Analysis
- user interaction
yes - max time kernel
47s - max time network
90s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 12:59
Static task
static1
Behavioral task
behavioral1
Sample
OperaSetup (1).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
OperaSetup (1).exe
Resource
win11ltsc2024-20260911-en
General
- Target OperaSetup (1).exe
- Size 3.1MB
- Sample261003-p8a2sszzf1
- SHA256 03f56843076bcbf082141a00cbf403ec9edd92eb219506f12efd82f695007df2
- MD5 4aebad20e473bc3f29eb04193d6cc3d2
- SHA1 a7fe2c83c520c9617a66aff97226c35504a1d87c
- SHA512 00e08244b3ed7f9730094dfd3b6e548be9b4745fb98f8a773dba202605d1ea090dae717e1b11edb70a2ee4605c2b7734ce76e8abc4fdd22e4fff38a7e1b7f516
- SSDEEP 98304:dAXP3J33hTiBKGnU2Mh8qv8Wp1Rj5I9zar:wTiBK5vDv/I9zi
- TLSH T180E523523780D476C66311320F29FBA94ABEF4615F358A9B73D46B1F4E70281AA36F07
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 20 4172 installer.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 4172 installer.exe 4820 installer.exe 3192 installer.exe 5956 Assistant_136.0.6008.52_Setup.exe_sfx.exe 916 assistant_installer.exe 956 installer.exe 2616 assistant_installer.exe 5752 installer.exe 716 installer.exe 4548 installer.exe 4420 assistant_installer.exe 2920 assistant_installer.exe 5088 assistant_installer.exe 4704 assistant_installer.exe 4932 browser_assistant.exe 5692 browser_assistant.exe 3384 opera.exe 1488 opera.exe 4328 opera.exe 2736 opera_crashreporter.exe 6132 opera_crashreporter.exe 3988 opera_crashreporter.exe 5648 opera.exe 1504 opera.exe 3544 opera_crashreporter.exe 704 opera_crashreporter.exe 1196 browser_assistant.exe 3640 opera.exe 3004 browser_assistant.exe 5028 opera.exe 204 opera_crashreporter.exe 1848 opera_crashreporter.exe 1128 opera.exe 1072 opera.exe 5572 opera_crashreporter.exe 5444 opera.exe 2856 opera.exe 5312 opera.exe 4876 opera.exe 2716 opera.exe 4592 opera_crashreporter.exe 2072 opera.exe 480 opera.exe 2744 opera_crashreporter.exe 3672 opera.exe 2864 opera.exe 1388 opera_crashreporter.exe 5924 opera.exe 3392 opera.exe 6360 opera_crashreporter.exe 5336 opera.exe 6592 opera.exe 6892 opera.exe 6640 opera_crashreporter.exe 7804 opera.exe 7820 opera.exe 7848 opera.exe 7864 opera.exe 7876 opera.exe 7888 opera.exe 7860 opera.exe 7840 opera.exe 7892 opera.exe 7912 opera.exe - Loads dropped DLL 64 IoCs
pid Process 916 assistant_installer.exe 916 assistant_installer.exe 2616 assistant_installer.exe 2616 assistant_installer.exe 4420 assistant_installer.exe 4420 assistant_installer.exe 2920 assistant_installer.exe 2920 assistant_installer.exe 5088 assistant_installer.exe 5088 assistant_installer.exe 4704 assistant_installer.exe 4704 assistant_installer.exe 4932 browser_assistant.exe 4932 browser_assistant.exe 5692 browser_assistant.exe 5692 browser_assistant.exe 3384 opera.exe 1488 opera.exe 4328 opera.exe 4328 opera.exe 3384 opera.exe 1488 opera.exe 5648 opera.exe 5648 opera.exe 1504 opera.exe 1504 opera.exe 1196 browser_assistant.exe 1196 browser_assistant.exe 3004 browser_assistant.exe 3004 browser_assistant.exe 3640 opera.exe 5028 opera.exe 3640 opera.exe 5028 opera.exe 1072 opera.exe 1072 opera.exe 1128 opera.exe 1128 opera.exe 5312 opera.exe 5312 opera.exe 2856 opera.exe 2856 opera.exe 5444 opera.exe 5444 opera.exe 4876 opera.exe 4876 opera.exe 2716 opera.exe 2716 opera.exe 2072 opera.exe 2072 opera.exe 480 opera.exe 480 opera.exe 2856 opera.exe 3672 opera.exe 3672 opera.exe 2864 opera.exe 2864 opera.exe 2856 opera.exe 5924 opera.exe 5924 opera.exe 2856 opera.exe 3392 opera.exe 3392 opera.exe 5336 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs
A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\dbghelp.dll Assistant_136.0.6008.52_Setup.exe_sfx.exe File created C:\Users\Admin\AppData\Local\Programs\Opera\assistant\dbghelp.dll assistant_installer.exe - Adds Run key to start application 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe\"" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe - Drops file in Windows directory 6 IoCs
description ioc Process File created C:\Windows\SystemTemp\scoped_dir4328_388342544\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir4328_1276930651\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir4328_1276930651\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir6892_1190386881\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir6892_1190386881\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir4328_388342544\opera-one.jpg opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe - System Location Discovery: System Language Discovery 1 TTPs 12 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaSetup (1).exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_136.0.6008.52_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5444 opera.exe 7804 opera.exe - Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName browser_assistant.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 49 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.htm\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.html installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.pdf installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\DefaultIcon installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.htm\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.html\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.html\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.pdf\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{A1D4CFD2-598A-4599-9579-3C7AD8123F6D} opera_gx_splash.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.opdownload installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.htm installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xhtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\136.0.6008.80\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\136.0.6008.80\\notification_helper.exe" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\URL Protocol installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.pdf\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Applications installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
pid Process 4328 opera.exe 4328 opera.exe 4328 opera.exe 6892 opera.exe - Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeShutdownPrivilege 4328 opera.exe Token: SeCreatePagefilePrivilege 4328 opera.exe Token: SeShutdownPrivilege 4328 opera.exe Token: SeCreatePagefilePrivilege 4328 opera.exe Token: SeShutdownPrivilege 4328 opera.exe Token: SeCreatePagefilePrivilege 4328 opera.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 5692 browser_assistant.exe 4932 browser_assistant.exe 5692 browser_assistant.exe 4932 browser_assistant.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 5692 browser_assistant.exe 4932 browser_assistant.exe 5692 browser_assistant.exe 4932 browser_assistant.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4172 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4280 wrote to memory of 4172 4280 OperaSetup (1).exe 88 PID 4172 wrote to memory of 4820 4172 installer.exe 89 PID 4172 wrote to memory of 3192 4172 installer.exe 90 PID 4172 wrote to memory of 5956 4172 installer.exe 91 PID 4172 wrote to memory of 916 4172 installer.exe 92 PID 4172 wrote to memory of 956 4172 installer.exe 93 PID 916 wrote to memory of 2616 916 assistant_installer.exe 94 PID 956 wrote to memory of 5752 956 installer.exe 95 PID 956 wrote to memory of 716 956 installer.exe 97 PID 716 wrote to memory of 4548 716 installer.exe 98 PID 716 wrote to memory of 4420 716 installer.exe 99 PID 4420 wrote to memory of 2920 4420 assistant_installer.exe 100 PID 4420 wrote to memory of 5088 4420 assistant_installer.exe 102 PID 5088 wrote to memory of 4704 5088 assistant_installer.exe 103 PID 5088 wrote to memory of 4932 5088 assistant_installer.exe 104 PID 4932 wrote to memory of 3384 4932 browser_assistant.exe 107 PID 5692 wrote to memory of 1488 5692 browser_assistant.exe 108 PID 716 wrote to memory of 4328 716 installer.exe 109 PID 4328 wrote to memory of 2736 4328 opera.exe 111 PID 3384 wrote to memory of 6132 3384 opera.exe 113 PID 1488 wrote to memory of 3988 1488 opera.exe 112 PID 5692 wrote to memory of 5648 5692 browser_assistant.exe 114 PID 5648 wrote to memory of 3544 5648 opera.exe 116 PID 4932 wrote to memory of 1504 4932 browser_assistant.exe 115 PID 1504 wrote to memory of 704 1504 opera.exe 117 PID 5692 wrote to memory of 1196 5692 browser_assistant.exe 118 PID 1196 wrote to memory of 3640 1196 browser_assistant.exe 119 PID 4932 wrote to memory of 3004 4932 browser_assistant.exe 120 PID 3004 wrote to memory of 5028 3004 browser_assistant.exe 121 PID 3640 wrote to memory of 204 3640 opera.exe 122 PID 5028 wrote to memory of 1848 5028 opera.exe 123 PID 3004 wrote to memory of 1128 3004 browser_assistant.exe 124 PID 1196 wrote to memory of 1072 1196 browser_assistant.exe 125 PID 4328 wrote to memory of 2856 4328 opera.exe 126 PID 1072 wrote to memory of 5572 1072 opera.exe 127 PID 4328 wrote to memory of 5444 4328 opera.exe 128 PID 4328 wrote to memory of 5312 4328 opera.exe 129 PID 4328 wrote to memory of 4876 4328 opera.exe 170 PID 4328 wrote to memory of 2072 4328 opera.exe 132 PID 4328 wrote to memory of 2716 4328 opera.exe 133 PID 1128 wrote to memory of 4592 1128 opera.exe 131 PID 1196 wrote to memory of 480 1196 browser_assistant.exe 135 PID 480 wrote to memory of 2744 480 opera.exe 136 PID 4328 wrote to memory of 3672 4328 opera.exe 137 PID 3004 wrote to memory of 2864 3004 browser_assistant.exe 138 PID 2864 wrote to memory of 1388 2864 opera.exe 139 PID 4328 wrote to memory of 5924 4328 opera.exe 140 PID 3392 wrote to memory of 6360 3392 opera.exe 143 PID 4328 wrote to memory of 5336 4328 opera.exe 145 PID 4328 wrote to memory of 6592 4328 opera.exe 187 PID 716 wrote to memory of 6892 716 installer.exe 147 PID 6892 wrote to memory of 6640 6892 opera.exe 148 PID 6892 wrote to memory of 7804 6892 opera.exe 149 PID 6892 wrote to memory of 7820 6892 opera.exe 151 PID 6892 wrote to memory of 7848 6892 opera.exe 152 PID 6892 wrote to memory of 7876 6892 opera.exe 156 PID 6892 wrote to memory of 7864 6892 opera.exe 155 PID 6892 wrote to memory of 7888 6892 opera.exe 157 PID 6892 wrote to memory of 7860 6892 opera.exe 153 PID 6892 wrote to memory of 7840 6892 opera.exe 154 PID 6892 wrote to memory of 7892 6892 opera.exe 159 PID 6892 wrote to memory of 7912 6892 opera.exe 158 PID 6892 wrote to memory of 7812 6892 opera.exe 150 PID 6892 wrote to memory of 6176 6892 opera.exe 160 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe"C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4280 -
C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --server-tracking-blob=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⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4172 -
C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2b8,0x2bc,0x2c0,0x294,0x2c4,0x7ff6056c6998,0x7ff6056c69a8,0x7ff6056c69b83⤵
- Executes dropped EXE
PID:4820
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\installer.exe" --version3⤵
- Executes dropped EXE
PID:3192
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"3⤵
- Executes dropped EXE
- Writes a Windows system DLL name to a user directory
- System Location Discovery: System Language Discovery
PID:5956
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:916 -
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xc2c9cc,0xc2c9d8,0xc2c9e44⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2616
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4172 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_20261003135939" --session-guid=c9f33cdb-0e0b-46e0-9e0c-4dfcffb94fd7 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=640B0000000000003⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:956 -
C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2c4,0x7ff6056c6998,0x7ff6056c69a8,0x7ff6056c69b84⤵
- Executes dropped EXE
PID:5752
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --backend --initial-pid=4172 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391" --session-guid=c9f33cdb-0e0b-46e0-9e0c-4dfcffb94fd7 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=136.0.6008.804⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:716 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff67a7b6998,0x7ff67a7b69a8,0x7ff67a7b69b85⤵
- Executes dropped EXE
PID:4548
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=05⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes a Windows system DLL name to a user directory
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4420 -
C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xc2c9cc,0xc2c9d8,0xc2c9e46⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2920
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=06⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5088 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xddc9cc,0xddc9d8,0xddc9e47⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"7⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4932 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream8⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3384 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd09⤵
- Executes dropped EXE
PID:6132
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream8⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1504 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd09⤵
- Executes dropped EXE
PID:704
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a4,0x2a8,0x2ac,0x278,0x2b0,0x687324,0x687330,0x68733c8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3004 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5028 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd010⤵
- Executes dropped EXE
PID:1848
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1128 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd010⤵
- Executes dropped EXE
PID:4592
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2864 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x25c,0x27c,0x280,0x260,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd010⤵
- Executes dropped EXE
PID:1388
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\de932af914ba00303d4a2778a383ac9c831101e2.crx"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4328 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd06⤵
- Executes dropped EXE
PID:2736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1632,i,7304811176097134773,17691589115277987691,262144 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:26⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2856
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,11948023410308429888,16979775157798485558,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:116⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
- Enumerates system info in registry
PID:5444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2388,i,10324095221817730989,14453195123063163900,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3240 /prefetch:136⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3948,i,3825361056798606205,1838331656618431771,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4080 /prefetch:96⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:4876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3864,i,5602940880229574981,13198583546684147644,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4340 /prefetch:146⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2072
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4476,i,15077466680058898252,8251994203525560654,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4484 /prefetch:96⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2716
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4756,i,15832371936584868190,15398704682705319817,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4736 /prefetch:126⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:3672
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4924,i,15668670010647653604,10345600028605525916,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4224 /prefetch:146⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4936,i,924693326632896556,8018509091441947172,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=1872 /prefetch:146⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5336
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5324,i,3004906783264634941,453631721661102717,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5336 /prefetch:16⤵
- Executes dropped EXE
PID:6592
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized5⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:6892 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd06⤵
- Executes dropped EXE
PID:6640
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1948,i,5777523596928946237,11200867179947741642,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=3032 /prefetch:116⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
- Enumerates system info in registry
PID:7804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1648,i,4598150277781277194,15264195702495939483,262144 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2208 /prefetch:26⤵
- Enumerates system info in registry
PID:7812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2372,i,8517592080121590518,2880833432628464600,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3328 /prefetch:136⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7820
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3164,i,15987134912124455377,10604558584636230734,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3380 /prefetch:146⤵
- Executes dropped EXE
PID:7848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3180,i,11252646648864111837,9432887371808318056,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3400 /prefetch:146⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7860
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2748,i,10419036182302134426,4377523216449310197,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3360 /prefetch:146⤵
- Executes dropped EXE
PID:7840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3192,i,14587351407228728669,4847095971712968320,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3420 /prefetch:146⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7864
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,10751218066607964286,3233921085914957811,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3352 /prefetch:146⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3216,i,3103944978011890825,12316444760856058725,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3452 /prefetch:146⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7888
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3292,i,11509407287623520209,13757471960110122271,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3512 /prefetch:16⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7912
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,1460909867561331010,17457943254252972652,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3492 /prefetch:146⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C966⤵
- Modifies registry class
PID:6176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4724,i,1768973900216930750,3907609076067828126,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4796 /prefetch:96⤵PID:6608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,4956028789627412546,4129643704031130609,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4984 /prefetch:16⤵PID:1692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5280,i,9965205306251424163,10023979060743130774,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5284 /prefetch:16⤵PID:6772
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5324,i,2591169376527072688,284650880346981923,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5448 /prefetch:16⤵PID:6760
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5992,i,10415957084834926690,16356655067052155029,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5996 /prefetch:96⤵PID:6876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6852,i,858395572383914189,11894882962846113011,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6912 /prefetch:96⤵PID:7152
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6572,i,14975910807665879051,721337612603470851,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7136 /prefetch:96⤵PID:7268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2408,i,6204175210405896040,8037117610842950423,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6720 /prefetch:126⤵PID:3156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7372,i,11542364404509789758,7509678997207376652,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7388 /prefetch:16⤵PID:4312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1616⤵PID:4876
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x29c,0x2a0,0x298,0x2a4,0x7ff7fd7d5598,0x7ff7fd7d55a8,0x7ff7fd7d55b87⤵PID:7588
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7904,i,11396678792815973740,1914879084312205487,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7900 /prefetch:146⤵PID:7488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7960,i,11397960382322654,7425430209453732359,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7944 /prefetch:146⤵PID:7948
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8264,i,13015626065801948448,16064523855779511784,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=8328 /prefetch:146⤵PID:6932
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,4601853514788482703,15047974841615991647,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8368 /prefetch:146⤵PID:2172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8272,i,10923435159307627076,1719652998517247109,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8348 /prefetch:146⤵PID:1212
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,18405435221113819001,8586095219578835782,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8308 /prefetch:146⤵PID:6280
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,1963265584374945184,673251503520978872,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8388 /prefetch:146⤵PID:7040
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8296,i,505998563503709207,727091367304873068,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8408 /prefetch:146⤵PID:3864
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9076,i,4388537501529413108,8611306849704778458,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=9084 /prefetch:146⤵PID:6420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9104,i,14562594310949782935,5938597539896386792,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9220 /prefetch:146⤵PID:8068
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9240,i,4532252153864247500,7349619098245690319,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9244 /prefetch:146⤵PID:6928
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9496,i,6222679771774131652,1002536032844489137,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9364 /prefetch:146⤵PID:7060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9504,i,14669335833065139328,7718968854351105654,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9516 /prefetch:146⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9552,i,14517123465373535093,16010744182468840381,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9580 /prefetch:146⤵PID:6032
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9904,i,16348465978889714416,18042552246301467009,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9928 /prefetch:146⤵PID:6592
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9916,i,7065540596482919614,16605505599724817180,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10056 /prefetch:146⤵PID:7100
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10208,i,10776241461265588045,7345790148570179606,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10200 /prefetch:146⤵PID:7248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10380,i,124610368976544443,10669401003272240992,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10396 /prefetch:146⤵PID:6252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10424,i,3332038473920116721,9037755102076424274,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10436 /prefetch:96⤵PID:6168
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10512,i,17235373040120550088,14792186045642096524,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10448 /prefetch:146⤵PID:4156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10864,i,5138890428195405910,3002813144394239873,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10856 /prefetch:146⤵PID:4812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11028,i,7284922990089374696,15078030772453025055,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11036 /prefetch:146⤵PID:5908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11200,i,879877228017589809,5940453319506729256,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11208 /prefetch:146⤵PID:3808
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11356,i,7037540334790398122,9247811979540793342,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11384 /prefetch:146⤵PID:7940
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11520,i,11985948187613929464,10181627409688145267,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11528 /prefetch:146⤵PID:8020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7956,i,18431865019143076208,8152948383299870651,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8120 /prefetch:16⤵PID:6924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10004,i,12409350797609451193,9235323187056316383,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9996 /prefetch:146⤵PID:3184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4212,i,4350202752044863343,16438707503478830603,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=4248 /prefetch:146⤵PID:6500
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4112,i,1261273099817953584,17483844653370487786,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3460 /prefetch:146⤵PID:8172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9188,i,16206892283426293523,10523976731825385697,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9140 /prefetch:146⤵PID:7264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9156,i,3980872539415131623,16041151718031973595,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9132 /prefetch:146⤵PID:6740
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11460,i,359536481435912026,1876733910371890399,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10716 /prefetch:146⤵PID:4248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11428,i,5841411475079688343,1231655411300267763,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10776 /prefetch:146⤵PID:7088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3360,i,5578280632465089580,13975951946185995032,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3512 /prefetch:96⤵PID:6280
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,6039872578216249668,11879479662021833514,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=3172 /prefetch:146⤵PID:7256
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9764,i,16257269648907685085,11965566527107230274,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8092 /prefetch:96⤵PID:4476
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8284,i,14448055017928109259,744768237607031457,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8772 /prefetch:96⤵PID:8096
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4800,i,16905886169453917771,1333309757366237534,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9836 /prefetch:146⤵PID:5696
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11492,i,14666437525954302419,14737502922432567813,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10260 /prefetch:16⤵PID:7368
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5692 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1488 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd03⤵
- Executes dropped EXE
PID:3988
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5648 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x214,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd03⤵
- Executes dropped EXE
PID:3544
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x2a4,0x2a8,0x258,0x2ac,0x687324,0x687330,0x68733c2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1196 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3640 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd04⤵
- Executes dropped EXE
PID:204
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1072 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd04⤵
- Executes dropped EXE
PID:5572
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:480 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd04⤵
- Executes dropped EXE
PID:2744
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5640
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3392 -
C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd02⤵
- Executes dropped EXE
PID:6360
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:1100
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵PID:4404
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7fd7d5598,0x7ff7fd7d55a8,0x7ff7fd7d55b82⤵PID:7932
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:7940
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:7460
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Defense Evasion
Hijack Execution Flow
1DLL Search Order Hijacking
1Masquerading
1Match Legitimate Name or Location
1Modify Registry
2Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
- Size 20B
- SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
- MD5 7177cd1b3e21f48a23cb47dc11b36f7b
- SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
- SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 163KB
- SHA256 60f4451ee66b7a4bbd45643582362d23878aeddd735f2be2e4462d84f7ace20a
- MD5 a9e21287e0758ae0683fb13006edb29d
- SHA1 16361fa4569a7fb9d3c43a9b6f05ce0095b1e628
- SHA512 25d9f409d9c2d216c308653d6a7ffe96eb13a50ae6ea37fb269e250d9a003a1b46474a0238b15985cf366c695bf7efe90470080cff8365baa643d6782a1b93b8
- SSDEEP 3072:7+myZMZNR5KqRn1hfkMSA1TEjKZuvwA7vHkCwngoy5vmCOLKrTi5sTl:6XG11uMSUEjKax7/kyrmDKXi5sp
- TLSH T13FF312269BAFAA76FEA1F0D92A0404F2D1D335FB505659C13E2137CA717B50B680C9CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\136.0.6008.80.manifest
- Size 225B
- SHA256 0b42e2f6e44cb617486730d36045d7eafdb43c83e473dc2446fc266e3091fd12
- MD5 123d47a53e6501a1468f5bd4e1290eaf
- SHA1 1a33ac21fd5e786f5d3ba50914bf965760b64707
- SHA512 8d4ff42ab05c3fd1eb1a93d030009614be2b1323c583162430a923b7cf6524ad699924e26b814840c94e74c2e518544a7cb7977fb5ff1a07ee97369cda2b9958
- TLSH T1EBD0A9A2848D2289AF2142203CAE3021421AC72B048C604870FD7867BF9BA24E0C2AB0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
- MD5 1521be4b8c8f2e0ce20a89f163de3909
- SHA1 c291448b74fc3d7060c1df4b35026084981ee441
- SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
- TLSH T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80.png
- Size 590B
- SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
- MD5 1b4ff26a106929e3a5710900a9d984e7
- SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
- SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
- TLSH T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80_contrast-white.png
- Size 519B
- SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
- MD5 169dc90309162bbabf07ac3d954a076f
- SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
- SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
- TLSH T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\assistant_package
- Size 3.6MB
- SHA256 48fb4ec141322aa1e753876ce4105ac61735f7c0d744a73ff4a209e09ab2b023
- MD5 def1b658b06415db52073f5d7a28a53f
- SHA1 f3e3349544e194ac209374cffc759c42a3fd694c
- SHA512 7b6be7ebe86bc19adedf9925ee4d29a8075950248155a9a19212a20fded130fc04746f2d95c72bb92207f5be1ba64ee0cd00c3a73afb07bcc3271479626581b6
- SSDEEP 98304:LkiotNZCYaLP81R/CxYHGF3pMkB8kXI9Fv:LSDXHo3pj8kKv
- TLSH T1500633B1BFA1C872D44202330CD5F2BD51BEF3710A724EAB67A80F4EED605D7665225A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 c0e3f27b85a7717c807d862b7e64b1599a6a8827cc47d671856ce03a3b04fa44
- MD5 fb0fdca501c3e10777a48feaaf62d1d7
- SHA1 8af0b0877aac1a5c2929c00d0f7160248624d839
- SHA512 1bec4d4b38225423cd4c47cbd15795f9ac9e80a738e38f8e4747c1295e83c99a438e7c99da5661e4d78e279cf09798c56299ac00bdbb5d3055fb56ff23c13722
- SSDEEP 49152:t6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/3:tUdeqt737jFm5wf
- TLSH T1CB268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxcompiler.dll
- Size 24.6MB
- SHA256 3d67684140102197b12b6748e24ba4cd33af2e14876eb981bfd0c24a2c6ac569
- MD5 cb9231cfd641f9bbb1dfc71dda5cf167
- SHA1 f38f0a9617ff1b907dd103991813087fb7b4414a
- SHA512 af9ab205955647f6e42aeaf856577329373cb3604e024c507f0fba2ae4d0ac2d5e4ac0af87f68aae2e51c6c80947dd17ade8b8006f260eb899707300bec86dfa
- SSDEEP 393216:I54q9CLDYh86Y2l5IfVJlGa8hkuuQ9Cs8I:I7r5Ijwa8k35sT
- TLSH T15B473A122646D49CC099C879C3678B268A6C30E73FA7B9EFC0F451252B79DBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxil.dll
- Size 1.5MB
- SHA256 ba28de1e6e486ab1ad22e6a2eab96bbb7c34a251134f4aab17013571b1245dfd
- MD5 546c551bd2ca6adbfe97f4a3e0eb1996
- SHA1 9e1e2428b44daaa2787be56f6a33f53cb846e7a7
- SHA512 c570740753e999b1a57c365b4043140d1d2c7d5f86cac4554b4dcd8d385e5da2ca000a9982f697348b11182cf1d534b2b094d272877cdf4edb4b35d139cef495
- SSDEEP 24576:tcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/i:tsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bP
- TLSH T148657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\files_list
- Size 6KB
- SHA256 025d2bcd28ea1b90db693e54070ea99536e11ca16933896673db16bf498ece34
- MD5 132601cdf358564635258cc5f75756a9
- SHA1 5f3c8972ca8a7127d0d9e3021f1c4ce8c155e3b5
- SHA512 0707808a404fd8fed3f6e3de60606b511fa7e1c10eae0abeb7af4a3a6ee18dd0118b21200fd1cd9d28fb49168b5e53c037cfc2636cdd8dfb66c9badddb7b4fc5
- SSDEEP 96:AMyTfz5XZyITJhGwbx7VtpJnZ7vMbngEDi1JZJiRORnOU:Nafz5XMRwbxHrZ7unmvgORnOU
- TLSH T166D10797895F0265CAFD93F1EE61E89092342495DEB83058F7C70A5694A33FF02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\headless_command_resources.pak
- Size 2KB
- SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
- MD5 42a9c1c5f047aadb551a21625609f8f8
- SHA1 d5d9d659c32cad9953f7f1f9bffbffa1132266db
- SHA512 d73a907010494502938035a74ee605f4a29a47efb7332e1f81ceb89d48e1dd54e024800413513d02175a898db504e0625b6786cd1518e5dab96eb33b7ae69925
- TLSH T16D511893360AF5A6C179C72C91DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\icudtl.dat
- Size 10.4MB
- SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
- MD5 ee759568c6560e1cd42a5bf70d46e28f
- SHA1 f81dc21258e99af2f98b91aa8f968e31fe652d1b
- SHA512 d41d0626cb131da5628f5e789e09d52a035673f2a31eedcbcb3879b2b65d82113ee52c8c4a03e26b00f7d652a7fce1a06c0c02fceccd16fc8e9116f9c66362e0
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89j:nHcBhORok2HiXUxO/RJk3IWhlYntjd/j
- TLSH T1CEB62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
- Size 8.3MB
- SHA256 a49318e66f5c3d66c8e2c09f0879eafb87f8d3c03152db579baafd5e5a744279
- MD5 6ba043a2ce66272c1cec058543eeab7d
- SHA1 8b0becfaaa44b52e603938cdd237f11c8bd965e8
- SHA512 ae65699fd0ca952b30206df99074cbf3cc7d1153b424ef7a12491d5d21b9fa5af81d1a05ebdef7aa6df56169591333bc06a86c478d820cf0e82558c3d92cfd70
- SSDEEP 98304:KKzzBSHUFmV0Wfqi3/X/mCIzvoAq0RsYNY8AFh:xz9S0Fme4/uLq7XFh
- TLSH T1BC968C53F3A601E8D0AFCA749B3A5632A9357C464B30A3DF0A9436251E75FD46B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer_helper_64.exe
- Size 601KB
- SHA256 3701dd526b94855901ed47b4cc0ddd7810af5eac7aceb43fd8a4fef2fac1b4cc
- MD5 f0225c84112ec15347b664dc86a30697
- SHA1 7907301cb11962ed8c38a98ade279460b0d3e40d
- SHA512 c475bcbd68369425248e385aad480afe43682385987026ec85d23c639ef9da954d086704c662f1ac8daaf38e85404c54fc3b624e8e2d797d94da056268753354
- SSDEEP 6144:wvsLaGb5Jdp+TMnehGv/9nWXG5bds3XKLSOUFhOpekMWnGQuEwrCAhHwo:/LaGbtvehGv/wXedpSOUFhOpevWnoXEo
- TLSH T196D49F56B2D957E8D03AC1358A528512FA717C960F3179EF02A0726A2F77AE41F7F320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libEGL.dll
- Size 460KB
- SHA256 9a596bc1cae71bf1a53d83316a9e23cdf61283f160b227267dc6364ff0f269ce
- MD5 54bbb86912f530a1d0de618177722f2a
- SHA1 6052f4d3cff231bd90bb91ddd60e5fa67fd972e7
- SHA512 aae05f15fa5e72273ba684f230f54360d4d5dbf5028dd751691113ee9b35cdc9626cc9c02f1ae865aa3135fa9b441ab4803fcc64567a8340cd2e926bb6dadcdd
- SSDEEP 6144:ILO05IAKzo5jGAgKpj5G/UUqMckoMXvsQY3/3fPk6sV02:uQzo5qKe/UUqMcNMX0QY3/3kZ02
- TLSH T1ECA47C05B3D548BCD077C5388A538646EB7178960F61E6EF03A0E2792F77BE41A7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libGLESv2.dll
- Size 460KB
- SHA256 e8eb8bf566654d5d6afb83ecfc99900381a7297d8e45f1c9fcb1a776b82a0b56
- MD5 b5821c5e1cd52ab423511391a8b83bc6
- SHA1 d853261510c452bb274d113eb524d98cd8878b5d
- SHA512 4470429d58dc8bb486b04e4921a8b11cf00baae948f5cb8ef8d8467645a55c0c7b476c7b356b6e7ba77815c83315e522f04a73567ee8b932853d2fba50e14717
- SSDEEP 6144:pjm0xrAS7o5Dnos3Rj5W/UUD8cso9VM/e130PcaM8v5:HR7o5N3m/UUD8cF9m/e10cYv5
- TLSH T12DA47D05B3D548BCD077D1388A538646EB7178560F61EAEF03A0E2792F77BE41A7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bg.pak
- Size 1021KB
- SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
- MD5 f7721502407e88cc97a32aa6d45c8a06
- SHA1 e908f6615737be617e7d21e6562b3fd05f74bada
- SHA512 c4bba74c9f0a0ff90fb98736c935d7a295b91f279b3a0f9651dc8364a396fc8e1779f47c7122a624c50e033085fd6572ca571e65d57be2a94bc9aafc86e68f82
- SSDEEP 24576:hmDn5dxoMtTJ4z3J9ouvHSDl9cIhdBB0r6g2HC3k29CvzvYUgCzQkECZUrVb6oKI:hK5BTJ4zvHY5dBB0KC3k29CvzvYUm+Up
- TLSH T1C52535A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bn.pak
- Size 1.3MB
- SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
- MD5 e6eb09507013c320f96635d00205c4ee
- SHA1 5ec3ce76f89c97a069a2cf1a46fcba23ba84b86a
- SHA512 01ec6e4b9e26e8a547e8663bb8b1952251ecb86b72b011d327bbc4e417fc8fc3cfb7d825d0c7cd5c445e7079968916409c24a334b4c9598e9e86bddcc7f3f88a
- SSDEEP 3072:E7YrgKfO/4UKdFzSwX+hIMRnJUBuHQxjQjlQw7CN2Nlq1U6M/RQmavYU29XUPDi:E6NFz61JPyw7XNlb/RQmavs
- TLSH T14655F0209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\ca.pak
- Size 642KB
- SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
- MD5 c01de525fd121221116f05f4d7be5e58
- SHA1 bcc13657f6fcc90984aa55bf34dbe17ab665ef7a
- SHA512 f32b56efb3071f7d75b5fe39d7e0816eeb7f17faff078943f49086090ce3dbd6dd76397fa1cd23f303aeaf717810607a52ea470203941740d717482418f560de
- SSDEEP 12288:8apOEZNLE756ybGbf1bCCrz+W58rPelpfmRYiEihHUviM6AqHl9kOkcBKMe3aR43:W2NFGZbdkzLnUe61hqEAjaQd
- TLSH T103E408239BC83B760493330AFB42C257F09CA9847B16D254F4AF1A5622CCEDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\cs.pak
- Size 641KB
- SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
- MD5 c906f30e19113b64da4324710dd276be
- SHA1 d27b1306395bb8980b905c73f50f56b84e5bd0c1
- SHA512 21bfbcd730517a1b53b652267b893609fa90cd539e6bdf0fe7e716c2f9b87a5d8bf049e5de27bb129e9c7b3f2cd52c117870d8962632a1853c589102b3d16ed1
- SSDEEP 6144:/cWq/u+CVGAekk2zHazPzGOBISBm18QtsTqF8iYJMr3bjkMqYOXPdV:/cWrvVCmzH+PzGOBIS0/eV
- TLSH T18ED46C1FEBA36435588002447BBA4228BD5E83540B6EA5BB7CCF9C912271B7ECEF1D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\da.pak
- Size 590KB
- SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
- MD5 60e92fb75c18837ae339ef43224d89a9
- SHA1 13dc4e668169a7c0cb05b6fe95740937df7a806e
- SHA512 23bb990a67c0d61e38cb2b55b5df010051967af27c16246bae7f6a91ba18d29bb986c060a8c7b08312e9a54bb6c8874bc40fe6939ec1f22e9680c5ead7e78cd0
- SSDEEP 6144:4Qh4ykUahSyJ4zGzVWpk2oox8ts34Kwd4A2CfwgHszZhN+RQgOXPTEd9SOXBTMpo:1hWPhHykc4s+lDRQgOLOXBIpbz7kH
- TLSH T1A8D45B4BDC9C732F99AD0764F2118DABEBAD543CC684664F74D8903A05CBD6092BF2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\de.pak
- Size 639KB
- SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
- MD5 3248a108f5eec7071e80719205334de9
- SHA1 d590fe5a8d069a1a87e570744553fc53bb7ff720
- SHA512 0746f490cabf1723eaf358747ac54f39d309d5e41e0ef0fcc656ff27c37362b006f094e25576864b33411e01c4a66dd1719c8f53bb4b7741831687b187b25a0c
- SSDEEP 6144:V6ZncwfVo1/+rafB8bCUu7zIcC2VO9+6OPAaH5FoYwyG4EMyl0qLI+OfK1NSC:QpViqKi+UDcC2M2PVCyDEdnsoSC
- TLSH T1B0D42903ADDB221ED646B3607701CDB77B19E36FC385312A94EDD02B560B6B283AD536
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\el.pak
- Size 1.1MB
- SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
- MD5 ca543ac08a6b81e739af065a1ef13d09
- SHA1 28c89fc126a702b17524269ca1f3026ebc3a9348
- SHA512 1d7715b57d80e13e7d53353d2ded95aaf01b95b146619d2c97b9fb3fabb84086b714d1bc778cd54ff425763797736861270ea103c0ac30bd3bea09727785006c
- SSDEEP 24576:G4/nRe1njpiSpBjGoeoCNK9cwyU7fOILElJP862IPabmvdc37Dz/DFKaUeanlmpa:GcRe1njpiSpBjGoeoCNK9cwyU7fOILEJ
- TLSH T1A835DFEFB0542DEE8046950785D8F07C27C66D6CE749CBD86229CB60BDF90719A22E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-GB.pak
- Size 518KB
- SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
- MD5 d8d5ad93e46d1a6a1871f3a531560564
- SHA1 ab8ba486f69f2790a3a1589dcc8067147ba2cfc2
- SHA512 9853159c3cf1f6b9af6b509864578fb892ef2d828e57f71eaa66892d95af337f1ed06c8e5b879fd78c4902b3577e495956fc87723717da9c81b34f1e40d4773c
- SSDEEP 6144:jeX12/BW1J/7iLDiXBc1RlFp5E1GQvSIXFV0SrU9p3sQX:ocZGADjQvCSresQX
- TLSH T174B43C1FF744126905935272BB06A662FF36D06CB35112663CAD802C33B7B66837B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-US.pak
- Size 521KB
- SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
- MD5 b9554ee61964a312d3fb737006a39950
- SHA1 0eefe43a45c5dc74e8ae5eb7e49d71470085e30b
- SHA512 7789e4217eb6699b044c39338918a84b28cfd23ffca52cf0784b004cfd5460208ed2bca91527c82c542482cae5f5e0fa09aa5ceababc825d9028c2ebaba9967b
- SSDEEP 6144:zLpY0Uw7sCF7UjnsngTA/nOwv2aG1YrpxQSc4rt9oCsGR:JUwoCqjlwC1Yi4rTsGR
- TLSH T11BB42C1FF744126905935362BF0595B2FF36D0ACA36112563CBD802C33B7B6A827B6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es-419.pak
- Size 630KB
- SHA256 7f07e8900a74b37f8032067b09648ac9f23d4f70c545411c95a146077fa69b41
- MD5 daded01dbe8aff9ac5abf5da3c2b05e3
- SHA1 742231247f205028b4ecaf68d78de500e2f8dcbc
- SHA512 fe65956a3616b46b1364b7c0f463246c9efda68b81a3290e40f5c0dd592ed29430972fbf64a5985989f2ddd5a8b993a90f4afcf147effe6bdf633b108992f801
- SSDEEP 6144:SzSpBlY6KxS5WJiINAOhq4i2m/+tghJ6RYbzvw6KRqZfk92hb1:bhY6KxkWJbA+ExJTzvwakshR
- TLSH T1BCD40822AAC81F5314E3A348B783D753E5D89545B408C29BE8EF86A522CCF9CC577ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es.pak
- Size 624KB
- SHA256 6b27fca44e34f57a258f3e16f53f59bde2604a46874382b314d31a53f1b542ff
- MD5 e23e295a18d9d2dfd03907b299251562
- SHA1 51aa314aef2d771926d9de26a7d1d971b9988807
- SHA512 7a68f2359de1e60ca06b87ae56ef94f190792fe994ea3f0a6e30dd97cb69b00c467acc1af92a7a4b125f293ff5a66f216d1cd0e0f27cca802c8aa12a544923e4
- SSDEEP 6144:niKDTJ7A7Ogs2RofWF126jrRrJb1PYO0k8+6PZC4GnmbxgY+7/y81/tozu+jEdbs:nHGOhctJJPd9fnmb2q8/+jY4ftl
- TLSH T12DD40822AACC1B6310E39349F743D753E5E49545B508C25BE8EF86A622C8FCCC967ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fi.pak
- Size 586KB
- SHA256 483d5fd39ac54057a9fa514982089e6ab36727f17373e5b709b232b1debcd2ed
- MD5 b349e8bdb8ed7a813d3c41e942c528d6
- SHA1 1722f257643b3d116848b746fe89b16a4bfb7493
- SHA512 85976c50aaaff5236c169a92706f28aa8169e8caed8f17ee8f2bbdb7d463daf16558404805d23b2dfb1a0fe84359f11b52fa8c1f559151198474b3955e19230e
- SSDEEP 12288:pQ1aU6FLMe19McJAWcI3p3WaHnsS5japms8ovffletLFSZ6dc1Jy:pQ1bMLMvUSIRTo8x
- TLSH T1A9D46C514215C32137C4C35E79B0903EF6E5E39D8C288D96F847C6D94AEAA887DB237E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fil.pak
- Size 655KB
- SHA256 52f48e2ca2a09da4ae293f4b6b89e7cd356a9a30ba9e6fcab5711c675f5dcccc
- MD5 e6b82d41af4290067dc6714ebc19a198
- SHA1 03d65897081de13bda257bfd10efafec96a97fd6
- SHA512 9c143565a80e37e10c930a4852ab652ab290c8bf7c42cbeab909134175da8388f31f425b3d6bfa0a98e7d8c2f03a572686988f66a3cd9c722b52c232742092a3
- SSDEEP 6144:UZTQd4Fzi8lCJdovpOybonSVIm9Q/5D310nUD4D0dKCq:U1bXpv4nH4eKV
- TLSH T102E4E616B3401748DBC352E513A0A92FA6E564BC3F81686E1FFF26976BE7CD4D230192
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json2f9725cf-3024-4c66-9663-954431dc6d4b.tmp
- Size 2KB
- SHA256 8d5c72c2de74efdf173d828214e78c0e6f190baf3d26de248b0386fc9e089c67
- MD5 679f058efb7b684b63f4bdfe934df99a
- SHA1 bec3a18a1c6ee37e80e6b3d0e9c8f9eff44b653f
- SHA512 473fe6ea68c0e11a40b02286678a5f129c9f1f175cc0c05e0b4ac2d8916ab14b32d6c9a7aa604f464cf9d508b0d6449ab408be32f8416dee5f41fceadc36ef73
- TLSH T11951A3A004265133FE24D349EABE3B4A5352806398780AD934CE050DD8EBED717EAD2F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\Opera Browser.lnk
- Size 1KB
- SHA256 dd42de2e08e58aba64f0b6c1c9b11ac2161598ab7c494e64e3f12a5a006d917f
- MD5 2fe974afd67b9fbf7f5e2aaf26a1d6db
- SHA1 be9a97583fad1964bf9fd01300b0e22318ee4f37
- SHA512 8fc26087d4bb481a6a177cbc201726b4e6f71e53127d108dff4397db2fc7feecc7a7a988746972f0e028f2b2212f1199fdbeec08cd61dbe87636b50451a5deac
- TLSH T1FF2114462BCD1B56E3774A3201F76626C17AB8509F1B8E2D501543853EB5243488CE1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
- Size 2.9MB
- SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
- MD5 cca6f6c0abc234866a5ea00e97d1745a
- SHA1 6ebf31a5ea9b2d89a21fc565591185ee93493553
- SHA512 01b9b870d6ac45f9908c6119d48bb82b2957aae2d4d72153da5efa81ca97a4f13136fdb24bbf1ac8ab2defa094a573e2137c1202f324fb9b6453c5c79fae6cb8
- SSDEEP 49152:3kinowp5Tl8RRjPXnYcilTS8rmJ6e99FiHgfCNJwFdIKLpUCHSa2PNvVseb:3kio+UDil+smJ6es2I3PPpVLb
- TLSH T142D52330B9D48870C32756338DA1F7AE55BEB6B0473989D773980B8EDFB15C39A26406
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
- MD5 81a58f8ff0989c0089e24dfa658dccfe
- SHA1 7db84aa7d78ca19a25f5d2db30f169590af165c1
- SHA512 e91f4faed65a043cfa7e350441d5c5849b81798951d574e8b42330e1d645b1e4cbbd33315fa1aac258e00b9883dfa8c3d865164c07d7d498e98f4c754c6779cf
- SSDEEP 49152:4fuSIF/tZVHY1OADJCH/wmQ5ofRUwzcvz86eCkWI37aVU:4GSIF/fVHY1O2o/rhRzzcvzRetjGi
- TLSH T176C5AE02B99094B5DCA63032721CE77D9A355E114F364EC7AA90BCC17FB4AD2613B78B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\dbgcore.DLL
- Size 196KB
- SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
- MD5 84d406838e3b80a2668c466ca5cc8e57
- SHA1 bb60b9c299f28bc05eb7a29dd19ad64b37c612cb
- SHA512 b5261aadb18743835bcba65b2f5aee0b888e8b7c6bff21deeeac546236ac892ac00722c2d486dbab969f8bef8957ca9576dc5301780ffe088fd5065b6c57a84e
- SSDEEP 6144:zASh0NdOkBakZykbp/eyhr+SJors+k0L3nTI:WYIqFLnTI
- TLSH T1DE148D6296840833DD9F11B8B29F333795FEAFB0139194D362509AE4E5647C06E3A2DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
- MD5 c903c1fd205157a96848017f1cc5f245
- SHA1 1eefb8e49a4c663253e75e7a862d11524a88525b
- SHA512 f9e5a1f03f18b226a9e3d694aac4220c806cc30dab0fe951dab1c62dabcf9c937efb79b4c4a469966a141b49aa358a492ada771d67426fbe025d59b25e51f705
- SSDEEP 24576:zDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsfq:zqhRcFPxhHYCBRnyHO6W6NIyX/kQs2x
- TLSH T101856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 4.6MB
- SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
- MD5 8901c9c990a89fe0d51ced62fd276a08
- SHA1 aa630f322c53a07502878222c09d75ab06d13b1f
- SHA512 b0f7bf1d7863b5ebb5cc69e666608ae3363e004cb0047a712605c2e80bdcf95335739481c1eb700e1e25e11018970626d9619ec328133538e0eb26270c9fa405
- SSDEEP 98304:mUclvbktRJuzcbGP03zfOAGgio+1K9EQLtsA3kwZLT0wY8K4qqn0ndL3q:ZclotRJuzcaP0zOsio+1KtsA020wYqqs
- TLSH T1B0263370F29A5D20D93BC573941A8FF626085103A04DB87F806B14609EABDD95FDFE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.json
- Size 1015B
- SHA256 3e1594825224f6cb05d2f58e81c72f4ebcf85451ed5ac1b77f74123712a0b5f2
- MD5 f1692843aec5ad6892f8386f523881d3
- SHA1 ee0aa8b426983b35bae0f0cdb1852edcb9cd4cfa
- SHA512 150e85dc9d367a3c6f2f07c49c4aa47998999041d1e2a9037077c4ecda078b570d3704dc8e4548531aecf226b4a2c991544183285ebaba9b8bf26b9ecfa369b2
- TLSH T1B411DAE4047A8232DC24E344FCBD77C85390446A88B14BCD31CA0058C8E86A621FAE6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.json9ad73b2d-86fd-4940-a56d-ac64f4538886.tmp
- Size 1KB
- SHA256 e71141ea83e39703fe49b5938fe98caaf697dd3f21f5dd5218cf13fa51d45884
- MD5 489ef32919c7683177c9d47612600853
- SHA1 c7ad5bb7efbb9442c121245d3b62f3bd6a0a124f
- SHA512 af1c98680a1149b080f68d73714d054c4d9b73da8383e9667575679b92095b0f45df4d63244181badbdffb683d109802b07b955a5349d16f7ff6ee0fbf0ea1e4
- TLSH T19F11DAE4047A8632DD24E344FCBD77C85391456A88B14FCD31CB0059C8E86E621FAE6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.jsonf73d2e95-ef46-48cb-815b-d75282195405.tmp
- Size 1KB
- SHA256 f80122aed658cd567202c68f08e78c1a1d7589035ae731ec0fe1186457465faa
- MD5 54f9f8309683388189d75a3a6e07d6d7
- SHA1 c47edccd24238b274af1f04679494bcfa03edec6
- SHA512 97cdd494f528bb1d506b2a0f7c9f7726db8ea4432a707620ea242bf6b52f119c344ceb4fe12c89816c3a6f10a7e5d07a69b7c961ae86ae17996a02f1b38570e3
- TLSH T1924166E404769522EE24D389EDFE3B899382955348B40AD930CA445DC8FDA9617F5E2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
- Size 8.3MB
- SHA256 20b18b3c0b48d9ee2776e3972e1d4215c5b715be7d4d895caa4d3e445d12beb5
- MD5 f611ab28059152925d37a92ab0709665
- SHA1 c8c4b4ed9b47e6c60025554a8ffbf6d2f73a96f5
- SHA512 7c3d525e8fe2152fcd6a16c3e6eded843c45846a8be95a68e9f79adacaaa0ee7abf949088a8550f80aae7771633ac36b09ba855046d450188558c8d7eebf26c1
- SSDEEP 98304:ZKzzBSHUFmV0Wfqi3/X/mCIzvoAq0RsYNY8AFZ:cz9S0Fme4/uLq7XFZ
- TLSH T139968C53F3A601E8D0AFCA749B3A5632A9357C464B30A3DF0A9436251E75FD46B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\manifest.json
- Size 3KB
- SHA256 edf3f7c95ebed10cfa1c14b63a306a176d05ca454a0c334064e13bbdbb9c919c
- MD5 be626e04da811ffc0eb6346099b96207
- SHA1 be46393d8997fc51dd5a61a1119f79ff7041e3f1
- SHA512 3be7029125bde66cbc3652611bd0a13942bbb2339d820d0f56fd7bbe33e15efa1cb9715a266ce6b3584a1ab1bd2b092ac1004fa6f99e5a6964c01365904880ef
- TLSH T1237141B6E4DA597706F457A89CB50707F200936B878E5C4F7BFC90888FF9E61205991C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
- MD5 06deaebe4ba5f21501fcd60b812cb3e6
- SHA1 675f77b9798f5d275a8bd1513663dc1cd5c95275
- SHA512 9854efd8af234bf77b755df250943c63f5079deeff1c4ee0236fb405364b3f11f46b36b7bd992122cd4d09fd2c78bcf686b493ea1778209722b2f10965f7b14e
- SSDEEP 1536:Ska6rka6em3ctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6VszmxnS9lbv93NddM3prX+wH
- TLSH T12EB3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\service_worker.js
- Size 92KB
- SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
- MD5 be574cff7c6a0e41d9cbe6fd59917ee6
- SHA1 b22d10f9a2c5f2d3b7d9e5472042aa61145ac1ae
- SHA512 62ef6a14611c1c18ecd19c098d4fbf41f91bfc87fdd36c91f125f712e24be5bb94d6b429d16f8adea7a4df5337b5045fd9a3150d93a49f35064d76d7ee33b8cf
- SSDEEP 1536:6ka6Cka6Wm33PC0TVsQeIuP2uUnEKhnL5G5FMrV+WJQ1VsariuxQMee:6ka6Cka69PRayuThitG8x3JqVsa3ce
- TLSH T1D39339CC78D3F4605BA3A4A5802F2443F22D2E46105D85A0F726CDE9B86894EE277BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
- MD5 ecdf2969be0bef404833cdda4c5c470d
- SHA1 750051a8d5f320b1446b76850246fde90a791483
- SHA512 90f6bcd6d303affe88cb777c71d3d71213741feca9637ac920d3a7e3a6131cdd58201a15a98c04a1ffab7a20794f492eed4a72f450a7f6dd45ebb6dde7bc458d
- SSDEEP 96:xSVa6rQaSVa6G38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuis1Z1uta12Ho6Io:xka6rka6G3805se3m4XFzVJFsL1Zx6z
- TLSH T1E2B1A405819C4C7C8FB5029A9ABE135212DE2283787BD4C4EFA3C47597253CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\_locales\en\messages.json
- Size 396B
- SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
- MD5 f4b909ef13d8b4dca31e542f14ecfc55
- SHA1 4381ed812d8073b5bd5b873b51697364a1690772
- SHA512 bc0b136cd2c055d27e7c8e4b8aa5540f3926df1e3be0f6b25d14c14ddb72602eef8a4a60e4c15085d63610f6696cbb12feb8d21447f35ec844997c6242be1a35
- TLSH T133E06D0489049F3B419E8269ED68BBC4AB301B6A32A0BD2929C8819C0605FF344B23D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
- Size 962B
- SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
- MD5 a31c3c0f384b4c1af2e9d8bc153d3824
- SHA1 f2174d637bb60be75695b82639e9bb0ff0fa9951
- SHA512 7cd09bb9b3b357f4ffac7e982a676d8f92ddcae8ce02192dedac9a7b3f3580ce2b1ea8be08a041094a45173d279076d19d3f5e6cc99be74d483921030e09edc3
- TLSH T13D11FBE6570FFFB289DD4EF87BCF0140107B09BA0B2069647C975A15557F52D49D0127
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2bb7ce14cb8c6bfb.customDestinations-ms
- Size 24KB
- SHA256 2467f914db3d253d23db6a567515983cc6c9762f424f8bac94dcf6082c600a66
- MD5 042d7ced9b9a2cb0d75d8bbfe0bd8656
- SHA1 c9b7573bc7df76e8b24d704e4584a5be13ef0bfe
- SHA512 8316c897a405c0466772403bbe9a72b1aadb23074835b58d4e530091503bd4d210651e5291ee04cee6bdd95ba6bb4744a59f437a8f18612c582a812a0b3e917c
- SSDEEP 384:fsh7VI7RnIgf/rIGIKsnbmIfsqMprIT9ofqsQaJIOIiIi:fs1Vqv/rx0K/94ofvQsJNX
- TLSH T139B211652DD92973D2B7877286F66686ED25FC523A068C0D108343461D63F53AC8AB2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\OAL0AMQDP6KOGMN91TJN.temp
- Size 24KB
- SHA256 7b82e57a4255614ceac9c8d032486e5dc18e5c1f3afa6c2bd7a1f0f5e9b6378e
- MD5 f262cac7674547c1195a3f8dee853e1d
- SHA1 2d187fa6e65a354a8927fba85dfb641d40989e2c
- SHA512 b689c9da4eb6c60ea7655181381188e4de8bfc63fb192840575de4a7a6366875cb45d6ad89ee80f716ed7128d19aed73153bcfb95d9d969e2937d5d499025dad
- SSDEEP 384:jJ7NlBxlBgYB54BKsnRmBfsqM0BT9ofqsQaNB+ByBi:j9NlHlBoFMOs7ofvQ04sM
- TLSH T16DB220652ED92973E3B7877296F666C7ED25BC513A068C0D108243461D23F53ACCAA2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO2UYQDXMHB2VW7XRN0G.temp
- Size 24KB
- SHA256 7412ec5c064fbe899c2e7cd630ac1ba8f6259ee4999db4b82a161d9364ebd701
- MD5 0258d9c0d35c7714daf4914bf503b97f
- SHA1 0d96638aa647339e30b91dd800044b1e332a0a61
- SHA512 af26d979599f1e1dbe471c1cb1268bad0601fd65fb464cce24ed37de3cb05d33d5b46037557062a8cf47054bd03d6f206302e8daa3ac3003088b29d960e35403
- SSDEEP 384:EI7iIfWIgrIdIKsnVRIfsqMBIT9ofqsQauI5IdIi:EWip7a07/p4ofvQ/uCX
- TLSH T1FDB212652DDD29B3D2B78772C6F66687EE25BC513A168C0D108343461D23F53BC8AA2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 0fee63dd3b3e5810e75d00337dda372c29fca55f732dd3bd52137b9236317d91
- MD5 6411aed034eca8c0f5366d1b6febf7cb
- SHA1 6ac9834f2030f2270975b2d90866234e3f64a21a
- SHA512 3cc918433c35f4e78cb2de11cbc43db4aaa339b76bc0a4d9858c89ae133420f77ebcc16885cc6030297ace25f45894f3f6a3ec2c527dc9c3d46649eadc2f7731
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering1e1407ef-e3b0-4b3d-86ed-870d9fe4ae39.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks2a0e2e82-8d8e-429a-8cc4-d798df49fdda.tmp
- Size 30KB
- SHA256 9878907ce7f89ae2682ca2bf7dd245ee4d89d1aa56caeefca14527be1007b7f0
- MD5 917aea4742ac9b2bb960952c15af2a86
- SHA1 1f1b90d10750f91e97ac05c5c76178076bb74e7c
- SHA512 47114ca552023585d0fc35ac7537f0d06886215c7f4ace7cc92ab2532a76e5b569535deaa1ef3906d837892069dae84a2b2e2e81e3a4ce69f5ecf82b4e964fc0
- SSDEEP 384:H0cpPvUxYSzfStSa0DRetpDWzF6wD3zRlC0Z7dX2:hlSzw2DRePOwwDjRa
- TLSH T144E2F737C4065CBB80B452D574F9661BF786332F6A848E8B767CE88D8F719233256B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks80066fc8-8dbd-405a-be30-4ff535c73004.tmp
- Size 30KB
- SHA256 e50af8164de42229aa22de71aef3c1405babc7cbc7cbae4fd0de7fed8e37047b
- MD5 7e75afce7ade9ca9848ea2e4d7b1ebfa
- SHA1 0514ead6f2633392ee63973fa8b5c673ea390347
- SHA512 c93f0ec01d002f320c6a951d8027949fa8c786c68706ee85f50cb91c5b0f372a66daf6e7e117b320c5f09fc4ef383a73ee239bcab20b263b38ef5caac3cc02da
- SSDEEP 384:HNNccpPvUxXSzfStSa0DRetpDWzF6wD3zRlC0Z7dX2:t/ASzw2DRePOwwDjRa
- TLSH T12DE2F737C4065CBB80B452D574F9661BF786332F6A848E8B767CE88D8F719233256B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras3811bd3c-fce5-4c7a-9c8a-023f23f3e30c.tmp
- Size 239KB
- SHA256 458873d140b63e896aba14deb88d84d3f050b0562a3ebdf0a3de763ad5b76d98
- MD5 00823a3809065c7f6643843d2f788c77
- SHA1 b827eefdcc734faa500598c511a49b8317c0af79
- SHA512 cbb2d2ec47f28e48e2375aa5f332a05eb27c3c366e8d8abc2b39ef3baae5cf3b899085b7c5acdc7a6739f62840eeb3479c26231feb2a7904bd333cff6c4679b5
- SSDEEP 6144:OeCWqPdY/rgic/kzVJjECRg3b2vWWkWB+/F8Jc75OrQ:qbPdYVsmxM2Po/O2
- TLSH T1CE3423B549A70E1ECB7CBA3FB7081D647F9E1F7750C602CC09ADAE8A2502D21CD7A851
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarksb9759244-3e4b-4f0b-b1a8-7ce9c3056622.tmp
- Size 20KB
- SHA256 4de95e091db383298729931fe3774dbfb59ca68bd7336793d9377567bc15dfe5
- MD5 7588eef7d7ee396f7bf986573e0dc3f4
- SHA1 be68f1461a2e673878acbe81d4c1aa283077c72c
- SHA512 068083198ad11ce0d38b0b05414aa05be45f02ff5ff29fb5181714ac13367987b3b2d8ad350cbafb99c6f052589ae6a1916ea392c1b4cad1d267891da459511a
- SSDEEP 192:UEEYvMaR8INJ2eru6UX7HJQhtN7HxWG6JkX2:UEvnNf20UrChf79X2
- TLSH T148922037C5076CBB80B542D664FA621BF68A232F56C48D87367CD44D8F72A23735670A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
- Size 336B
- SHA256 0e7e931eb7917c550e79b89d0f3817c9c2c3a760638074f486265ca6ceecfdcc
- MD5 afe7e9b15a524623206cdfaeafd1e759
- SHA1 5bba0e579c64cc968a9320a2625f7c83d981b32a
- SHA512 c45a6a56c13a34d832185594676407b24a7991156bc130e2aa4731a78908e5172ecbcf88c578b9bfd60ccc6a4dfd728c868e822da3d8731f3c65ed4658ffb08c
- TLSH T146E05EAC7FF811C7DF24467493629D95E21A3C220311374BD0B2C2293EAB1F49375345
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 940b6dd04c1059ca9f3e6e213ace7076ac27e52eb48a1bda1da3f833ae08ddcf
- MD5 94e09bb13897f919ef82b0ecfa044a73
- SHA1 f88d5d68b20c82dfcd9c1732ab9fe4eda87e6250
- SHA512 e8c76272074b2c8cfdb544e9c26bee4de9e8adcf9f8de2d5e6ce075531886065249b1414f9b75400d72ebb8f710a47dc21068f91c184eeada446bb39e8edba62
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
- Size 47KB
- SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
- MD5 a8bffd3626a19dbdb95fff7ece65416e
- SHA1 85edbd1a9137769308089991c39eb5648c4c334d
- SHA512 fb4d12d64776e6286b7656a61234c2db5c13b06268ed25a9393e9483889d8832f445d457109a254fab3767f22b837536b4d61ca124c924a2688c3ef5525ea4f0
- SSDEEP 768:D/KIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WmwJFiwdC51ih:+n8VEbWXxYNG8/A85DQqkslr46JUmC3g
- TLSH T1162328996369687E0BC6D2ED925D0213552460F8681E84AC723CDFDE6A0FD82127CFF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\entry.ts-fXgzEoWB.js
- Size 20KB
- SHA256 212c83f543a35a9bfcd4210296ab2201ebf38f18bbbe09409cfb258e588f3f9f
- MD5 cf05d960fe3258a1df60a0363bb7a2ae
- SHA1 075241780a1ca3d3dd70c8e2068f8fe8548e4f30
- SHA512 5ef33839b5c3972e6821e9d836f2ec50956896aa7a846be47cabd516c255c58ebc0a96b2dcbe26a9bd34cd6ee0350591342b244bc05ac379bd205b929950cf76
- SSDEEP 384:1Q3PQDZAuWEIZDDURTCog/djnYYDaNGLInjTr8rIIF70Jmq4wd279++b9TBIp:1Q3PMriURTTg/djnYYDaA0nc447799m
- TLSH T16492D9F1D692A071479A8579B4B452C1FA7808DEBC1A824DF4185C7F3990E95C2F0F77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\entry.ts-loader-dBpbAyqV.js
- Size 341B
- SHA256 c8fa6d857c43194ef2b21b069e4a522b8f7841a7f2d23121a316d2c9b6ea82bc
- MD5 8fc1a8ffc8e9132e6797edd435ab96b5
- SHA1 a0572033f013076f7ad26f9259b8f3ad36cbf89f
- SHA512 d4a3fc06f8d7a9c9775d1e7e2662de0b3af0a64983ed56615ae8c2f3a23d702712f62adadf5a3a193a68743842d6fd5ab3081a9d5edf536cf52bd2d886419622
- TLSH T177E0200F8DB501120379075D991F6054B13283065194ECCE3B6EDB151FC375E16457CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
- Size 6KB
- SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
- MD5 fab39415a729d22b161ccb0f46006897
- SHA1 01aae91afcc6be7d0b4d0866da1da1e4f3dd58d4
- SHA512 2f2366a2970d89e6944df1da53fa8f68ecbd8daf655f7e898d6d7c07cc27324b8d7b43b21c7e9955ad8355337be4cff64920e894d1d07ed109d6ab3aec6234a4
- SSDEEP 192:si4AdmyjEmh3Lml/axenXI4qcr6TaUbj4oRCJOSmJ:sxtyomh3Wo
- TLSH T142D174E1F2F3A8796A32A89EF8E74D94F8A583105173C254E51B5DC4CB30B93DF20966
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
- Size 13KB
- SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
- MD5 28c8dc913e80f5480c20e200cdbefc5e
- SHA1 f0bb1b2304877eaf4163f514e1382829c1f828a8
- SHA512 45a12b57b6585d7260fcc197c8fd03171157f81d08a6a226764c182c9b6da62efd509d3ecc905c9837bd4597c9c4a9b9800cd0364e595a10ecaf16561ef23f80
- SSDEEP 384:Xp7UwWzZIyYXRWRhkVAOmts0OTSLHmHk44Y:FUve9XRdV3mtITSLKF
- TLSH T1385299B2BFBA542702D8603DEC527A01B6295651682D405CBADC74EED1D8B4C4DBFF38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
- Size 49B
- SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
- MD5 4924ae3164cb599ef50e43d008a34cd5
- SHA1 09ba9cc17180bfa2c2edeb3ee367dc545a1fdd3d
- SHA512 2adfafd18927c17fb11b0c7834a99fb4df50ff5f97873f424bbcff392cabdbbfb8f2d984575e293a531be14a602ed090ef2c348717f090a5de851d8818c344b9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
- Size 429B
- SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
- MD5 5250cf7c9dd7e49a4ed52b24698c3a49
- SHA1 7f155a461d23312bbfdefc569b06eaa1d39cd250
- SHA512 24e45c5c5cc87c8284fd852f347b6d9bcfb6a60e81d87758c95c01b9535d3a6fd468fd3dfb599c763ba355991abf0ef58259fa27cd013974d8ce2d593f1dd7cb
- TLSH T136E0C01889045F2B45BD4365ED68EBC5EB34173A2150E95A3CEC919D4B21FB344E27D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
- Size 87KB
- SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
- MD5 10250a9456839d059d63a70748010a2b
- SHA1 a1e8fd023c006e47896a6f00e20e09ff97d19fc6
- SHA512 0004821454bfc4810d75ca7640846673ca09c1942fdddc5104e50508de1faad0020e5d672115b27aac471e667fc0515a4b4fa503836764aee268d1300044bc5b
- SSDEEP 1536:BYHgfcYhQ7F7yEclPe7+apCjHS1YG7QI7DaBw26mvjJ9ul1H:BYAkYhQB0pGcI7DaBw26mvjJ9ul1H
- TLSH T1C593F7CDB6C7F26293E390AAC43F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
- Size 2KB
- SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
- MD5 4805f857f6ec86c67d6b63ac902f4752
- SHA1 9888b818fa830bcacaf384b70dce4c0afb0baffc
- SHA512 6da9c63f4896dd278b4a29aacd523f052b98c3bf2426fe8b1aaa79a47e13527ab2834744d713964605d2430e96d94d3ebe9526e63e76bcdcfabbb1cadc1a95c5
- TLSH T1C4515D49BFB8561FD4E8F602B425092AF5FB645094829981F3D3D09B5F9C414CEDCD10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
- Size 2KB
- SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
- MD5 16ae2826000173329d9ae233205c3b45
- SHA1 1ebdb2024aa19413be8c0382b9880b39020b4019
- SHA512 444f955355f080376394e4593f98c81a705a44f8c4bbf1d149adf0d2a75b9b1efa09da742fd2846e12b1c7e2aefdf5bb0ad0b641743933b353033bef8607f3e0
- TLSH T1CC515E91DFFE269C4ACECE6B18592266219D4686DF42343187305056272EC83FE7B55C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
- Size 2KB
- SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
- MD5 690ecdc93f4bb7d92dcace06972cde64
- SHA1 d7a6f16e34188192e247ae55c29d93d6821c7dfe
- SHA512 0c86e835ed152a3c21232b1fb2e904cb28c44ede45908fb775dad250187894d13077867eb768a10819b0b93e935cde1aa1c86bfa6031888f4e720ed1059b4652
- TLSH T112514B9DE07D07542B13843842B67C2DA4321A384108153DAD8F4894A73FBE046AAB25
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
- Size 883B
- SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
- MD5 426980c9ff405355a4389dd121b31b18
- SHA1 ec3e88aeb91bfd7f5a368c29de27b7ecd7a793a5
- SHA512 8d14e5b173374deebe3adae31514b40227279a3eb566ba9df121deb77905ba7d011046830d663b53d7553718ff1077ef4364e504b7766c40a8bf6c9695f66ad2
- TLSH T13411DAEA276458BC578E6E7960C601E87FA31B80C476327CC814A41FB56C40DF6DB30B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
- Size 895B
- SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
- MD5 5e8ace45e9a0da06dc1cf459448282d3
- SHA1 4bf77fde79bb7bbf83d6a970454d3f37460bf82b
- SHA512 04550abc95d708b831c152e9a29d86957aff1d6abfab7dc3ab1eb389c6e395ce6488ac24ef17c958c88b911a3fcad4551a6d6774c5fa64fb02ac78d01c4fef48
- TLSH T1F51163D7EB2F68C4240D8C365D665AF332483CF79D2811CEE6464421AE29A4899C56E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
- Size 895B
- SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
- MD5 ca414d88c570b79af1635441d40df0f1
- SHA1 e79d58ba493c2638923017e263405748377a8307
- SHA512 836ecd41819a40555fbc40b504dbb97c5a90d05c93fe9462ff5ec7348790ec6d25cc53f0738e90694ee416f73970829114ffea449145f5173388676c01501673
- TLSH T1D611B7855F459677827747516A3FE727F08C2CE822B1411A6A89503A162E065820620A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
- Size 932B
- SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
- MD5 5a8f82ba759b01fec7dbceb2c7287d6f
- SHA1 dbc1d49775f1487b5cbf9b6ad7e67d10e831a1e7
- SHA512 b82bcce803f5206e5c081e71c76ca973d240f687b5a4f9b09521c7618c6239683afc01a3115ddd93e58be299371d5815231bc9714a306c06abdabafc3eaf3132
- TLSH T17811F7DB0298B579DC3745FA31A235CACA6B19202AB50BE0074CD996352F8C090CA38C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
- Size 222B
- SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
- MD5 c590faaff78866c962af44074a2da1b8
- SHA1 418da44a933e3ed87a68b4ce849cab2c7917baf6
- SHA512 c5185d1822035385753eecba19f278ee8adf06cb15424c44ef649ca5b77c728c9c929a91f5391992df4144cb0287647063762b15f79a47c39fdf86c2a673666a
- TLSH T190D0A7D2C861442C43605AB56D61621D480DB914BB425C007AD924B81CC5B469C56698
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.html
- Size 223B
- SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
- MD5 688d1a825aabb9e4cecf9945f1b5ff3f
- SHA1 c4a88eb2163f4e8d859053d2b15764f74cf0991b
- SHA512 10a92b43ebfd3955339231488376ddf1874f430cdcde71ec295923cf5deba981493389c4515dd09d5bddf56e352bcbddcdefc68039f778952f9bdf577827d11b
- TLSH T184D0A7D2C871441C43705AB56E62732D5849B9047B826C007AD924B918C5B47CC56684
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.js
- Size 2.0MB
- SHA256 79f8215d03832cf14283a73901e5419dd3a4442259282f4619bf82883c0e71ef
- MD5 04c364b9ee8542d4492edb1ba9e7e38a
- SHA1 da907181395c092a46ad91295b26be2c4a68f45b
- SHA512 8be2ecdba291ae15079de6a261f8a724d44b5b1fd6e17aaccc8e34aa5df025434be191c2fc84b0b2603cbeacff113a110c2795ce61305f7a4a710244c76df6a2
- SSDEEP 24576:ThSqDKMYKUXA1wqOU0p/xpttld5hbttAHz8V3+f6w4Qc9HwwwwwcoD7TE:F7hUw1TR0dxDZ5hbnAH7lfE
- TLSH T1B9A5BFF06193FDA219E50D81406D3F20FD7C1CDB91188560F54CBAC6B1ED668AE7EAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\205c6344-6881-49f1-856f-24d8dbfa430b.tmp1ec61f0a-01d1-4630-90b4-e29e7d93fdb1.tmp
- Size 27KB
- SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
- MD5 ccd9f3e1f74f2028805e3fea6ad9b934
- SHA1 f5bc2ea0c0c3d89c7f37792cc43fe592f8bec748
- SHA512 ce32e58b002e2f7fe1649ca2ef4dab2a3ff9c738c11f010a9a837a5e7eb338d03672c325636c87659fa19f75625cebd9dc2602b428bc6d1e2d0799230d81c824
- SSDEEP 768:3F1F0kh7RCnrrh1q9i1coUSeJ1xM9eK3ZSk5:3F1F0k9RCnrrh1q9i1coUSeJ1xM9eSZL
- TLSH T179C297B2D8081F14E698B835EB7B9C0A81F8AD2D1439250FB767BC507D9F64EC983746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\292d6fac-17df-40e5-b533-96d54310c91f.tmp676e4a54-a9f2-4cb4-be3a-fa32b2f34f8b.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\43ef8661-98f3-44ae-8c10-8041a3d63c07.tmp8bea67c5-0f78-4637-b15d-dbcc5ba5a89c.tmp
- Size 27KB
- SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
- MD5 20592c0bbc8cff757ec1ba508ee277bf
- SHA1 7465050f95649e3bf662ebad10de27a9bef6a3dd
- SHA512 c50dc6adc0aa4f0b80bfcc9bfa774c5d1a14e1cd3e889c924d3bfdcfa16c96b34f80dfdadde662ed87c0f33b37f59eaa151706e949641a24104c3583fc962cbc
- SSDEEP 768:1VUpNy4heVwCSvh97oYHSI4R7VIO8BkM8s:3UpNy4heVwCSvh97zHSR7VIO8BN8s
- TLSH T149C2FFC2C8C54658EDA95F3460770D3D466BBFB9FEB8B54E8A8CB0717BB32C20426546
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6c1a32c6-f659-497e-9328-d09485c286be.tmp039496be-78d5-4433-8603-b504857b8a1d.tmp
- Size 27KB
- SHA256 96092642177bb660dd55afcb6f5ac91a4facb6b88067958b5580b3a1d5cb53b2
- MD5 0e5e10ea3c372a4057dddd2e69854d08
- SHA1 4e9ca797f08f30421efe74de967620ddeb52ceb1
- SHA512 4d4181f7dfe399a4b448c353f7a08988d3345a4d249211637a57fae4f497831f0ef34b984d77dfd5ef0dab963f0b6b8bd312ce56e0f6b812c08d4fc937505e16
- SSDEEP 192:Ok5rpG1oCoC8PZcTgiGdGnEBnB5BBDSZpZq86Xl2rEw3ksUH:Ok5rw1od2cMn4nSo842h3kn
- TLSH T189C2213277966C0ACDA518F8E163CFD4697EF9594B32E6876790E436D90F312C843893
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\981f3cad-bb4d-4c9f-8a42-1d9e2a3e0c89.tmp08deef3f-d26f-4cf9-b71b-ee753a6c9641.tmp
- Size 27KB
- SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
- MD5 ee77c4eb6b9e8b98db1acf41ba32c064
- SHA1 c44316ff0f61c9a7f27f72bc31925ab992de4f6f
- SHA512 ac0d2ae2afeeb0d82f75e86af6580c804c53abe3701734c7ad5e34bdfa4aa9144fc293a4c3d32207d3f0c70b9e3744ed8bee09cfbf96dc8ac825734537d04818
- SSDEEP 768:90haQ3glH/EKEi+B4MfgL2BYb8Ohg70q6XnKa9UgEUjJY99yVnX3akrtSX:90haQ3glH/1Ei+B4MfgL2Bo8Ohg70q6m
- TLSH T1DEC286C2D8C00264EC592F75257B1D39112BBFBABDB8B24DDE4DB1757BB32D24126A02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e0507029-bf9a-4cab-aec4-9887c35d3234.tmp8c65b387-9a82-439d-bfda-66fe37f54e34.tmp
- Size 27KB
- SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
- MD5 1f17cac9ff7b6851ed5bc95c2625596e
- SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
- SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
- SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
- TLSH T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State9d7ae18e-9ea0-4541-9ddf-df88736f8225.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 10KB
- SHA256 9c562892b3bc2add4016707e8abdb97bccaf5a16e9b1360f64cddf3e01350960
- MD5 104b4e8749603af26084be049cebe4c6
- SHA1 09ee98bd60e4413f9ff6bc84a4070d388c0ef7bc
- SHA512 c36bab2938aa90e3ec2649e7503c894c2c10927c1ddb77035ce1fabdd45472559cc4a7d1172794d23300529b62969afc6e9cd8c5d41199900b3edfcb0d13f38d
- SSDEEP 192:hJ0GH4WjzhxlOCYkXMd2uGhBWKEJE+wObnwScaAkdOXZ36+WNO0cIMSCLyIsnMaM:fXv0/dMn/oA
- TLSH T1BD32334A99345EFB6CD29925E624F627F2E85020E1616DD8B7F8883C19CB1DF61229C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences2a793511-bfb1-4fbb-94fa-28dc7ac72d8a.tmp
- Size 15KB
- SHA256 33d3502ba4164a88780360b31d87b24197677f1efa0aa739da22eb9d4606f72e
- MD5 b96ffee088f97c15ba956b76a6bb9ba3
- SHA1 7f64a9ebbbfedf849f4351b09afe874f5366bfb5
- SHA512 28382593646087619db02f66de04154ed7c1e75a147e95267b895215008cde83026bfa73c657eb32dbe596033b21e2ed32935a716e42635c1b0ec24e486485dd
- SSDEEP 192:OJg7VpGFU5ZLV/r3k32ZW/54WTflPzZ21WRQ2jzhxlOCYkXMd2uGhBWKEJE+wObg:z67Xv0aQSldM5VqeNHw
- TLSH T11F722156ED315EFA55D29D2AE560F33AF2E84020D2606D98B6F9C83C14C72DFA512DC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences47a80bff-05f4-4668-96bc-281ac24489d9.tmp
- Size 15KB
- SHA256 9440d766fef188fed17cd268b3b88af4673f0916faa1d8e79ecb456115f26ae4
- MD5 776da5c1830df14d4089f6d31a14405c
- SHA1 003bc673b9ea91942f09865189833ea55b4e60e6
- SHA512 69069895a076c527b2087e6aacff5813fb1b536fafa06423e1f329f02f9adcb829b9b33f46ecd21d1bea226c15c0a5c71aa03dc8ec78b9ebd042440ea2ac7d12
- SSDEEP 192:OJg7VpGVy5ZLV/r3k32ZW/54WTflPzZ21WRQ2jzhxlOCYkXMd2uGhBWKEJE+wObG:zc7Xv0aQidM5gRqeSHw
- TLSH T135622156ED311EFA55D29D2AE560F33AF2E84020D2606D98B6F9C83C14CB2DFA512DC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences4aacc35a-cccc-48d1-9d6f-b59706bb45d4.tmp
- Size 16KB
- SHA256 6a37977a11d7860b43948c01cf24935d5222a3499a5f0d757c846694048336c1
- MD5 cba114ced32becb64675c955eacbb3fd
- SHA1 39f98b907df63fc69616b9eb65082871fd46dbe3
- SHA512 4e2fa395766a0951a37bb1a55dbf4d27c96c40a29d7d2860bd1c24d26361871f151c9514ae229b2a0df9a9060e155683a4aa09230ccccd236fc151581e9d16cb
- SSDEEP 192:OJg7VpGuU5ZLV/r3k32ZW/54WTflPzZ21WRQ2jzhxlOCYkXMd2uGhBWKEJE+wObz:zR7Xv0wYSEdM5VqANHw
- TLSH T177722256ED311EFA55D29D2AE560F33AF2E88020D2606D98B6F9C83C14C72DFA512DC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesdca6440b-bd6c-4c97-868f-f8131569dec8.tmp
- Size 99KB
- SHA256 413f18232db5f6713c302e20d408b10318cd8b25b40160b25a3e8080674f0e85
- MD5 320d164c346856fc027c71b542f58ab3
- SHA1 b1ce9045a7a70258aa17911591d1e1b973464881
- SHA512 f5e2b973a690b5be33914aeb305c9c662a546cf41d439204dbf3d7bd7e24f888fbe7f1534fab8c9aa0a8a723c33c9dcb941aed2c422db9f17f6101144b9b2ac5
- SSDEEP 1536:wX3wMuS8dPzWwBqIRhRcFhRnGRmlzXRxu1RlARcIRR8RY10CR1CkvocXTiR9sOkl:wX3wM4d7DEzFzQWiKWRKk+Ay4GreSxpP
- TLSH T1F8A3E8E6CCCD9FB5CEC88BB8CC26A767859401559FAC5F14A7FE405C038668A207F687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencese595e6f5-5913-4d16-871f-c4f828a32e40.tmp
- Size 82KB
- SHA256 706ac7559f8e1e86f7f7413cfcc47db1617b64493567bcbb2ad68ff02160373a
- MD5 804f8b26473b823c20109bffe4ed461b
- SHA1 f185d0ba9221077b23cb95c1ade63eec05a39fc8
- SHA512 959d90a0583352c59795371612e30bc603b923cc6b5ac8db77196b2c1101f679c946d1214804ad72462fb26fd3af9b2ac3b78931bb9d642a13b8f2ff3e890f50
- SSDEEP 1536:fRhRcFhRnGRmlzXRxuIRlARcIRR8RY10CR1CkvocXTqR9sOTHpiRkRBRjPRfRzRE:eFzvW2NWRKk+Ay4GLWP
- TLSH T12B83B6E6CCCD9F758EC88BBCDC36A72B959400459BEC5E54A7EE805C43C6B85203E687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 96B
- SHA256 fa44c768632b1d11cbaeb9baedcac81ef40d284f09a6806c06a9a1ed2d212cf2
- MD5 594c7a2d2812ecf9ca5d008b62eea9ef
- SHA1 ea13c1b14269b78792a29a2adc32a725c0a5c142
- SHA512 491703e84f37e1e1bd1a2da2156d4fa7ac45189244d2b8a598f12f0b12465afc5ada9acc26e8ea3ecfae67ea910bdb2f9e008ff96ece147caea7734b77d25c55
- TLSH T157B00252451D1566C550CBF123CF51D433703D265393034587A0E3FD9DA13A162FA55D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 51e17b01250e67c4bd73c41c912479df3c35a82e7466d851c55d27b9af16d8b5
- MD5 74cf8b6b671ca732d13a89172ae3149a
- SHA1 51ca342f5515f29c891fc97f3a028ad0ff80191f
- SHA512 97ed6a61ad0034070298837f9055c98e62e2da4bb57011573f9014f49fcfefa2948d6012f0b2b6bd7fbd3687a39acc66dc41a13b701baaef5a059289016e5413
- TLSH T182A002110260C124E50012B42D4197D91202BA29D5400363B6E013969CA00545F12144
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw
- Size 477B
- SHA256 5d11eff8edc3e436077cd3c4d77bc468d67f9bbe5c670d5b57357639d0a79bf8
- MD5 e64adbc78e6cb15d5dbbcfa493310c39
- SHA1 71b2a2dff5b07fbe505ef6a017677adaf21b9691
- SHA512 4bead4aa11716943097a4c236976282393e6e2c93cef7d8cb54d11cf01088c41a2e6e7722a53fcf112d5fb16a2499c52e0c45104a83acde9e9d6956be0265507
- TLSH T1B0F054C26607F01B4ED65CBC7B1D2AA22AF60A2D390C17B00601519F89B730B09C9E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw009096fe-3b90-46c3-ba65-097d4349ac34.tmp
- Size 1KB
- SHA256 f4baae999ea99973adaa02f871651a806de1c22a809b41d268a3eb454f14fb3f
- MD5 b07c53fc839ed3fe20600551a21b148f
- SHA1 efb3d09a163ad2d6360f2b0c7227a0d9a090421d
- SHA512 dc2a4e005e93302b3f76a741663739bcc14eb3551b825177ea5e16f04177fa6fc67a4309fbb9813546f339f0cb20d3170536a7efca8e0fc06cf57243dadf90ad
- TLSH T11D21D73C2BCAF13F6882D23962611320D01AE3E5AFC8B0CA265790F02B76375526894A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw0282b87f-7a7c-4d35-8188-ef4bd881da8d.tmp
- Size 893B
- SHA256 cfb9597baa78f73e929ed2bd61ee2dc176050af3ae89ed71dc31871d3825ecd4
- MD5 929c0284be963b26e10330d3c2a7c82d
- SHA1 d3aa8b8ff4847a118b246d7a6404b8bef6a916ef
- SHA512 d257a0d403d8ebc8c40e3b93e64a62750b32d7fbe7204c408f7b0729eed3b23da51cf19ab704b85af9f9c4af456f306ee33fb305ba84bbd4f5d9135d07e3ce7e
- TLSH T16011B721859C9DCB1AB3E7E414EACE962F44151FBB84CA918D517D1F01B864510AA0A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw04856dc1-4a8e-495a-8702-407c57e8422a.tmp
- Size 861B
- SHA256 4eb1c4a3201f1d522839ec9b9ca5d93889496270bbd989811b1f20c6b184ff3f
- MD5 2ab36797e34df9c038a54e76987f205b
- SHA1 71c78935fb25e057d0e955fdc15398cd2096116c
- SHA512 ed53417fcc088b1176099d3085e875bea05e3a44a3a5d446a156efd5f92f2d2d015892a5444de863351922f23d96b9e4e5db8bdab64efd64fd3d0a51d8c51481
- TLSH T12E11525EA971D0627CF857AA8C39A16080FE06ADF2940F5759D2628A190232580858CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw184a80ab-0ceb-4a7c-92fd-968163eb08e1.tmp
- Size 1KB
- SHA256 0fdec4f138195a2837b6a83990c3792dae467706429bf3ae4d048e09ae907f90
- MD5 a2317e1367e699ba8bf76a3a638c711a
- SHA1 bdaf1fd8534ea0f43ba6c9c7b8ea2a2d0cba1a49
- SHA512 62689f5730168e16f5f1ff05edd9ca2b86a8b58763ceffb8404033ac62de8d7fde87ad3793aa2f71644b5121b72fa22b6122e3214e253725be6b46dc2721701a
- TLSH T19D312C56B93CB641DE74576B024E61B99109F534F12E748871C71D6172C1F01BB5A1E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw41920824-79ab-4ff9-9ef1-d9dba832571b.tmp
- Size 1KB
- SHA256 a8cc1f0f0b2e4fbbbb373b7c81d81c0ee2b7e27476327a6962e598722ade66b5
- MD5 8bb85cc870ff26d793563616885ec9a3
- SHA1 43b9df9ffd0c415f15fd96a9a4eefaf56ed34a4d
- SHA512 742b5e44d8904e5e30c41473cba82ddc3632533f18c7025ed4fff373806cd07c4f109d192c2dafe6fbd93b867052f6dfde2bb5294d63416802a2106b1dbbc54b
- TLSH T13021D8BA53B35BB8CD0D90231E66690081749AFBF4F9A64290C94EC9A022540F7DC711
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw467e550f-c054-44c9-8d5b-0130b8627ffd.tmp
- Size 573B
- SHA256 8ac01d13e688d29458d0f4895bc0f3e98c83307970e7c2875747de8943109b76
- MD5 3d21c94a99fb6b69378609ffa998ce45
- SHA1 4d502f31163d6ffde63c173aa25b737fe883093a
- SHA512 a594359795f8eefa99c73f67ccfddc29e67658e87753054e5c6483caee2a6708f181dad71a1c0bfaced7292ab9fcdfe68beb08d4d000408ac76d32119b789b53
- TLSH T1C1F0E14019EA45628AA52D89275DF043FFAAB0109FEE835BD3F0BDC6B095633146C803
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawba04f29e-e839-40b4-b621-e35625213953.tmp
- Size 877B
- SHA256 ff6beff23d9d92e1860f766ffb79d8575ab2b53faf7e22f22baa6f57dd5ddb62
- MD5 7a3e9c4308769611a406ba37956f0fe7
- SHA1 26a73cd94c9010cf0762992f76e08b8e4474b85a
- SHA512 a106aa9bb26bfa470d487af08e2bfb5003a03611ecae6dbfb3c6936e1262eb4f26cb9f57f4edc7a665142913f8893b137f00e0995188b93d41627e9a24927183
- TLSH T152119606C2B099DBB752FB6D3B226002D5B8138FBED48FEB1A655085945190123EFF03
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawe3400d39-3e0f-444d-895f-afbf8c0c5345.tmp
- Size 1KB
- SHA256 f108a87bedeffa4be57e184b88158c2fe0258971bf5c2fb50cc68f239540cc25
- MD5 dc8c3ac8512eacb774d9479e2232cf94
- SHA1 02c72a75afb403fc6d4c76e6c1f11eca1230a037
- SHA512 59a34541273e7b0a776d1978646503d1916a2e843e78ebbb0a75d79e98af3f8755e42249257568e9c7af3e678298e002abc58e2a769612e43ff429f2e1510280
- TLSH T1951175CEEAFDDAFA07E76955E4837A6545030536CA878D4279201308AC1D5BE2EC0A6A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf16631be-d064-48c7-bc53-c384d3bcbc1b.tmp
- Size 1KB
- SHA256 2580373ea826e1bd6586c8e60e77494b0e7f4b3d2bf5323aed8461b6f55e4819
- MD5 1b61669108452706e0e9e7a25aec6838
- SHA1 f2219f3461bf1bcde223a8c4009e56dcb54493e2
- SHA512 789be364bb3321b5cd58ef5e64736b523bbcbb30eeb493ec79773c5de3fbef7b5376202c68c81fac65f63a5b3fdfbef1ffbb8541865e51ff0000dee864b5c3c6
- TLSH T10C21B67ED22468830F83FAA068D204B754B9E6317AD53AB4860E74160DE490F67486DE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf40014ea-756e-4b0a-b901-9a21de358fa7.tmp
- Size 701B
- SHA256 7a63d115c262a9705d6db0e7dcbccd6b15eaa4edd7caf1be8e6c33b18cce4656
- MD5 dad107b36bca4f0c331ea65d93c8c575
- SHA1 ac656e7cc5444ca47a3be8c72e44b3a5105840c0
- SHA512 68fe74f768dac421020342b192f5dc95af8c9203c66a207f6f20169230b5ab8f8613584cd5bfc41c22fd0a47b076f70f157188a487871e0a9dd5bceabd835463
- TLSH T1D7019443198C07073DDF12DD3680259C57F823AB8265D2B1400E9B69046BC689683CE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawfea8f4c9-244b-416c-ac91-9ffcaeb42aae.tmp
- Size 1KB
- SHA256 97cc874645dd653e10090562a0d16e34ba75bdd05cf7202f4fe88579621e1413
- MD5 006649c1aadb055b940433175ab0ab97
- SHA1 b24aa8b045ad9e603776d352ba6f05799907e3ac
- SHA512 3e4bc939073a4715d67d4476b43ec326f8976702c0c04afeb7e2cb21fb0a0bf338996e02b9e4e3a19270f64a6bbb5181e7635bccb87a977b59de7dad852be845
- TLSH T1CF31EA661F12155B307DB42503A8590BF65C09A33E6B33EF23444D2E232FDC0417365A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw
- Size 14KB
- SHA256 443e999ff0599b907da5eb3a9c4d245cfa366d623ddb1fcc07483f3bd3ca0243
- MD5 0c8a6cf1c8c583422a2cb7ad577083c6
- SHA1 bc2d9512897291ff9d5504628e200f6ba6d181a3
- SHA512 32c550dc9f7d45a1ae919fb924ebed5439a118c27f2d9ff1f82caf47c210981e84537ad21c0ad3ecf01ae94e4eefc50ac69a2733b4febfba2662597a86838905
- SSDEEP 384:uyUa7ZRkPdUNMy/s3+/XFP4Dwgd28cEMsciZVCB7W+eFz:u9PdUKisYaDqPEMWZV2baz
- TLSH T1EA62CFFA621B1EA5CA01FE94462D7B9A09D0C6C8D20A1F5DA6D14C6321B3D3DC9FF09D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw
- Size 477B
- SHA256 3a0f197bc5a43a3a18bcd80b33ac470e49bbb91d602f99a199c622d7e5d16395
- MD5 1d7391dae3a76c4338e1c3a7b3af3a83
- SHA1 4bc46e8ac8ca873a11b0a1a7f5768636356f808b
- SHA512 438337f4e0d1dd56b69ccae9d63ddf9d814bbf585928be9608d72d2be0146f5032629b6f3a4815105512db89232470cd58b270dd44ccddf4b2ff7cb7011a1c83
- TLSH T11EF054180F5137B0301E4BAC4D8D9EEE1025739C87A46E70720AC9B7F090CC0D8A74F6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0459c14b-b9d7-482b-af63-527c1b2d49f5.tmp
- Size 11KB
- SHA256 692bc24618ca314a208fe1c5f338add41a7c5f61b02f8e02d7d2031e1143df65
- MD5 2f180d78c2db98ed7e90ea170fd3e4ac
- SHA1 362530f99283e795874322dd862ae0164f71f3d0
- SHA512 36c833175f23c8365f14acd07d01cd62753e4b539b00ac62c46386bca75f431e3a18b4aef2b7695929d0e10a4f0ecb08e36e05f3fc8e928b611e2134d7fcf489
- SSDEEP 192:Y/M6SKeDZzVWGxp+aYkQaDVft1c4S4Zl4eLeLwzPZeiNq0sC/OrQ8OT5mLrTA10E:YjSxUGxp+raDVft3ngONHsCmWmLrTAGE
- TLSH T1F132CFDB526EF262BA24D6B3D8657DB0018633290359FD24D7688CCA480DB464E1B6E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw07b7b519-fd6a-4108-ac09-5bdad78876c9.tmp
- Size 9KB
- SHA256 113f78d536544c497da4c8ed8652c67e04668ca2b78effff9ec706f81592d45f
- MD5 6a0e3e80712b778a9d23bdd848a97883
- SHA1 fe3a8d9dfd35424adb003f143bb0bb5608de433f
- SHA512 46e881f0eaa94488b5b2b5c964e72079a3f0610e79b4cbbd79080fb8bee205c6c91f45d28abecad40f85dd17a6c64f1ed03278030f5113a5cb0f97dba4c1b292
- SSDEEP 192:vGDB5m0elhGQF0n4k5MMhHNNF9YWIiPqmM4towi6+qfIRmXXALS10zsw1:vGF5PelhnF0n4LMhtNF9jI+hto4uMsSG
- TLSH T15612BF1A3C6FA30A9AE9F612B0749B15FF798C936D939210C824B51F733163C400A3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0851ea31-44bd-402c-acbd-7d93a6173db3.tmp
- Size 11KB
- SHA256 dd3878fd5807a6dfe8b3464e0669aa725df52a4d9db7e5c41c033bc938d69a23
- MD5 c29e00d353f1adb5fccb624bf447f63a
- SHA1 200baffac86ec9541778f825d086230b155c1651
- SHA512 e425759ee8446da4de2a2e1e3dc96c699bf7965b647c332c648f71c7de748278e7fd1d0a8fe4c5c2ff112654d141578308f09feef7a293d2f9ae41fb3cf47a0e
- SSDEEP 192:2pHKPP569DOImiO3L0WqcTnK1EWNfotmu7NKpboeayqchzDKRE/uLnSl:mqnUROIC9KNk3KNqszDKRGurSl
- TLSH T12332DF619E23F81D8A4C33559194889172CFE43AAF68E371D0024E7B16F5CAEF17857A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw094680a5-ecc5-42d5-84bd-0a1cf2b0a177.tmp
- Size 12KB
- SHA256 4444374f6c12b78c0c1680baa1210e2b00f5948b879b8f5f92cf434afa574161
- MD5 c3d8ff434c151b58d2f2aff2c72e7ca5
- SHA1 d2c9832e5cab36f1eb8d747e7c0c08f3a2d9aba8
- SHA512 5d999334621bb6e00f64e2ca6a52314ec6e3892b53daf44f4c23abc94bc4ddd81e398fa877fd320c3b1f06fa79d135eef5ea58655eecd5dc6a81a006c7148e1e
- SSDEEP 192:IMcS5DRqCXWoo3bp2xSw73bArLOd18ktYGk0pcigl4tuhoPjuMph2pwTcfs3PZVz:IIHmj3bpcdLA3AttYGk0pcCMZwX8o
- TLSH T19942C094B1F8139AB51BC388DA0708DA7DD8945548324CC4BC1B06679FC5D65381E33B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0d8ba734-2488-42cc-8efd-bfc769bd5925.tmp
- Size 12KB
- SHA256 65946fcca047cdc53b04df495ec029f980bf94a959cf0005f9a208f9d84f60be
- MD5 952f64b6d6288a8e309b3fbbb8d69b34
- SHA1 cc5d7d1d4b715920bf89cb81adac42bd79d02e95
- SHA512 3337812ec1d2baa4e4cf1815361ae437a70d63e6ec93b7a1e60ba2dd0b6478c659b1d08c3360434365267145f52678fea887a766837d4eb21e74001eab695607
- SSDEEP 192:/N/7IoXOzKRNomPjhBE+3/827F9KZoePB4E7vojo1mi5fELQSKeq0D56HBjMvBP8:/NZX7XPFu+P8joNUs0nUYC5QM4868wl
- TLSH T1A042D0EF7983911F056E7D5818C9FB66C1A7070222277F4527D9EC50EA72A1142CE8CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0e26ca2e-50ee-44ea-8b24-ea2e41563d34.tmp
- Size 9KB
- SHA256 f3768524b636307a9a8f1063856e7813d5a10405fa710b178e8c7a78983a26ff
- MD5 20b4567320864109d6d75ccca1acd925
- SHA1 cdbf026f40b9260466ed56d9bedf21d02b1a9c4c
- SHA512 083599d0791e2aa43527eced0a7851373ff21efea2632b5e4a74f3eb94c52985d9438fba6abf9b22b3c48a1c5a1d4cfdd4c7df6f1290b406392332264dea6143
- SSDEEP 192:LPeZTKxhUhq1m7Sx8PxbC0xwkPsdbH/oAqAqnh678mh:LPedahUhtW2pb0dbfzqra1
- TLSH T1FB12B0D30290360B17F2E025F1AD3382ECDFB62DE4A857C3A17B364492F546A7935D9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw107628d1-0657-4662-a27c-f192d2283f7d.tmp
- Size 9KB
- SHA256 5c4c1c66f28fbcc46f094cc4b33278f46f61236f4169246502b7aa139f91aa74
- MD5 7593968c78b3a195fb077d2b08798276
- SHA1 5ec97a4a50b79b4b77df998ed6e7b6cfe5d801e2
- SHA512 87217062d9e839ceebe97269c725484e5305fe48c561b1240e473daac47675e2917974a5dbf534ce3d27696b9f3fa4362c1e8ab14c3ce6bd8831216c8e27e3c6
- SSDEEP 192:OF0tERbWbbp0d2nHlIVqQo338zgkdC8N2JCJm+hY:OHxWbbp0dACFzM8N2Jom+hY
- TLSH T11D12AE0FA6F17EEC1EA93D0E142B065E7E5EBD48EB04E51849AE560C007833AD9A472C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw123105c8-af80-4935-8abd-17b9785ea7ef.tmp
- Size 15KB
- SHA256 c02ccff719a4780a3c9fedbed440301e489a8acfbbd955cc77389f85af423f16
- MD5 5438a1577b79acbd2047a690aa7fc8f6
- SHA1 cc0b448b15f3e8eaa670596537b4b5519c9d9027
- SHA512 7c49f33cb1b8c63c3b870a599cbf7ed46107f2899c6ae2e5945d1c243235cb2c22c4b6fb5a6c09b98deee81839b050cecb87e2ab1d458f3c640afb2d3c77cad2
- SSDEEP 384:alQHMXqsbvkasnrUq+9pQxmMFse0Ou9IE9Rol:ABaOkaYrUX9H60Ou9N9Sl
- TLSH T1D162CF4259EC745693D8E8F9D83A0B7BE3E21CB42619731C3A121D8FF9286D2C36C567
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw124c9d98-3277-4665-b559-2674877ff37e.tmp
- Size 10KB
- SHA256 08aa3886b4b640444d9e9d40eb98f20262e602cf49f8e8199d51a6f29a9e05ae
- MD5 fb5a0cffc0dc079bc03158b486c483a5
- SHA1 c6db1ec4ccaa0de30970be4a4eef5d740580af29
- SHA512 929ad3b90a1876d06c6818d184effe98e72bca622b65e4d9d95aed5255be81a704645242af32c015652f4af5bbfbeed17abac579af0c34b96e1da5408593058a
- SSDEEP 192:EpuJvI0utHwN7xgzHAEJ8hajXfhVY49Oggpqzbvmv/0T7Q90H+f0h9VIk2qPWb4V:EpuBXBN7EJEUVYeOgyiq0fQ98Ma9CZVy
- TLSH T12822BF8E00A05B25E97DF1C5ACE5CFB155D0738320ABBE700B9C50ECD7EE66B7941294
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1371c441-8d44-473d-be68-6bc766cb324b.tmp
- Size 2KB
- SHA256 36abf84c22da5f11fe7f8302b7babd38a6f2fe1dad8cb377dfcd6b5ce186fbc4
- MD5 bf1b219eaa3675b9abae625a4f117343
- SHA1 b7bffe5ea7fa7bcd5a630b11f72c62dda089310c
- SHA512 b56c844a1ac2b6f18b4a278d98d8e805afb9405d3b0f0d3316522d0e5606c02865f350d3dbac27b320c6a2b51761b2418ac7913b539743fc7551fc766d51bf07
- TLSH T190412D444419319F4FB0EBC735752E81E195A6F0566CD26F98BE32970C32877E131911
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw18125b32-908b-4f25-83c8-bf9f94b4ea3f.tmp
- Size 11KB
- SHA256 b5a1608c59a48572ea68cffbf0418e576b0ef4bb7a86cc68828c5610070a444f
- MD5 59951c8f28d5fcc614569228945d75eb
- SHA1 563e70addd5dbef4469fd62e868488e9be5149a1
- SHA512 d0b2326b52f522ef801b2462edab720e88d95a1ae3a6bd27176a07ae721f79635642f258b87e7b6155b9792473ce5fa46f55a2f5de9aa8bcd130bd1958a6dd8a
- SSDEEP 192:H+snBLQ/Ab+DfkSbbWhsV7LJxflkp5SwQ246+NLEWRS8EJQMa3LoV8DLirE4knhq:H9noA6/bWhsV7P+cwQ36+NLFS9a3L34f
- TLSH T13732C06C779B08FD23DB3E1BB15912C66053A88601E4199673B53F35408F592CB3C746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da410a5-1dd5-4e50-b781-d28eb126cc60.tmp
- Size 13KB
- SHA256 d110a3e6da1e4a86adf082706cc5082ab3f10514b040d917fc60c8a622f51565
- MD5 b33ad9a6f8b81ce5b0b104e30da72192
- SHA1 4c74bbf018a2914d9831b6a680baff65e149eca9
- SHA512 8ca35ec8116bb337809fe5a6c4ef51971be55c267030d4d3ffbc636d71af35e68d12e3dad1a701113484033250c8e583daf9711658def61b5110980d6e0729fc
- SSDEEP 384:EnrI7wpxqeVYCAu2P5OpLdVfqAKDgRGH1e0R50gX:EnrTY5hOpj7K500/P
- TLSH T19B52D09581B2BC0105771969E30272BF1C2C04B7C2AA13B3A0E3769691BFC76F95C29F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da87aad-e830-4016-85e0-28ecc5d5c70a.tmp
- Size 13KB
- SHA256 e032468e487068847a7eab2c62f1beb1089e05e06fe3b922657c4651ccbd6f96
- MD5 fa4f85ad3cfa2b7ba3bb5ea44d70534f
- SHA1 d14eff41df98e8ad1472d8e71a22b1346eedb8d4
- SHA512 8fb78f0eb51a9a729a15df4d1b53150d0e8c2373f8a9cc5af5ad99d568cecb1d98d39d3dc4b920b4affd33ef8a090b044d66fa51a6d2d4d246877f0ee3222448
- SSDEEP 384:5o548REH+dqXliWzIRv5w4A9WWYrCGBDaWLJnWVfv35PSz:c45HtliWsLBrT5JLJnWhRP8
- TLSH T19B52C18ABF1A15C3701B55AAD26967420974032CF85653F7337C89D34FA79290CF6E4E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1e3eb31b-071c-4104-8edf-4fa4702f07d7.tmp
- Size 16KB
- SHA256 f8a2e5fc29fe04b73d606f71b1ca4238c877b9e9afe6fd5353b1456f7e633b8c
- MD5 d2114e4f00104885485d2e374b74b879
- SHA1 3206ef5cde46410af7f7d87f676e38719092d990
- SHA512 da89676785ee5ff1003cd829c34505e4edf6b6de1706b27c42db449fe0ee5e69fb2b6995c2bd0a94ae53467ea7480d1a05bb0c06176dcda618a5fc079c0aae9a
- SSDEEP 384:yh00M6uSdf1NhDJgLR6hYxaLlVjpz2WTBMgKag2DyvZ:yh0j6uMt1UAVjzCsDI
- TLSH T14272C023B50E5FE4ACE54BFF400B59B5C9E9B8C9003DAF8C52D814B8D2C6BCF5254859
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw269c7208-fbbe-4738-bec2-f26ac5de5ae0.tmp
- Size 14KB
- SHA256 cca52c70d55ad3445d087c1132b0be18770fd25089ea21d769e659594ced8036
- MD5 aa35953bee263d72c8eca9d3d1a292d8
- SHA1 c6573d91a58cea6fb4d6af2f537360451638dacb
- SHA512 2d159041ed430e25d064b7eaaf2de7bebe6f6f5a0b0553c678447ea7edebace18522abfb4ea7b8847d5d685dcd064d8b80a65ae60925bff708386b6ed1171318
- SSDEEP 384:WSHfWBA2ZjoChSvXCpshiwaRqscPy1ne0TW/6/SJG0kGHbMpq/HzhEt:WS+ak/SvXCpOPscPEneQSor+MmhEt
- TLSH T11062D0A0E1186314B1D9FA3EBFD3EB4213595BE8FA720DD50A1777CB8E23543A512B81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw287967d1-1766-469c-a9b8-f2a43647334b.tmp
- Size 15KB
- SHA256 d9acee6217351ce861cc87f5888a6b1664d1b59d7800849d71d49933eec44f08
- MD5 9a655aa0f44581eb38826f7cc6c55ea2
- SHA1 b1ce4969fc1d1ffa1d952034f318b81f1e0a2662
- SHA512 1ae035538afb46ff542925e2d1b18936000a97bbacb47076c73a0a6213b2c6dfc6bf4eb7baf9ca88f4641e38556d4c2fe0ec2fee35f97ce673b77b6829f34c8b
- SSDEEP 384:xtycB4ftaCdSG4lxpMZ0ywAOITeOVDcMZnAfvA0/77ubCoiaN:Dye4Td6pNy7beFMZnANz71M
- TLSH T17772D0C3108EC61E83BA215F05A38BBFB4D01CD6D196A0916893FF2DB4F42854CD6B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw28c0e06f-6919-48b9-8462-2bdb387c2968.tmp
- Size 10KB
- SHA256 cb1371c8b4306af27e4818b4f2edaf4f32748559fb472ce59ec877e2b1797bc3
- MD5 a9e7c1a0c7250ff5e33272ea58dfd5f7
- SHA1 d7abd99933d2490f8083b23e02d34498f12163a4
- SHA512 2da7208f2564991d94d9b4f531174dfceb4db1f5143fad6679ff31f8b240d206efd86dd29980a57516ed582c1e6cf80c933ba824015ddddfeb2b87cedc1a9d9a
- SSDEEP 192:L5LLVJTNYied/w9CcIF/JtdVEke5Jruc851jJkTnMnYyg5vwr9wIixp++1mA+9F+:pLVrc/W+/Jtfle7Jm1syi8kn3+2
- TLSH T19F32C05B31849B831B938CEA12A0DB80AB158BF4D537D39F5E799B04294F838CD3E6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw29e853af-1bd6-41eb-b3f5-f3e33da119c5.tmp
- Size 13KB
- SHA256 37bf09a9dbd611a90503af8e4d7ce5268c9685a99a4d8c4e8274bd931c6d5296
- MD5 ab232dd439fe353bff5881dadc804975
- SHA1 a8cc9dd0dec7892dfbd56fcf6b93c76bc05c424f
- SHA512 c6fef45953ae3708ca358d591937aafa6088919d19b591a2c05ce1713cabdcaa3664fd73c0701bcafe9f2097784f3ab621797c639b471f0d3cec598a32f01d00
- SSDEEP 384:lWsZXxqu6885zlMBP+D5CooqsAsb4gTmEPRgWQ:5dxA8QzDDkoiAsbNqEPRI
- TLSH T13452D0986BB9321E7BA6C738D7055DA4A3D02ED726B241C50A3C095270DA81FC9863E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2a87dd01-8cb3-480c-a165-c0a39b876213.tmp
- Size 11KB
- SHA256 78c81ad52b4ceac237fe15c7bced125c2063bb581ea5ceaf3775259f8438b0c9
- MD5 02ad68d51234cc524b627560b428e251
- SHA1 9e3ca62f05889917156d63774c793b6b88af4155
- SHA512 1f82baae827b244f5a32bccfda332bd548dcdc255a9fbe96de0966001b56948d2b978da46f76375508f44a6d4f284ef80969b86c319fab1c2bdb3691292a5b05
- SSDEEP 192:awFiUHbs27Gp4plQHPVhNuqWBrnBzmRO5KtWN2CCY3nkgBKeUhSbKw:jxbZ7GuplQHNv8rnBsOsEsUUJhrw
- TLSH T1B542B040F0544D3B5857822B486F68E6047C3DE418D2BF9D39C6A087AB17EE46DDA4A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2b0839cb-cee9-40a7-84e2-5ffecdd734c3.tmp
- Size 16KB
- SHA256 9317d580eaed3f7e92f6ca6f3696134abbb8d4493dde49cfa48ddf89f1eaf4d6
- MD5 e0106ef225923ad591e1936d0826c82a
- SHA1 c81ce6c9965add53d81b684d76d871883d58036d
- SHA512 3d119bb4683c3b7eb9e96c88b2811069b32b21a152a4752c8dc239384c50a925ec99268b2c9e79b375de392f99781bf8292d004e1db89f7c0e35e5be4e0ff1f9
- SSDEEP 384:8qdFUBq1y0gev7XJ66QB0j7ojWOBdNHZgRwl5LoziY7f:88U01zf68jsCOnMM5Mie
- TLSH T1BF72D0ECFF8F3D92CAA920A3389F72098907E37836E50BE457A95C18C5DA5572A04175
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw35cebb36-4341-47ec-a533-4fdb4398d946.tmp
- Size 1KB
- SHA256 cda01a2ff142a8ffc95846f732d9c7cb14dcadc93aa486b8c75806a46cba5c8f
- MD5 412fcafdb13c9cc2f81a06dd864e996d
- SHA1 8c0d5a1abfc01b1543e8c86903316a0b282fe283
- SHA512 cd38feae0371a33ccd893384faa7f742c469e87551ed8ab68f8381df0b7792cae7ce4cef0a59b5f15d4fc7f22226b26f358a00dd8fad42bd8e4c00d367d1f216
- TLSH T10F21DA64ACF966AF7181770B18209E5BF87D0A43D621D620464564ED50739C16B41F84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3f344b6f-bc2d-4775-bb59-be53e3d22438.tmp
- Size 717B
- SHA256 65e253130a4d1bbbb782864100bff6711c86d72482230229cb2f8e712c0f2cc1
- MD5 a32454bb02c0e621f8e3a72f613a31b3
- SHA1 1462ed7e343fb46c97cf7c7c84d20b1cb636e7d2
- SHA512 62d5c83ad960d3d3bb9592ef7e58bad24127551426ed3fb8cf3b104f5c782a88bc748e3ecd976e4c75f6d8e1622f90ba124993bcf782231cc707e46d44130458
- TLSH T1100115036958FB3795DBD2482E07F05CA95C219187F758A891A3F6C08D7285CD1DA548
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3faae56a-0acc-41b2-a19b-058e6570cf80.tmp
- Size 14KB
- SHA256 1d328f7524c9aeb58eaa9fe44cdfb5be6ee313acdeecf028843140f0a1920447
- MD5 b61e326a719b548f3dbee1e818ff3dcb
- SHA1 6646d725865b2f3189ff37db0b24e6206df0935d
- SHA512 ed1745905134b9bbbd7178a9247f4fc6dbc13ea106af5312f4a09fb017b3df8bb7bfb7dff04462cadf9875c28f708407be1a018cd97b5cfd39d3227ac4116b8c
- SSDEEP 192:yDODOavZDdct7uCbgPKGcdTAv+/7T3nMKLGww3Ev1qWIzswlmq3bu1uDMwdlnbJ:yDa1yuCUPrm/7t/w0vMpzs+sYMwd7
- TLSH T11962D1D086625043FCBCD79ABB1DD0FA4A7574D086292985D47D3933B42680976EFC17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3ff23384-8c85-4484-8bf3-451a494ad25b.tmp
- Size 13KB
- SHA256 65a988577d904fb16990e53a9af8a6a69a3874486d6edec04a5a2baad2847312
- MD5 16ce5d497bf217ce13bd73df80b4608c
- SHA1 0558e295d7c8b831be6b9dfe457fe20dfff15757
- SHA512 c15f29d846b8ca39e77b51ac9969d2ad7cd87fd36ada4547707b3689bcba0085208f97d6c0a43ffa5aec475e363e1c7acc0d3c9e13e0e11907d27272851dc56d
- SSDEEP 384:ZEFTCIgIifcxnRb+Ygo8HOV2ujlJzhV6x:CFHgxf4nRb+TbHOV2EljYx
- TLSH T15952E14575F683CA5E88902009DEF415D037A047FEF5E0F3651579F362440E22EBBC95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw410e4022-58be-4146-bcf3-24e56d75322b.tmp
- Size 9KB
- SHA256 e9d01b330399a8ce4c4afa5100a5f68501afb663b4ddba6d7774c3470737fbe7
- MD5 a7dc18073fcce03f60d2b03e4d36bb55
- SHA1 e2c6ff443ea2761a4ef46a0971c67dbe615f84ac
- SHA512 8d18e43fe8bebeda4240bbd39fd4d2997b95de2bca3f0008ec4c8be437475cdf5bfa4d1572b2e08ee7d73581c7bb633a8b93b2f2353c010880ec45d529bb2814
- SSDEEP 192:R63qpVk982nLmD+rkLFw2JnSdkt70HUUpN0Fk:R63IK76DnKqnSdxT
- TLSH T18912C0240C779B1DDD431BC3939FFA9C8AD3F612919A4E52B1469F94441E05371E453F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4502ec91-9b10-456b-94e2-650a776e03ab.tmp
- Size 16KB
- SHA256 810fedee76a1c1987e30bce74d285b2653fe40577fd27166527096a2c8069873
- MD5 9ec743ca24e0e54095696f150cdce493
- SHA1 f8d432ce148f5e2a3e4daffac8064e00cadd5d0a
- SHA512 1d9f36c876fa7c13260fa75eb8b99cb32cb42345c8b132a03ac78844d1f8065548a95b1f9c68bf634d14685fabf6680019b1afbae1de162ca8dacf39a7ef67b9
- SSDEEP 384:Djw2zJ2e8lkgYpZOiMzJpTwVF241HceMRiVXFUHIaTowSuoDsXcpYNAE/2hI+T1:D3zYLl3Yp4Qb2qkfJK+cpYNAE4pB
- TLSH T16272D10A435DE7630FC97AECD017E9734D5CA52693BDE40AA13F1A1045968CF6209FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw470303ea-5c49-4558-84b2-45c07cf9f582.tmp
- Size 15KB
- SHA256 68c5751776c2abdb60b20fd7246a90c5c8f4fc25a8809979ccdc198400204516
- MD5 11c3ee2ac1dca4f9a091946720cfe51c
- SHA1 415ff4c76a4a9df265a4092f1653b053a7de43fe
- SHA512 d58adaf9da24e694fe4b76897127f6387a3a5f3f761ae06e4b2e01e6210096637b41f135851e3b897f927881f2b9207bc99c812a10ef838e04ef86af2c76c607
- SSDEEP 384:IhorlqOVkN/fcWiGsXXE7ye32wB/VeYUzD+:m0lqdleE7yed/VtUn+
- TLSH T13662C013BF96ECFA5D0209A0291A7585854F0F046B89B5277368EEE41C55FFAE3803E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47c5d800-11d7-4e27-b220-596efdb52509.tmp
- Size 573B
- SHA256 61b10776f3f5c7f898e3a204ab0b8d1073e11f0bbd3f9251937026e4e889ddf6
- MD5 6246eea3f312bbf86eaff8001efd185c
- SHA1 f06e02995e739851d0af9dae48efb9fc113eb84f
- SHA512 2a442dc5e6682e2c37020940319abe638777438bfe75c34fe26493f1eae3da070db28e8c99a62c29679345c60210375fb7ec20ff14d87bf15fa08588d1b6eb12
- TLSH T17DF020D20826791305FA1E1997A062E6B1438AF282AD72A4BA1D2BC40EF1CEC0E10348
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47ece6f6-6483-45fe-b255-97554d57f0b9.tmp
- Size 9KB
- SHA256 b676ca21e2e6ad22f773dbc5aa97c6b724cd9d2e3ebd908b8b2b33ff17711d52
- MD5 0502ea3275fdc43ce0849bde6a5feed8
- SHA1 f496826f3a4fe95cc28bd9d886945a2e869ba5b1
- SHA512 60e8f1659202fb18997bdb41c86ee2072c778fc6dc17c914410413b7e52cc17dbf606842ff460e0d4f921222673d5d492fac92c59fd6a9af81c630ad4901fa51
- SSDEEP 192:zEG3mcprkms5gDAsy7deQCKIy88ZJdJvn5OYSs:V9lkms5Ujy7dpCc88pJvUYSs
- TLSH T10512BF5B85142129FAC7792B7C38D64943D75A897FE40FA8FA2109406076CFDC2BEB13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw48dc85d0-fd49-4487-8b2d-82480945f691.tmp
- Size 10KB
- SHA256 98c93c6e6f13d736d7aa7f575a6e080eb84a7b9b43591a4b5478c8391131f5b4
- MD5 c70de83fcf5a139ab535d6c80146de3d
- SHA1 f2ae2967c185c1d162f8a200bd1c817af79e31ca
- SHA512 812c8596331106206dec861c268b5f7552bc2ef974892545fb036e87138dc7687d8883a222de5273fea2060fc24076ff2c7b9d7cc6ac811ffdaad417b574b23f
- SSDEEP 192:qmmiQWn34OJEbNdk9NdrqBNtJMTU8zpDJFHFFpcVlcTNJXIzoJ88BRMxCKMnsib:q81JE5dk9zqrtOl9FlbcVlAazoJLRMxA
- TLSH T19032C0B944B2414770FF0117C6DE3D2C8C752C9ED7FC00A9A673CE49A271AAEAAB11C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw49e2b8bb-372a-41a7-817b-a7b555dadcac.tmp
- Size 13KB
- SHA256 d11f3c7888f8355d2d91d3b7fba8023dc2f0ca26ce02c819350cc6e40103f4f3
- MD5 325984dedef86917d2e6abcf64f3fbc0
- SHA1 93bddef56ab7ff2b762b788dd962e123aba1f83e
- SHA512 6c58587a3b4cb725996d30a1d2815ee2725e78fe9ec034b387ece5ff9182603d2c892880c63d86d31adb002d6f00bf8a9c1f27651d8700232d4aebcde64ce930
- SSDEEP 192:VOedlKoyjd3jDKvgeim5GFByzoNDStbNUkilBKMQpEwFeHYsoZ9Vvd1f5/Dtek8/:cs0H5Tmpi6i+tJU3GBp5IHMNtiYwP
- TLSH T1F052CFF92172C93EA91820D0D8818E792C48F6E6046FF8FFD1A38D97267654BE3CC564
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4c8d321e-e4c8-440a-9425-6ef6457a75e5.tmp
- Size 14KB
- SHA256 787e8aa1cdf121f8c1d7171ddb4474d46f98b133f3dca1878393af6845eca10e
- MD5 c2cb5b68184fa6f726e98059c89f61d1
- SHA1 7c49a27cebe8288c7ffd6e0a53207a7571f6466e
- SHA512 7ef6fe9299248efd96a2a8d245ff843ed893b6be089f4e51dbdf53156fe69a64610c2cea3ae9bd6244fcdd2665c4fc7f1cc3a019dee1936e33e946a9bcb6d639
- SSDEEP 384:sm7dpl3NuPDUc5dFNy8g4ofsaZai21qZ6lQ:TTlMYWPF0dZai21qZl
- TLSH T14562D05C75FDE48470F1211D9F1FB602E9EB980B1EA19AE428E50BD0C69488F77724F9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4d27412c-04b3-4a7b-9b7c-92552649d91e.tmp
- Size 8KB
- SHA256 b2b6cf13e3dcd1bd530eb2cc351fb580acefa648a6385cffe1cf2f90ae02bf4a
- MD5 5c2a8e2893bf75e8c0799941364e7b03
- SHA1 49321aae4933c29d7bd16356fb88ebbca1cd3daf
- SHA512 f0bd65c198f9d47f3e640b838e4d236baf0bff7dc6b8386117de61b7fe07e247f9be911c01e8bd428a91e30f31c5ee77cf0cc897fe2b62be8d7f5e0fae068623
- SSDEEP 192:PEPrwZZQDRk2HbbeSPszdbaV2tGWwG2gdpMDRIO8x9Gt4qvBTY3ciO/5jO:TmkgbtPg2otPjeDSOt4qJTY3cj4
- TLSH T12212BF55419FC6711242AC1546E19CECEF4CEB00F2EEAA55CB6F9CB4A3434F1A8819C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw512e873c-c585-47cf-ac58-a9275e6c9e45.tmp
- Size 829B
- SHA256 28bf75b844208a83e646ff942aec04a4ad4dd5980344ce9d0c5243e69df1fb84
- MD5 26c38799f28fdcc6544c1a24f0063f92
- SHA1 4c2f9f059ce022c4812b555962cc1d37850462e2
- SHA512 d3fde4c995fb5b5c63e1e4bd1b89dfc61d272c2cfa163df955d80cbdc544326c6603310bebdf8de93f579fa0fc325724627bdf832935fcd23bc066dfd3d6bafb
- TLSH T1A40186036D82C2A16245557F42D7D489FAAF2BCD50920B44C59DA504FDC7B88B7E384E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw52f43265-2111-4959-b242-5acb8103c3e9.tmp
- Size 13KB
- SHA256 7a63fe9b2705a142432b3869b768b26efe1ad10b5cc4a0819d53133fa200eee8
- MD5 2474a177d4f6b874a17fed4f0399c182
- SHA1 d937913e260821b492c9e0a2f0c87c0a10f05748
- SHA512 d50c055593ee0e0fe093e9672bfa9fd96fae28478f007650dacadd0d58f94a3c962244a0b97e7aeef31c7840bfc6a236ab355c7c37e90e6d28506ce0e2df7cb9
- SSDEEP 384:g9ZM1+mmhRR78nU2F4UEfx0xEsAKLbTg5rGnMXESg:CE+bRR7TzmE3KLbTg5in28
- TLSH T14E52C0D85C14DA3C79198B82C2926CB296DC2466F54A8ED11CFF55C909C6CBB3F823F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw538a9a00-60a6-47ec-841f-7d36e4b28684.tmp
- Size 7KB
- SHA256 56c40621159c4bfc312e13e83ba7350011955df1eae1289a6fc259eed3822547
- MD5 d2dddfb21a5ffa4eaee51d0e4c986be2
- SHA1 f3f426803d99904f31702b0ca1fc4a090d01f680
- SHA512 f5862e70e7caa72736f6dc8a9a9bd4c5f5100d1c19fea43b0a48b464c48af1022b393e6992c3cdb0c9bf2ff1226d95fe17dc901f753b90c867de7cc3bc925069
- SSDEEP 192:t8UTddZ3G19fW2tN52wzZvrryjfEd+5t/BDq:/KxHthzBrryDEdqto
- TLSH T1B4F1A011075F9EE053CDC101B5AF66C7926622B5ADE04D05E277F802AFD78EC0C5785D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw54b2c7cb-30a2-418f-9711-41271e017ce7.tmp
- Size 9KB
- SHA256 d0e011e1754ce8d27613feb6a8c5282898ee6df63426b9b5e3cf79c0965cb166
- MD5 df0b767ff42788211f228b9293342bd1
- SHA1 34a8eb837e8e1c61344dc18ceff026fd69ab7c33
- SHA512 4472501526ca1c558932e8038ad9ab2495ce9746571e2bbd40ce5f681edc6ac8a9dff0056a78c454afb4bbf46565441c277c29930566fc4c3cf7b587c0212aac
- SSDEEP 192:pfGFuI13bUYVKA1bAVXQHK5nGR8dNO+W+TN+ZXXEoYH/ePiYUhv654:phI13bzK9VqKZa9+TKXXwH/eNUpN
- TLSH T1EA12BFC95994F299C5B3CEB888A048ABDB03261FD4F1738F847198282397CEFD25F556
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw552ba007-f3c0-45c0-a258-a59809fae1d1.tmp
- Size 12KB
- SHA256 f9355a6f53dfaf4199a46e439378c8fb4abab520a6b0373a681dda315313d622
- MD5 d9b740f27cd9fe6bc94ad2870bb505e7
- SHA1 8d61c1bf170a6094653bb7f3330db54748ab3743
- SHA512 3874f12dc9879c4a95edba8ce4054b4a01aa6b56ef92cbc05da25cdd33394c5479c5556f3325b309fb833897c16a899dc73e0e0fa5e137dcd926c8c4ef711ed0
- SSDEEP 192:zWIadUVNz0EKISLwUhMOmb6b/j3Xam6pBOgbAe5WzOMLJqYoENa0Vc//9wrAU7i8:yVaIsScJtb6fHlYOzb0YHE+8Xc
- TLSH T1D642B0C2144FC3CE99C6B6C6C93E41501B54A419623615C915F3986C6DFEFE38BEDC46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56442cee-33bc-4056-9da4-154e669819f2.tmp
- Size 8KB
- SHA256 1445a02aa74573d47d7b59a94c2fc1591b760fc0396a494dfe978f790893e1f5
- MD5 1f94b8d06386365c76db1f07e69838df
- SHA1 2e0974c68801bd1f0a08ad71477219378df78d11
- SHA512 0c9ad078527fa6138d310658b868ee458f60c33d7c8ff7997711249f5a21ee24239dcd3094d5a92a5cde8829de04c06ec1a451be4291009b4ba4efa42b63add2
- SSDEEP 192:v3XGXC5gJSW+VKIT79tzxnELMTMi86rKB7:v3mIX39nELMTf8rB7
- TLSH T177029EB3DA9A005F19C5D261BFFD8CE864C5B8037980D25C11B2064A989FF4A43CF687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56cbdbff-688a-487b-a6b0-d19a6afdb357.tmp
- Size 15KB
- SHA256 7a107f9bf0a138ede1a2fd8c0af7644d371f73091f0e46987eb340be76497bfb
- MD5 7872b97c00f2cf8849c593a4183df520
- SHA1 2601223ebd6e3647cefd4e7366403114529739c8
- SHA512 9bcddc7da1f3d6ea7bf94e8ebd08c8dd3ec4a922b805a65ea37234ed478c82d20371403ce828f26b0a797d6b8404bd215b639e3b59ac13e829410f3726b45b8e
- SSDEEP 384:APRXlvVofSXFezK0ZYiHAuA5hJcaIs/SFrtx55Yv+FvFDsX08:ulvVofvvZxHLaJYFrtxIv+h5S08
- TLSH T13262E147FA98A7FF6398148524970DD357AF693A91048E0D7E339B0B294D7DE47930E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw577836b5-26d8-4c77-b6a8-c5dbdc4b1dea.tmp
- Size 16KB
- SHA256 7e7bb2503735dced6e5015b42d0cfd0d06da35a1a02739d239c7f533c1e6461c
- MD5 6ed867948915dc7fbc89c3373a9997b4
- SHA1 d1df2e8572986fc05b49b621aef7850f5195350d
- SHA512 f3b70b74e3bcee971386c9080fc6de765e975dedd05e89ee1a5a701cc583b94d6621763231c451c701ad6df71ebde1fc777e4b60ab11e1ce1cd1726ada74f7e6
- SSDEEP 384:xCzAEsAWxTEH8z247UI3HmWFx74sdM2kxAwtphM8lNru:xcZxWxTEHALh2Q4snkftphPu
- TLSH T1EC72DF598C0AD736DCF37F60B6339752A7A0E08BDE809AC439C47A438252459D3E92E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5a3200eb-e259-4459-9016-e419ccfadc35.tmp
- Size 7KB
- SHA256 107369821c9109a7b1332e60807e807f0c0fc2e1423ec3358fb91f1181a73c1b
- MD5 d4045a74661a6372673b8bb3df103969
- SHA1 16c841bdf93bc412e7ff93557a03c470bd349f64
- SHA512 be448bcb8bb6b7109483060940e72d27f9f22331a0aa72fe147eee91638212864c33cd59e99603471c1ceb779bebb9e268ab1c002d6621c0cd3e63fc74c40cd7
- SSDEEP 192:YxRwKxXUH/025zysJVpqh1TJspOKAMOV5ef6r32LLR:YxVxXUM2VnJVkSOZMOVEf6r3M
- TLSH T1E7F19F678B9C2A606EE37E9A07D101A90EE3DF08156F6D4DF00025FFC64907CDFA8151
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b6ee9a0-dab1-4c8d-9996-8991b463d55e.tmp
- Size 8KB
- SHA256 f8388d508cb354ab9afa2f1760290334e3c674eb2b345a7dad8f36e3357ee2f7
- MD5 3d2be53d043ca741e8073e623a14b84a
- SHA1 21ba84603a30dc3fe404228797e3d3756154997d
- SHA512 41bd5d0240d72c23091d66fb0fdc5bc4aeb66f36a7173d06ea404d81514b1775f3581c35b7e611f253fa9859506816d23abf73363dd97d088ad1571b87b867ee
- SSDEEP 192:qHZED4ViJ3Yi0fNBrBN4uswaLkixncL3VF5gA:yZdqoi0H4u0klLVZ
- TLSH T10012B09D2806DB163D67C470EA359E456D820B4B0696BF2B7375A028FED5B8205714CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b921b92-12b6-46ae-83f4-ecd0188beeeb.tmp
- Size 1021B
- SHA256 e138ca3a0b9d47e707b1a2b454de8d3ec06e7960abdf70de0b71c7760d2acbdb
- MD5 09847f79845a1fa97e42b3300af46cbe
- SHA1 4d7b89ea82e0e102933842f5a723107dad8cdf0e
- SHA512 ed803ce010447ec41d74d58f343bad377f946d7046134a5a2783aa62898c5a4250319249acaa50c91fbf3db6b854b68eac707a2308c886dc1020290368610a2a
- TLSH T1BA11A852951B06C399AA13668CBAC9355D80524569616F43B003CA4B887D24F4F9A7C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5c6e5247-d40c-462f-b9a1-b98559a522b1.tmp
- Size 8KB
- SHA256 f4bf21fa0858bcf5593937ac269e29b7563be8de2d8a083a25d361da7872b71d
- MD5 af12053dac5e0af1e586192f1753cb55
- SHA1 3f60dcc3d12137284e231fd84b1364c9a5ede8e0
- SHA512 371148ab876f8a90a1974d6ccaad43003402243f0b891b0df0050af0f9cb9715bb2ef65295558d71c3a15e8ae0e78c49761453f31b21bf9a32f7359f2ded68d8
- SSDEEP 192:xDdoozhqqVMZbye7cH4eeSHYazsU+cAhVJz+:xDBqZbye7cHkuYaWckHz+
- TLSH T1C702BF8BBCA50C86824320D6C5FB8E10CC7B443B95FE905634B8942AC5A93BDBF46B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5d523cb7-1622-4a74-b8a4-a13ff13b0e9d.tmp
- Size 11KB
- SHA256 e2a199631426f99e4665a773521e83c2ff92d3500d4f197c6481ad22fd79e916
- MD5 b300a6af0790ffe00d199c2aec46d93d
- SHA1 73318cf04a9a700399a26e7202811e5f0300370a
- SHA512 742522b55fa0ee4e91dac2d9fca0de5043db07bc54b13585a34ad3c7e260d83bd60359a889852c33cc8ab65fe1d7d43d0544fe8b9387c37988af97047ec18809
- SSDEEP 192:tfnTLMvHl7cvfHXV5gJhFMTL8YvNkCdkMP4gHKzGkG3aPwo8pKzn8A6oNERBdvxM:tfTwvK309McYNkMPz2G5yEO8iUBdJKjZ
- TLSH T1BE32BFBFA2F89A01BDFD611CA866510E5E2DB025DB7214570773A4406541F8BBAF3512
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5fde180f-c300-4614-bb6e-bb833db2b719.tmp
- Size 9KB
- SHA256 10a47a430ec7b709190094977cd638d350068424c7bb8b1dbd2da4b9b8ee9515
- MD5 03423ca81d4cad577d65a13092a411db
- SHA1 eb6b67dd24ff7f3116d7232c2cb0713d882206c8
- SHA512 c95caaf179d11757adba5f01a6963fd9382fd1a0a732294dfad4b269ce4afdbb38cb6621d429c945ee065c80637d062ab18fe37e7aab15b0bb4842468daadc3b
- SSDEEP 192:DNhYC3HbvCWDzfKk7sset2YrLqYUZKJSs17KfOjnAH56s1gBXWgZVccp57vu:Rh3HbvCWDek7pq2xKJFK2cHksqBtVF76
- TLSH T1AB12B01BA17CAF7D35CA06B7CD8110E88C259CAD22DEF502FD58850BE9A430C352B756
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw60f155ef-4815-446e-ae2e-03fcbd27b9f1.tmp
- Size 10KB
- SHA256 a1b8d9a1f85e37f54cb791688815400ac788c1b9d00e2e941d24ba78ef7bbcef
- MD5 164b3a9b2ce9ad7dcb697ebea4f77625
- SHA1 901dbd9f9214a42d6caa287143228d4014962ed4
- SHA512 8024c7a3bb10c6514b517ad741889c7875bfae90c95b612f638d3b4d094e8176112655abc38127d73fb77495f31aba5ba3fc8a31a1f742a2a98f487b22d56784
- SSDEEP 192:oEnJqYLrVDjP8UWvpPwlvcJ2c4LUOMI3PG3lWGaeDIIAAbhwWV9p54KjGdC:oEnJlLtjP85p4NNbYI+3lWGnDIIBz7p1
- TLSH T18032B0B322ED1D774FDBF425F01AA285A488F3BD53787E5064277703D8DE64D2094829
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6466fc74-fe0c-4e42-8f63-4f97c8b86b05.tmp
- Size 12KB
- SHA256 59c9c187d2feab582931bf5859b5f40bb31d3de040606000aca356870c4a66ae
- MD5 c213de89e08d8d7e75cedb6d10bcffeb
- SHA1 e73126e2183dd16c1144d09419dd6e31618e6595
- SHA512 69bd25239b8727b40067d1a4c8c98ae04127b5e68a79dfa40de45691847b3e7fefcae71aa7212e6b3188df96b0992fc2ab4a6beb47d296cc80b9f7f2b736dd4b
- SSDEEP 384:UgX8WdnZr3qrmY5JxKdaXOgC5zxrXaMfmZIYaI:BPnZ61gm8xrnfmZF
- TLSH T14E42D0E1A92049894EB6C7F2C8FF4C61B21D6712C4FB981748C143A3DA0FC19A9D67BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw66f7ab1f-6cd9-4618-8132-6dfdb8eb26d8.tmp
- Size 14KB
- SHA256 e014fc75b272f21a6aa8bd6d8c3b8e1811713a35e595f892ec709af6000d6d02
- MD5 73e8c5839b49ad4d5e85691740659b73
- SHA1 4dc525f427cde4da825f756b2c9c611d266ec0c1
- SHA512 b51681320820c693b3b9aacb79805d2eba69de3223b381b4c4e84bdd6ea23c2fefdbdab972b0c27e14ea74072febd848d3cb95a1f5ff965436b68ab97220b94d
- SSDEEP 384:TGl74EwA29aWTFhN5SFDZT0jHEDezCmvi4ugZHfag:TGl74E09aWT/2FFwjkDIZHfag
- TLSH T11C62CFE0AC2EAA3777B52269EDAF633E2877C94451C951327C6E0858117608BA4CC567
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw67f83340-cf42-4d74-b540-021bbdce8eeb.tmp
- Size 15KB
- SHA256 553c54cc1c922185725313d7154e1345ca9bd767b23c9be8550b58d12c27c83e
- MD5 23a5d231cb2ca5fce3a7f847e74eae62
- SHA1 2812cff655331f93544df1d3d84a55d6ebe1a4c8
- SHA512 2afdce2659912fa5e40d4e5fbd85a4aa8be0d6ffc41fcb058d68101ac11750d838d648e65c34caeb8d13fce9bc4af1fda727ed3bb204edde91e54c72cf526559
- SSDEEP 384:QU+mwZOzEA5HCi8sJzGxuIrxv3d8LGR2TW:X+DEEGH38sExu03KGR6W
- TLSH T1E762D1780CB70952CA6DBB049BB398713D91D1D285DC43193847CEBFA1B2E15D8C9ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw69d581ce-a382-46ba-8885-7c409d8e6164.tmp
- Size 8KB
- SHA256 486e64c9315c17d247718fa620299237c069f943c3478716be176a51f8669014
- MD5 1d0f2449bffbbe139ca5ed29f00effe6
- SHA1 3590f796f437e0cd3ba7c6311f609033bac4b6a1
- SHA512 14f6db5f634311b21f6fb6768db4a3bf82de97dc9858f117df7ebc0d1d755aa9bc9ebef770563e793c3614739f61bc64aabbd2bf309b48ad62dd527edccda758
- SSDEEP 192:BMi/2dvQXtG0Ou2JtF2dKm4d82h34R1DLKvazPy0+c+0RBFMsSaE:CY2+L2JGdKm6NmFcWPOc1Otv
- TLSH T1C802BE88E8E7095D610C736410C9FB1E682EC75A1EFC0F5D04A4259FDB53EA0F1662FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fa72dea-862f-4a59-8592-9dfa7a6e1a6e.tmp
- Size 15KB
- SHA256 f7fd8b523264bbdb1b92810d8bb3bb163316591ddd27e557dc3981064bf99f98
- MD5 d88235202efd4f463bb1abc846441dc4
- SHA1 ae9aa1917018c079436ca7599f00675a44d5735d
- SHA512 04733074fc411e64535ac78713225de2f7762c4d3061164087356206125f93a022201078ed26745b007e2eb43bfef8a1c0d8c94f6499c44872b707740e8b5afb
- SSDEEP 384:1geu8yP5VWG4nNzIVksT6SNLdpACfzyKvgrqiEZanJBRBgXbVK:65gGONz+ksJ5PtfzI2isanfRUhK
- TLSH T1DC62E00B7CAEEFDBF1C79008859D044255B1A479FCA3A8247583ED978F7392E9E8C510
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fafdffd-a64c-4c23-a382-6c7a6f845fa5.tmp
- Size 8KB
- SHA256 94e18b5a86814be035ca3f2dc31b6fabf186ce4a8c137f2adc544024582f590c
- MD5 43a51713ba44b589f3debb00743ac56d
- SHA1 2537fa990d4dae4ed2692570bcf1c76f6e0a887f
- SHA512 857cfcc4cf02dfe4c4fd030a2ab4545b234332146aa8fe4e898d33b26a19a7e337ddfc6a5651e8146881409e2a53bce403a296240a7f3023191498d606541f77
- SSDEEP 192:5XdesGK5cgPd4EgaBDRH5hWYRX4P0QcNXFG:lJGUld4taBDThWVEFG
- TLSH T12B02AFF1B73DD7B541B8F3969910D2D38BA81F26D262C4C0D93AAAC0541F252D71B874
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71ce5823-1a98-4280-bd4c-eeedddfdddc3.tmp
- Size 14KB
- SHA256 60497d47fcc7b099319f216a4bedd7c1097a162bbae6e8ce8e679d3a96d213f8
- MD5 4bc1a1fdf2397e8ecf0edfc945e6189e
- SHA1 f637a9fa4f091e830bc5a70d43e192c6e7ad7911
- SHA512 50291f3ca470353302f5d9a39026c1dd63adffd2ebd2458b97e83df818dd1c3827e1476aa140fbca579997f3efee2ece7213b3cf165254389db6b47357c164d4
- SSDEEP 384:1CGECbwdqeXjtu5ryP2gNnh6Ooqh5AXdFy3:1JEldnXMdyP2gr6Ofszy3
- TLSH T16462E11ADA8912D7CDEE99D93D3CD1B2367A606B29C4FA2F415D2E308DC146B9D00BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71d5adce-ae5f-4789-90ef-0a46c93645f9.tmp
- Size 14KB
- SHA256 88ba81f65eed53fd81646e45247f86facf658b8056f0f0549b854f0650fd1874
- MD5 800a20a9181200a127e6ce885cc07dad
- SHA1 cf8888cb75e5ae26eaf6746b92f94c18aa451164
- SHA512 7e0f620216a20b1f0f78ed9923b279ee6d6559d9264e77f9bf9d875ca520f50cb55ed52a3d05b89b48da7360d2b1b7ccdacbefc15d708c1cca027ae403782b00
- SSDEEP 384:9fmTJPGZc2CHh8fJyDHQsODihhR+Uei1eq6MXwbR7tEfZ:9fmTJX2CHMoOuhhR+01jCEB
- TLSH T12162C0D13E3EC911B7D839A3202357E3DC659A068563B1126C4B5163F55C7FAE21D2B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw74669787-012f-49d1-90df-3b4e40bd01f5.tmp
- Size 12KB
- SHA256 a0d6127c5dbf422d7f0423edb9e0ffe69a2c24b366c2556bee56b1e8251c9adb
- MD5 5b3539d1a927b968e61d50b58d00289d
- SHA1 f7f5528d7f60941cebd29df3a66cccf6ba3c6665
- SHA512 1eaa650766759a587ad9ce597cd8f1a78083c51d91fc427400db01eb41bf853ea67a2a2952aaf6809ad640c17cda2bedd91ef9eca9ddee559306c154debe5577
- SSDEEP 384:yuv2JJuoEStpmCViRNI3ealYDeZkneI+gs7oAYlYf9V:FQJuoEStpoS312qk4gs7oADV
- TLSH T10E42D050EEA0D61F22936EF6E590778B56A00D48BD1C63D3779BE03058C070B852EDB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7a6b7a13-a141-44c6-bfaf-a495de0ce6c9.tmp
- Size 15KB
- SHA256 7548bffde9db1aa5a05624f0c2587363c4541ff4343d334150deb3ad45d48b8d
- MD5 810f13ff7744848341c8dee03933bfe1
- SHA1 7b8d20fef931bef0162a3659b4d26daf30e47c80
- SHA512 c93e0b910601c2dad27ec54c15d77d9c3d55ab62d467a3bf5e7892abdc33ebe8bd6c0dd137c50ff9fe3187f5af49087e2cc15068d84b8ea1db1263226e252d0f
- SSDEEP 384:1JksDArUSBEYuvW65OSdbL5j7OX3ncNIqZYa/:1JkacUSmY8xMSfsMNIva/
- TLSH T14462D00538F80E8F9C6D94AC077F937C1BDFF646C12E225523B4D41B108DAE021A8AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e397500-e4d6-4434-a15d-d40b267f0f6d.tmp
- Size 2KB
- SHA256 28b447c18802fae052966e837d37138db086b719ef953069058eff17e2e4f803
- MD5 19836278b071b9ed13034abf4910454c
- SHA1 e6269fa00ba6167012ee3479172820ddf3adde9a
- SHA512 ccd139713f3302719f9700501f65c5eba142e286443e161220c5ddb987af1f73d06ddb3c2cdfce45891d569ef9efa04de0433950405b481a7b0c6a7bf4c82aab
- TLSH T1584109F31C5F5228EAF85156012353D2AC5E7432EFD2BE40DE9DBB60750024D65EBE86
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e9f7fea-5779-41d9-a8ad-ea4fa2aaa13d.tmp
- Size 15KB
- SHA256 320cc9fbe30a017cb54c2cb13ed5393eea357b933e4cd5989dfe85adcdd72bea
- MD5 3b829715a2b175d1d0bb5b90c3a9edf8
- SHA1 a9a250106f1df41df431724cccbfa70dc831c736
- SHA512 dcd41e1dd7674cc7ef692ff33550af78b780f569733fba6dcd31acb2a894179c541d1361a58b3dc062667fabfc4353461631fd512001613b8618f58dd7e59749
- SSDEEP 384:QzwPxI6UgUXxAGclsUuAfpWxG6t12kzMQgmVaq7pGqsCfEEKaVoPHw2kAPJ:dxBUpxAvlTmHzzMmVaq7pURaVoPHX5J
- TLSH T1EE62C019E570E0B88FE164A748A0C49E0CACC7FE80640AE04A6C49527BF0A7F8DB557B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw807401f9-57e9-42d9-90e5-e38dcad184f0.tmp
- Size 2KB
- SHA256 d6ca692e288036b2e6a657f718c9b80253c09c157f330d3c040ae2769d5984fd
- MD5 b554b296b947321a7c610baaecc6af55
- SHA1 c246fbb6acd0eab2ee9834eefab9ef10ae8f1f81
- SHA512 4a6f4f2e2cd5319f132202be4295d5043c4219a84c1198fd5afbb63ca08afec474404e0ae73d894b93fb5e18acfeec0469ac94cb49edd9ec4a412e10d93affa3
- TLSH T1B9514CC7511A9730F62C634CFCD1BFA1BB7177E5147190CA539AE041A72DD4F1C98224
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8139762f-51b8-4d17-96bd-1e616108f135.tmp
- Size 14KB
- SHA256 1e996a17a4f0c0fa214d711e83feb07dcdc73beb978f36078f4d118248477570
- MD5 809ef75c3ae5cf0c81ea1536f2ad20b8
- SHA1 b1e53b695020c4259585856724c188b66d86cc89
- SHA512 030b30a59c4c876c79245e32b5a9d765b3a1f1de8530783972d2cbabeb9062875c214ef59a89170f4b790d362f916fa593a913c74aa86229631989e29fe701b3
- SSDEEP 384:Kmx/Ouz3jFv/y5iZt8nFseL9XeZ0fj/Am43M2ojN:KmTz1gFswlq0fzAm4+
- TLSH T17362D0426288F5CAC6B18D4160CA66C77473D1AAC96BB6059C8FED1764F8663E00F637
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw815ff195-31bf-4293-8b34-eae7012f2af1.tmp
- Size 11KB
- SHA256 b9cc9b04414ec628b46e45c396ddedc32d10d23b2e86cfce75ab2dc1868e75b6
- MD5 e97ccca4b51b8974ec99412f1182fb59
- SHA1 c1a360ce19e48cfc1c29ecd9a37027aa8304f0d3
- SHA512 38b71787607f82bfdabfb7bd48fb68d87c3323689e7f8ee35b60f5eb060acfbcc258b85d894ceff2e5e568a68b2acc2c0f9b5a6feb6decaf5551d516a7a42f4d
- SSDEEP 192:tndId9LpG2VlZAmPGBxLDKKBFPXXRVB0Y1T7ciVKbx4SXNZxJnVbe5F8NUX:tndcZs2qxBxH/FTfN+LX7ng5FpX
- TLSH T1B832C08A69CDD416A44077EF257E166EA0E063E12F4DE0A74DE1F7138C2D8ECA8111A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8653e98a-7824-4ea2-aee8-8df5ab6710cd.tmp
- Size 14KB
- SHA256 d83ff4d8a2dd31fa693dddf4714e1c4cf0813aab61c821adbf52e4659badb432
- MD5 1ed886eadac176f528f60d425f63b28d
- SHA1 bc9e155626bae6e13c924a0eb82d57c1102a5ec5
- SHA512 915bd612a102d089d1133b617046f6469f19233b191d00fc31e7251607b472cb3750279c1b9500e751dbfa5b67a6e0b0d644b62edc2a14f4af68f6332f8879ab
- SSDEEP 384:QohtOr+6tVVuT0ueXz9Mxvpf3VwD9P0DHRA5rt1:ZtOr9D6hpf3VJDxA5rb
- TLSH T18E62D1AABAD7D0A72B58A5A9DCC60E55D743396A51E144B6927CBD413C202FB8E004AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8822cf5c-db8d-4fbe-8f8f-ea1c0c74027e.tmp
- Size 8KB
- SHA256 698fa91b8ae9b7ce1b8c8fcc920f7328a8f406c432961c713779f26074588c10
- MD5 8ed7a6bf31e82c4ac5ebdfff72414492
- SHA1 adcf599cbabd95b379ef10a93e249a1732675769
- SHA512 274d0dd46e9b3c5b3bc76af906f7a4ca945d35beff3c7fece865ef2ab95d7bda9537a096957fccc4261806f0ac7348f8c6ae2d1e637def52cba552078acec7dc
- SSDEEP 192:ogwW8oHIB3a992kWO8qRF9RC7DJm3vaH5yYMok9KZU3AY8vmtH:oW8oZakk49R6DJmvaH5b5aKZUQYBtH
- TLSH T16C029F15C7A361FB530707E6A7D59982070BFCDD89C5AD5482C38A33A53C5EE071824C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw89948e64-be99-478e-b363-1a046bca48c4.tmp
- Size 15KB
- SHA256 45186aa3157c74f3ac718990e417cea7eda6250be73aff5772815c6b8112211b
- MD5 a52794359eb21935f2c17f3bd6f8c720
- SHA1 88c8c652c5de57b643bed90e2f7911df32d82295
- SHA512 c5bfc519fcdcbc24d44be3535f9eeafd8f7f587bd47497666d440018cc7e0cc573901be4bf611814dcbb640467927d7cf9ac2b791e52c5ff60b82c906bb5a3c2
- SSDEEP 384:AoiAjHbK1R+7XQC0ONpQ2hja9o7PR8MCK9lv:ADIWrnWTQ2hO9oSMCK9lv
- TLSH T17562DFB626460DCB78B4111D1C1CF2EB12B2FE770E6B5201ED1B8636C670B21A17AFE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8a23a0c4-ca71-405f-8779-624adf0f3643.tmp
- Size 14KB
- SHA256 451513942325dd21df79f13aa3632cfec947ee505f7b48324020a4d7e570ba86
- MD5 10b98e331253e923ec678f5e608d9bf0
- SHA1 88abab83c970ca50503957830040ee8da9f385da
- SHA512 5b5e47d0e5b5fa92a2b97367fbd6a8db85396ecbaaf203d62c0f65fd36bd52dc3ca44b08d34ed6c95ab8fde3509e2f227b9adf9cd0604acf4d5bc0b3fb256f47
- SSDEEP 192:dsG8aL+MpHobNeNCx0pcklu4FZJjWFXoqbPhYzlacWHW/QMmzTOjVr5FGZsnmL11:GtkrpqNe3pcklRF04qbGW24MDjjCTZCc
- TLSH T17F62CF507C20CABE52B2389C7CAE37904A1A1A5D9D9057A2656C5C4CC2CDF85754C7FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9056284c-9c68-4dd0-acda-25b6e6af9323.tmp
- Size 2KB
- SHA256 9527b0e61199500e7d6b88512493ce385a802a483307100a8935d29b108f50de
- MD5 55dc59adc5e652f3fd9b0856a125b251
- SHA1 32ebf2935b60a374f2812f44e05db783a24cc6f8
- SHA512 f6090b2186d60e979b0e9fb2abc676a04b950410ddd23fbb455409a0b42d12ffc055180dba53980cd3770cb7a4f09d6f5c0721a972c6bea60f83926c486c4f79
- TLSH T17D412B12CD60DF8495CFD78C260BBC6844E662D7322A0B3CAA4D22C7556839867E991D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91505297-586b-44cd-90b5-d9f68e3aa23e.tmp
- Size 1KB
- SHA256 568c313ee3e6c468d192051c16a7280ad7c3c44867e18a6dc5782391d9a7cdd3
- MD5 6d2bd1b4cf3db31a8b7cd77682e48366
- SHA1 a53de53be88a43841b65aaadb776031a3a3bc1c5
- SHA512 2091cdd8f0bf9afcb8a5c2f5fcf5fffc8c45e290236e9d9521575b1b37cc1dca01e9a4de89e5db7168d1f67d60fa5f46745dcd0123ab79aeb3ccc29aee911278
- TLSH T12C312B3AA099CF4F94D549A95C23446DFC5EAC647307907C775868FE90DF0CA8B9ED20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e245c4-aa2e-436f-8bcd-f0573aea40e6.tmp
- Size 8KB
- SHA256 bc77b89a7af28f9ca281d365d85f16b57bd7a2c9fb83c7b34fd3d5dff31cbc19
- MD5 e829b97d492733b453858a578d298825
- SHA1 86ffd03f33863e0773588f7ff7eacd93a2f99dca
- SHA512 9bc062309097de36a04c83a1b7b60d09ac22651fcfbfc400c039ea0a9b9d0c1cb0eaeb30f3a57e735b3e7a44fb39f3c368bfa31f1c4ed04ee90aa21baff61832
- SSDEEP 192:HZRchfuWIBTTGGTOgnGVUFCSTx+yuymUCQB69pO6l8Gv/Cm0VrTfIy:HufNIBmuOMGWFC3UmTjpOjGnJmb
- TLSH T18102B1ED7BA241D4664567020F74F377BF730196CE1ADB478BA4D24CCA271213A54F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e340eb-7be2-4152-be2a-f160f616d59f.tmp
- Size 14KB
- SHA256 809de94b9d16a9d266c251d52c839b4b451250862c4564e121fecba2efb26923
- MD5 7dc0302dc3afb4194bb8903bb74aa41f
- SHA1 6cd80cc2651a1fc6dc35fbd9af2ac7d00b0c871c
- SHA512 7264dfc1a9a73fd921ff568f50711788b051795b64df852c08662f3efe06cf4a8da5889215e0c32758f5336fc34c3d4d3674a52812094e029fa74e58a00f99c7
- SSDEEP 384:Xq4WV3ISNg5BliSOu9xNMg78Kh2Keo0qjHwlZsCJ:Xq4WpNgH/LDNBv2/ofAGCJ
- TLSH T14562C00E51D1C36E34D8DE2FB11F126F1AC79C6A7A48628EB61932A9D5CED6008E9D02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw94464351-4b2e-4693-a6dc-80221ac3d71c.tmp
- Size 2KB
- SHA256 9e6a52e3bc36b8b654ad8ecc470597fab42eb263330b24616d242b317b784c01
- MD5 7e8b5d0ab1487921f888da3820810e6d
- SHA1 174c11bf341c09116ff5e3e31e0ec9797e66043c
- SHA512 b86f9c27b5dd581fcf7ef0ad17faddc2c6ad94281d180cbba30d2099b83df0b74ba031835cb128f8296c6ad05b366cf1f07871d1e11cb484712d92264c5cf096
- TLSH T12C411DC6C758D0E1C4C59E3A39196B94F4FDC5663C3C862579B0C784FFB85061951C55
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9895d4b4-32d8-4795-8425-6ab7b061e418.tmp
- Size 13KB
- SHA256 18b7c2619f4febd74d069a099b1bcb1ed685a64a90d9b537c44b58996413a373
- MD5 e85671abcadac8354d8599ee1e0de4bf
- SHA1 e4bb94feba082770c2ed89097bde34bff98045d6
- SHA512 d5fd110c02081ef4cd9fbecabe589021d8db96c2fcb0a4ff956218edd16ec5b5333106c38b3f0c455df37944031d417e9c896c92a209c4463b3221b4d366286b
- SSDEEP 384:vgxyV35tszU8x5LN8BMZCwEIstatJyk4bkq4JOQR:IxyJDs1x5BGMzganyk4bkq4J3
- TLSH T12752D02770E18B762307F8B2BB2C3C1542DAF4BE6394829CFE097AEB5005E44ABF5550
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw99cde943-7f0b-494e-a84e-e58c6f99a754.tmp
- Size 14KB
- SHA256 e1c8c1c4fac6eac9c77e532353877b0ca081703a411c6f177b3afdd7f8e36537
- MD5 ffe1775f6e374075dad29a6dca2f09a8
- SHA1 7c85831f3c3900a38fda76151657a73374acce7d
- SHA512 ba04367d18fa9a29c3ab2a904fc0004d9e99b582ecf34d330bae50a2774bafc238aefd411460cabc1b4bd0869287d36406cb919ef2d9c34bab712088dbd36db7
- SSDEEP 384:W9S7nPOwegJmZbEuDbjbjogSZTiSV3vJeuDOC/q0WU5:W9yOeJuwufHUZiU+Oq0WU5
- TLSH T17C62D05427FDF6AEDE22C0835505A55E33FD8AD013C02E5DA619FACF02A3F65E8A1528
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9d50fbfa-e4ca-4cad-8bd7-4ba6ae62df96.tmp
- Size 8KB
- SHA256 c4b42fb5e872474f9fff2c692a0f2543102a3f33ae877e5ff827fdf8f1235932
- MD5 91f9efd732386e1af2c2cb119a876fd6
- SHA1 d129935328eb74dbc7dc84848a30d245eab9b538
- SHA512 df49383781678affce2a32f9c9b7e99e6f166ca7b3b3f8d9be29673fdcb129ba35c29d83d13fc888fcc3d295c4b9b3c68b243d154988bd0754d175c2048b459e
- SSDEEP 192:07g1mHh9Y83EHmQkHQaTZs/fTD8QNF/Q60E+4d5ZHhB2H0XmnO1926bdtP:q7Hh9H3h3HtZsXzFR0O5p2Hq19tbjP
- TLSH T1DB02B009EF1E64D2F3A985D3410014A7BFFDF6584508D817787EADD9413CE145CD5C6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa1718d4b-c8d0-4927-93ef-f9efa7cffdd9.tmp
- Size 8KB
- SHA256 3e565314ec89e6fd16d07b399b064484c05f5ca4cd295039267fe912088ae0f1
- MD5 57b9a7c83bce258f9bd1537b6bbbcc6e
- SHA1 bea9636b22743d95afe0456ca28d3db188c14ea3
- SHA512 f27982d1e6a41946ed20f6550b7f091660750d7aa8037b53946b9b40080474abee25030351e1b2aeea66396dbfa8063c3493fb50519c6c46d9b1606f0f3cd979
- SSDEEP 192:Zz98nDSTyazcOKUs/f3mMfjskAm2/epqpyTH42X+09XM/bKgT5dJ:38nD1azcOk/uMfjskD2/1yTHBpM/r5z
- TLSH T1A612B07E38F06C82FB0CF24B1BE90096DC61A51747272C2B912934DBEC5D59E2268CF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa65e7694-1294-4a34-b28b-78960077a2cd.tmp
- Size 15KB
- SHA256 5e03fc5870a5baeb9ebf550b9a325d7a7d317c7e452fd3410901039f89af02cd
- MD5 132f5ff2052e088a9beb78bedbb999c1
- SHA1 e8370e3e3961122ce40d88a31850a988c94d92f5
- SHA512 964021fb7fab7b406ad03fbf23f80b9aa62fde3a47f20c6a632b90372bdd316443c6e1fc1e4b6530867b84ff79ca23d98fb7ba0e50665b6d13eed16d1e763849
- SSDEEP 384:uueBJHea9QkxaktrTrCnY2o4KGQFlZ1zh2ELl86dw:un+aHNvCnY2o4KGQFTCAhdw
- TLSH T13D62C0FF2A19782AD5ACF4FAC85704BC44B255938096DE3A97C612E240C732E6371D7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa85d65a2-f350-4d95-9d9d-2deec45b6b84.tmp
- Size 7KB
- SHA256 e6ff256f9f403da85fa1bcba4eb0086469b38e1f4855ca6b07e0ada09cb92c4f
- MD5 20cd82359c6a13bbbfa99e462cfad687
- SHA1 2c588c98716413bc771475c1205e6b6e4200af32
- SHA512 60d030b94b9b3cd4272cdcc836d1361923c25a24a2d6421f5d7e022221e3fb31b325eebe97987a397cf7309849ab8364d3db422be619b7e856baea2094bd3936
- SSDEEP 192:RhKbPk9MMXSPPqbrHPO3OlTE9vCDumDr5jcCT:RQk9MZnA23OR6m3aI
- TLSH T116F19F583056DE0F855D9C6286190FA273E4CE8AC18F5F36C0E1C22C749F5CD5ABDA9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa8a4f7ff-c8ae-4ec0-8b01-01338fcf3077.tmp
- Size 9KB
- SHA256 bf5d9736b60197578fce2f23cee76fa1a9ba321eeb61fc902f59ad42cdb2cf46
- MD5 1c8b598aef6069c175e145a98e9eff29
- SHA1 d959756220c0065070109ed2399abf8b817f6fb8
- SHA512 3ea17f3eef3169344cbe60671d6f275c55812b3c7548a3be6c8d568c1dde77a610f6bf9859bfd3a8d3b2d0129a764068ddcacf1493ee79ea408ac06acea21854
- SSDEEP 192:KbA7ULTWmz+K3eQ/MAL1d+eq+vR2hquPmrqvAXhf2vvFF6x:KVLU6MkLqhTPmJRf2Vy
- TLSH T1A612A05B31F7BB27E1EA894685C6F294C07EC5582B437CE38391D7E44F24E2E61D4045
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae7fe5ee-796e-4488-bcfd-e24f79ae6e11.tmp
- Size 8KB
- SHA256 578ecb0e217b158ff9950120b18327e1678efba7a7e1ebdc3a78727db6c4cba7
- MD5 d367186a015d9c69b56913b16da28422
- SHA1 5c57a177744c6af12e5ea5ec53bfb6a31273b8b3
- SHA512 143b35bfcc7f92ff151b1a89dfc49de40e1dde75833e71dac3d86ed8f10a8167d90646abbe5c259701a4e02ce301b2550a72031658b69792e28dfd0d65dcd39a
- SSDEEP 96:X4EZw2GFbK+WrO00yw9ILk0jrH++w5ekkQUy3nLJ7csqOTKOIFoIhY7K4v71Hem+:BZP0Wb6yPH+9ek6mmnoLv7YYPKVB79n3
- TLSH T19412AE88D3474FB4CB99C8F5F846C94279CDBE45D6AF88921830393D72B14A3F626D09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae83355a-7ab9-46a3-a93c-4fc1d7ce66b6.tmp
- Size 2KB
- SHA256 3cb9cd36d5380a37182c64985fcadfe2d29c28da24d87de9c9395124c932e6f8
- MD5 5159cb301626f079a333d50a499937a9
- SHA1 6270d0d21396d5c1fededfc374eb27e19a8af1da
- SHA512 608876171c39310d8dfdcb7e0edcc3a0edf970dc5f99486723b5b685e913ae45fa4d213cae4c1b1d710fd5195af9d2bcbcd1a92eb43852fe7b2d7221a2058183
- TLSH T173514D142C1554D3DBF58EF72C03683D5066CBA05928382F2B3F27941E0225E7C6F9D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb1944435-ffa6-47ba-ab71-43b6e9d5b7c2.tmp
- Size 14KB
- SHA256 08d3256bb6a1dcef71ff31dd053a345dac7cc2975844b23a86b92fc452bd0a03
- MD5 a2cfc45c3330e31898d6239add09dfea
- SHA1 7a3593d7ada50e126a070f8b6d4893299e13a540
- SHA512 4535a5a5508a2fa7ceb546efac7aa7716de4f23caf913df87de43f476ab3bd3ff636d51ccd81453f02d3d7280b476c31440bffac1a06008dc5a22371f3c3b2ba
- SSDEEP 384:Co5a7pwezx8kafZDwe7kv1T543Qdmgnzqg1b1h3mjwwfUkLnxZ6K:ChFte4vh54Adzz5TJmr7r
- TLSH T1E562C060DC95E39B0BD48F49E2F31F6B882C72A00F42ED8BF8DEDA460964A0D71359D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb64040fb-67b5-4f3e-b992-ceec6d5f3063.tmp
- Size 1KB
- SHA256 b46e62e738ac4dab92227605f9568cc4d67e1bb4fa95f327e7bfab2e1d882899
- MD5 f4cc6edabd8e560fd42b1c97f4050399
- SHA1 7d588f60878499b240e3ee76f560af74632a1f17
- SHA512 fb469bc30c00804d414a46e863605d1e319c44996568d1a8f345c9262ee54838a318ea1d89b95cdf6cf4f8a3e1931b2ff011b51f430a687928bbbe988408e2f1
- TLSH T12641E64FCB5692EE3BB0BC16B45B82843B98A0FB42868D204C26F212A41D297A84D9D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb6f052f6-1efb-4f89-b8d4-e920220750ce.tmp
- Size 14KB
- SHA256 89a53648e19416bf3165c6a8192c5c301d756922f87b2754ff210735231917d4
- MD5 0f33c2c2a307c10d9125424387c22936
- SHA1 4a79c37a05e52a8f2c6a715a0381826535beaf9b
- SHA512 63e0ae6b12ed3e34d53984938d35234ad88c7e42283ca6cbd58fa0fb0df3d189ae2e16366fcf63f5a8425f6daea00ef58f6ef415704ff21aba24357369b3404d
- SSDEEP 192:cwHnEzZnVC3uRZkfXCI8YLvi/ZZu0C6DdEGl+qE684kFZ/OUzN:rEzZ45fAYLi/ZZu0C6DOGDE6bS0w
- TLSH T10262C09829ED3173C19DE0728BC1D3611D6B2E01A47463477FEC0A515B4B6FAB831767
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbc39c55b-053d-4706-98fc-6702a7004732.tmp
- Size 1KB
- SHA256 9d461276547c7b2579ea5be7af2dd33db452de43971cfb880e8638b9d5aa6826
- MD5 ee069d6ba8c0439a8b2f5d43791dbb64
- SHA1 ce2446be904029401431571bb2438f7b66ecdf70
- SHA512 177436753dac6a6a3c04928d5c8e9bd96d46d65cffa5a259c00ff9779094c9c671fdc66d4327731fc247e73fca71c1ac288ce375371db87aec3e2469bfda51a8
- TLSH T1F931078A7C68C7E3B412DD3C8612781DB9819C3CBC3281F91C2652118A9E9AD663A747
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbe9eb159-16d5-4c8d-9a6b-4ec99ccb3683.tmp
- Size 1KB
- SHA256 6eb8de4f58d71488e2bdd03a1d35f4304edd6749e674688bc92b2b10ee3fbe7c
- MD5 9993bd5e20f8e2c594d215d1cbf9c128
- SHA1 4454ce6502e9a79b69603efd4a6042b08cf7e397
- SHA512 8d777f72e845b45ccdb6df6e429cc0ceb47e46418a01810c51d4464d7d9ca681e468bb79eebeddfb4fd47ac752576913d3577a19e18e4a9bb9e7f5ee381796d1
- TLSH T1E8310BD62C45534F033E6B7B0EBA567267A76B90243CA672CD16272B7A8036125C5909
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1617815-19b1-46b4-a63d-cf73498e40ad.tmp
- Size 8KB
- SHA256 bea02b60f431f8f1d18ba2d5ff3ce024ff11361fbc5a037dd2621a519676b662
- MD5 13f51cd9b13af3eec85ffceeeb877abf
- SHA1 a5610f98aa037f97d4192ebd7c220930d03b8d01
- SHA512 588084db303956583ad4efaf0287e470b74f8a2a0305bdc21e9489b2e2965201749e71a95eb46001926d0e0d347a02033602daa71c812cf3f63b69cd7456a28a
- SSDEEP 192:KaRorndlXKKlGJ8yXvkI25kfbWXpkFr04IbJ5GUGX7Ut8W0:KsSdlX1YJ8yfkI4aCXpQpINcU27q0
- TLSH T1F1029E9E1C7206F0B46F4CA58A3173779890D4395E99D044AF1A80562D9E2D3D663ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1cad73b-d7e3-4eed-9cbd-849a865e056c.tmp
- Size 8KB
- SHA256 e9c7bec384efff847b237789b3935c6354abeeb4a14494359d7a235042a2987b
- MD5 83b4060fd499ad91f406c70d3a0aee1a
- SHA1 17c3e93c99a6c11ba09cb6e44be1b62bcf12d5e2
- SHA512 fae0cd59960b50d452a1399dd840d3941c27c79ca4e6f3322ed863a55972583b0beaf8df218fe7709b62c064bbc15dfaa75fd9701dabc509d200e2c6765fa4a2
- SSDEEP 192:02J+NJaP2Uh2Jgu7xRA6MSwqj45QbjA9VQARWkZZO6X13elX:5aY0fxm6Rn0wj01WaZO6X13et
- TLSH T1BA02CFE02FA42D808467ADD986D30219E1FF6D751DF831C65F53726F5103C9E40AA359
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc258dfd0-f210-459a-9d3e-92608b1d1cb7.tmp
- Size 15KB
- SHA256 17beb12f041ed2406c5ff4906850344f5f510f3f484d30f4bf2ed81d2ce372cf
- MD5 bdd35d34822086bff9aab851efb3a3e3
- SHA1 86370b7b75d0b8a295c6306e0efe9c6c65ce66d4
- SHA512 c920059fd722d4644c5240f7c46d58330b63ee1c057f81072b142be93e445743dabbdd3b7fc0fd054d65dce30796186966df335ac9ebb855ff4cb75e8481a93a
- SSDEEP 384:gMMHbSyP2VHZhbHcCo2t5+EWObpx1qQP60q3c/lcFnq4rIW4VLGB:gRHbSy2rcCocWObpNI0lcFdELNGB
- TLSH T15662D0F4D8C44494D4D2F5A63BEC70013393B6F43D8EBA590988C8D25A629BFB076DD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc610a4d8-ce46-4f9b-ab4f-6de48e1b44cc.tmp
- Size 2KB
- SHA256 89a3af5aa1ec3b0ff6ea9989b512afe6fd1ca5a98a344f79998e1f5e5c6df630
- MD5 c49d298ea21ecdab9ba4773428380857
- SHA1 f3e9653b3c3b13ebf6789c7ba588832486a223bf
- SHA512 c73fb301cacc10ac666eddb605922943beef69ca1db951b5cd017365ccd7140e74ff671315fa65bcd6aafe684390eb230d1a1fb12b30c15617d802b10fdedf46
- TLSH T17B413A4A5B5DC90CAEA9057DA44A87A38320B982311691112C775D8C3DDFB9FFBB884C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc75ee51f-f3d6-4821-9901-72cf1b161be8.tmp
- Size 12KB
- SHA256 255bd30403f7bfdc8de749a7001baf0cfaee3bb992294ef69366495936481d26
- MD5 76f9365d3a8a0101bc8193df206b13ca
- SHA1 0665ca3d9ec48298632e6c88544a8c6a8072b5f2
- SHA512 2614332110ab52dd61412d27d550b84819d183cdc7aad1820880996398db721c53c54e1880aa5a993196cf85c2321833607aa55485999be08a29f09732555aac
- SSDEEP 384:ZqJmO+hKZTFsjH96cUiARB0NCpEVE4Of8:e+oxxRBK
- TLSH T15042C1092FC5B169ECCB6F6C014C857E9360EFE328624447A5C6178E773C943ABF2285
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc8c3a5ff-0ffe-409f-bf97-cf1303b8d126.tmp
- Size 15KB
- SHA256 b85166a058a41fe91ce10af10a647f25ae06fb7bf466f69184f48b9c0e29de25
- MD5 9f2e74b92faa8046a192a06298c882c3
- SHA1 5f9c0499cfe0a88e0bf0481fab7d734d4438b1a8
- SHA512 99353a5503e9ce2574522667c71777410201ea93b8d056e70cbd218ee800a4c5d0ec48c4800e933ac2e7c375aad8a4cb53ea5d0c5434c5a2f17ab9c4ce7f629a
- SSDEEP 384:tqThfxxDT5Fzjipk/h+Y4X4KSOtGE/5f/3Euq:yZxT5hiUd4J8E/d/Nq
- TLSH T11262D08FAECF17FB7CED3AA98317C7F44B2093240204C96449CEC142B126DC4B9AAD55
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawca53e9d4-b7e8-4fae-9209-49ca47bbce9e.tmp
- Size 14KB
- SHA256 b6072e3519cb69229ce3b035dbad147e8f07ebf41c6711447df1a271aed86309
- MD5 eb6e249343fcc5a3e7cf3b2b4b30de4d
- SHA1 d0ecfa5cba5a7dced101cf7aee08ebd52a99e6e7
- SHA512 a5abc735130b82a813d5e18425bcffff4028fabe17615e9446f1deef913de98a7673937c8353023cf753acb5d4a61c0cd9d3e0dbded79c2b3dc6f412b0d22f62
- SSDEEP 384:Fe9v65XrrnPnpg7dq/Lpjbe54HCFlJBlvBuwkk56DNH7eNlz:FOCBTBgJMji5SCFDvBuwkTN7ev
- TLSH T1FE52D0C1665A6A15BBA2409F608243C6D023D1D5DBF316A92DC61CEC6F3B93CABEE051
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd39b6e90-1d12-460d-b969-c8fff00032b8.tmp
- Size 9KB
- SHA256 536d94b0e5e3d0a1357268f5a54b5b32a88148e0f315d031d9b4ec4f792d1015
- MD5 7bf5fa1a343e45197d8fab77098f5de4
- SHA1 62b2323d2666bf983e31f747100055988c331a15
- SHA512 c12ff7fa490c7914b6fe0e148ede03207fd48eeb391a9c5d1db8b08efc1ef6d698f7c80b4cffee7d4b3bd0bb27436896eb5c51aef284bed2fc08027a3dce4c8d
- SSDEEP 192:ZTS5Tu05E/WdliGwNoBZTQQdatAi+0YWXjhxIhHSGa4YiwSdAPHoGw5kdR9iO+F:cu05SpGEugAi/Y+jDyHS0PFdAAzkn9iv
- TLSH T14522BFD272260FD1F5041D9D64F82F418B9ADC58CD2599277C83AE627F4BB061EA3A32
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd9326a32-2ee6-4761-87b4-1b40e7fea42d.tmp
- Size 7KB
- SHA256 564e3688c188698e92b645224715d738f0c4c2f5a1bba34cd0058da44250ee98
- MD5 dc0ef38ee07bbfae2a7beb1bb0cf01d3
- SHA1 4c2a52db9d11b850bdc4b0d5969796aeca4fb578
- SHA512 c1b7513f97b650f11b5dc59ef16c06064d602cfb391b41d7edc05e073fc427e3bd8ab6625ddb3ad49837ca581b908f7fdc864696b0dba213607608a16b59e304
- SSDEEP 192:xolBA9gsrdMNpEmwqFCJuFu29aBL/vQLTMf89dLBAjpwN8s5:xolm9gsZgpEmwuCJuI2sFv2Tu2JBAFZM
- TLSH T1D8F1B08DAEB420B4847BF3CCD60916456530CD6DF9E6E685F701A66B3C54D5CD40B630
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdad40a22-3543-4252-88bd-957c15cc225d.tmp
- Size 14KB
- SHA256 d85d2356ddbd7f375fc3cfa0cb34c0a2e3510264af0f82a09c35aa372404f641
- MD5 a482b9b29faa34aab2cca1221b98496f
- SHA1 dc8688153919e58cefc7bb63ffd35e9ef571ac8b
- SHA512 1afb9673a136256f2957c04826b10316f88f68b607f8457bdf9058e192e0e58cd9464832feccf72e79301d2aab764fc0c1dcbc353f5c525aff5c01c2f4c69411
- SSDEEP 384:8p25k8mCzrPqYPGG9OicRnIkVJDCmlz+b:8p4rmUPqdcC9IA9Pz+b
- TLSH T1FE62CFF3C68328F31114E295EB7D144BFBA46094DACA5FD61D4C21F22602E967EC26D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdb34fa06-5dcb-4d6a-be68-5983c0c8c60f.tmp
- Size 14KB
- SHA256 07761dffc919bdb62b119490c6e890c45ff68a5fef1c2ac255e3b8b46b7bfd72
- MD5 980d30bd7b019c97d0d8da419559d766
- SHA1 cabd63ba505cab49ce7931fdadf176ff712ca498
- SHA512 7865fed2892b14aa121136ad05fb61637d098c11e89f108016eb3423669adb46c019a1432cbf2dd4c36f0e60ac7fa87a89bd111383104ef474fb1f66106fd2bf
- SSDEEP 384:ReYL/ljBBVq4vXXnSPfB1/qd4WSjfU8vb1Ir:gYpjpZXCfX/IAjfU8ZIr
- TLSH T1E162D05A18A1BF15318C44F95EA0F27B3F8FDAA1A88C59D2808A6D16510ECE42C783C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdd04fc7e-863a-49af-b0e4-ba54e44fb893.tmp
- Size 9KB
- SHA256 d7a2fe95d4e86ae1579f0e278415914a5a1e6883f59c437e310e50ad3c7b2c4d
- MD5 7eef5c84536fe6191eb17ce14b298ea4
- SHA1 de162dedcac679e909755cf3cd5d529e8c0b0d19
- SHA512 26303b6749fb07d85adad9370e6e3e0d9d83625f903b4e8cc84b6f90cbb8833d22f2e4947660df694a748152a7bf42c01f65f90c8e54058f85336ee2dc281f3e
- SSDEEP 192:jmfvWKihXQv9/vc0qXaNBR7+dzANvm4Z6H4Fv6dBk47IvJ:mPiWNk0qXaDQdIH+Rd/IB
- TLSH T17412A0FD6CBB559F8392FA721DE8F87E200E8BC2A891CE442815B010F8BA59DCE56111
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdedf7077-71ee-48fb-a4c4-fc5e49458e14.tmp
- Size 14KB
- SHA256 d28de40287010ea5ac6ee0522b3ee093cd732e2ed665a0b6fbece9f290874d1a
- MD5 3c488f4d29edc8ff0505f1753524e26e
- SHA1 c23c9f564b014a727ae4c7f7b664eb02d756b735
- SHA512 9d49618971a4f310de0e42a068fc0971c71f5624018aa39bf0927356b05a506d736914cdfb7b75a56e961f89806082e1049fadffda64bc81ec682770b00fb557
- SSDEEP 384:jO3I5GhHxu3UUBFBMsUwzIVH3dQQV9ergDkrrSpI:j+4mRSUSLTzIF3r8gI
- TLSH T1FB62D017E129E657BBFC4609166655A3C0A9FDB0C7B20824C68DDB7B083A4CC8F55347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdf73919f-af6c-412e-bfe7-65e424e6e9c0.tmp
- Size 8KB
- SHA256 042e97b505dd007c1c53e9914bf665a32761c454a5f79f93ebb461895917ad4e
- MD5 89df38f227f0113bf1dbb63123e58871
- SHA1 edd3486680e5c25c4d1672c1fc1868d7e4f94bfc
- SHA512 d8fecda7369fdcffb8259def0df71ef6033c8cd44d9554954e0d8349e76b91ce01cde653d09297eb356ebdf3926c0e20dfb3f07ab797c8464e2411c86543d05b
- SSDEEP 192:tTUTueJWB240g4YGMa2AM+2EZOQECIqXhW/X431Ua8ItR5:tTUbJW3V1+D47cRIXO1U6T
- TLSH T18C02AF7AC420C08715A9DF2227498437FC29A9D6F0F5E7DE8EF0EE9929F45015A734D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdfb61f19-1713-4acf-8ad0-7e549c56dd71.tmp
- Size 14KB
- SHA256 c78e5779128f64084a53ff9dbbadb61fc9cfee0a7e5fbcf37ccc6a56958affa7
- MD5 376c7d8ed1e7627647cd0669dba5116a
- SHA1 46057fd62458de1f7cd18ce696121510e954b5d2
- SHA512 85a83835e37ca22b611e75c7aefbd09bcbda4b1ec14d92fc058a48e6059a39b90ca5b0cdf23df9ce70fd1ca49ca957bf4f6b691e0e63140ec207a7b35cbdb737
- SSDEEP 384:vn3XT4Rn6bQ+FyWcpmccMF0H9V4gCPBtFbG1GX78Pt7lNl:P3XT2n6b1U1pm7MF0dWgC5tFbG9t7V
- TLSH T10762CF9167C9A3BE959B85A9E222CD0A804E1DEEFD6C1756037F98D19094CF0B0C8F78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe157ec87-bceb-4b67-b1f6-9092f68a152c.tmp
- Size 13KB
- SHA256 2a37cc1ba430daaea15422139d51f53d839e05ae83b2330589da0c2b3d5010be
- MD5 8f224ae892fce77978a66b590b7e6cce
- SHA1 4ce2a5aa13871706dec36f98a53d3cd7b0d69adb
- SHA512 a90ef2baf75517621ca71664971f1d0a567eb3e429cf78fdb8518ffa2b86a01e2b14f856396d737fa2507292bec0160acd750126fa5f8b8a80de030f19416fb1
- SSDEEP 192:k1DKoiW78CJVkQXA0qGejb8KWijBz4QepPOBGhoQqq88P9GApyp77391TClZ/g7T:Mx8CJqbhGobhBcjBiQqqHGjpn91T6s
- TLSH T19752C079C0D290BE8B0F12788997F3AB9F466154D05356B32471C23E295D2BCBABD0E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe3f15caa-a80a-40de-a27a-a9dd03edc1ea.tmp
- Size 9KB
- SHA256 43fb5b5f191364735825f564afd1bd18b4af71d8f5beae3a664b1c6ecf30ae3c
- MD5 36e148576a0eaaacccf5c72812951c55
- SHA1 a6c7a9c1fbb0be2a31322dafbeeeac991a328a23
- SHA512 22aca7f58cae3dad91da383be9e5729bd5d6884042fcd241855572ec61ee1f62498f4af573160d5b83aead9437e77622bfe4400b266ded67948c185b6e0070f5
- SSDEEP 192:dB8f0RblSzoG48dcOd8hoScbccGRlf+yuD0ecNaHFIcFFkiKRh4d:dqSczoeW+8hox43WbcijIfy
- TLSH T12A12AF379EC4BC76B2BC95227EC33E08ACC140BF1B59ABCB468D890805565CB2C6C265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8c6ee17-7c12-4c70-a76d-d1a12f697e7f.tmp
- Size 9KB
- SHA256 99f16aa70bb771d247b69bc1dea674fe7d2641d708aa971d88d7fd591cd1068b
- MD5 850e2064cd49543b81ea748a8eb7f11d
- SHA1 794aceac4cf95691b5875d76c8a03c4489bff77f
- SHA512 ec7046b54371f97160918e75b645c68abbf059b36c813354eb4c7c934ad85b538710e217bf6e49eedfe0280b715e64468ce6dc07f933fd83c7b5b73b7062cfd0
- SSDEEP 192:VZfOdFbq1aGPW4R2GjR1osUKoqDJJa6OCTvmIG0/WCA:v2dtq1SGjRdLDDJJa4zt/W1
- TLSH T15812BFE94419115972A02363A1305FED926E06BCDCD44EFD1D977AE0D3A7607C39E0CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8e20b0f-31e9-48e0-96b2-bdba642ff209.tmp
- Size 15KB
- SHA256 001b55d88bfd6daccc4e9aa4376d43b2dbc2b4759c7cf6e97b5f8266d12059ce
- MD5 c7a8f6984363a21d415c87255c3b2773
- SHA1 fbb97823d157b6689f46c8cbd61f45ec2100d8f5
- SHA512 df59ddd17cf3211eb6cec639785531d7e522e5ffc28ad3ef8cf13087e6e739b5821c81e30cf114a72320d8f7bbf7377a58e3560f2bd21b21aac9070bca2140cb
- SSDEEP 384:HYCwiRud7l4hedNtix9fW05K+YDHeqbttxRutw3ImEW3Wh:4CrE/Qx9fn4/DHeW7Duq4tik
- TLSH T17962D0DE3D7589DC07B74A273DB82141D5CD6FCFA065410CAA7260E6960713BA0FAA33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe982dbb8-9797-4c0c-a41a-9f5d22e786e0.tmp
- Size 11KB
- SHA256 1433b6b7c07eb0ac9790ebdd609caa62269a07596435b4a2cb67fb25bedad00e
- MD5 b380403f4dc92fa22334f10cbca1d532
- SHA1 3d5be70fbca136f6b1aaf6348e249e6daf92fd34
- SHA512 3cc1f868bd6168fd3c89888825fafd52f506b658ced1c1d2536827cf9a0c4d12d4ecbf637639cdf05cd60969ba2a5b0c93f0bfde0a439e64036c8184e2a3137c
- SSDEEP 192:DesX7GyAjT/gLvqcT01cLjCm9n2PPydt6CNs9gLWyqkD9eT1dJxK/f+J5RX2:DFXiykTYLvfoGLjCE2PPEtu9VyqkD96G
- TLSH T10B42C0FC31E9ADBDCFB79F17408406D2A89A70BCB40E1A8719515E5F8542730F8540EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawee5f7289-8b4c-4200-97e0-ef36c1aa078c.tmp
- Size 15KB
- SHA256 3b87c3c86c341e6c5a45701fc88801e721d5682ae9a13687b130e6a26ebdf25d
- MD5 8684439c66c014719abea987007c82ea
- SHA1 b93fe37ac55cb38ed0750095205ca52778056d29
- SHA512 c48341d037746f75a6bdb296ae66e5ecdf53269af00c268ade2fcc34ab0b8f0cff13cdb8b181e15026515bf199af2dff9f5797ec1555c0cd22d1a10832e4b724
- SSDEEP 384:oVA2M9UbGFyDZRPMkbjjFUO+EySt6dZ9pOKAFcYGLjrC:oVvOWGFm9ZPvSZ9pOzdGLXC
- TLSH T1FB72E16C2A03BD48CCE2CBBBE9815B417CD59574647A1B33EB0B2EB203E766153E50D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawefecc93b-53ce-4c52-b74f-94e607595ea9.tmp
- Size 13KB
- SHA256 061cab39817c4bcc59d89073104ead54b1ac0aad91c48c5c360118efd2426a40
- MD5 4cfc9ba7bdaccd20f0ca88992f826e90
- SHA1 f7de4feaaa5a2d5a5fb138412d537412e226fbee
- SHA512 4bcd188226d36fa83b52366537db4dcc56c98b37fd8d80af0ae7ea056245c04f0f3e27adf513f4022f1fb8ee64adaa673053fa2dda52227755bac65ff640f639
- SSDEEP 384:HktVji/7U46C6w64woyf7BM7g2d+fKfPSowp3Vkq:HkW/74m6ZhfySHAq
- TLSH T1ED52C05BA6B9F3618F84425BC582414DBD1594E0BD09A30BF20378BBE0AF983ADE5038
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf1c4485a-b537-4526-9e79-2fe9369327b3.tmp
- Size 15KB
- SHA256 4226145e191894e9baa6f448209594a51e82acfd614541ef095812514bcdb411
- MD5 c4285d618532749a17d13c312df29b99
- SHA1 599d7bca1c26e813cea2b748cd0e10a02ebd2501
- SHA512 51600eedfb350198c654d6e6c6520f436e07ed972fa10b4ab37055fcddfc151c9dacda8440f6fd0c94528f92d3aff6b1efb3b1f02debae3c77e1b8b15753ec26
- SSDEEP 384:9FQt3xe2w5s15qS7wPCL8/oVw2AMHbI6MZh3xT:9Fe8QSCQ/cw2AkbINr31
- TLSH T1F162D0D29CFFC24332910D2AA1F49BDBCE8AE62863DD246D5157B60D23E582E01AC3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf488e32f-2d65-4af3-a00a-040711077859.tmp
- Size 8KB
- SHA256 a4109ab1cbeadf701d6e1d99817feb398025162a5c7d99d0c0ed718a671efc1e
- MD5 cfbdfbb42be3757b1767531a3ee24f50
- SHA1 553af81877ab742e7a603aa93584da70eb293204
- SHA512 ea02542d85e580d13da38665b314636352f1f87af2adedbda2cab56a0700dc5d2ac0c1491cf05063fdfec4cc75586e42b45c61ededfd59603b1d2654d7c11e31
- SSDEEP 192:Wcrspzsdg2DSfn2bjis3SyZHWj+k0oV+5rRGI1zwwzsS1n34sqsr:WOCYR++bjisiAHWD+5rRziwzsze
- TLSH T18E02CF58E94A46C16A2B56B03348325FD3864A603B5F5112C3F587E3032BAFF08A6CD3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf657baa0-39ef-4d6a-9f27-cb8162d7390a.tmp
- Size 1KB
- SHA256 39d0c4cca96047b8a55a4e4259fe6ff9100a9216f5924a74905b9be7f15d69f4
- MD5 eabba30df73c99b749cb9c2e31d1d510
- SHA1 e4402caa9c719915847759b09c7b45b6f8b51ee0
- SHA512 96b5c9ac17fe17732631be398ff247541050663c0ede9bb27313b8cf251dc8a6d6b942212aaf33e13481541120a0d411b16f9d64a920a5848fea5f1f1d5a3c97
- TLSH T1AB21B668BC33F205B5AA854DA2AACE440194D8958306FACF900B4F729B5EC88B141E92
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf7935ea7-e3ae-4e28-b844-6d9178b286b5.tmp
- Size 9KB
- SHA256 e3d942c79dc4f0392a5a7a82141e4152dae49699a27659785ec2b4f7dbc17504
- MD5 eb519793e626a74960e6fb083c65a634
- SHA1 3e3ba25bb7c0b425cafa372e7bdd6aa97b5819c8
- SHA512 94bb1fc2669a9ecb8e9d71f31caf0b55d438d99f63e1960615623a0a331874d00c34129e4473e5b1251554037bb3ecf3382c457542899301093dfd4472593661
- SSDEEP 192:TGgFra6WKUVMRapDqEgc65L69D76BXhYD8hc+7b7G82UqNRoPhpSsPe:KgJa6WKU4YD5gfL/TSs7z/hwWe
- TLSH T13012C014C6ED3EE12B3D836892A3B5454076B0629CDC4C5AFE0169D9EE20073AAF0F85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfa9d516e-7ba9-4da7-a5cd-c35a1b58d72e.tmp
- Size 1KB
- SHA256 5c030a6b4f3cefcb12f7491bbee09e239a0f0e47c3afc3deca08758bbf2473b7
- MD5 33a85f3b314dbca0d7699acc34027805
- SHA1 f48c8bac93775704b340e3ae04b9fa9cc34194d1
- SHA512 8c00e388d68e1c078ebe456d9ea520103cfc4fac58826e874f043c1c284c74523634e27135bf96a838c0af53e7b415c14f4eb24f3c275c78eeb1c1b6a2e86d9c
- TLSH T1B7412C8DBAE62837B54278EE84E70883E47A418D775E6415A1B34E1CE00AEB500FD001
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfe8bd790-8301-4c1a-9544-f084d78f476b.tmp
- Size 14KB
- SHA256 f47db6f2906562bae79fce868726ab7dfb70d9a0770b06863a4a2fa60fe8f8f8
- MD5 45a271ded87092c099c4b157907ff5ca
- SHA1 d02d9e82ea730475139793cba61cba83f170063b
- SHA512 3e000298129b4daf34130b4510052dc342ca3370880c5c916fbb87aca4678ecfb0a85569aa78835362b9fea7609d00b4cd5c7e5e2ac685246d8412f778cb32c8
- SSDEEP 384:DZPwGrId3u5zd4CDplhTm+c1d//Q4gnKFkP8ZfRYebiDlASsNnUHGC0G:twf3u5R4CDhTm+KdH9LiKfam+mC0G
- TLSH T12C62BF5E8DF414A3F7EBADA1ED452A80108B80E8BAF1484A1EB741B0C5A354761DFF26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056
- Size 203B
- SHA256 0bc5ee51797bdae99b3c358c2ee484c2784cb669e967367d86264ac42e218f4d
- MD5 1baeb668fdd6963807d886fd210794b5
- SHA1 386756b7f85616eb000ba6b5339074a1030e9d97
- SHA512 2af622bfbebd7f51d7ca31202d2bfa9fae8566e472602d183633ac4f1a3a2bdfcc80be98a533a5fc26836493a92a815ea252237324b83a0e2fa2ffb2a80d5d36
- TLSH T150D022242D107AE4A2E8E6A492A43FA70C280D22101B05B910AC062700AD183038BF2A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.198791105623ba4927-6506-4580-a718-f1903959f8c9.tmp
- Size 1KB
- SHA256 8ed8c00a453136e8d20532a949da24ad9cc77b2161f7bc461b727858cecfbbfb
- MD5 c47711220f16ea826dbea48ad22100d8
- SHA1 fa61a7542e709254aedc3352d5055eef62712294
- SHA512 ac9b5eae1beef3e934a272e23f00c03926d564b0ef130fdf31ecf2e4bb4ce8910794f1a5157376fc28397fc77f889be2df14796b374c99538dcdab32dec96a76
- TLSH T171114651AE013DF5AFA6CB3DB0F03A670B3ECC93210645BB21CA000E06DCB71D00792A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056bbe3f7cd-a9fd-491a-939c-82a29e3a5b53.tmp
- Size 2KB
- SHA256 34e35aa831d73a78168e87bf35e142a3cfae04a8801581a5a3829101a28fdfce
- MD5 f5c3c624274ceb8c62f9f3b33ec1fcdc
- SHA1 2b34d33f1a02f232896cdd1f1aba008e50581cbd
- SHA512 77c991add05b94f727fc7a2e8577980653b64739c2259a0b8ff929b3cd17d13678a5183c1eb114180b812459e77eeab7aa3747c91315a70b339e7e3997d542a6
- TLSH T13F41D1559E4138B9EFA6C73EB1F13F170F7DC8A3210164AA31DE404E19EE6A3940751B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056c2fb45c6-ac4f-46af-8052-2951ffe6c995.tmp
- Size 265B
- SHA256 b5473e7cca35e925c397eed6b95dae0ebf1f5d033e8f7948ba24bdbb8b698a1f
- MD5 94fcd96f1cb88cd9fb9b9a3dae57d0cf
- SHA1 bc12f5b3cb35ed7397b89d8a7d265128056e05c1
- SHA512 d9ef2e9d943aa3fcd3e4d31d3bea89ece4ae18d97b1c563fdcd3a514ff18f1cdfd6fd76f8e2a58bf00510928444a13f812a0483c8725adccc54c8ceaa8893d62
- TLSH T133D02B901545AEA1A2D4EB3452707FA712394A170406A4B9016E061701FD16A0342B22
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451
- Size 414B
- SHA256 c8d5c86983768b6b314b7be6c95668d77c8c56890d07962b8d270471422da936
- MD5 f6d96a70cf04d5bc7a8d7102cb4c5e89
- SHA1 27cb255b5e68f76af19f7467f9f9a909a3f18d58
- SHA512 ca04c926548984fe32ab4372570df643394f821c93c3dd43130d399e856ad12df0736a9c635337de9b8b4672a4c7c9b32356c3aef29a12c2f066d7ded94329bd
- TLSH T1F2E0AB01B82A5211AD6C8BD237FAB5A6CA7A4404E88040F358EF182E135820D8614322
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034510e8af586-30ba-44ea-8dcf-872aceb3184a.tmp
- Size 695B
- SHA256 4a9710afe7a674d28a85dfd2c548e19c28658dca4bc17a032838f0a0e99d4608
- MD5 99da964761edb4a1f5349905bb1f7d34
- SHA1 bf76eb2409575102bc2763602aa0ba50b20342a5
- SHA512 397cea4f866d20afb847d541dcef238cde65ddb65ae89b088f9202e57277fe09aa2e433b06f4970a56bbf9c51fd39dfd9b31e5af0aaeb8de400ba02c44899fd0
- TLSH T18A01CBD6A82593215E5DCBA23AFA3A99CBB70988F89054E2A99E780D435E25E4001285
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345119149867-c520-46b0-b0cc-fc66d2e7d9f6.tmp
- Size 605B
- SHA256 bb23d935f527b8065c264a63f3930bced72ccaf8d934b4b4a366f04ed7a415e8
- MD5 31b86f7d4ce6ea2d82884699cf32dece
- SHA1 300a927c9b068c1b577987c2d194a5b848a36ab9
- SHA512 70bdc298ea3fbeea02847e7f82bfb39e66c66e2e0cfb6b28cc8e143eeace81da120bd5c1549d45b7f8be0542bcd76f08a64db5e8f299f26a1139df7f3a08e66d
- TLSH T1E6F0ACD6B81553319D6987E33BFA7A95CBAB8988F89045F29C9F784E036A26E4440241
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451197afea1-57c1-4e12-9dcf-1dbc4442ce18.tmp
- Size 891B
- SHA256 00c315706071c7f9f57217b41f3c739dc0ac50955504ebbbbba02cbd1e79877d
- MD5 2aa80b9fe6d355bbc01e5896e14c4868
- SHA1 732f38043e59d41422d41e31d6b9d956b856a61f
- SHA512 8c721abe0e7f81f396bd8f95143bdde2d0a2c1c18d4269a4a28a8d86bee422fb092f2a07a8de04f5ca25239a28d7ce033e9d942117aab653fb549cd357914aac
- TLSH T13F11CCE7681487326D99C7A67BF9799CCB7705DCF88084E39D9E685E438A2AF1400381
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034512b285ae8-22f4-45a3-8e71-48f8a1e8641f.tmp
- Size 1KB
- SHA256 1778a553eb0959f39ae3dc82c59772af39db68c08d2fb7b980f635979cb773d5
- MD5 a05fb0a34c441913ecdd537ef215c9b3
- SHA1 59eadc4df603ee44cfa189a957474ba8803605e6
- SHA512 9c665e00dcb00a72139b6098802e862a3d4a626ad453969c4bf2692685ee435cbdfd1732578a16d6b990f4c9bb9b69179cf9c3a59af145015347bfb2c2ac9602
- TLSH T12E21AAFB281147315D48C7977ABDB66CCAB749CDB88094E6AE8D695D03CB2BE48003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345136675c08-de20-48c7-be40-3acc6f6035ea.tmp
- Size 1KB
- SHA256 199a8fa20a7db30f965e67071246b29497b07e8770bc83c60677334ee37661b0
- MD5 b9331fbd065bc7e57c79ed21d946e89d
- SHA1 501352cf6aaaf8fe9a89b306500e0618e171cffb
- SHA512 5bfc9910feab1f70639c323c5cda2e02e8576ea373fd855b8c6fe5a8541c38d92d6047dcbb7998b647f66d785c1f42393598966a3e7b3fa7b157492329bcdc52
- TLSH T194218AFB181047315E49C7927ABD756CCAB748CDB88094E6AE5DA85D03CB2BE18003C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451410a9555-9e51-482a-9063-e20906ea6f83.tmp
- Size 3KB
- SHA256 b4d60577db5038cd684401a01eca00fdf460f13434eae7d05007f69e0f18dbae
- MD5 ac2101786a5183e1a474f7feb04b8c98
- SHA1 c962d529621b1d8131eb0508ad7bea6fd4f54e64
- SHA512 4b707d3a27fb2692a5c5c543086962f604dbd6935c43d571f309b13193b137c9ec2bc51fc2d16d7c41fb4e66b215ccae9a1c9cc6653e14317e467dd55b187f32
- TLSH T19B8151A6A9013A75AF59CB6EB6F13E2ACF7E8496300060E675CE000D12EE7BB4402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345155ee50c3-7a26-4329-b9a6-b91326d763d7.tmp
- Size 3KB
- SHA256 631138211b0f9de9fcb858d7bcf06a99705bc1398893cd76e98a819facefe865
- MD5 01da2f4a028f8cd31d5b4c68531390e2
- SHA1 7f9d0381cc5209a49e79ff76c2425fa2996644a1
- SHA512 9ac5c010e3c173565961a46103ee787ea2019efda2d8dec0db84ff6e2188b5279b4584eb040d056d9130b84dc31b9fc4b15182715e94be9c648a1c880d77b868
- TLSH T1C88163A6A9013B75AF59CB6EF6F13E2ACF7E8497301060E675CE000D12EE7BB5402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034515de84d29-c9c0-4720-8e58-eab889be84e9.tmp
- Size 1KB
- SHA256 afcae01c3b50be3ae1dda220157ec3d3d00c7b697bc86f95cfb6038df210bf92
- MD5 06041f2cdb4b600e3d332c3c31ed9c38
- SHA1 8b637a0d7b617d775d49c3f0f17f8a35f5652d98
- SHA512 e1cd9e998c188455269fc9e8b69aca7e68c9308d2f9d9847374e4e5b6445f26995cfd2409893b8a1be4bfcd60dc409a8fbda7122b693651f41225d19888e11c4
- TLSH T1B231CFF7141143715D88C7967AB9BA6DCB7748DDB88095E6AE4D695D03DB2BE08003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345163c6ddea-ccab-42d2-bfcc-10fa9e680dc0.tmp
- Size 3KB
- SHA256 bd276810875a89359b0f14e4021139bafaf2852920bea6f0c3979a3caa7921ea
- MD5 cd300a5be59389d84a5353efe3d360bd
- SHA1 c8b6558ec50f7b07bfd4e45bae8288544f8d0040
- SHA512 6c355e845030c83b8f8dddf82fdf94f4a540e77202247daf89e15d127793296d0171435eda240cea5d598fd157969f84bb9a40885ff7e8cd965dd604d9d511de
- TLSH T11C7164A6A90126759F59C76FB2F57F2A8F7F8897700064EA75CE100E12DE6B74403247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034517761a132-74ad-420d-b83a-c56b5dc1f919.tmp
- Size 2KB
- SHA256 623718f1592974b18b31187037c92245d8111db08944b0b4c90701ebff029ff3
- MD5 1021fa8b299271c6120bc1599574014a
- SHA1 6d8e22a67c4de4d2638e3eadd4c3f434222921ad
- SHA512 b4bbfb36b715f5f33fd39fce4519ef62277593b61d93593ac2e3e5bd99d6c349c1b53c3f7d5250a1a26057b253963c95d69ce990600064769db9b4b22f80ae7b
- TLSH T1614174F759006B716F59CBAA72F4766ACB7BC8C9B44094E76A8D500D03CF77D5402386
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034517894c5f3-8493-4316-8f55-5939c6bb6c0e.tmp
- Size 507B
- SHA256 c8eec34d8e5df2bafd3384738664aaf60b61c97514fa3ea2a53873ab9019a620
- MD5 59afb2d7d7c5eac0e21ff1f47af7d043
- SHA1 db587f6849e1512bfef3d1fc456cbdd44b5b5168
- SHA512 312457678376d53e3fa4ddda8d829c857004d2693f9532b8208a99552c410d9d5084b249f037c9bf5779e2d39d328305100dbf90f654c47055d2340b7421337a
- TLSH T1A9F09E95FC254725BD6987E23BFAB9A5DB774948F85044F368DE585E431810E8501242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345194baf067-1b6c-46a0-81d7-a0cd0182254f.tmp
- Size 1KB
- SHA256 95a30f6c03092273cccace3c48e07414440e3e11032feef34bcce772d406c6c6
- MD5 6d6fe8258355fc7d47ecc30fe75a843d
- SHA1 56a67ee7b547f5f26b1dbf5c2b5560678f7dd662
- SHA512 6dab5944a7b42c430f2f171db04d81fca576b732f792f1362af39d6813e0fa8554bd23114311b775915a22101e0fba27c175f0da5c58e477d79079345daf3757
- TLSH T127219DFB241047316D49C7967BBDB66CCAB749CDB8D094E6DE8D695D038B27E08103C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034519f098d4d-9126-42c3-b22e-d6e05bdf5f4d.tmp
- Size 800B
- SHA256 a6b2ef80b409c5e33c132da5b836537990b9e0dff1afa9e73091a84b6b46b2c6
- MD5 26cbe7b7a4cb547b41ab4a551458daab
- SHA1 1105e610a6a8fc0c251f2672612c0f5426add52c
- SHA512 ce291a3a934021c1ae659d25e176e2bcc21de20171c039c5a01245afbe0708c2e005d110f9a2913ad5b45b61d78d954313b64c8c7e5587a64c9d096f85b5baac
- TLSH T1CE01F1E7A8144731AE59C7A23BF97A9CC77305DDF88044E3A98E284D034A19E0000381
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451aabb2ef4-47f0-4f92-ac7e-93a0d0d43edc.tmp
- Size 3KB
- SHA256 78312af99acf81577368e291055964b6ed1184553ff53daa1d229e437e1cb738
- MD5 e55cbaa940821f330b3b7fa0925cffa6
- SHA1 79ec371c5c8c8e7e993aa16908ce2b31f47db9cd
- SHA512 e130ce6238402e873e2d28ffeb3bca92f10c1dfe8edc0f72f75f7ffd40ee599f0877a03722ab79a75e2284c6bdf6af2f7fee419cf33fe80c956f942bf9f54311
- TLSH T1878173A6A9013A75AF59C76EB6F17E6ACF7F8497300060E675CE400D16EF7BB4402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451ac84905d-56f4-429d-880e-4926001d25d9.tmp
- Size 3KB
- SHA256 be3f2f03ab04a22878e037d0dc87bba9e5d31d4aa4e5bb133b1e1bb87d3205e5
- MD5 4d549cf7534d6022efb14d9119010b60
- SHA1 3f3f76dc064ec5689486a4dbcf9a0178a83e1984
- SHA512 7940c0abda8c47f19e99b9ce80b161b53e57a41b822de3fa557e53da9c67439c1bec9e669af7ed8c341e70d7393ba59cb770d5e53364ae6f6c4be1d4e3f52322
- TLSH T1A4716496A9012A75AF59C76EB2F57E2A8F7F8497300064E675CE000E16DF6B75402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451c5a91518-8451-451b-8533-c0c8a4d3d43f.tmp
- Size 3KB
- SHA256 d37241b34f97f4c8c8aa484ca783ab1f9352596b627e3cf1243be11f0958adcc
- MD5 5bcbefe80deb3832765f40e0dd800d1c
- SHA1 0de819f8ff4958372d50f7962f5fb5597ce69ce0
- SHA512 046cba0d93d5dc9bf7250bed91228d1622b9a32d441b88d6f74a3095710fc68da717831a3b74cf2ca39dc476859cf76d5ac40a152996b739f49b6b66e06c6879
- TLSH T1E96173E699002675AF59CB6E72F43B2A8F7F88EB700054E675CE504D12EF7BB9402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451ca6733b9-64ce-492d-9705-59bc211ec560.tmp
- Size 1KB
- SHA256 e299621a114b005caf15108c329c343ac14453eb6ba5d2c1ae570c53f46fdaf8
- MD5 d9ef8511f3a2a687ae2e7ed67d158177
- SHA1 4763324f7fd4f90a4e98ba5e011d20e7845784c3
- SHA512 ccfe51b6a9ebc9b9541071eb14cfe49f96fda5db667e8ea270f10b7fb5db83a7332ffd5641cb917dd7b860f66a2b10134b7bfc0e9398cab19345d8a8c4f4ab7b
- TLSH T16011E2EB281483715E58C7567BFD769DCB7748CDF88084E69E5D691D038F26E04003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451cbdb8345-22c1-4dce-a79e-43d3f104f208.tmp
- Size 1KB
- SHA256 348310b076af072c1fa30e7e7c74dc2496fa891f0f8b4913d026d474cfa504b7
- MD5 0646ea2be8565dcda0487aaa7a1d21e4
- SHA1 b0ea2ecc184722933e1058af4ff91670b8b1a579
- SHA512 26410da58113d4e9f7ad9119c0905621e098a610a8220f577052bbfbf1086fa53707f6bd6fc271954d0d868851d0b3ad6f544086ac8968192f38bd830721fad1
- TLSH T11D31F2F7281043355D48C7967BBC7A6DCA7749DDB88094E69E8D695D03DF2BE04003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451d08004b7-ffae-4af8-b032-854c7047b41b.tmp
- Size 984B
- SHA256 fc106f106113d6baceacc7661f77fddbd55f13ebcbaa069200e583c8db51bcd2
- MD5 6b55c0cc5a979ba0340fec1bda8f3962
- SHA1 e7d9b62e9a326edf6573d78db8ee0b1afb48056a
- SHA512 d4a039d48c411f9071cc4e003cc614674960f2d80985cc4c132b137f882acfffbe269608a4c0565f654507b48d2eface01340b8316eda302a28395821821af03
- TLSH T1F011BDE7781443726E59C7A77BB97AACCB7744DCF88084E69E9E684D439E26E0400381
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451de3354dd-99f0-4f85-ad2a-bb0420ece161.tmp
- Size 3KB
- SHA256 052a9dde51527dc8d002f97836fab1b49dab30bbfe40c99149188e6e408127fc
- MD5 bd686384baadb94e0c4bc8d5e49a546e
- SHA1 03a9e5a0143660ac311c1275ac4d580006b519f1
- SHA512 8fc10ccf901bbba2bb6e9d22f87fb585d6929686104d1acf97fd11c8edda2344e4e8cfad7af99fb1759db57bc49ca97fb5c8f5dab6ff1e1383f096580d7b852c
- TLSH T1578163A6A9013A75AF59CB6EB6F57E2A8F7F8497300060E675CE000D16EF6B75403247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451fa51720d-2ef4-4b7b-a83f-94951fcd1a6d.tmp
- Size 3KB
- SHA256 2c984ad713bf973697b9400e38345be38dc05c7bd63ff834f73090f43c03bb09
- MD5 512652167489c316372c020154852698
- SHA1 cdc8ac0ddb6120e03e9282edd31b13ae6702afbb
- SHA512 9e31c6426f245c248794bcaac40e2ed88ef41dbd7b70c4947a791622ad331465f1de775322e20ccce696c3e2ac5dace8a9ffd68122e6a5ed7a94be641b377c8c
- TLSH T12D7174A6A9013B75AF59CB6EB6F17E2A8F7F8497300064E675CE100D16EF6BB4403247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451feda5175-5bb8-4c03-8f20-4804340e8787.tmp
- Size 1KB
- SHA256 4da70104b37da03c55cfd8c8096a5ffeb9696e17b966c9b07dcd3e9b512d0d14
- MD5 b25a2ca42ece4f9320d6122d64543d2a
- SHA1 94efa462043f6359961a70083c9cce8886995c1f
- SHA512 c8fe7c82b18e805f0c44687ef450e124ce96412705ab7859259d1c188b96d8b1429bd91f18d749cc38d325598e82627dfa977355dbafbc3dca30d69c21bc3216
- TLSH T1FA219BEB241483315D58C7967BB9B66CCAB744DDB89094E69A8D684D038B26E08003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762
- Size 171B
- SHA256 1ad41c0baa66f898d10dbc4f713209637a281c898c16394f82e81dcf9ae5b69a
- MD5 7121c87fa300f5c293434c3a2b5a6161
- SHA1 f2cac846a2fa5f262dc0f831d6c81e8ec3366bbc
- SHA512 f57175076ea72963085e034c96f5ca62733e4f2f4c2a81456870a100998842b6c0dd36c0db4720dc853314ffd409f3ec4d64f42f934533d06a263c10e4c9dd98
- TLSH T12CC0802779A155989D4328BDF114FE6C155B05015CC151561894118941D90B47E5F251
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762379c529d-a1b8-495e-a73b-c3dbec6c193f.tmp
- Size 1KB
- SHA256 3d5740340f765944da7a59a8e9e2cec1b7e8e6f89bad832f4a0fdc7acdfde6b9
- MD5 ef7e0029cfb2762a53e8af12192851fd
- SHA1 3b67fefc095077ab63ee06562673cc1de3b91528
- SHA512 5a1d6a12890c47700e0bed35a04a0991c7e78366f95688cf9c052df61fb65c804b258fa4cfcc015de56d9a8e04c3d56b805575b2dccc0c53ed97e0b9b98214e6
- TLSH T168219DF7645003254F0EC761AB787D6CC5B389DA7880A5D7AA9DA58C139A6FE54112C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.206311476246353797-f3eb-45b2-b3ae-969d37652c98.tmp
- Size 576B
- SHA256 47b7caa6a9c3ef7f1c4761310b747ec5dbe6e2bd01cef1000f4904182c73dfa4
- MD5 7583ac0b53ea9115cee4c870ef6e6a7e
- SHA1 b8bc5f2e626b3149227b96852c84679b42092944
- SHA512 0ccb8e615062556951467e573e87f33b4e1a685d603fd965a36fb0fe2df0f87137de556bd664d216236b6484287b8eb3aebdc3e530787d5d8352758c9ea99068
- TLSH T16BF026E6B94507049F4E87B7F7B87DADD1F7C980741055F614DC608D027367E1D262A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.206311476275e10fde-0b45-4d8f-a26e-9365b0c20b77.tmp
- Size 851B
- SHA256 7cf76f9255cbdf12c7de178336db6bf8f24517c0322d9de471892de06646f1ba
- MD5 1327c42945fff8daffcab94451c6b0d7
- SHA1 d954541afeb664b7f73bd346b3aea070b4883577
- SHA512 c20ef1de2313117a439dfc6e01238984d10ec880b05dff9b321dcbd3af7f5ebd69550541e7dfa7af2e54f2ab9ae914b89ff136a2d99c288deccc0816d4debbf7
- TLSH T1740112F6745403215F5ECB76FBB83A5DC5B789C9B88494E255DDB24C025B2BF5811280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762939ea9f7-f7b5-4812-9c59-450560eabfa7.tmp
- Size 1KB
- SHA256 6d563ce187537c8101af21e3c048d95ba544326ad0d36f724620e247b836345e
- MD5 b0bde3759f2e66235de2082fcaeda4ef
- SHA1 30c0dd7f0af8300e0189a8d258705c61101ca1af
- SHA512 e3063f13c7a2d765b6d2109d49ae8a51d12d878ef8ef2747539899cb49724509e00b5d98ff792324b161e0e981671a7c4ab38de2c0a5893383488168419f755f
- TLSH T12121D0FB645003215F4EC761FFB87E5DC6B389DA789055D7AA9C944C03972BE54112D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.20631147629ecf8365-8cb9-4e3f-8ab7-f3a3d7a75e0d.tmp
- Size 1KB
- SHA256 a52844cc50a3e94abc924305f19c47a207de0f03097c77f10bf0238eae8f1a1e
- MD5 f62347ff1a7e41177f4c5ec24f50debd
- SHA1 10383064a2eb9697b7c3908d5ebf9bfb7160b990
- SHA512 3d64fed0eeb440185ef9db9f6ebec56408c35898c61f703ec6aa710509e4a030af4e23c03c638bc2af41cb77293b61e113da64be7567eca1fa9cf7a354ab8dbc
- TLSH T1DE3104FB245003250F4EC751BB787D6DC5B389DA788066D7AB9DA44C03872FE08113C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762a4f366b9-4a4d-4df0-a4f1-ef34fa2afbf2.tmp
- Size 200B
- SHA256 cc2668ac34b8cabf03c7002aa9cc76292103c846a1b823595ff119bf81817c6a
- MD5 16a46f5c4f60a17a2072dc01829fdc09
- SHA1 661d3253ae456d8681961fc2f6d35e11136851e0
- SHA512 2896f8440279de72afbf313e8814414d30b3a523e6678087df20e2f0b6669e4e0c4d3df05dbc86d2cf8601ac94a1129c23fbd2d99e99d26e9150d4ac4a8896fb
- TLSH T14ED022A276921444DD2A04FCF028FB2D249B80212C8062B104CE216D01990B41F2EA81
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762ab615a00-4acc-408a-922f-cd5c59002e11.tmp
- Size 674B
- SHA256 855696731fb52d33787128f4297c1c8264acbe47b87d680041a971e761eb1aaf
- MD5 92b84fbec5e3e5e3a1034f8473060f97
- SHA1 87fba4aad0e7f770cb2bb6eeca5a6a2da3f3be29
- SHA512 f9c1e14d9405e3e92f774e441a828620cfc59a2bfd72ea34612c0c9cdfd1a79c20fe15d776af8f8b2304c2f2e0f0a308281742a2e415523e3f46e3c2770c77bd
- TLSH T10C0123EAB89017149F0F87B6FBB83E9EC1F78A81B450A6F204DD714D436777E1815150
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762c89e9b2e-991c-4617-880d-54994ad6021e.tmp
- Size 279B
- SHA256 139222cf9f282ff69779613c34e2b20cc7805e3a2a1e0f0c169f0eba16a49448
- MD5 c9c1bbff7832f2b3b239d868e03c0575
- SHA1 d803c7879bf25143919137d6e3db59d5005fbc8b
- SHA512 b7f8186dbbcf103e920e65db9a28c46c5707cef430e2ec0fe28e1366b7441f765e71fa18e3b84924b013b16901ec4626884a26e39f51ab22dcc6135f845099fe
- TLSH T17ED02B15F1D20841FD6E08FEF0557B3754AB8D105D2592B444CCA24D021587D5F09520
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762c9fe62be-4058-44f5-848d-01f585fbcabb.tmp
- Size 1KB
- SHA256 2b8be7bb37f4f4107a76851344923d5fe599c47f88a22d097a972197538bf287
- MD5 8cfd02232a03bf639cc8e439c225da86
- SHA1 0bb89cf94ac1d8253a20c4aad85e24c85ef8706a
- SHA512 c58398c950eedf372933f7bff78ce088fe50166b29b4f68d7695695f71a29396be089442404737a9436081d04efb1017b4cfa96ec839d55735ac83fd3e96d6ba
- TLSH T1EE1102FA645403214F1FC7A2FBB87E9DC6B385D9784095D799DDA14C02576FE18113C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762d3e6f2ea-89d5-49b4-956e-548ad3db2208.tmp
- Size 945B
- SHA256 055879e654b61688e098c4d43046438d96a3a90c09dc3e7c33dc0b0f0c0a8a29
- MD5 2b13dec4d7900c12f99a5296afbfcf9b
- SHA1 f0a0348da696bef5df59684ecc075127283cc55f
- SHA512 3ef8e44d029cdd43df3b7e685ee256fc201fffc6bfee091f3dff1dabeb909fa60b67528563844191c99fa30bd52a8bfdf3a7c192c11458d2ba3b4d6ecd232acf
- TLSH T1BC1110F6644003215F0FC776FB7C3E5DC2B389C9B88454E755DDA04C02976BE0411280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762d731bef6-0b2f-4360-8ce2-f93ebd994e40.tmp
- Size 483B
- SHA256 c47ceb478d8dc4402a8e164861e61b5d7adf0b4862b4a043fd2ccd3730cfb186
- MD5 80525297d9a318d7a85a65b501b9a9b5
- SHA1 f76f1f0cdeb5a9b852f6a7baf3c9285930399909
- SHA512 bd6fbf1c047820d3511fd04a2ea4229fb1b552fe9c33602db9dcf163a086ceab5aace5d4736cc7611236b3de5aa6b4667d9b42355a4e3892dbe115b952712c60
- TLSH T1A3F00E9678841908AE0E8AB7F3B5692696BB8840B80065F104D9B00C0162B3E181D100
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762db13acd4-5e7e-45fe-bf16-cd4b0c4900a5.tmp
- Size 764B
- SHA256 aef40b5c43ed006563e01dae04bf375e60b5403026305e081ccc444c89d854cf
- MD5 c6151f72ab1dc796b0842b16945c53ec
- SHA1 92aaa2a8bb268f3d933dab26e5403a573df27066
- SHA512 76998c27edd8a4e7f0f0d923d5cce8e6366a8330711339f3f3f58a280bc8126032bf3a2431df9df3530b0f9e95d6b715157bce3eff98e4f095c224a10fbdcaf3
- TLSH T12F0120E2799003149F4ECBB7FAB83E9DC9B346857890D4E214EE704C02672BE1822290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762f025a6b6-2940-49a0-9f36-b463c1b5efa3.tmp
- Size 1KB
- SHA256 804a362f31f3c72f644fde6b53df8e4fb1381f5e4ac22b506d5b46190b8c8acd
- MD5 b827cc51a7ad0b662f9d4b80a28698c1
- SHA1 df2bc7a9f51fc0a9d88a2ed6e2a94d56e6c9b503
- SHA512 640d7296d5ad4915b9b5f5311cf907c14cdd0f58744470090fc38b401e38dc52aabf3e49fbe0be4c380f8db55985db536eb08f809b6884060112e9ce63498ead
- TLSH T1E921DFF6645003214F4EC761FB787D6DC6B38ADA788095D79ADCA44C03976BE18113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762f1fd114b-8d95-46bf-8f8d-b8d1359a6c72.tmp
- Size 1KB
- SHA256 23593a0aafc73f052bc778df8eecfc77891bd48b136f693dc67616ac30c02cc0
- MD5 30d9e28eeb3ab2d9ebfad0fced87202f
- SHA1 43f17cb13ea9d303ad52a633c6872042a2a75e09
- SHA512 2aa1823b5d76c383e0f4428b06b4226879f499634e6964ab0f8aa4d2a5a186d32b9a6069416c42b1d2d1bc21f1b5382c8103e65347dc472b50f2b2894b888c44
- TLSH T1B12100F6645403214F0FC762FBB87D5CC6B38AD5384095D799DDA54C02972FE04013C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsondd60be6a-0f7c-4b1b-8d64-447bc7e8493a.tmp
- Size 652KB
- SHA256 1b7341b6196f0bb3a8217bcd76ea19433890bc29b9e995e980f35aff324f6399
- MD5 aada6baaaacf807f613380234a86a2a2
- SHA1 30bb5959180a36c0bcc4a94dc29d514c3103c662
- SHA512 525f50243a1ece97a47884a5bfbfa22d80c360fbf21677b2d1bb39ad6c079683e67223c2921ecb05719e7114eff8aad20e1ab7a2163a693d1bd3cd0285ebe3fe
- SSDEEP 12288:iAqWHPy9GFEtzYMP5LOSjmYLW/rqOIigMEX/3Lt9SfRZPqxbOB7FO4O3kcM3e3XI:ue06b3Mi
- TLSH T16FE4A8AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State5e1e479e-c7fa-431a-a022-b975d5d834de.tmp
- Size 3KB
- SHA256 f4dcb2a43bbbef17691b4de0ada51491a7f1bad1808bc4eef875da419eaa56e7
- MD5 40f38d8683a032848197275c0b252073
- SHA1 ccc24d7a5d80b50831bd3c24634096df7972e6cd
- SHA512 baff05587f4c98e718b404f48437694c3ec5b6acf6021e4e49d20e34b8622477604fce38a1e1d877885158987e18c47dd95cb45a635a341243fac79ddb58c884
- TLSH T1C961FA306C659EB7ADB5D78EFA4A3B03D7629107E2501E8C90EC8D0D15EF66E0752C36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statec637fe7c-9779-4bd7-8450-cda34448a173.tmp
- Size 3KB
- SHA256 193a70aafd4869ca9da01693be8ae86618c1a88b1e0f97bfcea3d828e8791d72
- MD5 3ff7a2900db0585113b07822d6ab513a
- SHA1 9cbf85beca7c3dd611d4cedd650786a6f206e706
- SHA512 1b045824dacb98c2978027d3c74d1aaae8055bb03ac0905e7f3d4800ed5d59d4550b8d8131032124cd8a8e865c23782ba754434d19ef8fc9157ed0d6ce0a0e7f
- TLSH T16961FA306C659EB3A9B5D78EFA1A3B03D7629107E1101E8C90EC8D0D05EF66E0752C32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statee08854a4-9f9f-4fc3-80d5-d303f48c7a11.tmp
- Size 3KB
- SHA256 7e780da0b169e11c0e078f22eddfc401c52a57c0208eb462ee62e3d0cc7bd7aa
- MD5 f126cc4bc467099d79ba2727ea5ffed8
- SHA1 0f949a61cd3c5ddfefab43e93a87a922a85a0555
- SHA512 a0ff5814dace206169cc853aca97631ca3ab1ba1db6be4cb25829bdbd3a054801a3205732b7c3a3baf764053b7c4c88b410dff2f450d266c217d49bf6f9ff7e1
- TLSH T13D61FA306C659AB3A9B5D78EFA1A3B03D7629107E1101E8C90EC8D0D05EF66E0752C32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV28c3abb2e-defc-4dce-846c-0f03216f2b35.tmp
- Size 19B
- SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
- MD5 0ba451e89bf7a6a0144344570515f79f
- SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
- SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2d6bb8034-8c47-4eac-9602-f836deef0116.tmp
- Size 11B
- SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
- MD5 78bb337b5e38a8a32331f18d8a2d3cda
- SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
- SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json77eb0110-f80c-4566-8dcb-72c46380d17d.tmp
- Size 151B
- SHA256 c17d06886cce19bc817b8b3d1d5c8ec4aa35bb902e9ca2cde86268260fbb3e9f
- MD5 a66580a0ac468012f2545b4910fa43a0
- SHA1 52238b41fccd1a4d7251b284af4db0b85ccb899e
- SHA512 bede3e6f2e73b203ff0a9087101e9be9a7917923c2e5a59968988462b3e3c7d757257d9f69a9ffa0c235608a00342d50e99b75b80c8fada079b624d45165c36e
- TLSH T1A0C08C0C0DA328A7E0DA0A8800F0B568C294F20BD8DBEC2E22A80A358D80A4720AD4D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.jsone49d4c3b-26b6-43e9-9023-016f62240a7f.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Windows\SystemTemp\scoped_dir6892_1190386881\opera-one.jpg
- Size 194KB
- SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
- MD5 c18898ca5a97bc5807f3be336fb1338c
- SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
- SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93
- SSDEEP 6144:bcztf14vie9cI/+1YhN8iuRIHN2XT7/N7:bcpfmiscK+QReT7/N7
- TLSH T10014125012852B6BD4DE763021AF362DC703F5BEC63E94065180AC5BD9CBC931EE7BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir6892_1190386881\persona.ini
- Size 207B
- SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
- MD5 a2294db65c800d2e518ec4943a2dd187
- SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
- SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53
- TLSH T19BD022A621820222D203C79C207173CE9AA692588A1442AC03EA70A3F21B2A9C297D60
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir6892_341129755\opera-one-dark.jpg
- Size 349KB
- SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
- MD5 fc3dafe25d5bc30a830ab92aefe52634
- SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
- SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829
- SSDEEP 6144:SXn5tlDpMtckM8FeR5HrNVvuxQiW3qp6gIQ7B/7SoK2RIFW8aE6mM+z:QnfMtc/RBrr0QiWc6TQ7B/7SoK2REafC
- TLSH T1A0742397ED4262D66B26D0F13C52692FE3066AF31728454B322424F7B3A1C1AD1FBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir6892_341129755\persona.ini
- Size 217B
- SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
- MD5 8fc4f4bf76a946d682606a6be94a822d
- SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
- SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488
- TLSH T14CD0235211470321D103D7D920717ACD56B65168C604539C03EA7093F2472559592D50
- MD5 SHA1 SHA512 TLSH