2xSivthROtp0knr+4fVr:zcwKAf9e1JWyNXEKE53j/60V7ROtpdrv
- TLSH T1C632B0BA862047EF79C486A7D8348319CEA1C23F03547D8C940C55EC9758B957906DCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 72c10f09cc57fe3f78404bc2331468414fc1eb92d3b51c741dad8d45f9dfcd50
- MD5 969cd3705dc069c5c0a28bc672b65e48
- SHA1 9fbf729993889e73e6487e7f24f4eb2bfd86a196
- SHA512 de7fcf84befe19e6969eb229741a67de6334ef58a803aac8cb9e25e9066cd0f5d25f0c488c0d7f40c48474f10bf4ea5ed4c0ac9f281bae00a1f11058ef910f4c
- SSDEEP 192:XwXRbF+GW+zYCNPB5CNMEH5zwn4caI7PTFAWXoQS7oCJZc+6pd:XwBH71BYOU58+IXFASoQUCRd
- TLSH T1C832AE68237ABCBE620954E3D618C1C97DB20E9BC049163E015BCAD9C82345B9B60FED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 11KB
- SHA256 60aee50c4e43d1d2e2391bfb702cad30f6a9cf0c59f478c90d5e86fd3bcebd6b
- MD5 b239ac0b82c83aef4b58103f5f40c2ee
- SHA1 bb05bbae71ce1f93a455f6f5db1b21a4e10ae2c0
- SHA512 52c3ce66de7cdad4276f899a1b2101a5a2739b9228702791e446c7cf881e53592f0412c79afdbfede5bcfac1e876ae4600ed7783947fdd632949dec11662437f
- SSDEEP 192:KDI1DqBTyzPQRQRqfTJvsNF8/9je4pWfM7nPT4ueQOaZVxR3UL4A2f:K+qBTIcQRYTyNFd4PP8ueuxBDf
- TLSH T16432AE499F37BF622E6F08FB7780658184B668929E5DE30DBC32808B45309934F6DD64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 11KB
- SHA256 e4410cb50eb682c6bb15e80f130d1a50527b7b0713ef28ad917123b6998e73ce
- MD5 126bbf3440ad9ebae425da4b9bfdfe56
- SHA1 db9bd219956bda18d311222956d3c987be2ba6d1
- SHA512 f89e373513749040728b99b25bd1e8ec38763349dc6108cd101225550327c7709f28573c24b73d71fe9c3dd3477dc3ed7a10fbbe64a438dc4875991eaae85c34
- SSDEEP 192:cstFGL9cCV8KB93yzUrfmkTySgN3i34iaR7mrguUrBxv/nJ594GY+WAK:cKF8cqB93yzxkTT3xglS+WAK
- TLSH T1E332C0ED490C6BA3496F02728EC74F2800E98B0B587E1221AE1FC7B5FC7C3568909F65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 3312d14033c038e0f9356bf6146ca637aa55efc2ba7404d0d14c2e514d5049f0
- MD5 669f30862624d8a0b092d404c5e3db0a
- SHA1 8f1be53bdc15224cf5d6508a79eb1edacf702108
- SHA512 9f5af2df71a30e1b2ab3d778042d77ca5a607beffdc6db586c9b799af729f398b27854072f8881d093cf430bc2d490294bf24192c3eaf80915b2f8297889e1bc
- SSDEEP 192:vv+t374vrFX/2Hkf+Jzjpf2Ldx4dd6CZf73NIM:n+974v5ojpf2o/dLNIM
- TLSH T15502AF89A9062C9AA01DA957A6D163CE43E074CEDF931B551CD287ABF14200F7BD03D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 30da6f8a95525ad4904050d009baf4c0dc6fc2dbe09cde6cdaab7fe1c9dd56ad
- MD5 4d31cfea5851aa4db4284f2339a8d1ca
- SHA1 55eb9899c7a4fde88220943352206ced7689479c
- SHA512 038eda271267787e8d06c74634ff2f6835f905a28cb66cddbb56e26625fd082f9a6a718539e176989bd11d52315317084eb7ba939a6ad68a0b37bedbfc5539f3
- SSDEEP 192:8dYrU90BSn52kysBuZEK7KN7s6Kk3oEIS/PQeJ5JX:8Sgd52kysBed71c3o1kVJ5B
- TLSH T1AC02BF01DA3106F0D24C1B7E2031E37DEA8897D97246A55A16781FECEA296F5F28807D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 a663f9078f3e18a1be6f1ff1c60ca55d87da831710480c59d068111d941a6507
- MD5 8b7a5a95199f9d44372626b8b356a9bf
- SHA1 d6bc26941af8d862e2ef01bbd78ffb46f84e8154
- SHA512 5614282eabf806ff7dcca556568705f1c44117d3dbaeb7cf3a2bb4019628d19fca0a0fd9fc16de1d5dd518f7bf7df8bdea67a5fed97ea32a868abefe2a0b791b
- TLSH T1E6514C178B5C4DC40F99638033B589BEDC5E6E38DC9A2D4D660EF42BF4146709839D45
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 332cbfe5fa83d5d8ba1927c96dcb0b92fed43f500cd27015f4942f73ccff8b36
- MD5 478584c9f2c0a41f20cb6bc4b8441376
- SHA1 ab06e834b107a807a95f93ac9fd779bfa4091a73
- SHA512 d1cc364d7b26d417bb02bdf3587a86f9602c0a2dadc81331d13f796391baa6d77107f11ce5f116645642efcb7ea50275fb0a384c5a7b6e2883ebfaf4905b7395
- SSDEEP 192:m7H4NwGh8n0Gu36DPfWdcvKO6mhwkES5tPXHUZLbIE8pEJIfb3cHyoLtNksTryB:m7HxGkuqDPfWdcY2h9/PkRxsFz6btKsG
- TLSH T1F132C0AF98EBBB5B7843E318961407E0F913894901B43E32538B14C20971ED6996356C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 9dbabe7b4e326f6ffbe8fad71e476bf0b623e0cc46f4d7ca1e93dceb44d5f77a
- MD5 f0e4db4c4395d661ada019b95c3ddf90
- SHA1 58420b3562e3f1ac5f11281191fd4e855b33fa48
- SHA512 1d3fa473f410456974cbbafc3d93d9ec66c0ca8bf2b09664347835e2f254f5c54e4558f944384c0f8ed6296cb8b67983557065684624995d857777f84c93cd92
- SSDEEP 192:wah4mAlj+YrY68mwRECx/Obp0KIHcDjXLGbM+cHDFgEDkoi0QjxRzZ:J+lljnrYLmox/x7ITLgm5Q0+zZ
- TLSH T10B32D030CA51CCB1ACF4B86F7479799AF0DA9A53D8F81301C23281030356E4D3A74E92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 11KB
- SHA256 82dad815c1597932bd9141063cf5d8096efd1483cade3c0e9311b54ce2338743
- MD5 9f6e7c7091034852c02fd29c0c45f876
- SHA1 a0032284dcee98f5bbfea1633df66c35de47d672
- SHA512 11fa643abad73f132d5b84d4ea53695f09d4ebd3cf3f325854644456451d5b66beb148643ddb3ca41a3b4c3ed577241439cc9cb752fc1526e497d48a28c8fc05
- SSDEEP 192:gdcYRoujKwVfMiHRuo6bWX1JG1XX9J5GrCty87VsH9pPpm1vXrCLv:2bojSfPR6CyZX9J5GMN7Up6vbM
- TLSH T1D032CFCB2B8DA83AD6E0812F709768CC5F085B231D75B2E540F08274EB1A2D9176D9BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 2KB
- SHA256 4a13e5be5816e3b6b598903164ae9beeba1957c3c16cc9abfde3a108a82a67d5
- MD5 55303867f486fc13ac633173ff9c9c40
- SHA1 06590106535cab841978d6c792e47879dbdbb652
- SHA512 53c09343b0d41fddcdaae5a6c9cf0f0ca179e37d80603a22762f20009ff48c19f7b3cbf0a5d4573c7655d9cb6dd3b4604f5fe5245c5df93a2c1bd56313ab3025
- TLSH T131513903E7C28613801BF4E1CA06C8E9EBFB86D5BE842C4988BE27350AD46009B58363
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 0a304fe5d0ee01975386e8cf54848f0d2e8f016dd0efaeaca628ec09f4994bb8
- MD5 c9a697a52029430fc5884992227f7bcc
- SHA1 3c99f7da8bb5f8317f6dcee38026944780898431
- SHA512 ae36f5463979aad1e441e1f866271d489166a3c5e10cf08f92cb33be1f6b9fcfeb3f9105ce715f8758ec79ee8fd4475a22ed9013fa5cbb3b808e370d22a76d11
- SSDEEP 192:Y/Gew9+J7DbnW0VStEkMs/48wOeUhQeaby1/GbYj5XrlPWENn8GuC:Y/GET14tEG/9cvbq/GunWG8s
- TLSH T15702B04AA715A31F7A4F9D751051E910B95389BE4E2CDE930F32760583AFBF4A2E02E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 4735c5585570a0b0811f1ab9cb2d15a592a93e2d669620450507e4a56de06154
- MD5 8961e17abd03af27df04b574a0884204
- SHA1 93f866de79e2b723ef6cfc940311f7dca7c1c221
- SHA512 676e01f295d1e2eba81bbde143614df27188100dc9e17d6a2185ca67427b3a40ebf3846cbcd6395b7c5f7d5d1dd43554394c013f32c55b0b0171a5b61759a5c5
- SSDEEP 192:jjpR6XGRRIXYIvOxo+iKEATFmd6+0nyBhuhhKXsS8wMJG7CY:j2oRIXWfp0d3BOisGX
- TLSH T1A302BFB11AA4133BF581E3D36A843D67DB74184153E44FCA93F4656F8E0603A27F858C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 8KB
- SHA256 6a2d6b48e3a8fdb733cc420af51090b5e45ba6de44f1c8f49d0757d617019d23
- MD5 1cb61a0036920a3997d8837495bd79a1
- SHA1 29c5d24029e6bffa0048df09aaab710400401b17
- SHA512 c59c8a29f7e9bc8db5276e805abcf24ac1c2e517f63d1377a82538e3ef0d525ceeedf7d798becc6c33277a9084a4582cedba2408d79995ac3317d25dc32f465a
- SSDEEP 192:ZQsWFGjkAns0MB77l0oCRrf6TnYGAZbz7SEvwVtSVUGmB9T:PWAo2lMV76LiTncbyGwKVUJ9
- TLSH T10302AF85135C8A27CEA8BA30CC777CE97B1E4D021E4724AD0A346D9E322A4E1FDD9E44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
- Size 10KB
- SHA256 16eb2137b2fb40b0ff76deac3827b2797ac12795c7eb9cfa980c8647373f89d3
- MD5 fdac04ad371e81faefb70fbf544fbea6
- SHA1 17854e70b95dcf0caeff5c5680e1ec484eefcb6b
- SHA512 ea543bfc5b5fbd040b223355b077b27ca979fdd4905338381efecfb8f68d51fa921cdd6472c519b68377e70c9f18d727aa26c3b62e7e768882b4279c24b16cee
- SSDEEP 192:dKIaStUTcJHGz2xNO7WiKNkIHIqHIKWPsuac8omb9tiaB3iX8aUYe2FYhrT:sZSNlGz27Op6JIqHIKUsuac8oUtiaBSW
- TLSH T17122BEE58F336B84EAACA3F013089E115C26184A87CFC1E1E9328E919B96C0345DC59F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\bfb63850-c2d2-45b0-8333-10dd986d9b3e.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 455B
- SHA256 cd2c86d1f48f4e8a229a1f103efbee8dad03cbb977e5b099e344e3a1a4280183
- MD5 ccbd29750f4a1fec5458751ed62f25f2
- SHA1 923d9e21a75f01dccf157c8ae2fb6ee23e916b33
- SHA512 9c165e8e00a6b86b0d0996f4226159ca737d2db9efd471111d2d3bb794924fae46df3efb3c9fca1b90fd2fc00c61a4209d17693607f7b5b536ce4404f074115b
- TLSH T11BF05C45BC55A964B8D8AAE6B2B43FA386AD089099501E7888BD307E016919D4619321
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 1KB
- SHA256 9eb5c5697373964a993ad78cceabd11b597780d1da17faba98861043146ec128
- MD5 0509f330de2405a3a725a6afe6d76406
- SHA1 a3c356c148ac830c903bd161cdb5cbefc2975844
- SHA512 bd2d79e91ba2b361a23a69b328d761c5468844947b6ab48db06338001afc9707c2b21a25cd95f573c26d8156c523f720546055bc1758a0d832bb2aa26947df5a
- TLSH T1C5210C10ED15AC762FAACBAAB0F278031FBEC482710556BB54EE604E17CD678400B516
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 f71e8446e5ad3da8b64c6f9e22862cbce9fc9251ae8a9f7717727eff34626b81
- MD5 0e5414a4c2602425ba3b7fd56bc5897f
- SHA1 8a15b6cdc47500c2ebe8c320b99e92753dc72f3f
- SHA512 98eea7464cbd6aa6d965e8dff6ee43ad7b45adbb35f15c474d44512d714672f30c94ae8a10fa30783542047c61aa4e005ac0207ec58741e7d49fe26f3a8e2761
- TLSH T15A411F04DD146C7AAFA68B6AB1E27E031F7EC1E3720562EA74EE404F2BEE5A54017107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 fd5e599c64d8ee1ab170f5b28447046effdd1136190093c7efcc52a23c698612
- MD5 aed3b2f7b2760ef767698c1b738f8d17
- SHA1 84a5eb078b975cf9691d240c36ae3bbebe1a5101
- SHA512 278d3ebb2f2c15f22330a3d358ecd35b821f64938ca6c88c7148ed175f66300ca245ffb82744e518f65581100df9d78b0c9ada42afd1bba937c9c96a715a8f61
- TLSH T126512100DD147D3A6FA68BAAB1E37E031F7EC193310566AA74EE504F2BEE5B54117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 a62d188aa9a9a01006ac36373aa5917c21063a41577e448887d4723825a5f894
- MD5 82078fc83dfb2c6f30412da1d613f2cd
- SHA1 dc93270719342862319ce11554f3620f1249d780
- SHA512 82c9db495a39403c91b90156c05da3b680f3b53f2647eb796f3db2dbe0fae9f6864076c80e1ff838780e0d61859ebe7468174a56a1a0debe2f0c80ddd31c1261
- TLSH T162513000ED14BD3A6FA68BAAB1E37E031F7EC193310566EA70EE404F2AEE5B54117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 04f8e7e35ffe18c4ccbf249102efb04c31029fac8d148c13e2fdc76978a0ad82
- MD5 3adf7f86f362ed52624164d8b8b553f9
- SHA1 6149b1ae41835946000baae095267a99f23dab99
- SHA512 babe2c8c200780b645bb0b0935fcab2dada6bb6001b04dd9ab3017d66c461e90970b98d5749b854f140f45814c533860820056824e01d61274781d868c0531b1
- TLSH T171512F10DC147D3A6FA68BAAB5E37E031F7EC0933105A6EA70EE400F2AEE5B54117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 7fa885e7e042d39be3afbb2e2fe2c07216137b6a428ad016c46f6221abefaf62
- MD5 9544aad74bbab5119a6998ef2bd24de1
- SHA1 6540ac403da99593c36e5b517e7f083d716c0597
- SHA512 fb6ac8b87fb9a898f59f3b92ebce34fbdad669521dc116087df97097f282fe4ff7814507a1d09d051cdfdc9e4bcce6c01a4babe7e8109bdc316250e1d7e6cf0c
- TLSH T1C2512000DD157D3A9FA68BAAF5E37E031F7E8093310566AA74EE410F2AEE5B54117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 3a67c2137d7bb68d89ebb7a832c847034aeda3c0fe1207245f59f85668c75eca
- MD5 d008a9a819f9656da59a22051c18d9e8
- SHA1 d78b391df663ae4bbfbc8722baf001f83052397d
- SHA512 ecc402e12eff319fd342ff030a0c613de6ce3023ffefd552209b2262ef53255944f0491add9e9117ec3ec53f0da2e5a21a82423d922a7ff6a1c673783568de34
- TLSH T1B6511100DC147D3A5FA68BAAF5E37E034F7EC0933105A6AA70EE400F2AEE5B64117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 5ab7a638bb8269d5e0e7660924cde302c1003a248ddc1e22b29bb3e7b41d0fed
- MD5 a5d3df0997c1e9cdb93ce96030558abd
- SHA1 c268dd3699e417eb63c73905223aab4fb793053c
- SHA512 50a4fdf8638a2285e7a7f2a4f3434adfce8d89ae2fed4a7377ec1c291732bf572e21e2b772fd3a64688c4bd459f8734d04ce16303bc8a7afb929d68885bb18bb
- TLSH T1CC512110ED147D3A5FAACB6AF5E37E035F7D8092310566AA60EE400F2AEE6B64117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 2KB
- SHA256 358754d2c5b495769e7053a33d97edb3b7217a795c7f90ebeba566a8db8c7906
- MD5 1220bd08ea32fc1dee03e6860dbba338
- SHA1 3e9a57725aa5f23bed4c917a59844f7806b37712
- SHA512 3c90169a01dfcb876fc68344c5d883fda08f1ef2faa3087cb01861d2f41099d5bdfa6d5da3a7755152317f83396e2576ba2309cc843f2ce81030d4b577c28149
- TLSH T100513100DD147D3A5FAACBAAF5E37E035F7D80923105A6AA70EE414F2AEE6B64117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
- Size 517B
- SHA256 e7dca9885ff0ba2972497d8b6ef5208629a625c71c1b08a1513dd56ed04ef1d9
- MD5 54818e93ab2ab9bc9dea371e9d94ac56
- SHA1 1fcb78b29be2eb9a29a8a4320d50f709ac723445
- SHA512 34f6a22657c0350f317ee31743ee9b35039290164ecff16739f37ca5f40d7a901b0e7c6520f0c6a3d9fc9dd84e424ff9c667b6e341ab58841e32d0d0f7ea959a
- TLSH T18AF00E80BC46A560F4C4FBBAB2B93EB3837E849994406A311CEC303E02B826C031D321
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.1.1574869535
- Size 200B
- SHA256 f2fe7cf87c04a09013b36f59a86681b2d44538e9e28f25b2548644ab92579aec
- MD5 2d631573ea81dcb5046dd816afbaced0
- SHA1 b9ab48d082ef7c644c0a53a5a6d740ed3f5a2d37
- SHA512 788f33e44c085b190f74b76fb79673523b8e27f262170c5a6a0f65bb7e961d2c30839672eca73b5992f941dc0eb8d883e5f5fe2310c1813439531ee1ce30800c
- TLSH T112D022F6F2800A2EEC464C35F04DBBA0251B40089C45EA6404CE15ED850A5F8A51DB10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.1.1574869535
- Size 224B
- SHA256 d4a73c83830d6851284f037946c03f96f0fa0a8510ceb7a1e9f2d42e06df469a
- MD5 de7d6e0fdb8e93891af645e9c3c0a3c7
- SHA1 90b34c8ec07a15b665a3d1cc93c7005d1e73ae05
- SHA512 cb6faef5272b44b49386a2cfcc41fcc8ef7d9c0b428f632f5e9b2774151ff3d419f770610459d75975217172d0cc27c731aca52da78fc81c4e13bf406871d470
- TLSH T1F7D0A776F1C4296A5C5E9836F09F7F5386A750051800552400DD519D02128F8518CA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\079e0224-cc3e-4a17-a745-109fb7b1afb0.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Downloads\Unconfirmed 649548.crdownload
- Size 25.5MB
- SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
- MD5 de90bdf89be7e8f55b9ea1e9f0a88613
- SHA1 ea25984a475c95ad41abae25885db7b24514a7af
- SHA512 42f6cc77ea8cd43d167236e81e4164da7c8030605d7d1759494f41f5b9b5dcdbaec3b4d901f1925f13d915756b52ec22927e1dc304e89fb7f9342b84c475d188
- SSDEEP 786432:ytpZzp8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpTTuPKJBZlC39ORb
- TLSH T1014733357AA29072D772363496996339F77EAD70AB3802D322903D3C7E716C15A7C21B
- MD5 SHA1 SHA512 SSDEEP TLSH