Analysis
- user interaction
yes - max time kernel
54s - max time network
64s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 12:42
Static task
static1
Behavioral task
behavioral1
Sample
OperaGXSetup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
OperaGXSetup.exe
Resource
win11ltsc2024-20260911-en
General
- Target OperaGXSetup.exe
- Size 4.0MB
- Sample261014-pxmapass5j
- SHA256 312ed184f28e7cb04396cdccb5de4a0e11b0034d83acf3028941f5944cb8fbf4
- MD5 89eba0157765c7e21f48d0beb585b9a6
- SHA1 62a85d9fd0161837a040632fdebbdb73ae649b97
- SHA512 e3e1da0bd55ecedb8f481cc761af043b1c3fea94d436fa9d88e83d92e9779c2e4de4e93c2b77398006be19bb16dd30996bbb986170f69b6c23c04667c10ae1e8
- SSDEEP 98304:tAD38/xFDrGcOv5ZUgmydCC69yOK/Gu99VuZbe:C38/x1kvjTCT9yOK/Gsso
- TLSH T1191623127BC140B2C69224374F79F75A87BEF2410E6616DFA3980E9C9F60193A935F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 39 2164 installer.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 14 IoCs
pid Process 2164 installer.exe 6036 installer.exe 4020 installer.exe 3248 installer.exe 1732 installer.exe 3340 Opera_GX_assistant_136.0.6008.111_Setup.exe_sfx.exe 4072 assistant_installer.exe 1924 assistant_installer.exe 2336 installer.exe 2484 installer.exe 4628 assistant_installer.exe 712 assistant_installer.exe 1500 assistant_installer.exe 4356 assistant_installer.exe - Loads dropped DLL 12 IoCs
pid Process 4072 assistant_installer.exe 4072 assistant_installer.exe 1924 assistant_installer.exe 1924 assistant_installer.exe 4628 assistant_installer.exe 4628 assistant_installer.exe 712 assistant_installer.exe 712 assistant_installer.exe 1500 assistant_installer.exe 1500 assistant_installer.exe 4356 assistant_installer.exe 4356 assistant_installer.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs
A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\dbghelp.dll Opera_GX_assistant_136.0.6008.111_Setup.exe_sfx.exe File created C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\dbghelp.dll assistant_installer.exe - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera GX Browser Assistant = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\assistant\\browser_assistant.exe\"" assistant_installer.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain installer.exe - System Location Discovery: System Language Discovery 1 TTPs 8 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaGXSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_136.0.6008.111_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5332 opera.exe - Enumerates system info in registry 2 TTPs 12 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 45 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\136.0.6008.111\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.gxanimations installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.pdf\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\136.0.6008.111\\notification_helper.exe" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.html\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.shtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.htm\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xht installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Opera GXStable\shell\open installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2336 installer.exe - Suspicious use of SendNotifyMessage 9 IoCs
pid Process 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 2164 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe 2336 installer.exe - Suspicious use of WriteProcessMemory 14 IoCs
description pid Process procid_target PID 4244 wrote to memory of 2164 4244 OperaGXSetup.exe 90 PID 2164 wrote to memory of 6036 2164 installer.exe 91 PID 2164 wrote to memory of 4020 2164 installer.exe 92 PID 2164 wrote to memory of 3248 2164 installer.exe 98 PID 3248 wrote to memory of 1732 3248 installer.exe 99 PID 2164 wrote to memory of 3340 2164 installer.exe 105 PID 2164 wrote to memory of 4072 2164 installer.exe 106 PID 4072 wrote to memory of 1924 4072 assistant_installer.exe 107 PID 3248 wrote to memory of 2336 3248 installer.exe 109 PID 2336 wrote to memory of 2484 2336 installer.exe 110 PID 2336 wrote to memory of 4628 2336 installer.exe 112 PID 4628 wrote to memory of 712 4628 assistant_installer.exe 113 PID 4628 wrote to memory of 1500 4628 assistant_installer.exe 114 PID 1500 wrote to memory of 4356 1500 assistant_installer.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4244 -
C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe --server-tracking-blob=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⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2164 -
C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff61dd5c998,0x7ff61dd5c9a8,0x7ff61dd5c9b83⤵
- Executes dropped EXE
PID:6036
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\installer.exe" --version3⤵
- Executes dropped EXE
PID:4020
-
-
C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2164 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_20261014134242" --session-guid=b380934b-29df-417b-9274-400c50fd8ff4 --server-tracking-blob=NzkyOTQyOWRkNDNmODQ2ZmI1MWI5ZmEwZjM0MDUzN2RhY2Q1NTFjNTk5NzU5ZTkzNDg0OWRiNjVkYzk4NmNmYzp7ImNvdW50cnkiOiJCRSIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6eyJuYW1lIjoib3BlcmFfZ3gifSwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/dXRtX3NvdXJjZT1UaGVOb2RlJnV0bV9tZWRpdW09YWZmaWxpYXRlJnV0bV9jYW1wYWlnbj1jODFfVGhlTm9kZV9neF9lc19HYWxsZXRhYTRhZmYmdXRtX2lkPWd4X2NyZWF0b3JzX2hlcm9fZXhwZXJpbWVudF92YXJpYW50LTEmaHR0cF9yZWZlcnJlcj1odHRwcyUzQSUyRiUyRnd3dy5vcGVyYS5jb20lMkZneCUyRmd4LWNyZWF0b3JzJTNGdXRtX2NhbXBhaWduJTNEYzgxX1RoZU5vZGVfZ3hfZXNfR2FsbGV0YWE0YWZmJTI2dXRtX21lZGl1bSUzRGFmZmlsaWF0ZSUyNnV0bV9zb3VyY2UlM0RUaGVOb2RlJTI2b25lbGlua19pZCUzRE9jV3klMjZjJTNER2FsbGV0YWE0YWZmJTI2cGlkJTNEVGhlTm9kZSUyNnNob3J0bGluayUzRHJuaXF4OGxhJTI2c291cmNlX2NhbGxlciUzRGFwaV92MiZ1dG1fc2l0ZT1vcGVyYV9jb20mdXRtX2xhc3RwYWdlPW9wZXJhLmNvbSUyRmd4JTJGZ3gtY3JlYXRvcnMmZGxfdG9rZW49MzczMTUyNzQiLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMCIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTE5ODE2NTUuMzY5MSIsInVzZXJhZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xNTUuMC4wLjAgU2FmYXJpLzUzNy4zNiBFZGcvMTU1LjAuMC4wIiwidXRtIjp7ImNhbXBhaWduIjoiYzgxX1RoZU5vZGVfZ3hfZXNfR2FsbGV0YWE0YWZmIiwiaWQiOiJneF9jcmVhdG9yc19oZXJvX2V4cGVyaW1lbnRfdmFyaWFudC0xIiwibGFzdHBhZ2UiOiJvcGVyYS5jb20vZ3gvZ3gtY3JlYXRvcnMiLCJtZWRpdW0iOiJhZmZpbGlhdGUiLCJzaXRlIjoib3BlcmFfY29tIiwic291cmNlIjoiVGhlTm9kZSJ9LCJ1dWlkIjoiYWY2MzJiM2ItYWM1Yy00Nzg5LThiNjgtZGQzNmQzN2VjZjVkIn0= --desktopshortcut=1 --wait-for-package --initial-proc-handle=74090000000000003⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3248 -
C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x270,0x274,0x278,0x240,0x27c,0x7ff61dd5c998,0x7ff61dd5c9a8,0x7ff61dd5c9b84⤵
- Executes dropped EXE
PID:1732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer.exe" --backend --initial-pid=2164 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421" --session-guid=b380934b-29df-417b-9274-400c50fd8ff4 --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=136.0.6008.1114⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff7bcd3c998,0x7ff7bcd3c9a8,0x7ff7bcd3c9b85⤵
- Executes dropped EXE
PID:2484
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=05⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes a Windows system DLL name to a user directory
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4628 -
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x65d9cc,0x65d9d8,0x65d9e46⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=06⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1500 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x45d9cc,0x45d9d8,0x45d9e47⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"7⤵PID:4388
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:4632
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x158,0x15c,0x154,0xe4,0x150,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c509⤵PID:2360
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:5440
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c509⤵PID:2848
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x260,0x264,0x268,0x238,0x26c,0x588324,0x588330,0x58833c8⤵PID:2100
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:400
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x11c,0x120,0x128,0x114,0x124,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c5010⤵PID:2776
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:3540
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c5010⤵PID:5892
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:4432
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x158,0x15c,0x154,0x124,0x150,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c5010⤵PID:3876
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized5⤵PID:2208
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x15c,0x154,0x150,0x158,0x14c,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c506⤵PID:3356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=1956,i,10780005278525906197,14619033779154158669,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1996 /prefetch:36⤵
- System Time Discovery
PID:5332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1600,i,9763157466287411495,8356927893236881907,262144 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:26⤵PID:5324
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=2432,i,14501868948303310101,5396655227180043615,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2444 /prefetch:86⤵PID:4868
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3384,i,11965111639081324853,9643654207111970782,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3444 /prefetch:86⤵PID:4564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3420,i,2785627855221997652,6062887226719106344,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3540 /prefetch:86⤵PID:4712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3432,i,12423744276663969634,16986572478061130947,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3560 /prefetch:86⤵PID:4772
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3452,i,5862120270922959560,10246566476930086680,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3580 /prefetch:86⤵PID:2104
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3136,i,6359078984947065524,15593073063078502488,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3480 /prefetch:86⤵PID:5708
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3392,i,1525750986371623068,4759746582143919360,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3520 /prefetch:86⤵PID:3068
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=3180,i,10331963990687526155,960688480900946378,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3500 /prefetch:86⤵PID:4352
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4300,i,7275306945203692307,3377423665828909062,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4312 /prefetch:16⤵PID:4656
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB1476⤵PID:884
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4844,i,4956084187430970982,8013839230366537471,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4860 /prefetch:16⤵PID:1184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5040,i,7930644651681259226,7692698880004056903,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5048 /prefetch:26⤵PID:2520
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5212,i,14399103657451137437,1056243150296086858,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5232 /prefetch:16⤵PID:3008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5460,i,6009371614728412688,7825254761252550658,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5472 /prefetch:16⤵PID:5428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=5576,i,556336811174120992,11429379808368387511,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5564 /prefetch:86⤵PID:908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=5580,i,2435344344550876832,5305599602027239486,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5572 /prefetch:86⤵PID:2216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=5584,i,8463361687472550236,14738467954883430003,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5596 /prefetch:86⤵PID:6060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=5588,i,7851036694424994917,2468564689136348927,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5624 /prefetch:86⤵PID:5632
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6572,i,5671401111268280441,2820179693787216484,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6580 /prefetch:26⤵PID:5460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=1596,i,7722229221779373772,5480992396201667236,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6844 /prefetch:26⤵PID:1964
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6772,i,16312950615396767852,6415213060426166514,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6836 /prefetch:16⤵PID:6980
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7256,i,18433491126324037643,7166543165698359549,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7268 /prefetch:86⤵PID:7156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7440,i,1064779439817307310,954219109841747315,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=4812 /prefetch:86⤵PID:4536
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7464,i,6947953457771864144,2909313312892428757,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7480 /prefetch:86⤵PID:2916
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7456,i,12030179521480437929,12556991954887214930,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7500 /prefetch:86⤵PID:5676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7240,i,3171486947602306350,6248073266777847396,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7484 /prefetch:86⤵PID:2592
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=6012,i,3791009338810969236,9157894831435933729,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7520 /prefetch:86⤵PID:4160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=7436,i,16096941489075248526,17270715418599455662,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8140 /prefetch:86⤵PID:2560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8292,i,6931136556120577022,6444732268775904905,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8304 /prefetch:86⤵PID:4600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8432,i,7555754902678320354,8926991378308773290,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8444 /prefetch:86⤵PID:4572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8576,i,11262407779823784299,13603765323443472804,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8592 /prefetch:86⤵PID:6088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8596,i,3065953608658795961,16340782290432586070,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8744 /prefetch:86⤵PID:6256
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8768,i,10794167692705313698,8579076363952042996,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8904 /prefetch:86⤵PID:6264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=8912,i,17181697988554602404,15044475565639763506,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8932 /prefetch:86⤵PID:6432
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9188,i,12608051293331473151,2269704459730653858,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9192 /prefetch:26⤵PID:408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=9364,i,10211223553408666352,6928272854905567403,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9340 /prefetch:86⤵PID:4344
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=9220,i,8508741789755078234,1333219804125247362,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8764 /prefetch:86⤵PID:6568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B546⤵PID:6384
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff78953b598,0x7ff78953b5a8,0x7ff78953b5b87⤵PID:2264
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=10176,i,11962478791646167103,17743981939082866113,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10188 /prefetch:86⤵PID:6904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --metrics-shmem-handle=10488,i,3727188280344594710,9503735869059210837,524288 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10380 /prefetch:86⤵PID:6200
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-widgets-mission=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50,DNA-112027-gx-mission-widget-off:DNA-112027 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10432,i,11389322858669485757,11299447253732832504,2097152 --field-trial-handle=1924,i,16328440504491079116,16095448832295183207,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,13140854238495162998,1696428292551818195,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10424 /prefetch:16⤵PID:4424
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\Opera_GX_assistant_136.0.6008.111_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\Opera_GX_assistant_136.0.6008.111_Setup.exe_sfx.exe"3⤵
- Executes dropped EXE
- Writes a Windows system DLL name to a user directory
- System Location Discovery: System Language Discovery
PID:3340
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4072 -
C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x65d9cc,0x65d9d8,0x65d9e44⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1924
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵PID:4308
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=136.0.6008.111 --initial-client-data=0x178,0x17c,0x174,0x144,0x170,0x7ffe53581c30,0x7ffe53581c40,0x7ffe53581c502⤵PID:5252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵PID:6652
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Defense Evasion
Hijack Execution Flow
1DLL Search Order Hijacking
1Masquerading
1Match Legitimate Name or Location
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
- Size 215KB
- SHA256 c79bc2171e58c15a12e44084e1e021acf3b25a9f45caf7e02efc470196cbc5e6
- MD5 5e12deecccc84d6c947bbb3859145d7e
- SHA1 7bbb26e25e29374c4ee0a78cdf14c4828f087400
- SHA512 69539dec66812f702d224cacfed8e633d7e14f3ca6c99d553097582f04197230392f77c1b3b86eeb55c6774a629f0627d96f5758d3de373ad5ed66cd62f881ec
- SSDEEP 6144:Qs4gDDqtL9l5/B9MkQpxF56GFVlYnDNQY3vl4P7sOTKMc:qgPqhhTMkwF5Lsq1Hc
- TLSH T1432423BC2DB2B344F2827A60B3C6B517324522DAF57963928F0C3E6660F25D970D5167
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\136.0.6008.111.manifest
- Size 227B
- SHA256 abef517b59ebab5bb82664db6f8581d3f96410c78d0c3a9ba1c36ffeeeafe8bc
- MD5 6d8c1e89026cfaddd748c0bd686df436
- SHA1 93b01c40779527e346463d54350cefca9f9e89b0
- SHA512 893ed64b1af8557dd139622574235eeeaf2cc79776cfcb3f8c9c383803cc8cd4c837e5f5c617a9bb003267d94f111a4edacd7be195f2cff27fb57d37b4380cc1
- TLSH T1FDD0A9028495220DBF2142203CAE302E621AC72B0488A24870FD7C67BF93928F0C28B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-100.png
- Size 2KB
- SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
- MD5 b5a21b88b3d8a42df265817ebeb742bb
- SHA1 e0be32b4fc158db4e9783094cce614922114b742
- SHA512 21ece0dcf17b038400d09565438fce8be61746daa0250f2fa9d0526bba3d1ce6f8da5cce944ef8fa685c5eb6cf857b073d2a50ada44a44a76d84813871faa5d0
- TLSH T133415CCC56657CC8CCE065760A67A72C5FD3AFAF0A335B7A6010089ED99F1453803ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
- MD5 0bae0648c3e320c4d439f158b4fd5531
- SHA1 4e860ae24f03522c89bdf37f3ccc10b54832861e
- SHA512 6a5e4105ccbe1664546798db057b93622c9cbd6d5af4967e6be4e390a18fec0ffcc807e3331f09ed0de63ed85569be7ec5eed5a7c663df6ce4a5b70e09500371
- TLSH T11A31293504B0A195E74A36CEADE49C2B449C6AEE183E0139D60E246FC430A5DC8E530D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-140.png
- Size 3KB
- SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
- MD5 7e529063a02e4e83736b0263cb1b82e0
- SHA1 17a3c4b76962e90b1d2fa8a49441157949f4dc78
- SHA512 571806725f83feca90360b246d167a8857edfd9edc8dc0ef7eeef80f291fd06088c405a5653513cb8aa309df08cd609df85a95e3379e3e5907566c876ca77cde
- TLSH T1A2515C3226B5A3D7E796C374A780921B3899896022A20D0092D9BB27F05C253F6BE361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-140_contrast-white.png
- Size 2KB
- SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
- MD5 ebe7d27ed3b4cb6566a10165abfaa941
- SHA1 fdf7c27058cf5daf7061756e938a33c1bbb26c3d
- SHA512 50ec8592d78f00a6387f06e077e0def88db26723c0fb8632c4ea06f2e09488db0fb82e0eb1f03da53f9c750f6cebd29f7889b1de342e4f0ae69f88c4b7b1425b
- TLSH T1B05106F6989A64D8BEA38C5BF7F583D001643DEACA6906D43BC45820EABA58A441038C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-180.png
- Size 3KB
- SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
- MD5 f332e088e89b88070ef1efbeca5b90f8
- SHA1 86129a8b1e2e7f78d6ce23c58a37fac9da5e566d
- SHA512 2314aae692c024f914661e46cfd76531da6c09b94c084fe915a0594625927df30282d09518a950eafcfdd2e499b1e4877cf3cdbf5509de0cc756dadcde43fd45
- TLSH T17D815E49F7942B0AF64AD07A0703F172487B4060179A730EDDE72988795F4CBA36B787
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-180_contrast-white.png
- Size 3KB
- SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
- MD5 98b9f7a4f4322e7b46de392fd20f66e5
- SHA1 d009d227522206c40cf592e460c9642cd03b8769
- SHA512 3b3e5baf3cfc57119e0812de2816df6c7dcb42e96c4891e47c4f32320fd3be2f27a0118051a6651595baaaa30069bb1c0d78aa701744a44534cabe7547d4becd
- TLSH T101716D453798377AD6D7C2191DCD00D3C89C23DD355E6A3CBE47D0B065B21576E7441A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-80.png
- Size 1KB
- SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
- MD5 1f2fb1bf463b2ff2bec96784debfef84
- SHA1 ae6f721ad937fe39f86602f71002435b18bf1edd
- SHA512 0c92c4f75e620d0b636cfd83e89c69a44f6a96a00006fbd0b13637ba5dcc77c9b302029e62f4b80766811f31810f9c20ac1a98b65c38789951ca0e19a5bb6894
- TLSH T15D31D896AC81A05BD3777972212589F78EF32C0605511E78F0F16130A9678637AF2620
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\150x150Logo.scale-80_contrast-white.png
- Size 1KB
- SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
- MD5 17471bb63ed62a6e545b6b626a763511
- SHA1 586b9efde7b3a04580a49f8fe7739593d42d303e
- SHA512 f619d963b62edb07c8077c3c6ae60ed8d3f3dd5bb1d05a2b83dca1a7a4a346598b055f6c7ea22e05bf281b1de0f205f5d1054819000759d9450ee1fe8f6491ae
- TLSH T17121B6CB7941E7567E21CCB920692044DAB57A480E7CC2EA7521A8B6871335CB7B4DB8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-100.png
- Size 1KB
- SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
- MD5 c3722e0232ec20ac8f99cce7a040b294
- SHA1 91ca47da87ec045ed3ef5d97243167f08fb9e10b
- SHA512 71940b8431e36307ba5176939a169b9259bb6b43c32529a10a12c5ea31447bddccad7eb9ef7cb309b175ee7bd56e70926bd5aa0855d0fd9497547ecd7ff93158
- TLSH T14F310A5E007CA6A894029FBFDA441F98F3C25C883C58DB48850C9A9DD66B8F6F0C4E5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
- MD5 504d80d276adcc0163a8e4720013f9e7
- SHA1 6d34a0593ffce916cd19b66d61004fd7e7eb2cd1
- SHA512 9961259704ff97c0e1899a33259f62155b73264e272064f3fa90e64124513c7c8bd6ab69a39c1efb271ecc2972ab8fd86fb836f22153a9bb35419c3816d11337
- TLSH T19721083B1E4BE6093DF97C61EC0D52F6A836723E4C527A4519176D26A224A6060633C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-140.png
- Size 1KB
- SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
- MD5 667bfbaaeb2d2b372b6e0d4bf4992ce4
- SHA1 4c6c2e07183963f59391945fbee077b55f8f6b2a
- SHA512 ac63a3dd2f6088e7849e3824c35fd58ca78ec77dc31e1f6cbd47de7cc394318cba7d2309912206a94180267be057c2af5c835424019e2a03ee33a2ab801ba9a4
- TLSH T132410C6EC9F04A5BE0CF56A79A523DB6B0F783D514047D355041502353B0E830EB717B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
- MD5 93223e8777b581e988b703df82593b17
- SHA1 40a035464c27041ccc87c7935c45100d93d1c948
- SHA512 b8a3ee4a71e609625eab51f0f6dafcc82cc47ba2c567cc8bf73cf6423056f9171276289bfdcc8428b7c07645097664065ee9b0b78874425bff800178222fed12
- TLSH T1CF31B8E33C06263ED722BB2F74208CD5C53B7A61619CFBEE259A5462946B3C9044EA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-180.png
- Size 2KB
- SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
- MD5 704d0a2693b350e7c463b0ff2143835b
- SHA1 0313ad4c3690a590ac54552d2c27806e73776600
- SHA512 4517b2fa911149885ec5549f3173d3c774716740826873e4b2199c804b17e776a5296565930e5acdb8d5476710a391b21e6da8941df64c525a487db4619a1ea7
- TLSH T1C3515CE98D504D4ACE42F079880A4FBA6026C61246268A1FF7ED51F363E67A3481F685
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-180_contrast-white.png
- Size 2KB
- SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
- MD5 39e2fcf13c20103c5f449c06d3a4cf75
- SHA1 ae8e1bce2be17ed450d891864e6aa22642af39ac
- SHA512 8e4902262b064008804d49d1b5f27bb7b8f33ecefb05181aa69534e1d21662719dd4f8e0677c58215f6c5ca9eb4fb92fca54a89f9720230afbf06a70216abf26
- TLSH T12D416E5701B03CBC6DD9913B53750697D4F3D68FF2544C0B6688345DE4F00D009256EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-80.png
- Size 1KB
- SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
- MD5 32d3e390613cddbd639e70ddb2511ac0
- SHA1 c96ac088e72d756f31896b16776ef100379f802c
- SHA512 7381ceb8fee84f398082177f30dc01593beefa729c73b0166af686bcd25d54312b202d9243834b754769de41e9a1deed74ca91a76dcda918a749cdb4f08c124b
- TLSH T14311F94011E157001133EC75C8192D61F10BA2934745E4A431FACCEA7085B8AB0DF5CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\Assets\70x70Logo.scale-80_contrast-white.png
- Size 901B
- SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
- MD5 e6add5afc73f7b06fc2348550595f8d6
- SHA1 4d658bddb93fa6cb423ebc61bd20db37e4d37db6
- SHA512 55437dfea7f68a4572dfc86b5428cbe9db86c0d32d0b09ba6b7b1cf8e49e5f1bb94285bbdc97d8ee00d70ba75921db59644787c1be1672fe37cee09441f249b6
- TLSH T1D811B76D6AA4C735BBF50D30A075410F4675218F351104333D6EB66133A09CA54DD04C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\CChromaEditorLibrary64.dll
- Size 145KB
- SHA256 735b8bccf74556d80f385b30c97e631b217e944f2c097fb058e72fb722fed344
- MD5 df4de0c24b50ed1e92f658879f46e1ed
- SHA1 e66065d1407228479a6c2b9f69457079b07b9e4a
- SHA512 ec7a858ad6bc47cd01e6185a1921c7b3337aca0adb82ceec8ab35216bb8747cb7b4895c5baaecfdf3072f111731c0a6d2e02d7b34a56a78e68165e7b8f9f3b46
- SSDEEP 3072:jvhCtUxogw1kAmNvN6FaZmT3ztaeMLG/UFGB3Zl6ucJmerHqG25Dp171a:jvhDzw1kAmNv0GmT3ztaeMLGCGB3Zl6O
- TLSH T179E386B532052815EE761AF8857D3D90E669FF111F60E2DF522CA01CAEB0EDA2C31F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\CUESDK.x64_2017.dll
- Size 474KB
- SHA256 843a98ad91b74e28f93ca3803d59326447164c4fa18129f0a679a032507349dc
- MD5 e2ff3db5b5cd1dd2d5116a3541f64a10
- SHA1 c27849a81a9b68786de966abfcee3729159747b4
- SHA512 a72d421e9c0443794b53a0b1a8300d0323ba9d27612ec483c90bf9920d94887aa69797a30f24ab5d5de08bf806c1d056eb89d63e477d08e9c9f1223570976218
- SSDEEP 6144:slTZkQQzVVTgmAffw5QTzL6+75I+qZojZd+:szkQQzVVTgmAffMQTjO+xS
- TLSH T110A4392FBB484DD8E137917C89EB8F03E1B664590B1187CB15C693AD1E63EDD1DBA220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\assistant_package
- Size 3.6MB
- SHA256 a5d929cac1aae609589b0b65cabc09a6812b2fa808f9627fa36380fc76f188f9
- MD5 42810d036dae7c37f0d33f5fca6f9409
- SHA1 b4612b69efcc7363788f41dd6b6986ace1b440e9
- SHA512 ee001412e7ae17de060345a1db85045bf143c42417f1252bb5154c20f4a8fc34ef2b410fcd8d5321163a0c3b70bdab32ce144c68d8105643c4f00d5351df52f2
- SSDEEP 98304:Pkiom6j8JFCaQQb7M9H4J7kGVkTTera4YgUwHn8:PW8DMx4VkTT4Y/wH8
- TLSH T1FC0633217DD288B9CB7314330CC4E5BF67BEB2A1593A4FCB73D00AAE5F665425729122
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 2db4b06d9b8aa725c6db429559f0edc24b35301b47e710a2e13416bd4ef3d901
- MD5 d8b27aefc54333f16793993b8a9b1248
- SHA1 ddeaab95797d8fb4b1b6bceec145415e9cf6ac64
- SHA512 ff6a28b8d8fe450a53df48b23cb872910ea49f3fdf0cc543d1605e1846d10c9e4c590d5e8d4aaf2d70a8f8d4ae9c0af1765f224d21eea261a22681055d441e6d
- SSDEEP 49152:+6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/E:+Udeqt737jFm5w8
- TLSH T1AF268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\dxcompiler.dll
- Size 24.6MB
- SHA256 0bae5d3deade6c85b7a4e28ebdd85b2a64fe539ad84d58fdca7239aa1452e036
- MD5 07d85aca169ec3bdf8f1834223bc7fdb
- SHA1 3ebd7e668800bcffa2e241abe1a4029f6668bece
- SHA512 8dc3c7e95711ad8a83072b2e9aed8be33821bc00bb0b08072bc660201d09b840d0df2a93a70115009ff774b0daaed663f32c60431dad67d3ee69309bd2187ac8
- SSDEEP 393216:S54q9CLDYh86Y2l5IfVJlGa8hkuuQxCs8c:S7r5Ijwa8k3ps7
- TLSH T178473A122646D49CC099C879C3678B268A6C30E73FA7B9EFC0F451252B79DBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\dxil.dll
- Size 1.5MB
- SHA256 954c727ab00c979f4faca5635f3a3c197963bbb45736e45218daa267ed68c978
- MD5 13ee8fd5ae0eda4303d431ca8beb72fa
- SHA1 a41041aa04d1eea8a245dab888ec381f35a06748
- SHA512 91ad34a38d9865509dc52090bd318ec9f88c6b99aa5cd62947cdbffb4352af7fc155d1d5f1c3e8711b7b171e7e4a35b12d3a47528e6f2c5b1fb5526b531122e0
- SSDEEP 24576:IcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/i:IsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bz
- TLSH T121657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\files_list
- Size 4KB
- SHA256 884b1c0e0e8457b35a5aa47b07d52f514a48fec8edb8c1c7fdcc0891682654f2
- MD5 d35e214ff5ea09857ca69a3ba8831258
- SHA1 8c15465ed8f767a944b1b507b7d54f499126ebe8
- SHA512 7048bfabbbc3f03ab2c2964b09dc863e7d0ca353676fd6f177c8363b09090ab7987c03cdec9791975ec2b4ad1bcc0b1ec6dd85180ac81f26749921083607d4dc
- SSDEEP 48:CMlvE3eCPTuqaeDCOqIG4AUsKyIYKJhqTwb0a9RVtbby3HCk7RPO2UrgB6D:CMyTfz5XZyITJhGwbx7Vtq3ik7w8U
- TLSH T1A3912697C41F41688826B7F23D20F495A935A8E6E97CA09CE797181058F73FC02C6FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\headless_command_resources.pak
- Size 2KB
- SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
- MD5 42a9c1c5f047aadb551a21625609f8f8
- SHA1 d5d9d659c32cad9953f7f1f9bffbffa1132266db
- SHA512 d73a907010494502938035a74ee605f4a29a47efb7332e1f81ceb89d48e1dd54e024800413513d02175a898db504e0625b6786cd1518e5dab96eb33b7ae69925
- TLSH T16D511893360AF5A6C179C72C91DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\icudtl.dat
- Size 10.4MB
- SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
- MD5 ee759568c6560e1cd42a5bf70d46e28f
- SHA1 f81dc21258e99af2f98b91aa8f968e31fe652d1b
- SHA512 d41d0626cb131da5628f5e789e09d52a035673f2a31eedcbcb3879b2b65d82113ee52c8c4a03e26b00f7d652a7fce1a06c0c02fceccd16fc8e9116f9c66362e0
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89j:nHcBhORok2HiXUxO/RJk3IWhlYntjd/j
- TLSH T1CEB62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer.exe
- Size 9.2MB
- SHA256 169fea73a8c14eb679783511e00574feedab1dca6e95a1c0d5e1e91e3e91e16c
- MD5 46a85f38079af2cd85bc9e84c76d068e
- SHA1 7f1b216664d53e8f298e98e4140350fe2c63d5c0
- SHA512 790ce272b8bebf9f968352d91611a1bf27748ec4aac222aa23d3cc7cdb146077562bce1d2ed2abc1130e2a60485706c9e012b30cd30b481eef8ff63d27b7a66e
- SSDEEP 98304:L+OlKGIVleIYBK2zlBFUDWQZ2UFPTMMi7tFBI3++wteEmi:iOlDCEBhDFErMXC3+Bqi
- TLSH T19CA69D53F3A601E8D06FDA788B7A523299757C464B30A3EF0A943A250E75FD45B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\installer_helper_64.exe
- Size 601KB
- SHA256 c40278f494beceeb6df6ad1849e14be4b508c46adcda03e68ea401fedd3c5403
- MD5 1018d46017889c0bab91aa6eebbcf55b
- SHA1 cfcf66b6a077ac4c3f1277ada70034e325d02ea2
- SHA512 4d52fa7a12b965180894baf824baecd5795a4b31f792e89d6475059f307e1a1e0a77d079d3aa5fc469c47c4c8243121c47d4a12ed39fd6aafd4746b814584c4a
- SSDEEP 6144:YvsLaGb5Jdp+TMnehGv/9nWXG5bds3XKLSOUFhOpekMWnGQuEerCAhHwS:3LaGbtvehGv/wXedpSOUFhOpevWnoJES
- TLSH T17AD49F56B2D957E8D03AC1358A528512FA717C960F3179EF02A0726A2F77AE41F7F320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\libEGL.dll
- Size 460KB
- SHA256 5cdb2ea22118db7a103e68f60b31f48fd78d40f6af71c6f4f867b49a543dd7d3
- MD5 56ec51920477c2c35ac16fb9d63c0d3d
- SHA1 ea494fde18960abd64fcf1baec97b10c174256bb
- SHA512 efe52b64602f26d58a6c28213ce9a145de6a56842377e381d751f182682b0f589d2856bfe95ad48bf74258b006aeb8e137e74bef70cd606bada568bbff0867e9
- SSDEEP 6144:TLO05IAKzo5jGAgKpj5G/UUqMckoMXvsQY3/3+Pk6sV0aL:JQzo5qKe/UUqMcNMX0QY3/OkZ0aL
- TLSH T181A47D05B3D548BCD077C5388A538646EB7178560F61EAEF03A0E2792F77BE41A7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\libGLESv2.dll
- Size 460KB
- SHA256 925b34eaeb634beb5006fdff26420e458fbc086a7219ea32a7d5998e9cec43bf
- MD5 1672980dd807d3b3af8f4de36040397a
- SHA1 f1e296b842e949912977dd6e97ceb5904f07a37b
- SHA512 9c1c75b1ffe2365bbbbcc4ad33ab2cf6026aa77334a328744421cbe92af6c19949767c92600c8fed4e66dadcfe0ccc08088231bf444747968f5bc47455873504
- SSDEEP 6144:Hjm0xrAS7o5Dnos3Rj5W/UUD8cso9VM/e13xPcaM8vq:tR7o5N3m/UUD8cF9m/e1xcYvq
- TLSH T1B5A47D05B3D548BCD077D1388A538646EB7178560F61E6EF03A0E2792F77BE41A7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\bg.pak
- Size 1.0MB
- SHA256 e9458ed46ef98c4f80447b24006f7f16ccf174d00481f4cb575a6ece185cc556
- MD5 27b61bd26959483429f91de23e568bc2
- SHA1 afe8db799d17935095af00f2edf169c1f2e2e7e9
- SHA512 beee043a429b1019203859de6dea285d8c31c7bec4a6f0003f5993dea8e888932221874f8a158d86f10f2ebea825a5bfd31395bfb98b3a6f8f0f0306a1b3cd6e
- SSDEEP 24576:WBxJM2eQCwxoMtTJ4z3J9ouvHSDl9cIhdBB0r6g2HC3k29CvzvYUgCzQkECZUrVU:k62jCITJ4zvHY5dBB0KC3k29CvzvYUmA
- TLSH T1CB3535A15B9A689F0101F45F98087E093CEB44FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\bn.pak
- Size 1.3MB
- SHA256 947d0364e8fd8b0f608b5fc4a1e654e2724a547f672fa552dcc7217424948f55
- MD5 130284638dd57ab41b1490d222601049
- SHA1 1fcd04670976cda7b6dd5e46c52eacf1e595c2e6
- SHA512 147c41adad219f1eae57b1b24495a31d7ba1da1c6b1a3168550ba69a81058cfb83553a9ca0eabdae0a90824325e0617b2d3a7f34440b3a8c5e20b151c6da97e2
- SSDEEP 3072:yVRbLeMtpV2Ff7SCvuBhV+uXdrZHQxjQjlQw7CN2Nlq1U6MCRQmaal+GzFUPDVR:mbaMbk7NuByutrFyw7XNlbCRQmaaoR
- TLSH T1DE55F0209C6E81B2A8D5CDC9434C6330C123AE979B65F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\ca.pak
- Size 658KB
- SHA256 99e3e10b63eabce1af532fdd418d5aabb1dc38ec77cc531ba8e0027c63a686bd
- MD5 f3bd227cd424c123a5a96d247f7f38fb
- SHA1 96c3541b5a57d545569fb785b282923fe97897d4
- SHA512 39a6de2dd0090ff3d7fcf6e32135f717c496f09aeeb808af7516b205a47ec7d0c2abb35b9528f3581b3f2fda2018a8772f8eb64c8e2b2b1bc203f6aab4172041
- SSDEEP 12288:mFd8QSj756ybGbf1bCCrz+W58rPelpfmRYiEihHUviM6AqHl9kOkcBKMe3aR4Uz3:mFd8Q5GZbdkeLNVnH7hfEUjdUG
- TLSH T1C5E408239BC83B7604D3330AFB42C257F09CA9847B16D254F4AF1A5622CCADCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\cs.pak
- Size 656KB
- SHA256 7fbfcb4fcbd2b76323758fadad47829fec7379b1cf6688db678bc78cf70ea105
- MD5 fcc979d2086d276bdb2697a0142ba912
- SHA1 90675d0b9bd896120f3e19ef8df049d41844d8cd
- SHA512 46728980755203f7f70a47239472229c3ba972770a9b5c0a81cfbfdcefa14687be53a42a2b2eaabf4282ddf5af158340707488421c37450301e9b30a5c7041d5
- SSDEEP 6144:ZhcpoNeNvtqMT2zHazPzGOBISBm18QtsTdFaOgJBiDyRaMqYDBgNyC:ZhIGeYzH+PzGOBISF3CC
- TLSH T151E46C1FEB926035988002447BFA5228BD5E83540B6EA5BB7CCF9C912271B7ACFF1D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\da.pak
- Size 603KB
- SHA256 091d0dc756138c63b6f0762a1c66c4bdee78533d63af70cf8a549ad1bc0a9a07
- MD5 fb9b5a9c56b7007c0e4a8f5a89774a08
- SHA1 532e1ab7124e959c17ed6dee891b928d7a78ba35
- SHA512 4a16ae29f35f927d6da5d23e488e48bc091d03b1e0846bf2dc5e5ec9dfc0cda42fd2f4436102187f5a1177c3254a061da31a1450cbe7e9464a5593aa094e2dfc
- SSDEEP 6144:0M6DciEgQ09Bss9fzVWpk2oox8ts34Kwd4A2CfwgHszZhN+RQgOXPQEd9SOHEKv8:yQ2Q09Bs1kc4s+lDRQgOoOHE8phU4qB
- TLSH T195D45A47DC9C732F99AD0765F2118EABEBAD543CC684264F74D8903A05CBD6092BF2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\de.pak
- Size 654KB
- SHA256 4973082aa4cd1fd75b8e2f665d5f5cfffb3cbe78067a5ee6f3c79ee3d41a34b0
- MD5 bd5b886cfc8e3377a7e002054368a28c
- SHA1 1c042e40ac15bf69229b29747f089aabc5b916b5
- SHA512 6a4a59b04a1f1ead33745699dc65bbc490a401683c9bf780e1515a22d2edfdc93d9f3d942c55bb2d9cb2f39f1572c9490f2e12ac15747e7fac244c1a2501ca41
- SSDEEP 6144:IFJzVMEgUxor9fB8bCUu7zIcC2VO9+6OPAaHmFoYwyG0Hjb0qLItg2Ns7:IHzmwO1i+UDcC2M2PV3yG0D6Ds7
- TLSH T15BE42903ADDB621ED647B3607701CDB77B19E36FC385312A94EDD02B620B5B283AD526
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\el.pak
- Size 1.1MB
- SHA256 7fc21610c46834dbef9b851a03d661ecc2418308981674884d97a621f37751e3
- MD5 348fb21c1e95cfee988fe40833c3b6f4
- SHA1 eda49a87cd5414e2f84be1ef05aa1196727a6467
- SHA512 2c4a4a4fa00e9769ea78de6db02743f722627abcfde455d3beef93349ca78d88cfb4e7d98719f6575c6a7e2ec39da05379c839d51e371da2df1ab1624b5b757a
- SSDEEP 24576:o07pze1njpiSpBjGoeoCNK9cwyU7fOILElJP862IPabmvdc37Dz/DFKaUeanlmpa:o07Be1njpiSpBjGoeoCNK9cwyU7fOILa
- TLSH T10945CEEFB0542DEE8046950785D8F07C27C66D6CE749CBD86229CB60BDF90719A22E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\en-GB.pak
- Size 531KB
- SHA256 a0a9b72c9b01f0d029e09304fa69bdd3476b38df2c803a4e2f2021298a37e08b
- MD5 3dd74f1d55cc28fb7aabbf5802f90536
- SHA1 a4a3d215967f72e7fae106b221e2d96ab4992d48
- SHA512 29029860bf68c84cd7714c3900733d610a4a652dbc6d6a8eeacbdbd4e09dc05a35df4f03c11bd2fad5597ded0ea977fb89b8e6f961c60f8d12f42bc1bc08e5cc
- SSDEEP 6144:10cDfiFfLViLDiXBc1RlFp2E1AxTIvpObMrU9p3sMz:1PDfiFzsDkxT7MresMz
- TLSH T128C43C1FF344126905935272BB4696A2FF36D06CB35112663CAD802C33B7B66837B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\en-US.pak
- Size 534KB
- SHA256 7dfb532e60edbc809bd914e2570074c4303e8314616ab9c5bcd7ad144e6d29e2
- MD5 9b3ec660689848413ba825f693a934df
- SHA1 a90075ed89b9416122e0705ba642df7656f14c14
- SHA512 a1178381ef34ac757fe6736c42d23170b06d5a3fc96254c24b7c7c3064d3c701d15f3d234573509900696939bca95a630128992b0f1bc97e7ef690993219793f
- SSDEEP 6144:joIaXPlP2VCH/359Lq3D7UjnsngTA/nOwv2rALghsy2j4rt9oCsQs:kTXNuCPXLicjlwvLgC4rTsQs
- TLSH T151C43C1FF344126906935362BF0596B2FF36906DA35112563CBD802C33B7B6A837B6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\es-419.pak
- Size 645KB
- SHA256 44a0805c3e1744fc9d6a7d3f8c08541a6d86fc1ef6a8fd5ae2d4434355e4c08f
- MD5 a9e33eb2748bb26ec41dfa27a75c7ed0
- SHA1 21033481344b1f4a698186362bbfc019b7d4f7c4
- SHA512 9d5a9df7c9f9c7558d3bff559142d303a50231616852b439338f8c884db2c9a36828eebfa6b566fcd077910fdefac82887f1101a11cf407e6f77c2d45f4f0288
- SSDEEP 6144:qxMkqcgMGSp8gf27Vlb5WJiINAOhq4i2m/+tghG6RY6ovwzpl+2dMXbeBcbn8:qx8BG25llWJbA+ExGyovwzae+b8
- TLSH T1C5E40822AAC81F5314E3A348B783D753E5D89545B408C29BE8EF86A522CCF9CC577ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\es.pak
- Size 640KB
- SHA256 9f354f53de2eb53f385a78d5a01d9e400906cdfeada791115d1c0d9381ff116c
- MD5 316874137207c4dffdfed9adf1be1803
- SHA1 27a0c8264c0ad630c46b64d233ec45116c65dc58
- SHA512 4dbf90a148c525cee59b1520efc4774adede588d1cc6e4dbacc7388cc623a0efc2677aa79d7681d514dee3080e1b2bdaf3090482a9ca049510d037ea2bf9541b
- SSDEEP 6144:18pNPApdx02QEr126jrXrJb1PYO0k8+6PZC4GnzbxgY+Wh38KFy6XzX+jhHbmfEE:1sZGyEf7JJPd9fnzbVt8Kv+jFSfEE
- TLSH T14AD42922AACC0B6314E39349F783D753E5D89545B508C26BE8EF866622C8FCCC567ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\136.0.6008.111\localization\fi.pak
- Size 601KB
- SHA256 b3a8089879453bfb7e30189566668b8a392041cd222bc30916ccea8fc5d4f93f
- MD5 1c8d9223db1d0e0ba13b1d0046e183d2
- SHA1 34b50c48fd3461fa02b5d3849ad782d6cb2627ea
- SHA512 595561c560cb322c164c61de20f2c480f0adbdd20f1981ad2ff8d51d8689bbeb1eccc5c5d52e563bdef34bc15ab12370115ca7a2b0bff594462fa3dc9878a197
- SSDEEP 12288:s3OiF80cZ19McJAWcI3p3WaHnsS5japfDv2Dyfl1tIdJA3dc1JQ:s3/caUSIRY2hg
- TLSH T144D47D515205C32137C8C35E69B0903EF6E9E39D8C248D96F847C6D94AEA9887DB237E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
- Size 5.3MB
- SHA256 c2848c2d4a0ad23b9949597630f8035bed56aba27cf3efa203af18f503a80f30
- MD5 9a1dfbcf82826158220c398ae0540c5b
- SHA1 5f5ae5ecbb9ded57c48725489efa25bec66cfdd5
- SHA512 bbc0e2cf0ab4b776052a798c3cfb25db9e0b6d976368146a10a66da6e7897248dd91387fe6bed87bfecc0a8e5b181e8a0c771be6f0fabfbe63ee78bcb874662f
- SSDEEP 98304:J6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww/:raEmlxEB86WdnEOhoqfk1BGYUBDKF
- TLSH T12A46BF52A2113078C84ABA71653D7B7B48281D63572187DF8DD83DA21BB4AC22B3DF5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
- Size 704KB
- SHA256 6d407d0dae3e28cc8fdbf2bebab7150cd59bcb9af7edb164121156b41f217331
- MD5 aa1af56d48da9913f586453e334482d7
- SHA1 c00ef695a7896e1326e23ba06f1e349634834208
- SHA512 50fb234de9f4b80ac3139a6c684858d870aeacb18811140952c594ce61cf012c5808fd2f1d6929f0308007717f73969668324385ba3477f97813896cc18eea9f
- SSDEEP 12288:ZIR93He9Yf/eg+5DGbr8CaMlbEOripwGpwJi:ZIR1GtDOpuOripwi
- TLSH T132E45A23F1A611D9C01DD4B9C75B9232AA71B8494B3071EF0B91A7961FB6FE0A73C760
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json.backup
- Size 2KB
- SHA256 1b28896873e126841a4d58a5ca4f8346954df4bf7beae6560ffcfcdd1ca253f5
- MD5 f1148fe7685d88ff89e1319e9abf5b28
- SHA1 c7aadefff8ac578362a0df337b3ae18b123db8a7
- SHA512 cf6dba747fa134b8fcc21829ad4cfd429bafbe78d21ee8bbe0fad363a5bf8eded97fc985de6e7461b8575885aa37762b9731d7f83b09b165fceecf2ffd1ddaeb
- TLSH T12641B660087A6432BD1693DFFB7E2758822620C3941526D0F9EE451AA1D7C1723AAD0F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 3.4MB
- SHA256 1fbe26479ce3347dd6054c5f0f29468d6ff1d2b8cc4b0acc716ec02d8ec7d05f
- MD5 4227d9495498790085626269659f2fc3
- SHA1 725e81a460bca549ed4d9eafe69014f774497183
- SHA512 bfcc0e4b9a01b7b75a5acee750b887a98d2e10173f48c5c2edb951b947d3f7db97a463b3144e7b84f24fbe24415f65c9118193321e60a9654484f06f22c4f60f
- SSDEEP 49152:EbxBiLiI1Fyq7fsoO6jX8WC1+tCxnf1S0zNwo+pGpCEDOiW8R3VAafyeA89:EbR67fsofsbLOouJ69X
- TLSH T170F57C13F2D910D8D01DD1794B9A9633EA62BC454B31B6DF0A90B7222F7AEE05B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\Opera GX Browser.lnk
- Size 1KB
- SHA256 5b13aa05cf74b41a235ff6a2d7ccf2baf5b05856faaf774c78490dc1b933f06e
- MD5 792a57fb1726373669449c1a8f197fa3
- SHA1 eaccb33e90498ae05b069e2978c7fe4f75062040
- SHA512 58aa22306532f978f7efb521f7de8349badfdd36e7303a951c11dc36d74a9b7796b77016469d3d4e60616adb8d670f68107a6a329e323740471c2c49c6043303
- TLSH T13C2124107EDA2B26F1FB593641BA3761813ABD10FB534A0C2050838D1E75642A94CF2F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\additional_file0.tmp
- Size 2.9MB
- SHA256 9a154db5e47d28470453ea69f3d7a9771af48d3eafd71b4fc62538aa2c19f92d
- MD5 f41b1d7cd0329cdfd8448bb29be91d93
- SHA1 b4f61dac9af5ea6e6d5570c1646d8f10aa56a45a
- SHA512 53a18f0278f1e3f4c76099ec987ccbde9b01751d3b8e70291458a16fca726fb95bd4bb7961b80f6cda46a0aaa20059420e325303137d561eec76017df8255bc2
- SSDEEP 49152:ykinohVcbXNLyXSewwkt8Dla5bSI+oGRqfz5wk0K7nnJ4mSB4Hbr2mx:ykio4LNuXSfVGDM5bSI8ozmZK1PAmi+
- TLSH T135D533217A958438D23312334CC8E6FA5AFEF1B51B258BAF2B940F2ECF74451D31665A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\assistant_installer.exe
- Size 2.5MB
- SHA256 510ce6cf7d9bd4932e8188e0810073def5ccc9b783f90cdfbf4d7e3bda8de967
- MD5 97bb97fa0d23085e8442747ce3aa5cf5
- SHA1 8c12ccd8baff4c0c7aa987f585ba95033006a95c
- SHA512 4d4bebce5793c13491bfc23227d58e23bc412fa31051c5f034e7e7cd5912e71a2f22ad9b18bacfa0ae13c9d8b58bf184de9b6e9ec86d5b90d9065541963c64d4
- SSDEEP 49152:PX9gjkKUh7V/qxMfL5/Dfm4o0ela9uGZMXkOjEffxI+z787:PtCkKUpV/qxMTZfnsawGZMXkOYfZH2
- TLSH T183C59D02A95064B8DC263072723DE73EDE245E1267354EC7DAA4BDC5ABB46D2303B35B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\dbgcore.dll
- Size 196KB
- SHA256 49ef54a43abea102f40f0f6628192b0a8ecddeea33339f04ff536de7383782e6
- MD5 95d866bde083118295ee50f44370245c
- SHA1 cffa74c757c395abd19d4bb78857d92b810348ad
- SHA512 aade0c650b65f6fc7afb8049df1cc3ece17bdd68f01a1f6ed07ac09a8eea75954ede8daed789b7ceadb13942847fe18eb68a22d46ba848dacc45aacc5590111f
- SSDEEP 6144:6ASh0NdOkBakZykbp/eyhr+SJors+k0L3nTEw:1YIqFLnTn
- TLSH T108148D6296840833DD9F11B8729F333795FEAFB0139194C362549AE4E5647C06E3A2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 9df3c15a741948a19b6cf3ea511ec703a1eef673af230fd99fe4dffde7e663e1
- MD5 6cc7b86dcad091a36bd0ec41e7c975a8
- SHA1 6a85755a3ac8d3f043c404b543c67bfb97c6fb99
- SHA512 b3485ff03d726b3c1b7dc46404ed06c9f9dac5598ba615b904161f03b3af59a51e1f25626be216dd5715d3f7929f09a0124659e911592c8959c8c2e1758546f0
- SSDEEP 24576:WDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsfa:WqhRcFPxhHYCBRnyHO6W6NIyX/kQs2Os
- TLSH T1C0856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\installer_prefs_include.json
- Size 850B
- SHA256 2e01603bdf75335c7db9d98072df7fe1d40c0be82bd46f151d3b5876663e7eb2
- MD5 62291f358a036ace34c8fcb9c0f3adca
- SHA1 0750005f451d7f47bf10713980e416f9f72419eb
- SHA512 1eef31ece45900f64fefbd8d1453ec9c6749b839152170e7a7581e096d1b3421cd4efe3cebffa6ec7abbb2afef449e4d4d641ff5bd4b3e79ee94630b8db19808
- TLSH T1950199D04D7EA9033921A7C6797D23ECC16574C1CC126B88F69AD22BC3A4C2232E9D4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\installer_prefs_include.json60eb6c8e-485d-4584-8b65-38d300a849d3.tmp
- Size 1KB
- SHA256 99749c47403d25451e782936d9af9a83729f25008125e5b0e44314d3a1535b0f
- MD5 d65fc06c24af675d087ecc13a498bd61
- SHA1 a383f8db2c65daae853b723e321540fc10bbd548
- SHA512 c534eb40fc8baa986d6a9bcc423fffd5b07aa6afc6b96f4efab211509ac99c1728e893145f6846dc3801bbe789c43cb8053353cba9970fd09da6017f7ef95347
- TLSH T1FA3153A40D7AB4137926D3CFFB7E139CC21234C2881626D4F196892BD2DAC2223F9D5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\acb1b123-dd43-4d02-9a53-5555be4b8fdb Opera GX Installer Temp\opera_package_202610141342421\installer_prefs_include.jsone4c4a5a6-0483-4a4f-97d0-698aa7633d62.tmp
- Size 865B
- SHA256 28bc1909c366c70342160cedd28a7f8475ce59c27ab06ffe190ab46137009a26
- MD5 8c7339321b80bdf906fac064c77961d3
- SHA1 9d8b0c59822888fecab88c535392250ab485dcc4
- SHA512 101e337474c3fd2d407d0cb84b7e896960e986493b2c4eb212dece09406d45f244a0771bf037aaf813f50d37a06a6e5b11fde987d3a9be252cbca12e995397f0
- TLSH T1FB1199D04D7EA9033921A7CA797D23ECC16574C1CC126B88F69AD62BC3A4C2232E9D4C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS49007238\installer.exe
- Size 9.2MB
- SHA256 7451506a62bf3792c250d641d560bbc98274904703075509514bb4e36bdd3ad1
- MD5 2a4468d8e8bd992d83b461f3e5b44fb3
- SHA1 501563dc0f858a81328f4f807060cd382154fdcf
- SHA512 79baaef403a9df52402b65145ca2cf820033165077c2e8ea6e4484e9013a0a5508a7d9dced2c3474173a41a65aa5286e337c23b1d99210e321bbf25bc84f28b6
- SSDEEP 98304:V+OlKGIVleIYBK2zlBFUDWQZ2UFPTMMi7tFBI3++wteEmC:AOlDCEBhDFErMXC3+BqC
- TLSH T1E3A69D53F3A601E8D06FDA788B7A523299757C464B30A3EF0A943A250E75FD45B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
- Size 2KB
- SHA256 a0bb35cb06810f7f03a1b54a041226619f3a14f6b34d2d9155a8ff98380fe882
- MD5 f6a8c7c70bfdcc8efaeecca3e5e75590
- SHA1 92ec4d8009a7a9d100706f792dd761d1e84b6dd4
- SHA512 01bdc9b4a503d0e719da0aa53ebb4353c3590e52bf7e835eee46951d42e9c6a022ca48f49b4db7fa63e9e5fa5ea8d4cc52acf75921d24b43f7089a122cee6ac8
- TLSH T1124136907BFD3B12F3FB663606BA3770463AFD20EA278A0C1140828D19B5940A859F1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 ef1ffaa7a655114e2910d1398981f23f90504e3655d48a0086582c438444aa83
- MD5 3743418ff882c6708394b92c2b86fedc
- SHA1 f8e7f209b444a4c5e4fc781561a2b33df5fefe01
- SHA512 8a0eaf57cdc6efc5090043e6125731bcb20e796ac3714f52b3bef41b0c080f133edd20c66a5ab74b672f22fae70c1808f991f6b56e64d5488f752a168ece31f2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\wasm\index-dir\temp-index
- Size 48B
- SHA256 29f779cd6cdbda51af05b59ecf9cf025d11a64c6aab0cbb552466192c3278de2
- MD5 be0f48e9c479b56d143ceb216e5c841e
- SHA1 63800339af39d5bac716917c5f6af102f5f55032
- SHA512 418dff99f8846dfb1e88d32d0e7a73f7beecdbca45bfaa4760c77cc437a90feee4f90832484c1e25fc78ab362d81915b75f7c8eb884ac49397292bb91f816f4f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.ico830730cb-7ff1-431d-81f7-8612b857db77.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw
- Size 445B
- SHA256 c35113bec002adb493746340d6c3f08c650d4f384451d03fed1c9844c52ba35d
- MD5 5da93bdc14950e1ae3ede194deb55bfb
- SHA1 ed65f6744fc42a510f6744c1c8149ede695ebddc
- SHA512 9c1a317e3a55e742371e3942e76622ac001c58182c20c77786f52e94744169a8d443cf786dd68a7882dc8fb313705a8c02761f54fc3b892981c95b7f5e03d39a
- TLSH T12EF0235232BD6F76175A9F12408E71521B6A908B133072821563DFAC6317F48E5CECF5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw01571628-5636-4038-97b7-ce246626a7c8.tmp
- Size 797B
- SHA256 da80b1ec551444c8d0d75c18cdf35975b1f185411ad3b48df3f68b5bf11d0df9
- MD5 457df59a5c37c5170d4e5c3ee1031bda
- SHA1 6dff7c11217ab754875e31a48b432b82155e2976
- SHA512 832e6638acd8c2cf0dc7a14f4675b19e9e2619412f0608268fb3e85fcb455d666e8ae644e0e5423b7d85f30fa4d03b272e53e105a6f1cd2770029d2f0bd54adf
- TLSH T10C01CA5C1005ABDC90F06BE45218BD53D659585EB0A52653E291E1D190C8B09459929F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw039c2a66-9ff2-44a9-98ad-40d7c031f588.tmp
- Size 9KB
- SHA256 51ff5dc05c45f9967eb6166d1fe75b495843cb2582ab91d88623e511c3467bf0
- MD5 b9c12aa8f46a8a2f2d6a2069fe06b352
- SHA1 6942a8ec5d534af39d22e56f8b9d95164c75e54f
- SHA512 7fb3e5088ffa1260f39c2f69a635c94593a6a5655aab20d00199c971917e8608fbce96e6544e2c81b48ccb53a8295da554f9a82033721bda428e523808583598
- SSDEEP 192:PGzmzlN5UQSFp4XFCJq66sdbBSdtWrRXqI07b9MYGmGHKgiznHw7Hp4r:PGzmZN5UQSFKsJ/SdwVaI07xMrrHKgiL
- TLSH T15522BE875B387CA2F2BC049E84F545006AC99D0782EE6E818CD778C71B007F793E6852
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw05f7370a-49f3-4610-939b-a1289f4a5219.tmp
- Size 10KB
- SHA256 576b2223e9e1774f6475311dd00363a121351bac9cee34dd918d4498e7e10af0
- MD5 358dc33ab5863caaa94a3a2a35e468f3
- SHA1 b9d49a15d3ea257b9c832ed073a5247e18e92688
- SHA512 064709809181f09203c963d650b36b5fb5e310e48bdc14855232f57e007bef071e4b4d01f597d4382703e06ebbc369b2fee4120e2bccafc71ba5f9f492916c8d
- SSDEEP 192:XHbFnoYPbxVdUCi2ZzwgdiCcN78d+cZULsTrw6tUNuTgjM2ldWjF5yp+:XpjD9rWFxmGaMkx2ll+
- TLSH T1DD22A0F4E308CF9920C0431A46F79DA5DA74393E6E28AB51AB23BE64D37C279C5B1D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw099286ba-5081-456d-9156-d399a62ba01e.tmp
- Size 2KB
- SHA256 b0226eeab5c2bbe01e3e8efc1c51cf5cecbd097a25821088490d182aafb977ea
- MD5 f351235bfdfa8e3780a8df1305e3c577
- SHA1 fd11da57b366e9f85c2a0b94eb2803d5f2ae4f3f
- SHA512 b38007b27ba38f5212708f261b9e3b7700bd6274791db5aa43e1cfdf75f102510f7ec061895c574b84ebdd405658d6853af14a2a2b7201bda02f416522d793bc
- TLSH T1F1514C2A57CA616EA2831B961A31936145700BD0CC3CF0FBE6315AA03066D94B9DB30A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw11457ce9-7dff-4535-a464-10103de8accb.tmp
- Size 3KB
- SHA256 2d71ff09fe3abc43ce5281564395bed1a99372af25aad9e79645c92810486681
- MD5 9801991dc7f2861b6e1ba148ec86c41c
- SHA1 1dcbea3867a27651c74617d32d91d903ffc4ca59
- SHA512 c37e8e62d1316d69932913b533fffc0fe490b7939952da0ae6f5750d1fd747bbfa9cde96d8c1eee0eb94d199747249e3286e17aefc7e0f35ee0f7abedbceb751
- TLSH T18A516C9A15FFED9D0FB01436A82A029F90E4C657932A1F1E2C2214B5774EF30F669C40
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw1418349f-f3ff-4f88-aba4-c18b2f8b4e98.tmp
- Size 10KB
- SHA256 1584193c1eab45295fcd5039df8dcac8a4526b50cb630b10259bb4fdf738f80a
- MD5 074a6283120973eda007b9197ec952c3
- SHA1 7a923591d78a66aa4d914bc8c5ee58d12f3d4f6e
- SHA512 60d16c02ba2af9fcb06aa2a07fab4ec5efe104a721e90fa3a2da98dc5b484865e02f47ff28cf9b9b78c21dac76cc1f4527a6e5ce1da5d517e14f9530fa437061
- SSDEEP 192:1dnL1R92IJc6h7v/k1LBI83rAXYheDHo2i6wEMMJSSGfiys/TaTZRmb:1NBq6Fk1LBjMAeDIYtMMJXoiJr7
- TLSH T19222B00955BFC8E1D2C43E9E90F1ED0559D98E9B70DBA2B07E9EB6B5014772A8230312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw1e111fb2-5020-4d00-9622-75f9f6c515f6.tmp
- Size 2KB
- SHA256 7e9beb166ace9c4e26bf151bad863196a08096ee095e30ac2b1a1cf554cbeb24
- MD5 c24c1db465359cc0ce41c7a548888041
- SHA1 00f4f6a585198100efe5fdf4afd5981756880ad8
- SHA512 c839a84035ed426836f64723e4b69b9bb2dff23d2bcd88f9cc7f973940b4015da48721c3f4252bef819a86a25306898ab69591ddd815c1a6b9d84964b56f7026
- TLSH T155513C6BD18F8DA245BAC92E85B4068B89049475234BC4693D2783739C4772DF40F8B5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw1e44e686-7804-4ded-8482-37ab27809be9.tmp
- Size 9KB
- SHA256 0c9ff6b9c623bb8a84f9f456b58806938c8411b0f4f654c525799814f252dea3
- MD5 938a403593d960fc6bbd439d7a537692
- SHA1 9749ac00bab7f9692d59ac9519b7f931b5606143
- SHA512 a498150e5015214b381f601ca21dba0bfb19c52545e06e480d75c911bc7bdfc568ba12c15988da945ec7b69020b217f0a5f71c69d90b0ce3800132e42e5ad21c
- SSDEEP 192:0VwEFt68nMV3SiNvLnz/BX7fgN81ZBbVA/1NYSjnUCpGG2gJk4+1Alx7LVsPuSAf:0fFt68nMRSiVTBX751ZbOTjvpGG2F2l7
- TLSH T10622D05E381C2B2F90B938A660590A403D436F613436E0157666FEBBA049123FDC29AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw22eaf6b4-a16e-4833-a9c2-5f06a4735289.tmp
- Size 2KB
- SHA256 5c9b12638607cd2107ca57bf48bad2d30eb0b9048f0e57b51e266fd2475220bc
- MD5 943b917dbe46d3f1a0dc414446eee680
- SHA1 658f69f4a9d23d6638f08162569b7185b53fdded
- SHA512 192e9eb3c2200e81047a3d9b89312afd1d269cb3b46cde6cbc86612cc3ad5f3efc0b034cb40bece603b1bc68f2950f2fe71448fabe156d7b86ac0bf2c01ce2fa
- TLSH T138516E10C6B1680030DB224858ED4261FEC8C7D4EE2222BEEDE6C513626FB0385079B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw26e5589e-e84d-4488-806e-96f60578088b.tmp
- Size 10KB
- SHA256 d59fece7b0a1990e8a2f71afb75e8015b67a0f110716e57af59b9567dfd4b27d
- MD5 b39e2820a53ef88f45a8f843b2a624fd
- SHA1 eb00d5f811f76a4142339f98e530a7a889e6007b
- SHA512 21aa5fb6d2901dbc97815784e08e18b9fb302ef7a6f4f6250c36925fec613fc6b44fb9dcbb8f734d0e044e49ee2d67fc30434da112387e12644add4c1b3f40a3
- SSDEEP 192:AzBlzCyIlMuow4hmqopCa/Ivn+lRb5MLdsnbxcQ2Ng2Llq:UlzsMuowrqYWGZ5H2Q22b
- TLSH T1C322B0814BF201D1C8699EDF73CBDE08C5EA6C483EDBE1C739B88541536A026CE566D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw3204b703-5fd0-4e70-9a40-ad0066e2b1fc.tmp
- Size 10KB
- SHA256 d18f35cd791981ed28494e084edef97d202dfa5634cc1f34139ab7b44ca07ef5
- MD5 0bfa0e4e1c5a314b4609960661d72cf9
- SHA1 d145657300d7ee271b7144b4afd45c8d43ee6421
- SHA512 c4ab4b6144e75ebf584b946ef87c436c98676e3835c3cc36fc2010a6f000bbac11fb6dc83fd7c1d56ed23e60dfc0fef907431d716f609c3d9a8b0f539cc89d6c
- SSDEEP 192:B4KZnFNn7wSaqwcu6xv4rTPnI30Vud1+9AGQzjzKjQGLU86loi0/NsBZPYN9s4fz:2knD0SP9u6F4XfVA8RQ/OL6loiGeBZPG
- TLSH T13D22BF1CDA4807255FBED45D3C1E889D7991D0E01EA50E6BCECDEAA255F0D0BB17E0A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw379b9743-ff35-4883-8da7-190fa1bc4cd5.tmp
- Size 10KB
- SHA256 258d42b8d4102ad35ed3b1181d1802770a2d8fa1cf0a0ee82386dd3d742c9f9d
- MD5 d638ccfd015d967de8f6d5e318c0cd5d
- SHA1 0198c728db0b3dadca9e08bae60f32b8ce2df99c
- SHA512 1ee21e17890255a7e6cdd57276cd4db022d9c150d7482b754de69d796365c541863f8508c764d585866b76a07e146e802842d60e3509a8fb1456ec379f218356
- SSDEEP 192:G689SUcXTgzfhl5/dh+lav7B7OC3UlOq39Kj+stGyrmPDnIuHYEkaKJJhoS:NdUcDgz9lElSB7OC3KOq3/st7ADaaCJV
- TLSH T12E22AED12E8908D387258331B8E552BFA15D5C7B2DED8E717934B4A1758B50C40EF4BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw40a4f074-7d44-469b-9e70-bdf37d960f39.tmp
- Size 9KB
- SHA256 aa47625815de36eeb238227f2fef6146f7046daf57fc6a5a2c0cfb409e16bb62
- MD5 e52a26e12272bcf3add95f9c8b1eec08
- SHA1 1b4b9ebf4149d08c589c405555e9b5c6d6a754fd
- SHA512 9aa30bfe4dfc8d8e15773f7b8b0ff0e89fae68d1b0545f451e90b9a8f1bd8652ed3ccdeb671c6cdc7ecd5c9cb52bb6d4e79d81b3a7790f703aeb69fb9165e97c
- SSDEEP 96:xHxsU6+8fy5CW04CR6QhPzTukTsW215m74+fEgf7K0y7TyL0mgChcng2h0wyTkbT:dxsU6+8frPV4h15M3aO+3HCmEw7+IRvv
- TLSH T17822BF1344AA82F8FCBAB6315F930607F19EA1C81BAD84015F846DEBD03D0D92D6B748
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw45668ab9-fe24-46fb-9a3c-7c07dc25cdf9.tmp
- Size 9KB
- SHA256 3a3f53a02704551069915eee41a0e63f60e7ac04e4a9a8e4c05566690a263973
- MD5 109728d9274f1f8369bab4b4ceb27540
- SHA1 f5c4fe586de2d7391734adbd42650d75b3165b5c
- SHA512 19ad6c665dcfa87ad256d962f29f8b43f97bb3de316e7e72bb0579e4e64783e9d046e0db464ed740669919b79451b7ae570dc8eb554600dc78288437a1c0faef
- SSDEEP 192:yHimrU6n3Qw3p53eEDKLlfdiGK/lf4B+VUgMbHCUcScD5srez/p3WMQ:yCMnAcALjjMlf4KrM+Uc35fpzQ
- TLSH T15912BF1A5B9D1394B9381E81CC0BCFD741DE1BA9C4274D3FD79085331D1786A8B24EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw536fcf49-719b-4bd9-bdcd-fe2da3e432e6.tmp
- Size 8KB
- SHA256 ec238fc4cb664f86b8e3f9fe58188d329c5e04ee485bcac6db3617758c402f5b
- MD5 3a8d2fccb5db4453167bb6f7dd00134c
- SHA1 7b5b79f1492dff1cd1f292f30cb3fabd98fb001b
- SHA512 af503e777e3fbb86aa1d1790b3a74f1386d0ae7f09ff2a3104531e5f84b4d85ab7e819c94696420c62c2652ae726cd8b8cf27dd5104ebbfbe2752b63a99f7b02
- SSDEEP 192:IDY0fOr8tSIKo2HSdmciZfQ3TI26/pzr/yO0yV03S2t6:ZMOr8MIC16E26/pfyRyVH
- TLSH T16202AF8746A2A6B377DC2BF903E0EC581E5289ABC3C34D5653325A7164816FE68D943C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw5667c356-83ac-4cd0-81e1-eec1e2eac5e3.tmp
- Size 9KB
- SHA256 d9cbeac29411cdd2183eb59336f36f1b4080f05cc1daf6be6062a8ca2e6a5241
- MD5 003e6f71a9700b9e089151d0ea28f2c3
- SHA1 fcda9d2b560d3f331b32d23c66c6cf6aacf1cc04
- SHA512 d79432508e4e9f28cf630e9fe00edaae53e11e87580a7a4631118f799a1ac977a768a8b030eee70b786ce1cad0fca0fa83b5a724065f34cc5d53bc42c3907c53
- SSDEEP 192:fZuuTsMUIsIVTLEgdA9/0314aqYdSaIhBJZf47N5px80jy:fZhTs5WG8314asaSBPfuNfx80G
- TLSH T12C12BEDDAF81228E6DE4AC8FD45F670BE4113B74170B18E3E1422A56B0B1322E9D18F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw5ab21d3a-3246-4b01-bcf2-57a45a0fa367.tmp
- Size 9KB
- SHA256 c5b5ad68c9180f20b6cae5c1a751e35262699b07e3af3ef049c58f9eb40f5476
- MD5 d9a7af8024e2c292ce261b2051cfa7ec
- SHA1 43a16cfe8f853874659a5ffee7d376337055868c
- SHA512 b5d88540ca8df52b25b1143d6def8b3c70ef4b752bb94f9816e4dc3156d8a0ddeb303800419b390c7cf4d0a0c43d11c514ccde47bfd4fe06bfa7f9ff832218b3
- SSDEEP 192:lUdf+op5yS8Pf1Fnl8NQ2PUtmoCL7EXyVReJJX7yvd37thVxtBDPA:adfzbDad5eOyUtmoCL7ISeJJrQ379xn4
- TLSH T18B12BF473E6138F6155C8A0202B77CBA06CF5BF490360A68995633C60D43AED6FA39C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw5d438fd4-2a97-4d4b-a8ee-0b450c88ea33.tmp
- Size 9KB
- SHA256 4e972d4265afe82da3990b51a8098996a58868fea464647cf1b500ec0c446af6
- MD5 5dad03363d622dc7730af172bb5c327d
- SHA1 803555d1b5a840b6d47226fc6de5416d01406d18
- SHA512 3e66a95fbf0f2d828ac192bc26d5012766ce37d77eb73f30f6cf477a98e92f03ce2fa582a331c1ffd44ad4ca1dc742254a0738beb65a566fc7088015bdcffd59
- SSDEEP 192:TcKFnFhLeL3l08K8w+KsDawBeKIp4tQmsgj9tAXFDH0FPzds+E1Vm+:TFF/eLVJK87RDaoeKIitOgjot0Nds+ET
- TLSH T11522C0291D23DBB315E792B09F605AB68D86C1628011CB5CC12FD79034AF32E5B1EB96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw61059663-e746-43d5-b014-1ed17c112971.tmp
- Size 10KB
- SHA256 7f08b170ad956dce9f5270698cb7a96ac566d72b1d710ee5849600c08fee6995
- MD5 713703c5a7b1f677072d28e806c3fd43
- SHA1 2f46221b1aee76c43bc9683822b2baeee125b647
- SHA512 e3bb1ade6553df98000664a8eb083893fe5ab997635a707dfe8b081e1abaf826763d82d92e8ec2ecf467199fa546a786e5630d920b06f3753c1650ee65e39d0f
- SSDEEP 192:TO6uXly1qewSMBaEFJGbvETPfduOqkvm4X+LGAtwV5LADd8BhWq:51zMrFIEjzvm4X+SAw5yqBhl
- TLSH T1E732CFA30F0440B8914EC015B71BD29E1A016AB7DA5EBA920B0790FFC33E05A27F4E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw62f3ed48-1128-4335-bad0-ab2efc78d67f.tmp
- Size 3KB
- SHA256 02412f743bbaa5b92968d270f56ddd649fac4d95ba9595fd339f7a3fa303e4ce
- MD5 7f30ad85b893ac0a078809df35900f19
- SHA1 0cfe60bcadec702c451494a6f3d476d2056b796a
- SHA512 8f3ec7bc2a39b726acae2f20c48d9024bf757c710789a81968834e3198c4067e8f118fd0818a1ce010d9d5d30c1e7b583490373f3875da2472d0a74139f7bf97
- TLSH T1AE615C42B38DF3ABECD46A2D50928D886574D426FFD50C3DE184DA38C83A796A44A9C3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw65e20df9-9428-4c55-a306-955653448346.tmp
- Size 9KB
- SHA256 cdcd09541ebd254b2e6b2f48c2fa5acb34bb32e971db10df1d370537ae2783d9
- MD5 904efa0e490f9d58ebe104e756c0150c
- SHA1 61756d6e896c3f055384519ccf571e2503116b81
- SHA512 22ddfed08612ddc354edb769b2cf86d8c48fc123b39e87561aa2ea75b2c8d6d4d1fdc63982602b23c1a82a83898a80290964e02b47537c2552aa0cce44bd2a8e
- SSDEEP 192:FUyK7vVOj3alN2yh3KjPmZLpvPF6Y4zGYg5wg6uf8xIJOWi7/Xr7pQEkuY24ts:iyYVOelN2ysjYFxgGYg3fuXhQEk3lC
- TLSH T10122BF19A500FF79A7FECCB1CD5580D7EEB061481E701D95B28EC853E65221B3E245F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw67d1084f-cf9d-46e0-94e8-44055abc68d9.tmp
- Size 10KB
- SHA256 aaba07a1dcaf52dc3ed1874dffdcb337cd4a5e0ce807f7908ad1d54eda0dd9df
- MD5 2f91f295098fc87d907de69c28bedc0d
- SHA1 28b77dbd8547910600c5945cac8a68137634d862
- SHA512 b8b91142a1d7ad1f21ccb36c5f1b8e355c069d04e0102e7c4b08e26d2283a3636c378572b07ca79f54df7a6124b075a5c331c8d5bf77130e3dff6d2e2748cd1d
- SSDEEP 192:MgFJoJZT+B413Rk/NZjF1HyRbzn+TwBZV2GLZtLbEg+NG08PDNBaQXfA:MgFJoJMBGRmVXSRbzmwBeARbEg+NG08k
- TLSH T1C822CF6D8F9D6A940C45772C4C73A681134AB186732EE46C37317D4C5CE62F6288AD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw6c436b5f-20fa-4833-8f79-a7b2bc3266f0.tmp
- Size 10KB
- SHA256 dcc580970e416830442b627f2dc6ecabc22fe548e04696e371b334e9a8046527
- MD5 4f8bf1b9718e3e2aee6d6f4f4720af19
- SHA1 f77eded1a6644050c5064ae4371d7bb48b679fc8
- SHA512 5b353770133687738eb2509d0b47be31cfd79c89ec13d43ac044dfd45b959ee17a78037f92c20a145d84afd68c431073421073f99a8caef460f4e3016e872049
- SSDEEP 192:CIWQBEO3wRJa0RvDvKa1c0834uRuXP52fC8GfvRZyF:CIqkX87vN834uQXP523ayF
- TLSH T1AB32CFFA59FBA6C17EC753520373D19917F9A4A5036BE102815ED8E036C0CFA8490FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw6c7e4fab-e159-4179-9b95-d8736fd40af2.tmp
- Size 9KB
- SHA256 9bbefee0f9949418d9204a419c170161373c95f6a23996809a46e7e8067a4415
- MD5 1ce96ba0ddcf1dd16f080c394715ae01
- SHA1 09694bd80dc78be5e6de417696a352774d6518b7
- SHA512 54997722e0d990192f9e41846a965f302544d2ee8ad5fda6c024fbb86e6890da87aac2f84acb42311f5b83d4cf536b09aaaa130e4d2c58df41e33790bc433195
- SSDEEP 192:H2Ppg3CjFbGLMAag8p4nPyW45CJdBNOFaVSp7yP01jq7d0bYZA0:H2hgy8M5g8pIPyWxNj4padP
- TLSH T15012C1E520FB890A279313B2737952B4B02EF2D65875C7994EA040954FBFC2BD817225
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw6d09a1ec-8c49-4286-ae86-1573bd5f8dcb.tmp
- Size 2KB
- SHA256 bce8e47dc123b2a645b6a6eed8aae0fa41567ec2dbeb0d72387f66991f066dd1
- MD5 e36a712ec64be770f0cc0c69bb7fcdf1
- SHA1 9f8a33dce44224dac0e54f05508f44a4208c46b4
- SHA512 e756427c69c916a62c049c27a184e6ff2c2e2029c49ee8f7d71948f6e36e5a01b310a68424293dc16aa1978caa0e0725534494ce4a54924d6425fd287592ce5f
- TLSH T1E8512C4F82E9B1BAC41D853AFE8CA5A67458904482933B299D291AF0F713FC57B022D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw74621156-20c5-4bf4-9bc7-b2b32abff12d.tmp
- Size 9KB
- SHA256 313f3a6128d01ae057f48822b8ca773eb4597369a28cfe8b7b0ae93eb9bbbab5
- MD5 ce52467c0ddd4f52a9210ab5ad610015
- SHA1 345849ddd49567bea29734af988ed2dbfce63906
- SHA512 2c9ffc00790cd14e8a3368aa21d4780b49fd069947239e40cc828776756982e434ba481045cb06ac2d874820f8418915b7f35d80b87f90238bbe1a1b9e3da4a4
- SSDEEP 192:34CNP/T/TATzV0sCrZELfKqJk9ePJg9exxKCCJJwKoFktW3:ownT/T8z/C9Kf32ou9exxKD1o+W3
- TLSH T10512B04342072D2C5DD06A08706976FA3797BFC3DCBA5F429F892257B778F00999835A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw74fb491e-ef2b-4cd7-8d3b-764f43270f9b.tmp
- Size 2KB
- SHA256 4ed9ca3198b2ad404780c6c3707dab2336098e1fdd55b4f9c127b51257795355
- MD5 0bd9ec3a9796e5f0e326d0dfe94cbabc
- SHA1 bf63a1746e74e8b6d28f94602c8d5e9970cf67a8
- SHA512 e235ab7696b8f6d05818112484df59ee0cfe2e65aa6105654c205153d80ba88aaed1a13133662a8409530721cb0a63452fb6fd83a2ab25e3a00899221a2518d5
- TLSH T143412B03B7DF38EA51792E01C5C04BAA1E104F9DD79E6A73845D6C8240684DF26FDB01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw7830ad39-9128-40bf-886e-8d38f324791a.tmp
- Size 9KB
- SHA256 e90cdb89c0994c351660a7ba91c15c54241108d429799e6f19c30ab612149110
- MD5 c079b0b446e58ffb7be9d258e9035d85
- SHA1 d7189615fa714816dd48ab7aa82ecd41f02cd938
- SHA512 74d50a7f3c0873826630439dd3e3255c0ccea91439c77f93f323a07d5ac89daba51009784f104e7cd1e2b9fdb656aeabf41bfb1d60f655d853ce501696bd8e48
- SSDEEP 192:jaQmh5snUAWfOs2gM3GjHmSGxED40szNJgEDpGpKgkYY2Ywlgbf2:juh5szWWs9OGLJGSE0szNvln2zlef2
- TLSH T1B012AF0DB66A53AFB5298E3807DE17C2680A00AD189EFD55148B4C2D679533F09A71F8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw79a08182-3040-404f-a4be-6dea9a30004a.tmp
- Size 1KB
- SHA256 610b2dc651b33cffef24a2a14b5c719eda16a340dd612b7e5b4919220e1171c5
- MD5 bc6b8564478080ab1c8de45ba57e3e77
- SHA1 92e30a59864fe2ff8ceb4b8d237bafdf50691d24
- SHA512 6b05a0cb7072bff2d95fe2c6f275abc82277e4735e2141557bcd1caeb661f5fd8f04bd6f7251cfaaa10a47882ccb5ad1a99c4542e18c0b0ed3d46312a8e58b66
- TLSH T1EB211DAED074413F55651113CD86C1F0777200BD3794875DBB5CCB9102661D3CB8754D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw7dbb47df-766d-46ac-9bfe-a7ddd82be82b.tmp
- Size 9KB
- SHA256 416a3c413a743a5931e13a76703822ef712b2468ba72ab922d2686602928b6aa
- MD5 f15e0a274e5219dc3ea33fd3195d039b
- SHA1 ada1f5fe58b39f56c2652eaee2cae20beb73ee6b
- SHA512 58843835ff725d9bf1a770ba12fd171bafd78ec97e9f2bcce779c144e8f978825896368cb6f8b5e16f160a6ae863d513bf83852a35f6b679fecc50a589cb304e
- SSDEEP 192:0CS5bOv7eYLxwUVReTEdplNzaLmSO5gv7qzA0RpXdIJYxe0Oy1:0Clv7eYLakRg0DNeLmSRv7AWYk+1
- TLSH T1F012AE2F70686BAB3152FC50D6D6B7BCD13B6CA438A5272ACCBB132946F54AF424560C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw7e647fff-40d5-4495-8ac3-c123717ae1c6.tmp
- Size 1KB
- SHA256 e1ddd110a24194e3951d7de72f9229fc60e57a9fa91f60df549fd38025e69744
- MD5 eee24b455d084696736dd088576cd912
- SHA1 95dd1cf004d1f41797a2f4148193f3f66ab35f66
- SHA512 1eacdb44ab5c40304155d8d43ddadd9a92cd911dcbcf80784b19bd365a095ef54b1f3fcf38e6216e08f91b0fe4a3f02d78c98153406a2fe72a26dc00becb05c3
- TLSH T14331F97540286919E9D05D27BE128790B482719292AC54CC8B1C3C7FEEBF8CCD235266
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw7e651ff1-593c-4c10-9eef-6c1bf0667781.tmp
- Size 3KB
- SHA256 8dda717edd27de38fd3a9dd6460067678f7c7cf368f5d637b49ecace6cef1a1e
- MD5 81bab2ecd77dd6543813f90ec2d27872
- SHA1 a52ff51aa618340c91ef2afeb14f4f3cd692192f
- SHA512 bd9fd72efb94d4a76cfe9d89e6d3da32d54fe9da04f3657319d81a4df98f55d4c7d5a0e87df7d8b665cd907ae51a951bd6e5f1c2648bf0979f4b208f7c8bdfb9
- TLSH T163616C66A2ECEF33E36847CC4B2E34AD01C0B68C9D424D89B359B7540D6F6024AACC64
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw85eb8279-8457-4a9d-9ca7-bc0c67ac4c1e.tmp
- Size 3KB
- SHA256 793db1231867064b2bfb9f5722a871dffde4dfa91f9a9e8374174cf01de47b49
- MD5 5963ca2424f69a4341f8fcbd06ff3fbe
- SHA1 308091416c3368cac4ccd7bcc8e02d09ae0f63e4
- SHA512 68f163e3aa774e5f9c2be3a191976da73c8677fff5485cb626e3ea765ad38e7e432984877ccbc3486d4b020efb4efa4eddf2912eb971842a6bd66f6e50c183d2
- TLSH T1F4619DCF8E0157202DAE2627CE0F502CCCF616AC530E201EE0D0C95E4A370E602884B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw91755a0f-c762-4359-abcf-25c3aed5048a.tmp
- Size 9KB
- SHA256 4ca9ca4a4cc97ed433ce70f7d9b3a9b7ca3a57756722c39fec6423dac226b707
- MD5 a1045dc08fb10f97e6dc36ef01c0164a
- SHA1 ca9bf1d9625e50d34d04b6e5f7bed194aace8f47
- SHA512 a5019b071d6686a16aae7a3ff0022be1ca45d3856d4650a0a4153d1985f3e53a219574b00ace779de9aa9543146f90369c1fb3471311fce0f9083f80d966d825
- SSDEEP 192:zfxu6ouzSa4NQwdDmHofjkueBD1skj0SAUCS8nlKSGrzKNFVoxOI:z5FokeSFv8nPNFCxn
- TLSH T17B22BFA817EC10F19E3E8BF33EDE5281DD60D1CF42284B69DB21626AE6CF66860341C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raw9f190823-8272-4144-a2b0-1c2212276ba0.tmp
- Size 685B
- SHA256 2da40d181ef9c33128b453cc6e706ccf11e3f17d795af98ab75cac626b8013bf
- MD5 8340bdde7022332f3fb8078634b4b3de
- SHA1 719fc59961245af7b073df6b6483d98def7280aa
- SHA512 b77508f864349b3a96dcf743b5411e0b585ed1568fc75326c6d9cb2128ab451b5b1929103a47ababec76ae9c07247be8bbdb280b8a34af79b627327b328d73a2
- TLSH T1A2018312627C8912D64299762E112B71FB812B1ABC0C3CC8E11F40DD6E9804BC2F694A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawa087e648-78aa-4b00-912f-0fed69e2d171.tmp
- Size 9KB
- SHA256 ba49f0f45a1db33e547ec8b0bf55a693cf9c9d709daf555f461391f196ef402f
- MD5 210b5a6c71fc06f9d3d0118a32991f25
- SHA1 46de517ad739e19ef596fa8b13ba7d78456c3da3
- SHA512 91e563692f43d3831c79b5c75d58fbf64a2446ec748995464274f59408da36ba620d172832aea9ae74bfe5b436ce905d13a9d9ecba3663e03eee4d3dd609ffcd
- SSDEEP 192:OsxhZtEZXKVphBrT80dYG7sMf5qP10/FP666VsY5tJbI6XpIOASsJesGzRt:OGGKVxRHX5210/9A7rJbvZ9tsJerzD
- TLSH T11912BE4EFCFA534CECCDC7C047A469F614764420A3142AEFB4D53E44D9A80EC22C6979
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawa7f8dce3-ca22-40f4-8f50-274d02816407.tmp
- Size 989B
- SHA256 c80d52d7d0558d54634292a8619b0135532e533be79423af32e19c7e86184429
- MD5 4f8f7499a688cd2ea89bb7ec084693d1
- SHA1 e9e8f1e188ae29f72f96fa1f4efb496bf4a2d077
- SHA512 1bec49d0861964806b07a62909a24da0a874ef594cb87592bedbe52eb8d996f64e76af8fd8a8a0046885f6439ef450b40480674f45ab3d5ab84c9af6c53bf05e
- TLSH T17811C8A354943F1F7441640522849F0C592EDD8BE02D4338707A5EF8B35CAB29396399
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawabb87b2d-dd64-4bc1-bb99-b9ae39e81c3e.tmp
- Size 9KB
- SHA256 9ee42856b07a5cce1500cedecf7bf365d3f961fcac6db519f45e90147e9b890f
- MD5 c2d583135d4fdd69d212a800e18bab64
- SHA1 1100f0931fc91195c60b05ca4e322953f06e7b07
- SHA512 6c006a4fd93550e3031024cf5608ea027c7602f67f66c12b308933a00a07a51ffcbc272afbabfa7d882327b9f8326e7bb2dd77a375b111735ba129abb5014ffe
- SSDEEP 192:OwBw9Ss4A2XedUdW/c8qA1NXIUWsmeP0yyEjDMUJhHEnlbvqVvftyCgEy/L:OwBDs4A2Xednp11NXlcmtp6lbiVvFy31
- TLSH T1D012B046537F532E28987FD34FC55E1818CF3754C6E4642FA8239E926187E2470E7126
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawb31205fb-7195-4bf8-b0e3-0161c9f067c3.tmp
- Size 9KB
- SHA256 abaf3ed8f3ee1b43b83572754008a4b9a6e68e6fbf2e132e2058de0dc85a8909
- MD5 98e03e9511079e945bf27e8e2f827f9d
- SHA1 1c8dedb1d1deae66982846e3b2a71a27c883bb36
- SHA512 71baba382c6cc38ede964186c8fb12556721a0acca6d51308a27c87a0dfbf956acbe26792cdacdff1cf7aa59b97a83f988a9c73f46d4fe16b071e9d21bc89c37
- SSDEEP 192:314Kmmgl2XEA814R4EkGQOL+3BbUALoP1BwMAVqtg9KWdjCp0:F9Il20p14R4tE+3NnLoP0MAotOKWd2p0
- TLSH T18B12CFE201D01BE10538426E59B6E9189FB7214F319F09B80EE35E0ACA5FCDDAB01CA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawb8df09e7-23f4-4f60-837d-e757be5bb51e.tmp
- Size 3KB
- SHA256 c47d9a14e3824f796bc4d6ace042191179c21e06cbfdc4125c282f64c641e480
- MD5 4915fb25760b68e0e628a91cec27e468
- SHA1 99e084640c2106c44473b1c48553a6bee2f591ee
- SHA512 ab87c265c6bc889ffa3f229e8134c1e4ed1153afecf383bc6a0f545675de4c265d7fae9634d735a46941caedca5d1ef74e7cc112ccf526d20caa06b251a5a39d
- TLSH T148617DA0F07931FB48EB172F5B455C30AE851A2B1FD7635C211E24E03B629ABDBF4840
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawbd778fc5-c1de-440b-ad0e-b12864daaaa7.tmp
- Size 1KB
- SHA256 4dfa7fdc37888d2988d053ad011fc70a1971a985811fdaff36e94193e661e541
- MD5 c27630aa53eab5a7bae883f4ce995d64
- SHA1 57e332c0301140ffb19ffa10a02d8f237e43c86d
- SHA512 cc38aea65ad85df19e175b19c7ec002c4eea11428a64dabc9aaa97cac46531ff183c7308a63098cc5cc5ca5eef8b5d81782e5cfe425f694370bf0e9a9831af18
- TLSH T12831EAB163FED35127FC3E29710822F4084B50C8D066A3559BF192017F0C767A0E59EE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawc216b64b-eab1-4214-a61c-8dcce095dab8.tmp
- Size 2KB
- SHA256 1e869d5fd1774dfcedfba6738b887daa73f9761b7899582abeb6890353cb9fd5
- MD5 a42cfeb10e72ab6d9b9c854d67e7bc61
- SHA1 156befa4be2ff4c816885decdb20071e86577ee8
- SHA512 e30786300ca2029cbaf93ab7d4e00166c73d64d90d400d52ac6a13f718e14f8750f06fee56638373a3d46e9e5f95ec95c1c2444366decbde7e1470f71b217f2a
- TLSH T1B5514C915D5C3A8737100AD87AE52B639822227F375DEA774C04BC6494E5F8F9E00630
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawc63a8690-f60b-478b-9d53-cf92d6fc8094.tmp
- Size 1KB
- SHA256 a8e17c3d0d99c9cf58fd340d9928e2cbbfe95b5b7fd60f529a36aa2812ab727e
- MD5 e961c21ea29290379d96c0d931a34873
- SHA1 0eab154824b6e2b0386d5e30e4a8eeccd982b2f9
- SHA512 b84b2a0de731d06f8d74b38c0604c50e573a9d1577f4e2056ace86fb80529e371365968387861cc86b41c5293ea2664df5381779c31844d4479a69316b5aaeb2
- TLSH T15A412C1095F22B3B1D789F396416C71A9BD010CF075083732D25223AFF211DC5ED142C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawd42fb412-c4d8-489a-a174-43b76146b22d.tmp
- Size 9KB
- SHA256 6f02679219ebb9568b80974c80528028641ced1da9d15d82f6b108cdd72f707e
- MD5 666b57b92331b97ecd01ac57753b0a8f
- SHA1 e030db01cba5a6dce1ef39b0ad4d6c35fa222430
- SHA512 17e5d54a21f197d8b4da6608b2eee24da97d0f94baf60c4a36ca9503407c9a66967306cf66fd0648c7d8391217a5914f73539354052559529bb2446cdcd2d2d5
- SSDEEP 192:6y7Lkb7K9rQMjNZBIBnkzfqo3GwXqC4JOsCQ1n561yDcJRb8oH/y:Hkb7K9FBkkzv3GwXp4X1n01ymbX6
- TLSH T10012BF9A81EB272FEB5278C168B25B140E343F54547DC5B326F08B56570389CB446FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawd5bf4dea-7c78-4a57-918c-71078ecd948e.tmp
- Size 10KB
- SHA256 4a552e56bcc837b68612cffa97b559d8f8f542ec18d5e3cfa26f4bf93c951097
- MD5 a60d65f829ce2f9f2be55419e0c1f5ac
- SHA1 31bf7e9d067d4f602c9065d77e3f7ae869a4a903
- SHA512 9766cc69135bfeb1b21ba16b57776e5f808955495051e9ee5bccd4839e168c02e51746402c104bbdf6bd1c0ed6aac303cd23ba412080816c285238fc6772a42d
- SSDEEP 192:nZNPfj2p+UT8I+rMM+LC1doOWLhDNJ2AfcKPOypyA5f:ZNPfip+LpMMPdoOG72AfcccA5f
- TLSH T1BB22C08C0E429598F56F6EAC0F20E9978D4CFAEF284005BA3C0D6458D9987F4475BFC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawda0053ed-baad-4db7-81e9-249765212436.tmp
- Size 2KB
- SHA256 d285fe3673ac10bd423e0c718bf29b80a41a3d65428ed41dbba08bfdd0af8d30
- MD5 ceefc8fcc7476f6f767a0f40c61af213
- SHA1 87dbde31d47716beb507586b3209ecf465b856f8
- SHA512 1bc4da662351dc3cc4eea766e85d3299dbc1190fecd557820d6e5631b431fd602b0af1cd9bef4419d76ca49636a7a4b0576f8429f34a3fc8a1b9d43c156e68c6
- TLSH T123410AD1A17EDAAB8B27B666307961668CE44B321D9434741132FF41E11E21BB52C074
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawdac5f04e-10dd-4079-a9ba-ad73a8cfeb0e.tmp
- Size 10KB
- SHA256 64890167f0fb51fce9d3c01587a650e45d31c27361e50a1f4c9bce960dddcb02
- MD5 6856a434981df3b17bf5eaa3321a29f4
- SHA1 822b5c9fcff476591f96b96b68cebb80fccffe1b
- SHA512 e2673febdf871cd0028caa54973f14d9ddc9a9b85ca9c91b309f16797f684a0ac71574ebe7b1a5c64ec73515058036e25da131beb5f65a351a93d00187eeb5e5
- SSDEEP 192:M7w2DtQsdoo8Bd5WXe2sFCdp97hJ1Iowvnm+sHpOot5:+1dz8B3WXs4xvqo8nW/
- TLSH T17022BFE3E05C5DE069A4C267BBA34DC2E6E74F3365FDCB4610F6C9A758508720353186
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawdfef1f15-5195-4e61-867e-3e66e76c0119.tmp
- Size 3KB
- SHA256 1a453a33cb93d73171fc9b0121f8c96c14d04e92216f5ed34836aadfba263a9e
- MD5 b674c89f61bd71cc1d253b515845b019
- SHA1 ef92c75fcbd6eb5390f9236532bf64410cfcd65b
- SHA512 87ac782dc8f61f06f93ae1e375c553378aaa7136b318d5813a46e255cf4dddbc76d612a5e36c3c7a2072ce44ea422f857b6e7e2cf1e58b64e2640c539aedc329
- TLSH T115616DB1720BD2172CCA0196291D87AB3C04693199D129CE2CB622D6BA314636EAA943
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawe0323eb8-5191-4bef-9052-95d7aab03634.tmp
- Size 1KB
- SHA256 57b103f59c03f55026e648463e4e7a17dc327d46a30bb7b18a66064e05203399
- MD5 7762bc38f5c65bfdbb4382b9f1cafa16
- SHA1 8d1623f0ccc0b7baede29487b7dd229a8dbedfaf
- SHA512 e57451f9b2e49ee164f05da216d229ba7e850d6ddd02e0926d49c36b931ab181bbc46b676dca495b2465e26d7d80a88c1fb781b9e904e354466ef23ef2b0aa78
- TLSH T16031193D40093E91187F2F9CAE4617FAEDC24F0ECE4A0DC5D19D6B18222525076B8078
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawe82de1e7-6235-4a3c-997f-903ff64b4630.tmp
- Size 11KB
- SHA256 d9dc5585a1b23d577f9fbe1e485c6a7d1afcc7306906084e37e5228291091a5e
- MD5 16ae0c7ecfe31fb539c8d2031e2abe92
- SHA1 f039fcb494361b06c38d0a047f1ccf4e7b8fd648
- SHA512 20b07b07eee1b0c71b8204a8bb743534d15b7f51b130c9da885a747ec8f6cd4854c5a9ebee712674bce9b1ca5f8303b9c764d80a9de24c7afc1c07d7967d6339
- SSDEEP 192:LcBBtOZRyh9lX8zzbl2I6Sryjr0YPxbnOZ1egIgO70VjUA5zPk2CQgDzvV:Lcn+RyVMX5D6syn0MhuNtUGVkDzvV
- TLSH T19832D021A341382D8915B79F7D285E088347B9189E2EFBAC4F566013356CA7608BD3D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawe960c43e-628a-4c21-b706-5d1d0daa74c6.tmp
- Size 9KB
- SHA256 71b7a9aee94b31f244cb857314661b55be10297c88d14e5ef81882bc709f6aca
- MD5 137aea2a87501403a24e02669968587d
- SHA1 0e2baa0e5935b00e864c357787aaef21f8aaedf8
- SHA512 d2341b37f671856ec90b2e821013195c0161234b1dfa9f6bb0e356f9cf80b57444937405d49157b2648bc1b462470a93ac6bfa1cd87055b5ee5eb6f4b46b3755
- SSDEEP 192:7htXcORi2JvvjY4dKR33IFaOo1GT+5E6lkrwrZYGEqyEc7WoLUy9tM:7DDUqdW339OWaICyYGEqDc7lwy9tM
- TLSH T1B122BF4808F057128D3F14096DAEFAFA09B36E928915E2770DA62CB9A162D9035D67E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.raweae92728-bc42-4524-a222-b7385ca0584e.tmp
- Size 8KB
- SHA256 107aed8490fdabff77f1bf156f39f3b01daaa3672b7d9e190fbd56e44a5d5d89
- MD5 2d37fa896749edc4f09875e32edca907
- SHA1 c128ccff835a72ad08692bda9f4fd6f27b26b6e0
- SHA512 16de38eadcb99891960c6d6f388d4deb2a13dd5bcac5a2e2d77a82637246ffb62b312d8e5f112044bf5b84b9322b22728eb8a1dcdcaf1687916a54fd75d08a54
- SSDEEP 192:iviXfrYfwR2qJ/xURAE8FbDXpofMbAEag+VwcM8jAI9It:siXzYfwRJBb7pofAAEag5/8jAIat
- TLSH T17612AFD0FAC6A4043630565E2573F31B8A1C7621FBCE5F1D01B9AA793389B777381052
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawebacea22-0e8e-4406-9fd6-178c8721278f.tmp
- Size 9KB
- SHA256 4868e2bec70a4c125948741291b1131de3036256fec258af878beb10627a3705
- MD5 ea9dd0ee2bdab0a2b7915d93161ec7f5
- SHA1 4c793550b04cab9401011c97abade398b9fae2f4
- SHA512 ddc5c5dda9f5a6f2663be01a2de3bfa5153e24376c363a31e824653ccf6f5dc99805f6f347946691787aa9ce202e68cf93f6f47d065f87da99ea4ea07989918f
- SSDEEP 192:Ag+CtowMLQAlqdHp5PVd9Z4e8tTWWdWNbuo4vtCHuLywppHn:1towM893jHvWdW1X4vtcTGVn
- TLSH T15C12AD2846B20A60D02B352B8DF694623760AFD8322C968DE4F213456E3837D12FB0DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawecbb1040-12b2-41a5-8f10-f6ad28e34d69.tmp
- Size 1KB
- SHA256 12a2becfcfacb3d8e3b40e8b064a4185651fcb1f03f72ff3a8e23f46515b39ca
- MD5 7520eef5736077f64d8836976421cf4c
- SHA1 087f8b7573f8c08ef301d8a492f7e64b27695302
- SHA512 fb6f18f86b98fa050fd467cf8d8b3f6d580fdb77001a0d5ab151b25aa190658bae653a6d8092587bda22d8b7e5339e05a43c48bd1bc28e39681da81dff040cfb
- TLSH T14C21A78EB25A3E5AFB58223B103DB30B051316090A7474CF378B122737DBA09A269515
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawf5010012-e8d7-4f4f-922e-31ec9f082740.tmp
- Size 8KB
- SHA256 7b648c57d791fd2c979a62d230b39178e7dadf22b98fc531e460e9b58fb670f4
- MD5 d3478be503e68367c27b5a2f5805321c
- SHA1 2a1dc6ac2eb90a7a94f24eb938d769fe8ca77357
- SHA512 5081e531aaa8a8950aed22fa0b8722624a8618c5cd66a1c9be168a0311732f747deac5d2dad615d0d074a72fbed977d0893ebb15448c4f8e9656672af815e2dc
- SSDEEP 192:YbCwAc60cUpdlBvLHg/ETKXhIrpkSFxB3W5w0m4joqmEdKp4SH/cH:QXlrlBTHCEYhISS1W5wgoqmEYp4E/W
- TLSH T14C02AEC5B80B83EDB1C7C1C69B284AF50D46D4D027FBA46A852B257FCED11B7EE42429
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawf5bedb44-3f55-41f3-b0cd-82fe75345e10.tmp
- Size 9KB
- SHA256 e555f7379d72dc29beb1622231211038396deefec2c45086f68bfb6fc2682f6d
- MD5 22152cb1f9564480a9c77ad8758e7827
- SHA1 c83068f27e3dbea39aca5edfc1f24ad336afc9fd
- SHA512 b05af7d679e33db47b6338c9cac40b0bf960b6536b10aac2b2279fdd80e07470ecb320afe60db312231c676fac7c19d9586b804848a0a51219a9d913ea5b1da8
- SSDEEP 192:MO6tZnBkB9UnZIZwZ+/udicOQvOo7Z+xUHXt8MX/jbFcip:qnSBaIwigPKqlii
- TLSH T1ED12A0F5941D7702071E5CFBEC4E174BA5D9618320F72F9EA1AD47221499AD3E2C1129
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawf7d0ee7f-56bc-4d72-9615-cfb6850e4b57.tmp
- Size 557B
- SHA256 492d2d11784d2b235447f8c06e64c36b9f8833552e3e87e0dffc6aceb341f79d
- MD5 e4f32bce7829cf251975cce43057e0ac
- SHA1 cd9167ba9ea1ef4790a626550f38f241e5d0b903
- SHA512 113b9afe450ebb35929e3ab5bcf2e933b1048ddaac27602c880655d3714e8dbbd6546c25c2f509e982cc14fbcc03e0353ff75cf543787b27b0d17cae7b70792e
- TLSH T17AF0E1239B7F40466A64B6944906DC35D3C34A2B4B54574639143292D651A71246A5D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_f7c5b039-bc75-4ff0-a48e-534ede7fde01.rawfedcd261-456c-44a2-8681-c1415d8d5466.tmp
- Size 2KB
- SHA256 b0ad0c37ef69e0bcde2c2d7b9bd892e70a8fc3c05ed0b6e6c202c695cffc2eee
- MD5 8b7e14d869785a3d66cdf28115b4cb3c
- SHA1 48192b36e1b62191beba4dd20657dd330ee605a9
- SHA512 2b71502131df2fea7eb50241a47317060a8a06ab6625013fbc58b8e3a3612932dc4e2f01e282c3fee5f7d0b3ac51ddf42b86fca48a3442b5577532bd4c0163e3
- TLSH T1F1512B64228DAA0146D5FFED8398F00085973F1EA0B61F587264F5ADF504A7E0AF5D86
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456
- Size 412B
- SHA256 36ff6fcd1d848b1df25014a1c03907e15d0a3e7344b1893ed71f510d3dd6ea23
- MD5 61d22f718e87c5e3179d6aef99ec36e3
- SHA1 aedd0bfa5d1b7413c351b6899eb228d65526bc71
- SHA512 780dc8258aeb74ee602aab493feef2ead6db6509ed7b096d31f33ed39764271e832ac88289283404f5d7f8be40a4413f326e231edebe4ef20619ccdfe3a02925
- TLSH T116E0F11878246358BF9DEFD63BF93140C7398449E8E083E2C4BF64AF4299A0D4624251
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954560dcd5916-6681-41ca-993b-7bf9812f7582.tmp
- Size 1KB
- SHA256 3741eb6a6a172070244df72b938892463671aab5a3acc8293cdec568c8f921a7
- MD5 609ef428efd4cc3e2c36ea607e1bc1fd
- SHA1 6284e0fb8428dcfec2e8ed4af77e44fa36314c0c
- SHA512 789b4f0dca6f734bd7d2358756745e6e11cad9313eb67b04aa0941fa2508505343fddc11f25dd948b4d8246cc5aea81d4dcde066aacaa715ff50b7dd7cf07306
- TLSH T1E321CDFB212047259E5ED3AB7BB8318CC77249CA748086EBDAAD744D07892AF58213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456114b8038-5995-4d5f-a476-2ac7e94fc86e.tmp
- Size 3KB
- SHA256 996aa1d8e0f3bc619948967472ff2c4bd2910b73e336a067643cc7cf6fbc3caa
- MD5 b261e9e8a0dd7e499dfa12f3885de2cb
- SHA1 5d30de982c52c96ac3e3a29ecf3136f57870fee5
- SHA512 ba4876ed8cae1ed1b80c99f4222ce079aac2bda89d057312cc39ba875c9d5e329b50bddc97d7acac0e58c108e0ff35d35cd21effea514b3efa20ae1d3a052f40
- TLSH T16371759655105B369F6EC39FFBB53E4ACB768593300065EAA5DE104E17DE2FA0003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456150494e0-c356-404f-8be1-088da40b6c82.tmp
- Size 3KB
- SHA256 7622d470bf64c8f5a227f070c2944521fed339b751ec7122ec37f4c5ef69af4f
- MD5 94c2ccefc219f29b4af4ae72be5ab35e
- SHA1 b38990f22ee2a341f4ef84a7b3617e2c7a308719
- SHA512 6adafeb332f0f70c42035aa5f4904eb1be33c42fd6fe5e8cff33d417537e59a94a591c446c9ab06a58a690492048ad9f935b24674e0224d2953fe6891951ffee
- TLSH T1656174A655105B359F6EC39FFBB43E0A8B778587300065EAA5DE104E17DE5FA0003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954561cbff248-de3f-4e76-b9fd-c3d3498a90e3.tmp
- Size 1KB
- SHA256 045767d3a4456c2482e72645461d39476fb84f22baaedd22c33fdcc2b8ca78e6
- MD5 4105633697e5094d00c6a186cf4ab7ee
- SHA1 c548be74cfaeab1cb2e089d0679764e27576a446
- SHA512 f4b84707d8d53725687caa1e0e521b143772ff31e81aa5665500b193c37b8f6276d8f930e028541a09f72233c80284eef43997de8b68976932bacae6daf620f7
- TLSH T1E43110EB206047259E6ED3EB7B78358CC7334DDA74C08AEBDADD644C034A6AE68113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545647a1ded6-7ed9-4a9c-895f-3a6a682ddf05.tmp
- Size 1KB
- SHA256 a2112c4b79d41657e75dda6cefa95df24b3fedf00551a6bb153502429e6a11d8
- MD5 0c6a2844dfdbb2433ad6a9a0fffab89b
- SHA1 37259d3f93b0f01007aa4dfc5a56af09404b7e39
- SHA512 5a334832c5bdca1048b9e2f12217911d6809a08db1952b6b8663ce6518cd62aa8a10b1d9ca4b70f10d3daa7619861a75ebc1c3768e30b441475c8aa7faa8202f
- TLSH T11721EDFB206047249E0ED39B7BB8358CC773498A648086EADA9D648D074A2BE68113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954564829a584-37a9-4d5a-bf0e-1869c5c98126.tmp
- Size 1KB
- SHA256 9e4ae914fe0c8559a337003551f78dfc31923b2e8ec806f3af1c7b03b7ea0a95
- MD5 4b773b0f78a411440de1cee199be9105
- SHA1 80d5fa7d314ca7c8080fd4937082f6715fb42405
- SHA512 ed1c2929420a2f71328a53f25cb1f7d862a8c9bed3b1561e29cf6e5e18ef62005cd2518d274bdeebc61654eadc61414c05e13305078ef7cd872777ecba0e8866
- TLSH T1053122F7106043249E6DD39B7B78399CC333499A708086EADAAD644D039E2BE64113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954564eb8be7a-55d9-479b-b9c2-ec86f5ec2e73.tmp
- Size 683B
- SHA256 f772c5a17e1383584c066f9c89e9b22b517dfb9ff9af199dc2cab784fab5c0ef
- MD5 299deb9159d8611e8b8fc0b5027f624a
- SHA1 9804003c59a896b93bfa34029611e5d3109ecbda
- SHA512 a9a3f20542de92e4cf169bbdb9a9ed3248c5ce3e97cce631df7563a441b8813d2e7073c61740e4a833aee061a4eb059b5928e073219b7a64bbff5206e85022b4
- TLSH T1B201FEF634248725EF4DD7E63BBC3548C772888AB8D089EBD6E8B40D0369B1F9415290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545656ab79d5-1c2b-43a6-bc0e-264182d8775b.tmp
- Size 3KB
- SHA256 9ce66a3ece2fbf05267edc62cf4b83de0a042aad889dd6cbd00a2d6ed8914436
- MD5 ad1cea3f3b777e1cf2f7135326e4f08c
- SHA1 63ea4d41b0a8e8e30614f4bd436d757601ed5bc9
- SHA512 020c12c8e061d3b2a88c748235f8e5a055d877a0bf40f2f0c5f8256825c69638c65ffbe4bee095a788630a5af941c99453d45d5c723a19d9aa3dc726e0b0ce45
- TLSH T1EF71769655105B369F6EC39FFB753E4ACB768493300051E6A5DE100E16DF6FE0003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545660b04916-9386-43d0-a6cd-6dce470e5484.tmp
- Size 505B
- SHA256 de89ed75d10af5aac038eaaaeb31601aa736d8bfc623fc29d7bbc6a06f34e917
- MD5 7787f21aa7a7765b63e70f479c07dc34
- SHA1 4f30368636fabc29fefc29414327ae76a1b6d1ca
- SHA512 68a0b4eab478f000efe787b7fd1d4ad5c8a332759a7f029ba8ef0a5411cb0fb374897e357d7f4cce41ca6ad4cb9970da5e280ca5cc2bfd9b92a9ecb7248e04d4
- TLSH T14DF00559782443196A5957E637BD3545C7B19C49B45047DAC5E9605F130934D0514250
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456624ef37c-87d4-4a20-8391-0f04093550a3.tmp
- Size 1KB
- SHA256 2a8835ae1fefa23e1dc198213e676b5c70602f93ef1b1d10b1e9457c65711575
- MD5 474f40038193e280ca2cfaf61e1101a3
- SHA1 1cb5cea42fd08691b9eef41b920d3ca28271607f
- SHA512 9f2cbbbf12e05dfd9af137181c0ca7880bf9f5ed44fbf17413ab77724daf3f0ac4a02e8579ad6071dfbe3e98f4057626ee5322afcf0956c724ab4b2c387673b8
- TLSH T1573133FB206043245E6DD3DA7B78359CC63349E670808AEAD9EC604D035E2AE64117D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545676891172-f979-4a1c-a99b-211c490d95ff.tmp
- Size 2KB
- SHA256 dff55978041265f44231c28e90f1379988b95be52c26f8a94d82dbc5c7996cac
- MD5 11e119904af8edae72549766f0414990
- SHA1 3046ceb984b7cd6cd4cb20e57a1348eb625a45df
- SHA512 14e74c551257b36b88e6b71b3a4269c923bedb8f9f44afd79b26079362f42bfab7a8794942b2434167a216ee30d83a3f8679c3c6ab0a96069e7a8a5faeef0fef
- TLSH T1DC4161EB212097355FAEC3AFB7B4394ACB73889A704045FB95DE604D07CE6BE5402291
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954567fdff82b-60b5-4fa6-8890-595e84ba15e2.tmp
- Size 1KB
- SHA256 dfb83c9534237a8d42a5a2f1a09abd7bdceec137a0808cd025bb063e83c25697
- MD5 ce0b3ea5a85f5827a0e25e707df94269
- SHA1 b6f96a09aeade5436abcd948c7653b2576341873
- SHA512 3237d06ef3f912fc99736daa6a516109ed49a5fdebc4dbd93e7b1c4e04df1bac21b70b699de3fe380ee366570f3448a980e42b2fcd02ca5e1f3266839daf3f3a
- TLSH T10D11EFFB252047109E4DC7DB3BBC714CCB72488A78D086EBCA9DB45D078966F98253D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545685431f74-4efb-4018-af46-a97a5226cb85.tmp
- Size 863B
- SHA256 83596914765f62be3c400819afb8e231f702eeca40337fb1769b19d01f6e0103
- MD5 1292700c8addb4a292d8244711fc588e
- SHA1 446f4e1bcb50ff4ff0e3698a524c7cc296d6c0e2
- SHA512 785ff9139db7d8481fe97f7cb7394a6410f1622e2b301a40dafcecfd4c60bc3c73eafaaaf00b687a7ccbc61263e47fc12584c60231ecaa673876b61ded42c451
- TLSH T16011AFFB251457149E4ED7973B7C3148C772888A749086EBDBECB84D075966FA4213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.63219545695fcca8e-aa02-49f4-a62b-a7408c07af2b.tmp
- Size 597B
- SHA256 bea8a0e784e0dd7d537111a24b670ea0f7eb98ca8c85def0892ba52e97f46cb0
- MD5 f4e008a67ef00dfdbca943564eba9477
- SHA1 2ccefedc13314d990262c31c050a17618ac56841
- SHA512 2408b6479a13bc084f0b28e786f43ebe5d63f2792ecb059d51e872b3e534fe9c3e443266130f537ae242536fee3992c11c747c7b07d40ef9356d38bb5b445a86
- TLSH T158F00CA638245725AF4AC7E63BBC3504C7728889789086E7C4D9A04D024A61F98292E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.6321954569d23a666-85bc-4259-907b-3e0bca024f6e.tmp
- Size 3KB
- SHA256 df3981d869503bb0317b0b695d009df027b4c9d26f5b997ef087621754feec6b
- MD5 2f2efd31ef0043fa8f997c53b1004beb
- SHA1 9ba0aa90ea00c7c058db97a3d55b4a7dcddd8b90
- SHA512 e57ef8f9c5eb2f9f75ea31d8c8c527999c264ef77472f96bfe440796123d77e73d3ce5fd8453e629f66c0418c1d45df8200cb00f586b92046b67311b977d7be9
- TLSH T1526193AA65105A369F6EC3AFBB743E0B8F378487304055EAA5DE104E17DE2FE4013243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456ab398011-83d0-4cbb-997e-eb62bc40b8aa.tmp
- Size 1KB
- SHA256 be0d63e0d75f05cc1d6713e0d02182bcfc2cf79271ed8f46b7ab5a9084bbe408
- MD5 7de1375fb96773e8725518684d1ba514
- SHA1 d3d920d70097a6fd5d3033f5b80060f6248689a5
- SHA512 eca5d16de359b26bb8565e020c2f880bda77aca05b16e3444edac9576533491fa4e3e19c47f63605585d22cac9e6e596289663a9ba55fa195cfc0cbaa720cb65
- TLSH T1E221CBFB202047249E5EC3AA7FB8354CC772488A748086DBDADC784D474A2AF58113C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456b6aacd3d-b343-40f1-9043-ee2dbfb07cde.tmp
- Size 1KB
- SHA256 4dacc7898a3698c126057407afbbe266ee0b7a8028ef16762b3b4965542adcb2
- MD5 b9c6c2f1044d9fc3b08a0dafefd1b5cf
- SHA1 ec2c214c754bad443f61918d045c4cced73f1082
- SHA512 2604d75d28726912cb4ed9fcbd9562557a668e8c07023848efd6b400924b0b5a7fe148ec7a9ab175b6f0d4baabff57fd1569b325795a8f58d9528521580c16c3
- TLSH T1D8219CFB112047249E5ED79A7B7C358CC7728D8A748086EBDA9DB48D07492BF68212D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456c0232c11-8905-4781-b14c-1e85591b296f.tmp
- Size 3KB
- SHA256 9eabfb1dfed59acaf1d9f01ab14c9da71f8ce80e2d05beae3e1057568068b64b
- MD5 68bdd52aad20bd87ebb5e34d19c4ab6c
- SHA1 58d23491c2ba39e6c44e81525961e4903b8f094c
- SHA512 bda28c6e1def9a11cb505bb354e1939df51f073277400b801fbffbc27ed833ea2321f5f2f59361c568e469a475fcc9fbf1f6b5ea4ef2f7d98c8b3e933655863e
- TLSH T13D71759655106B369F6EC3AFFBB53E4ACB778497304055EAA5EE100E17DE6FA4003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456c2b186ad-05e2-4c96-bda2-819903d00a87.tmp
- Size 3KB
- SHA256 fff5f7d11684b751da8e89235c1005fa95b1ea00c82c06a5e7716899d85d0171
- MD5 b0e0c582e653adf1534d7fb39661d309
- SHA1 8734fee084e84f5247ee9ce90b4bfe67f9b27f5a
- SHA512 54a5522d3574e4ba8c9fc3923bbb81204d7eb49ba7c838fc7428246f081df4407b09684c062c297ce4ea10647c1f269caf4928b06216aa33a821bec25fc3bcc1
- TLSH T10D71639655206B369F6EC3AFFBB53E0ACB768587300065EAA5DE104E17DE6FE0003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456c6fbc588-e9ee-43cd-adb2-1878bdd98a03.tmp
- Size 772B
- SHA256 bd0142c4e29b1101c4ca74d69b4e81759c210a63acbd2ad35cac73215a54e29c
- MD5 abf7313f3b89e2fb98509615625e9827
- SHA1 1a8d21f19a99c0c99bff8aeb9353f17528f362ca
- SHA512 197ec22af5acdbb79efda9a0d9d8608da7f7b907fb47cb9737cad0c30391b17c3a33a6796d899b93b70666dcd7d11b940c1748835b0fab9cab14919f897458a1
- TLSH T15801FDAB242447209F5E97E73BBC3208C7728C8AB8E084E6DAD8A44D039A61F94153C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456d703dff8-d3c4-4d1f-8e6c-da0db28136d2.tmp
- Size 3KB
- SHA256 4168471026b3563b04576d7d0265923e7dcb6cb3c36a1eb8b0233c0463981882
- MD5 b39cb119594fe6b744165cf16ef01de3
- SHA1 610feb59390d21e055cb21c026827f86a687be0e
- SHA512 e463211e6b04fec74fb7a346e998cf1b7b0d4aa23c8eb3e0dfc198861969857d6c4cea3c4783919f9350b4598353274c47eae7ec6d0559a0eced033d6bd6ccbe
- TLSH T1726183A665106B369F6EC3AFBBB43E0A8B7B8597700051EBA5DE104E17DE1FE4003243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456db7bbf99-fd96-4908-a88f-36b89c0cb161.tmp
- Size 955B
- SHA256 9d6aab93ddb5cea5f5c7f832928925b4c770520469948f158c89f7228265beb1
- MD5 4632ae5b44ca5def3e8cdf407e2e96ac
- SHA1 a0cecb3e76ae0455df9c8850f7769718051f76e0
- SHA512 55590e6e90283baf86c7f87690bb5fea58a1ac8cf474ce136122434e146832a077a76cb8a7abcc9f74535afdf50b8e30e0f0f008b96888361a6fda0ace1bdaa5
- TLSH T19811EDFA251057149E4DC3AB3B78350CCB728CCAB89085EADADCB85C038966F58113D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.0.632195456fa85d39a-4181-482f-b913-d4a3cdd0b197.tmp
- Size 2KB
- SHA256 eeb937dcce32a8c8cc2b7414aa3fce32e144639f67d5f2c91df8f9f37153c19e
- MD5 b3244221e8c5536b9689657c1af63fc1
- SHA1 03c1d688c9896b408db570ec88c661d993ce5984
- SHA512 33532b8593d97072a744df665d76291988627682c48124036eff63385fb0ed59c6701527f7a56e12a5b0e0859eb823a54d918b27b0dc81452dce4eba842bad48
- TLSH T15951519A55105A3A9F6EC3AFB6743E0A8F76C4D7700055EAE5DE104E1BDF6FE4012283
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.1.889491132
- Size 171B
- SHA256 2d0bc677ef7ec5edd2e2df61fb87de825dbe2bb2cde0dc324630c83c86871ab6
- MD5 514fb763c95b5b53883e9dd1d438bdfa
- SHA1 3039785c2e4605868c335e7c099a1781e1dcb0cd
- SHA512 76b602f0152b20a957bcfa7054773d2d2c9de2ab8384f77022b43bfe2bb89746a3b84cc9bf1014f549ab094ff81d8ea9e190d00c26e7f42442e58fcabbc849c1
- TLSH T1C3C08CAEB960AC06AC4964E9F12A7A300E2E108708021021C88C29CC150B7ECE2187B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2208.1.88949113287fbffe7-3b0f-4420-b850-468106a96840.tmp
- Size 200B
- SHA256 00db6c8358552ffffd8da73762cb71d4cfa5a54de66b3ed28190b29153d643cf
- MD5 e7d93a04a8c5ac4989e89f8d34df5c1a
- SHA1 7b6819dae890ea4dd356becde3bb43cee1c5d516
- SHA512 bed90f35f3922c68c80f23fead4d6247e31ce336c350bb9b6adcd49c9dd91fb19ce31c0b2993157aad5f6305a3ed0a827b6246488a1bc1f26fceabd0344c41f8
- TLSH T17CD0C0BFBD407C88BCC504FCF042B3204D9F008229020272C8CC16CC023257CA01CB70
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV2657b3d88-5d40-431d-bb39-8aebdd60d2e8.tmp
- Size 19B
- SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
- MD5 0ba451e89bf7a6a0144344570515f79f
- SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
- SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV2de020871-2758-4c3f-a2ec-d66877d7740b.tmp
- Size 11B
- SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
- MD5 78bb337b5e38a8a32331f18d8a2d3cda
- SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
- SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
- MD5 SHA1 SHA512