Resubmissions
10/11/2026, 23:27
261110-3fm3jscd56810/11/2026, 23:24
261110-3dv1dacd34810/11/2026, 23:23
261110-3c6qgscw2p310/11/2026, 11:00
261110-m36keah18w310/11/2026, 10:54
261110-mzrbbawy3m308/11/2026, 14:55
261108-saylzs1zat320/10/2026, 18:54
261020-xknxratzdv610/10/2026, 21:48
261010-1nv21sbx4z310/10/2026, 21:36
261010-1f5lgss14r810/10/2026, 19:09
261010-xt97cazth13Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260911-it - resource tags
arch:x64arch:x86image:win11-20260911-itlocale:it-itos:windows11-21h2-x64systemwindows - submitted
10/11/2026, 23:24
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN
Resource
win10ltsc2021-20260911-it
Behavioral task
behavioral2
Sample
http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN
Resource
win11-20260911-it
General
- Target http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN
- Sample261110-3dv1dacd34
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 111 4964 msedge.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 1032 OperaSetup.exe 1888 installer.exe 3908 installer.exe 3164 installer.exe 4060 installer.exe 4140 installer.exe 1064 Assistant_136.0.6008.52_Setup.exe_sfx.exe 4344 assistant_installer.exe 1060 assistant_installer.exe 3964 installer.exe 1440 installer.exe 1164 assistant_installer.exe 912 assistant_installer.exe 2120 assistant_installer.exe 2232 assistant_installer.exe 3364 browser_assistant.exe 4860 opera.exe 1380 opera.exe 5000 opera_crashreporter.exe 2004 opera_crashreporter.exe 5184 opera.exe 5204 opera_crashreporter.exe 5260 browser_assistant.exe 5324 opera.exe 5372 opera_crashreporter.exe 5548 opera.exe 5600 opera.exe 5564 opera.exe 5636 opera_crashreporter.exe 5668 opera.exe 6056 opera.exe 6564 opera.exe 6584 opera.exe 6764 opera.exe 6884 opera.exe 6916 opera_crashreporter.exe 7004 opera.exe 6200 opera.exe 6676 opera_crashreporter.exe 6188 opera.exe 8516 opera.exe 5644 opera.exe 6824 opera_crashreporter.exe 8016 opera.exe 7944 opera.exe 9156 opera.exe 8612 opera.exe 8624 opera.exe 8600 opera.exe 5924 opera.exe 3372 opera.exe 8648 opera.exe 8660 opera.exe 7268 opera.exe 8256 opera.exe 8196 opera.exe 8128 opera.exe 6312 opera.exe 8620 opera.exe 5088 opera.exe 2236 opera.exe 7360 opera.exe 3408 opera.exe 6836 opera.exe - Loads dropped DLL 64 IoCs
pid Process 4344 assistant_installer.exe 4344 assistant_installer.exe 1060 assistant_installer.exe 1060 assistant_installer.exe 1164 assistant_installer.exe 1164 assistant_installer.exe 912 assistant_installer.exe 912 assistant_installer.exe 2120 assistant_installer.exe 2120 assistant_installer.exe 2232 assistant_installer.exe 2232 assistant_installer.exe 3364 browser_assistant.exe 3364 browser_assistant.exe 4860 opera.exe 4860 opera.exe 1380 opera.exe 1380 opera.exe 5184 opera.exe 5184 opera.exe 5260 browser_assistant.exe 5260 browser_assistant.exe 5324 opera.exe 5324 opera.exe 5548 opera.exe 5548 opera.exe 5600 opera.exe 5600 opera.exe 5564 opera.exe 5564 opera.exe 5668 opera.exe 5668 opera.exe 5564 opera.exe 6056 opera.exe 6056 opera.exe 5564 opera.exe 6564 opera.exe 6584 opera.exe 6564 opera.exe 6584 opera.exe 6764 opera.exe 6884 opera.exe 6884 opera.exe 6764 opera.exe 7004 opera.exe 7004 opera.exe 6200 opera.exe 6200 opera.exe 6188 opera.exe 6188 opera.exe 8516 opera.exe 8516 opera.exe 5644 opera.exe 5644 opera.exe 8016 opera.exe 8016 opera.exe 7944 opera.exe 7944 opera.exe 9156 opera.exe 9156 opera.exe 8612 opera.exe 8612 opera.exe 8624 opera.exe 8624 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs
A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\dbghelp.dll Assistant_136.0.6008.52_Setup.exe_sfx.exe File created C:\Users\Admin\AppData\Local\Programs\Opera\assistant\dbghelp.dll assistant_installer.exe - Adds Run key to start application 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe\"" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - Drops file in Windows directory 8 IoCs
description ioc Process File created C:\Windows\SystemTemp\scoped_dir5644_1017014182\wave-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir5644_1017014182\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir1380_1640812987\wave-light.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir1380_1640812987\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir1380_170532419\wave-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir1380_170532419\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir5644_1000751014\wave-light.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir5644_1000751014\persona.ini opera.exe - Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier msedge.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain installer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain browser_assistant.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname opera_autoupdate.exe - System Location Discovery: System Language Discovery 1 TTPs 10 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_136.0.6008.52_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4964 msedge.exe 5600 opera.exe 8016 opera.exe - Checks processor information in registry 2 TTPs 64 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 50 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" opera.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.htm\OpenWithProgids\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.html\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications\opera.exe\shell installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\URL Protocol opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ opera.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" opera.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xht installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1805035633-626948184-3225555471-1000\{4F6F1C30-DFB2-4722-AA26-CE1B1B224C37} msedge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" opera.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.shtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.pdf\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node\CLSID installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\ opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Application\ opera.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\140.0.6074.17\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\140.0.6074.17\\notification_helper.exe" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Applications installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 190000000100000010000000ffac207997bb2cfe865570179ee037b90f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e404000000010000001000000078f2fcaa601f2fb4ebc937ba532e75492000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 5c00000001000000040000000010000004000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996190000000100000010000000ffac207997bb2cfe865570179ee037b92000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe - NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier msedge.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs
pid Process 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 1380 opera.exe 1380 opera.exe 1380 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe 5644 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 1380 opera.exe Token: SeCreatePagefilePrivilege 1380 opera.exe Token: SeShutdownPrivilege 1380 opera.exe Token: SeCreatePagefilePrivilege 1380 opera.exe Token: SeShutdownPrivilege 1380 opera.exe Token: SeCreatePagefilePrivilege 1380 opera.exe Token: SeShutdownPrivilege 1380 opera.exe Token: SeCreatePagefilePrivilege 1380 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe Token: SeShutdownPrivilege 5644 opera.exe Token: SeCreatePagefilePrivilege 5644 opera.exe - Suspicious use of FindShellTrayWindow 47 IoCs
pid Process 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 3964 installer.exe 4596 msedge.exe 3364 browser_assistant.exe 3364 browser_assistant.exe - Suspicious use of SendNotifyMessage 18 IoCs
pid Process 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 4596 msedge.exe 3364 browser_assistant.exe 3364 browser_assistant.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1888 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4596 wrote to memory of 1956 4596 msedge.exe 80 PID 4596 wrote to memory of 592 4596 msedge.exe 81 PID 4596 wrote to memory of 4964 4596 msedge.exe 82 PID 4596 wrote to memory of 592 4596 msedge.exe 81 PID 4596 wrote to memory of 592 4596 msedge.exe 81 PID 4596 wrote to memory of 2848 4596 msedge.exe 83 PID 4596 wrote to memory of 2848 4596 msedge.exe 83 PID 4596 wrote to memory of 3968 4596 msedge.exe 85 PID 4596 wrote to memory of 3968 4596 msedge.exe 85 PID 4596 wrote to memory of 3968 4596 msedge.exe 85 PID 4596 wrote to memory of 2056 4596 msedge.exe 84 PID 4596 wrote to memory of 2056 4596 msedge.exe 84 PID 4596 wrote to memory of 2056 4596 msedge.exe 84 PID 4596 wrote to memory of 2628 4596 msedge.exe 87 PID 4596 wrote to memory of 2628 4596 msedge.exe 87 PID 4596 wrote to memory of 2628 4596 msedge.exe 87 PID 4596 wrote to memory of 4908 4596 msedge.exe 88 PID 4596 wrote to memory of 4908 4596 msedge.exe 88 PID 4596 wrote to memory of 4908 4596 msedge.exe 88 PID 4596 wrote to memory of 3972 4596 msedge.exe 89 PID 4596 wrote to memory of 3484 4596 msedge.exe 90 PID 4596 wrote to memory of 3972 4596 msedge.exe 89 PID 4596 wrote to memory of 3972 4596 msedge.exe 89 PID 4596 wrote to memory of 3484 4596 msedge.exe 90 PID 4596 wrote to memory of 3484 4596 msedge.exe 90 PID 4596 wrote to memory of 5116 4596 msedge.exe 92 PID 4596 wrote to memory of 5116 4596 msedge.exe 92 PID 4596 wrote to memory of 5116 4596 msedge.exe 92 PID 4596 wrote to memory of 4036 4596 msedge.exe 94 PID 4596 wrote to memory of 4036 4596 msedge.exe 94 PID 4596 wrote to memory of 4036 4596 msedge.exe 94 PID 4596 wrote to memory of 1480 4596 msedge.exe 95 PID 4596 wrote to memory of 2896 4596 msedge.exe 96 PID 4596 wrote to memory of 4476 4596 msedge.exe 97 PID 4596 wrote to memory of 1480 4596 msedge.exe 95 PID 4596 wrote to memory of 4476 4596 msedge.exe 97 PID 2896 wrote to memory of 2608 2896 msedge.exe 98 PID 4596 wrote to memory of 4860 4596 msedge.exe 100 PID 4596 wrote to memory of 4892 4596 msedge.exe 101 PID 4596 wrote to memory of 4892 4596 msedge.exe 101 PID 4596 wrote to memory of 4892 4596 msedge.exe 101 PID 4596 wrote to memory of 1196 4596 msedge.exe 102 PID 4596 wrote to memory of 1196 4596 msedge.exe 102 PID 4596 wrote to memory of 2428 4596 msedge.exe 103 PID 4596 wrote to memory of 2428 4596 msedge.exe 103 PID 4596 wrote to memory of 2428 4596 msedge.exe 103 PID 4596 wrote to memory of 5056 4596 msedge.exe 104 PID 4596 wrote to memory of 5056 4596 msedge.exe 104 PID 4596 wrote to memory of 5056 4596 msedge.exe 104 PID 4596 wrote to memory of 1160 4596 msedge.exe 105 PID 4596 wrote to memory of 1160 4596 msedge.exe 105 PID 4596 wrote to memory of 1160 4596 msedge.exe 105 PID 4596 wrote to memory of 3868 4596 msedge.exe 106 PID 4596 wrote to memory of 3868 4596 msedge.exe 106 PID 4596 wrote to memory of 3868 4596 msedge.exe 106 PID 4596 wrote to memory of 1388 4596 msedge.exe 107 PID 4596 wrote to memory of 1144 4596 msedge.exe 108 PID 4596 wrote to memory of 1388 4596 msedge.exe 107 PID 4596 wrote to memory of 1144 4596 msedge.exe 108 PID 4596 wrote to memory of 1144 4596 msedge.exe 108 PID 4596 wrote to memory of 276 4596 msedge.exe 109 PID 4596 wrote to memory of 1032 4596 msedge.exe 110 PID 1032 wrote to memory of 1888 1032 OperaSetup.exe 111 PID 1888 wrote to memory of 3908 1888 installer.exe 112 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4596 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffa17e7c188,0x7ffa17e7c194,0x7ffa17e7c1a02⤵PID:1956
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,9403951919045210623,13672811061889939142,262144 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:22⤵PID:592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13994058542730199257,2553836706420980761,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:112⤵
- Downloads MZ/PE file
- System Time Discovery
PID:4964
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,5287763711866506354,5926069061207658302,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:132⤵PID:2848
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3368,i,7256128323033363869,448245025179074657,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:12⤵PID:2056
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3376,i,693603658962963444,10643494359825565214,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:12⤵PID:3968
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1704,i,18006574302547088523,15699902662497198927,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:12⤵PID:2628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,18217453761139056904,14969022956052505446,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:92⤵PID:4908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4320,i,16206557968187439261,18128318371316530038,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:12⤵PID:3972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4348,i,13483318791778260570,3944969402012527839,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:92⤵PID:3484
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3952,i,7325144733383819854,9832761728003547307,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:12⤵PID:5116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5352,i,15238734925099922320,8078789233391392729,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:12⤵PID:4036
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=it --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,1145165590290019063,12256241446103887134,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:142⤵PID:1480
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,18388462973792266350,7901492754778706404,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:142⤵
- Suspicious use of WriteProcessMemory
PID:2896 -
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.execookie_exporter.exe --cookie-json=11403⤵PID:2608
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=it --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,7474337075444913317,15192345483827994574,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:142⤵PID:4476
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,8392500377524267387,15632392602716536729,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:142⤵PID:4544
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,8392500377524267387,15632392602716536729,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:142⤵PID:4860
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6596,i,5169922907667555549,6351668716286728601,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:12⤵PID:4892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=it --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,6675791525176438881,12451956481097991692,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:142⤵PID:1196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6724,i,11672710466643646811,14442827211954608929,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:12⤵PID:2428
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4352,i,13586455825300800928,4026454890406924595,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:12⤵PID:5056
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3492,i,16523709203422783505,15031613806881186670,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:12⤵PID:1160
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4476,i,10736480065409948954,6724897666215270621,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:12⤵PID:3868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=it --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,3739110880651421374,9984496321412424677,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:142⤵PID:1388
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5100,i,5935373479328265451,16236399529369851331,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:12⤵PID:1144
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,3252178911284785516,10724764617919896257,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:142⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:276
-
-
C:\Users\Admin\Downloads\OperaSetup.exe"C:\Users\Admin\Downloads\OperaSetup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1032 -
C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --server-tracking-blob=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⤵
- Executes dropped EXE
- Enumerates connected drives
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1888 -
C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff687d4c498,0x7ff687d4c4a8,0x7ff687d4c4b84⤵
- Executes dropped EXE
PID:3908
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\installer.exe" --version4⤵
- Executes dropped EXE
PID:3164
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=it --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1888 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_20261110232508" --session-guid=7232f601-0642-4bc0-986a-79a39435b4c3 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=040A0000000000004⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
PID:4060 -
C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x298,0x29c,0x2a0,0x268,0x2a4,0x7ff687d4c498,0x7ff687d4c4a8,0x7ff687d4c4b85⤵
- Executes dropped EXE
PID:4140
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe" --backend --initial-pid=1888 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=it --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081" --session-guid=7232f601-0642-4bc0-986a-79a39435b4c3 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=140.0.6074.175⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
PID:3964 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7d5e5c498,0x7ff7d5e5c4a8,0x7ff7d5e5c4b86⤵
- Executes dropped EXE
PID:1440
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=06⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes a Windows system DLL name to a user directory
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
PID:1164 -
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x98c9cc,0x98c9d8,0x98c9e47⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:912
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=07⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
PID:2120 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x33c9cc,0x33c9d8,0x33c9e48⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2232
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"8⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3364 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4860 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f2331010⤵
- Executes dropped EXE
PID:5000
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5184 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x224,0x264,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f2331010⤵
- Executes dropped EXE
PID:5204
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x25c,0x294,0xea7324,0xea7330,0xea733c9⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5260 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5324 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f2331011⤵
- Executes dropped EXE
PID:5372
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5548 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f2331011⤵
- Executes dropped EXE
PID:5636
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6764 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f2331011⤵
- Executes dropped EXE
PID:6916
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\de932af914ba00303d4a2778a383ac9c831101e2.crx"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
PID:1380 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f233107⤵
- Executes dropped EXE
PID:2004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAABgAAACAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1712,i,17304323812021269834,9765276613414735979,262144 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1984 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2116,i,8622563899713358813,13878742828496594186,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2196 /prefetch:117⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
PID:5600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2468,i,16737433460390976040,12886541071186002140,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2508 /prefetch:137⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5668
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3608,i,5028463019062563456,8544787835008342122,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3708 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
PID:6056
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4376,i,1343848926628069369,8050463786336878400,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4396 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4444,i,5777577271840525097,5439943008506686030,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4496 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
PID:6584
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,347025326618827522,6221960925530004292,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4816 /prefetch:127⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6884
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4348,i,2012613475392913792,14922479603117862835,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4460 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,1908240742871593009,3174218319831763975,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5060 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5268,i,13623260990843570948,8299257278908236104,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5280 /prefetch:17⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Enumerates system info in registry
PID:8516
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
PID:5644 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ff9f21c32f0,0x7ff9f21c3300,0x7ff9f21c33107⤵
- Executes dropped EXE
PID:6824
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAABgAAACAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1676,i,16943423180635834017,4140299824046516127,262144 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2108 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,7787322604274247291,8733004966925076828,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2200 /prefetch:117⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
- Enumerates system info in registry
PID:8016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2524,i,17415287907953395886,12848741163701892361,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2752 /prefetch:137⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:9156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2816,i,17697162383436753460,9240123336294545550,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3228 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:8612
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,8138836907745975389,4763377816662228285,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3348 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:8624
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3148,i,16464814675036109498,13022433290563030647,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3248 /prefetch:147⤵
- Executes dropped EXE
PID:8600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,7772185047394681945,14593357898193362655,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3268 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:3372
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,2921656919409352209,17364256800040151702,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3288 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,13899610429807273873,4837750324175082437,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3308 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:8648
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,3144097756593828043,17948200356097689373,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3328 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:8660
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3388,i,5646146231119120315,8061151131549271432,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3412 /prefetch:17⤵
- Executes dropped EXE
- Checks processor information in registry
- Enumerates system info in registry
PID:7268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4816,i,9514658663077897994,7905746976110586496,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4836 /prefetch:97⤵
- Executes dropped EXE
- Checks processor information in registry
PID:8256
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4992,i,10210106346508998623,117160968331452136,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:17⤵
- Executes dropped EXE
- Checks processor information in registry
PID:8196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5360,i,4503699845511148525,13578889722242367741,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5368 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:6388
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5524,i,6099878496355063681,13009170545666761184,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5536 /prefetch:17⤵
- Executes dropped EXE
- Checks processor information in registry
- Enumerates system info in registry
PID:8128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6412,i,13428016344674400531,13789936837246279088,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6456 /prefetch:97⤵
- Executes dropped EXE
- Checks processor information in registry
- Enumerates system info in registry
PID:6312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5708,i,6183353592231659353,3794936108993324235,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6904 /prefetch:97⤵
- Executes dropped EXE
- Checks processor information in registry
- Enumerates system info in registry
PID:8620
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,5940714800984453178,11647576992804909089,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6480 /prefetch:127⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:5088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6776,i,11132759222780533242,14328008616640716383,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6632 /prefetch:17⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7212,i,3086849125773774706,2936334291840642296,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6504 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7360
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7244,i,18338220529873290024,6394539121946634555,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7340 /prefetch:147⤵
- Executes dropped EXE
PID:3408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7348,i,2963104705848227966,9682089158863569115,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7516 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6836
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7384,i,1196126306409674771,15383198722772562186,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7496 /prefetch:147⤵
- Enumerates system info in registry
PID:1608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7756,i,9783874161571329704,6374534263032138360,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7508 /prefetch:147⤵
- Enumerates system info in registry
PID:7188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7776,i,6740261072300331180,6635557749767351108,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7804 /prefetch:147⤵PID:6236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7788,i,7300752514107545297,7692542622697763449,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7828 /prefetch:147⤵
- Enumerates system info in registry
PID:7248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6728,i,18153909682560831830,13275245692162343139,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8236 /prefetch:97⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8336,i,7000241130014200798,2264177970725499097,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8356 /prefetch:147⤵
- Enumerates system info in registry
PID:8272
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6492,i,6299790421240219051,18700504930534345,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8384 /prefetch:147⤵
- Enumerates system info in registry
PID:8296
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8372,i,6895265222103702631,5897281251524249299,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8404 /prefetch:147⤵PID:8320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8436,i,10022005792997011516,2868738735908233967,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8664 /prefetch:147⤵PID:8380
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8888,i,7329748903335088800,15042353790181624684,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8896 /prefetch:147⤵
- Enumerates system info in registry
PID:7484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1617⤵
- Reads the TCP/IP host and domain name from the registry
PID:5608 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff6ea572698,0x7ff6ea5726a8,0x7ff6ea5726b88⤵PID:6356
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9472,i,17952035444780396080,12190056093549105117,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=6656 /prefetch:147⤵PID:1764
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7832,i,5087790960633937910,3909601723543666181,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9624 /prefetch:147⤵PID:4536
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9772,i,9851518341620706915,2856209797254281530,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9664 /prefetch:147⤵
- Enumerates system info in registry
PID:8160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9796,i,13556669463167489130,9855659049149763961,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=1860 /prefetch:147⤵PID:9076
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=10220,i,10661958000516064548,10918185386309355607,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10228 /prefetch:17⤵
- Checks processor information in registry
PID:5396
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10436,i,392011902215176565,17787571701086522040,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10420 /prefetch:147⤵PID:2952
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10444,i,3545457585191752584,1698930939268155561,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10456 /prefetch:147⤵PID:2840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10608,i,6359448131727974851,17220229579225472097,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10440 /prefetch:147⤵PID:6984
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6380,i,7188373335700627929,16657762270262300344,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10452 /prefetch:147⤵
- Enumerates system info in registry
PID:7468
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7204,i,13356837554157587930,6687732349834187061,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10408 /prefetch:147⤵PID:8408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7568,i,16117383573325582349,3323421861587657277,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=7560 /prefetch:147⤵PID:6512
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10568,i,8537408151743859020,18313347080584975013,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10532 /prefetch:147⤵
- Enumerates system info in registry
PID:6004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4100,i,17952364647431061546,8763878854493814938,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9268 /prefetch:147⤵
- Enumerates system info in registry
PID:6748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7608,i,7340188208927159737,888424377275214975,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10444 /prefetch:147⤵PID:6828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3236,i,14454975699349081284,4329582979697365018,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3348 /prefetch:147⤵PID:8676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5792,i,3732963627070506156,1936193467902683863,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3224 /prefetch:147⤵PID:492
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7592,i,12396724440914957976,2347784531093743036,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10560 /prefetch:97⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:9128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10012,i,2388855276846922881,6293539599430631844,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9984 /prefetch:97⤵
- Checks processor information in registry
PID:5952
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10460,i,10827704784827887454,13647617894703317285,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10580 /prefetch:147⤵
- Enumerates system info in registry
PID:2020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4580,i,14051781086507668987,5011989143780868270,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3288 /prefetch:147⤵PID:2536
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7580,i,4758265143331494597,3384723919424666640,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4100 /prefetch:147⤵
- Enumerates system info in registry
PID:5496
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4656,i,4588643871883063851,9907657904824256858,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=6684 /prefetch:147⤵PID:6408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8420,i,17264530155758085097,7738441647965401943,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8004 /prefetch:147⤵PID:7960
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8500,i,3679235578407924337,10945556879705247427,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10600 /prefetch:97⤵
- Checks processor information in registry
PID:7736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=5844,i,6408544512770834091,9988412005800799784,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8944 /prefetch:97⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=4900,i,5162441640220767399,15568015661132249133,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8328 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8424
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4940,i,11533902080888398345,13787003612962743301,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7668 /prefetch:17⤵
- Checks processor information in registry
PID:4452
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=4876,i,3871065032000919579,16139731453637587614,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8568 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8296,i,12846435165929402567,9712683823517091168,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7708 /prefetch:97⤵
- Checks processor information in registry
PID:8936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7676,i,94233798715827650,4394811071918739544,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7824 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8624
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=6976,i,7870262162911416395,5595856238209701456,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=6904 /prefetch:17⤵
- Checks processor information in registry
PID:2020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=4272,i,3116642879131252585,12006821027639982435,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8944 /prefetch:97⤵
- Checks processor information in registry
PID:8176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10088,i,4181102740050208990,12109707312042516342,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=6880 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:5296
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3288,i,13129082475768682190,15848701378519620187,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8268 /prefetch:17⤵
- Checks processor information in registry
PID:5828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=4360,i,14736298830890862726,5582275037739024260,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8332 /prefetch:97⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:4172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=7996,i,2262705114341115144,2070801653508600629,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=7792 /prefetch:97⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=8560,i,7595568307653397863,6041713376552105177,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=4884 /prefetch:17⤵
- Checks processor information in registry
PID:5564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8208,i,17020477894251728287,2165411998235452667,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9688 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:3692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8560,i,592726584390351767,8242785795820625190,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=8028 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8072
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=4628,i,3924362060665227939,2147438156080656482,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7740 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:6572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=7748,i,9627556160891172994,1063930994325349917,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9684 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:8368
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=4616,i,10982523777033536243,3646022790927784039,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=4288 /prefetch:17⤵
- Checks processor information in registry
- Enumerates system info in registry
PID:7496
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"4⤵
- Executes dropped EXE
- Writes a Windows system DLL name to a user directory
- System Location Discovery: System Language Discovery
PID:1064
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --version4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4344 -
C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x98c9cc,0x98c9d8,0x98c9e45⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1060
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7928,i,1630400033009690348,13869351858996280577,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:142⤵PID:4908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,2350983020195793163,4247424236843989408,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:142⤵PID:2400
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,6337319248626327104,11491546864442755768,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:142⤵PID:2352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=it --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7084,i,5518713831721709485,9897750957673028780,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:142⤵PID:1732
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5836,i,17735903263600788477,2911847531768919737,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:12⤵PID:5708
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:3192
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6200 -
C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f233102⤵
- Executes dropped EXE
PID:6676
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:6852
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵
- Reads the TCP/IP host and domain name from the registry
PID:6940 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x280,0x284,0x288,0x260,0x28c,0x7ff6ea572698,0x7ff6ea5726a8,0x7ff6ea5726b82⤵PID:9200
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:3280
-
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Hijack Execution Flow
1DLL Search Order Hijacking
1Defense Evasion
Hijack Execution Flow
1DLL Search Order Hijacking
1Masquerading
1Match Legitimate Name or Location
1Modify Registry
3Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 471B
- SHA256 5f1a19b878f128f589a60c29fe9d02ff3358b088f3aaec07e0bf75d2508d4102
- MD5 0e3d124c1a6b2569dd688ebd0ddbf00b
- SHA1 2b2eba7c4fe802b02b4ae0db75fb4093f12bb34b
- SHA512 e8f14fbf5bb2b629faddd359c6570e7e470f1604cae56e4423b94fd67cd933b18358668b156882cde050613761463f67d269ba5f5015a79f5b41d176ee9ec117
- TLSH T183F0DC932CAE34E64817980C0A6A893830F054A904D2C9AA3936CAE1D5EE7E2B257506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
- Size 727B
- SHA256 2601cb8556899959a1fd59fac9fbf92205be1d0e9557d0c26121aa7ed8748daa
- MD5 57354848121843f3bbd4bbb1383e96af
- SHA1 be2319fddb678dd940dfa778dd898a83e680f087
- SHA512 1805975a079b70dbd33739e56ac06e50cc78a42a88fb81a9789aa2956a7e9378fc42fce732017fc681efbb8129a8dca70cda7b7d71383d414384f7916e12198f
- TLSH T1DE016512ED6D6FA4D210AE44D915AEA17E720071CB8DAA5BB438C96AE0847316860510
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
- Size 727B
- SHA256 9fbf78682aafa571331eb73dd361eed2a906eef684a92a28e29be4b610e48b20
- MD5 7bbc5a956c1b34df7cbbae498a22f2dc
- SHA1 fdf8095ce6cdecb4d1e2eefa865f3d9f6d45470d
- SHA512 6fc60a9d9fa0bad869d430cf261d14e4a9fd44e83185fc10f4bdc367c38e7ffcc940cf96531e40161f35a1cb7bbbc09a0d525484214eb922a8818f8f27522c34
- TLSH T12701991B5860DA123C100C23C7BADFA2AD70523659C447B021E485CF53BC36E6AE5B64
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
- Size 400B
- SHA256 4481f0f3ef4df65f362158a2033942cff041fa78a71cf822c202611b60bcd461
- MD5 5edb03023d3dd4db4f3265edd0a43ab4
- SHA1 c0f582f637de7516de3e6fc9d597e356927d9b37
- SHA512 16001842f3c9e8a8e90fda6550122f1db9f18085bc0d276fdacc4a1a1d1262a195b39cc9a0a325be8c1da50262c9ef8cb5857361c5600192838f12daa0a3b2bb
- TLSH T153E0203427FF112FF1B05B7643D591A6BF3AF1023D5456FE0EC1151D591AA004C62D70
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
- Size 408B
- SHA256 db9c951d0fa328a78d488d7a6f5ba7fef709e11863363a642cb65f8d76444c23
- MD5 458135a55789264a65de829839896fbb
- SHA1 5f232bb19c6f9b4d56da8f7cacfd16086ac383e9
- SHA512 9863ca35b7e29e771a82b5e28d466674b0d4b320dcb1433eccf6e99a5d2168c30cb8bb7f2bac1f498e1277f62f922e5cb0707f84c64f783f98ee376990c2f89c
- TLSH T1E8E0283032FD081CF0F1E0380AE15CE3241DF3162847D3BA02904311BB15B000D9927C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
- Size 412B
- SHA256 bc4adad1960096e3fa5c7520a31f3f7637797ad59ca5d452326d5491502b6521
- MD5 5aac037eb1798a70e322ffa5d29fbff6
- SHA1 ba1a78f4022d5785dbf51b3776d7ce360c64a930
- SHA512 21f71ea0ab6781f43a8659275a9961e76763b043863c61a9f54057e6e72247dc1b7c03ebb7d165a521169872f9046ca85ec61e4b9f1f9063a90f899b08e2c8a7
- TLSH T1B1E0683812EFA01EF0909D3042E6A1B60D88E3052004C27906C0030DBB4BF406C10AF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12e407d4-3ccd-40b9-a2b9-c1eef3cfc20d.tmp
- Size 31KB
- SHA256 5317457a12768575524885155344081c250dd24bdb04e4f1cc60a1133b12f0ac
- MD5 3e85d3e9f13632ac6bc3700f9a51352d
- SHA1 f4dc76e2ebadb4c56e8f52380bf6f5827a703226
- SHA512 67059d7dc3a6f0ee1eddae6d0fcc2f14648944b7841f74beb8d0b761cf08ea966319637b4fe78f511de46f6a9fd71d110a5a5959ac68c23ca615279cafadd9b2
- SSDEEP 384:6TFhQkUSv78Nq8TUNTUlIlU5f0JYalo72CGnfIui/ztfLf9lCwH7vBEfBIIle:CFT75wgd27RSfIuWtD9lCwH75EZLI
- TLSH T101E24AE958D7883EC5AEAB07A37D2D26997CD177F8A05954F3844B0CCC621BFE346901
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a74456a-cbb4-4d5c-b140-8edbf5c724c3.tmp
- Size 26KB
- SHA256 93e88dbefa3d0179cd53d3a9396f02eb06f3a7682094836db406b85882c3c24c
- MD5 235301d94cd2d002c472b6cde04092a5
- SHA1 8006249135c976b20d95f6f5b3ad521f7cd958ac
- SHA512 b16ab07b8b79530580be9d3da85b694ebb9834fe5d3847ced2d34ec88cc26fd090b05fb6ddde7965b88649eead63f07ba5ba06bd5be819aa435e16bf7dd37f5e
- SSDEEP 384:6TFgQkUSv78N98TUNTUlIlU5f0JYalB72CGnfpDH7vBEfBIIle:CFI7Uwgdn7RSfpDH75EZLI
- TLSH T102C229F258D7893BD9AE8B03E37D2D079EBCD117B5845A50B388591CCC8A1BFE346912
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a47fa97-7097-4285-95a3-a65e8be9c8ab.tmp
- Size 8KB
- SHA256 9d667b813255f9dfd88f7155143423df5690af14d08b64fdb3e4a7d74a8ca8e3
- MD5 9b831744f0b01a3b58fdc5f6dc463be9
- SHA1 56effef0390292ce01a086f601a9daf284e71670
- SHA512 031c6a2183b13c73b12a7c5b0cce05b6d42c2449fb7c6a007f42042cc711bc9cee121f2b9e57cb0297d9ff2b98d46bb524013a88186c48d3a3530a52f327602e
- SSDEEP 192:BGNQ6f15yQmiUyxHmLzFEFThNfTVqqKXLqgU6:BGNQ6tISm/GnfCDU6
- TLSH T17B122C76A8686C2F5DE39950F0873607AEB55227EAC87F40D2DC2E2C01DF66C2307917
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3e219373-2499-4797-9cf4-a87d8209c2ba.tmp
- Size 18KB
- SHA256 8ce69f48e5d529c4ea5e2ec7a06f721a94764d1716a15edf412867752e18bb8a
- MD5 c63005e5aa748fae928de1e3b4f3c7ca
- SHA1 34bc6eefa2e61f63375baaab390ceeb9255f7750
- SHA512 f07597adf9d38133e972a94ef1461d9b3f2a3321ed46501d5e1dfaf5c5f3456af8bee8d4400ee4b5dd7125a8fcaca4328a948bcdde31cb17592bdff170d61afd
- SSDEEP 384:zQkUSv08N9j5f0JYar06CGnfGDH7vBEfBIIle:d0/stSfGDH75EZLI
- TLSH T11C827D72A8695D2B4EF3D610F04A3607EEB89127E6D81A40D5DDAF2C00DB29D3347D17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46ff77ac-baf4-4bc1-9a75-23accd3625a4.tmp
- Size 18KB
- SHA256 7d7de3c0e1cf3143f45b3b956f5900afd77ec4678ca0e051db9a5e5cc9e128ca
- MD5 b072eaffb2f9284c0208b88b86863a83
- SHA1 460741443c87dca8732672090c7c11e1c82a92ee
- SHA512 3b61177610acffb15729e261556c99f04ee744749785d2b47fc771f673e4c60d3088f1ddd8e525425b6a12928d861d0b187c5059adb2e4b35ad8525d2758766d
- SSDEEP 384:9QkUSv38N9g5f0JYaxH72CGnfGDH7vBEfBIIle:n3sh7RSfGDH75EZLI
- TLSH T11B827D72A8696D2B4EF7D610F04A3607EEB89127E6D81E40E5DDAF2C00DB29D3347913
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5088ab20-6766-42a1-b897-9442b2ccab6c.tmp
- Size 8KB
- SHA256 0319cc9941e7e4784740a964b5f24d87cb8ee11f83c7e877b9f3293492734a92
- MD5 df648469798a76000e021ddd37206310
- SHA1 10ad366b1bcb64e4c171d97665d3f4de456a6108
- SHA512 453b13fa02555c8b5e1e9594c2fe6b491fdb2334749da4a23b63a98a7f85f3ec919c3143d76a38e9a36f8095614166fe78fd47c9d82ec44be246a503065620e2
- SSDEEP 192:ZGNSm6f15sQmiUyNEIHuLzFEFThNfoG8JHXU6:ZGNSm6tGm5u/GnfmdXU6
- TLSH T1EEF1E935AC686C6F9EE2AE05F4872A17AFE41127A9D56F44D6E81F2D00D765C3303837
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 6bf18510fc5524b37686ebea24fc002479a4d9bac5b3e6fb1f83b409dc1bbe32
- MD5 a15c725bc0977e8d3c93761de7c248f4
- SHA1 ca9f2fd6f48956c2420c451281ff29cffaf05ff0
- SHA512 99e87b07e75caf574dd3bd5a3d2527dabef8abb0ef492d87b84b220cedda256858e0c890887b63c2987a29757295c8862472646a78f2c2596d36f1a77bda7170
- TLSH T1B4D08051F9157EDCD27E15791D5885448504CB7352535104270E0D194D5414768D2DDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 0f7109cda4c37ea8424815fbdafb9fdf6fd2dde3bfb80550af9aa9cd228e5614
- MD5 049733b79dad8b3c04cda8e3de2fff84
- SHA1 138bf7729c209250db88dc6948282a167b2150c0
- SHA512 e290bdb1d65fe193f6c46be8569a3dd378244098ea052c50df571014e92de0077da2211400015a5a91cca1a31a6e26adb39d7077e7279008ff71e2c0fe040023
- TLSH T15ED022C0FB80BA80C230083B2E2C830CCB0CC3380203F300B20C088A0C8008EA083880
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 4eebdc04ff118e9cd3cbb614d205d2b777bd24419c5ba2ae742de33b0ae98212
- MD5 40ad9518d5c77a0ba122e8109cc3c934
- SHA1 3770983945ea6e6a8d5f74005f43d42a473cda6f
- SHA512 c5dd104df7f9dfc246af8034f366c71afff1236b796e9a095503e2d67aa832edd20512ecc75a53cbdb4618c87af263d88078adcaaf2e02b99f0651281f9fa7e9
- TLSH T1D5D002D5FB40B684D271197B2E6D871DCB0CC7795253F204B25C099A1D8415EA593895
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2954b0ec-3475-4d2e-b491-e58a064ed257.tmp
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61ae442e-6422-4693-b351-8cdbf31bf7af.tmp
- Size 9KB
- SHA256 a0241c5ca45226cbd881d1042f1adbae5bcc0ae0abfdbcd2493b1cca51ce7a84
- MD5 ca0932e12f6a961fdedc61e8662762e9
- SHA1 eb33a2e6c2100d2aa653f80e1bab79f6a17b5796
- SHA512 d8c1efdf45c01db1610a210b0d8d1c47f336b8c7c92e74ac6012f17464ed7f061e89f02fd3ccfd1a02bb379b187d7528da1d398c093c28941420a720425f5557
- SSDEEP 192:sxZ8Lbe/fjswKJIupZvw/W6+WNGY0npu85lvIgrJ:sxZ8ve/fjs5FZ4/bG59X9
- TLSH T1B312C7116E38A53B8CCBE319FA15BF53E2F9503291D51E48EAFC961C05E66DE224780F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\960abaf8-8510-4bfc-8e88-b87be386d7d5.tmp
- Size 13KB
- SHA256 a512308ee2c7005357ec6e3b1b73e47a5d23ba48e07461cb0630b5327d25be54
- MD5 f0854f68cfe8ccfc2d69175108734f2e
- SHA1 0cab7be4e4ba553098d61c9be455da22943f70b3
- SHA512 43f7ccda8614a83d990aee345d5facf512dd470828b7aaefea2375963be9f1b266bc8607254992799f231c5e2d4f0f70a20b7ef2671981a3ab9093c29bc6003b
- SSDEEP 192:sxZ8LHcBWe/fjs3KAlupOSvLXyP/W6+WNVGySsj1NqhNKdY0nlS85lvIg5sDKQBE:sxZ8zmWe/fjsaAw/0/bVo2Vd5xX6Vu
- TLSH T12E52EB526934D57BCCCBD619FE35BF16E2F9102299D11E4CAAFCCA1C05EA6ED220740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
- Size 154KB
- SHA256 d602204b96b0cbb6b8dcdfd465aa4839e66f6826c0500abfc23f0b90096da3fe
- MD5 380ade25aa6828cb3f646e5d96141904
- SHA1 10c3eb88ca397d06c6da8e8bcc2be38327f03a71
- SHA512 36524fdcc83aabd02a033323fd5f228823397ecf92b87ff6be69fa1d5d0493e9f07b66f6d7e7c4beeb1f086cd91234d9ccb335acd99d682d1e801079cb21c2a0
- SSDEEP 3072:boEEkPgKeQZi51msi5atOPCIkbZ7Oe1skS+8GEk0J7Ol6ogmV0garP:boB6gHQZi5sHFYZqw0k0NOIoEgYP
- TLSH T1D7F312C452E69FF89258926CCEF22707D423DDDCA09DF6EA4240C107E0A1B9DD62932E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
- Size 66KB
- SHA256 77df21477abc909a61db33e0f54965cdb1588e475d46dee935168b4721f73152
- MD5 6c69688b96be5181ec89806cfa8d2b4d
- SHA1 3644a8787779e8923fea45158afd682122665301
- SHA512 d69d561629563334e5349e8fc844ee492c0e4eb67fed5de624282497c26efa0156d75547e7e47e3aeb7a8cb66a912f641a04b12e8f77e3466ed615bd7cbd36bf
- SSDEEP 1536:DgUqrxl8iiX9x05j5QZPF+HX7wuxcDH+DphcgQBH54tA:DYxZRjCZtm7wux5pGkA
- TLSH T1446302B0BD7247F8E2920C4997B1858633681B755ED8B963F4704DDC660DC16BEEB350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
- Size 61KB
- SHA256 300ab06fa3ab93bf62406e4c6f56950cbfe38716910a90e8d68a05daad52c6e2
- MD5 7088bba2c986ecea3ad754d835666d1c
- SHA1 065b000a0f370c39295cd8d064d7fa5a495933f1
- SHA512 29ecda82668f039ae1306caff44fab2442a0e965a8b962998e72f4e96f2cac8d0eb6c74e63d436c6e34682e1ee9ea481b319057d182a1f7c2f0f38a4e7ac4c67
- SSDEEP 1536:ec8R0HWk8YHa/32tRok58aKuTHYkmmRECDpaXtPp:1g/2tRjKuTxmoXDwtPp
- TLSH T1D2530270744C44AE843D07711BE11455AF9B602EFA03FCA94D7BB4BD94B5CA25BB60E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
- Size 68KB
- SHA256 2033d4c0dcdab8b765e78c9c1845742d2589b0f1c56a06b701e91f536035f85c
- MD5 047bb9fd0930eca58ce326cdca8634c0
- SHA1 b9fa0a8cc2fe5e274bb20d28ba8581139949cec1
- SHA512 c4e022dcfd4e98313189200eba4b545a65163a7365107d082085b4c49a2f57402fc1480c95984acbfbaef179dbdcc11895dc7fea875d3783a7c5d2a99743b07d
- SSDEEP 1536:7WiFK/+t3/ZhLVxdengIiVyWT2tiuwqVMfNidV/yd2db:7MMZhLVxQnqVyWTVfNid5pdb
- TLSH T1C8630262AF4CAB7E25CC41839FD2A335D0E8DD19481B407C36549BCFBA549712B39E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
- Size 65KB
- SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
- MD5 56d57bc655526551f217536f19195495
- SHA1 28b430886d1220855a805d78dc5d6414aeee6995
- SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
- SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
- TLSH T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
- Size 75KB
- SHA256 f0b2216568bb538a00ee14c13ad49ea15b1653044a219a698889610edcf9bf05
- MD5 13b147a683af38608f9c22ee9d66a832
- SHA1 f9291cd3a214674a186f4be85cdc655a6b3a31fa
- SHA512 1c4deb1cf689906dd026c6fe7383cfac8f1beabac05dc65309a35f60cb70ebed45d265351b8b6d35382c5136815e0809772a48e242608e309becb9b7078cab17
- SSDEEP 768:986uWt+5MaZ+sefChTFh7g58k0D5ChKt/w976PZM+dfWXNWfGh22m9oCcQhS9Chx:W6uWy/fW8k0kcPySW9mFbiIZ
- TLSH T18773D89CB2D3F02143D3F175842F2506F2BA6965608EC451F239D9D6BC9894AE237BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
- Size 45KB
- SHA256 44c44c5e9cca81e4e3a8b88e6c45ef531d9ec84d198955739a4e3ca82e76f0f3
- MD5 afc7d5b0c3d21def3418a9fc43858f83
- SHA1 bf9c629cc33dd8475f36005870ea625624acc7b0
- SHA512 04cd55b52af530e7c411b4cddb385a34304cdcaeb84b8b2e9e912f7089a125c61cb52b7966707d9fe74c986034fa6f53b1626eb0caf1f163d6ec9044462fb3f2
- SSDEEP 768:zAr5A78yAtyYOzjMPHwIVoveCDn4mSE1NNJi8AlLaTmPXrnr/WPY165c3KfHJqma:8FAZAjOzjMoOy5T13Ji8EaSPjrcMgfW
- TLSH T16123E1975618B5E2D5A97B351AC3718F5F9BC0D884EB22CA258B604BE0D0CF791860EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
- Size 29KB
- SHA256 2d24b1b7218be356a51787a3e3c2efb33d3cfcbcf875f7477e8af5a9a7caecbb
- MD5 76a54b2b67a39114a079872a608663c7
- SHA1 316c26dde8b90f9c819b23b2fa90e7f19e13c49a
- SHA512 022f8ff602361972875baea31ce8884571a23e16c394cdd15c555236c23620280acd6ebacde170213d019d5f54200caca42b3dba89b8f8c60c581e91d668e550
- SSDEEP 768:L1JPDv6tGKa3Hsjzh0byI6mh9UsKj2HCaCqNEK050upXNX:Lf2GD3HsvhUy0m/iiaCq0J9X
- TLSH T196D2F1E6793717002CBDDE7A831C76C15EEC68B86973C7A24E39B040A8143E33745979
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
- Size 20KB
- SHA256 971403e1a6059c9970dd640d3890320c70f5679f1d5dee811d18b3788f566f19
- MD5 055104003a83e5a6f493f5e3a8cb426e
- SHA1 258974c4eda1ec8878e33fee42cfcb4462336c80
- SHA512 0771ed658472e57d7100ba222896527e8e9759e08b809c2284f1e786d527cad3257c42995b43697b48e165fe6bc8d06d432a286c7395167e7d9c99eed92660d8
- SSDEEP 384:uStwwXZB38G6ot9FctzvQe3+Ksc8Fb4q4Ga9t+pqq0:Vtwy73d9t9FyoeycVplN9
- TLSH T17B92D0A61A36B64DB9423DCC85DF9A05C4334A53A11413AFFA8204DD9812A3F59B79B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 5KB
- SHA256 d2d9ff916d7123e2aca6a9669e18cbbfaab7eca773a583aea81af3c336f7bc8c
- MD5 89e02b032ac08937102bf316dd1b6b54
- SHA1 24f72e3e6cab3b876691aac01473ac8232d03c8f
- SHA512 929c716f0460695ec8c37ffd91601521f307c65c9666ae7ad55a703e916b75ba5d156ed9b66b8c94ccd75ed677618cd68afd978034bad4e5949626757a2497da
- SSDEEP 96:w8F2mvJ8Lhgftfv1eXkoz3ucpZ/IRa3tDXvsckqYTNKDlpbF4:32YJ8yddMzJQ+pXvscJ0Kp9m
- TLSH T173C1FDE8019C2885FF181E395BE1A9F2363597D98D9BEF038260D6FC94B63E8121D4D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 5KB
- SHA256 61e9d72d28f9c90fa8e001dcb46d3591eda25f206d9b2bf5d376e8bc3a4fb967
- MD5 808bfa67506c97ffef551fe997366797
- SHA1 464824d01aa4f1167fc92f8b4eb6c3631dfac448
- SHA512 8bca45fe43c07aeab55da98459cf4585a5cc9d0c8093ed9d6216a4c5ebf1e869b5040881ebefabe580574646efcfc248e084853fd2e2b2503b96670abb530d3b
- SSDEEP 96:g987myl0qg2fvP4M8L+2vXYoQvJcih6Y3+8dfc:3VlaUIVLOoQvJcI9OoU
- TLSH T131C164D8419C3885EF191E3993E0B9F2367697E88EABEF430264D4FCD4B6389121C4D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 b180208f07bd9cc17baef430eeeafa60f176ad5558ac329bc4f178118e227fac
- MD5 88674d06337dc5ad9332ab0806f4105f
- SHA1 7cfff448c19598cdca97f56e68bf36e032841d4f
- SHA512 6f414754127d34e3c70e120f7a1c1aba463bb7cdabdf98637b73d6f089cb5ac4181f2bebeae3fa05dbc5f9402cf318b3671cbc073dcf82ac466008a92c828961
- TLSH T12E510AE942514CA0FF9A567285F192FB363AABC08E8FEE0302B4E8FD19B6711631D454
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 9e705be2d92a04ce5d9ce804c481ae95385edb9249fcef8d2fbfbc0c025a08f4
- MD5 198176f2208cb2e7ab2c8eecb3eda321
- SHA1 32b3f83d0ca7017e60b3eb129d73455a9be67be2
- SHA512 2bcf85abe226ee9975d24dfcefb27ec602de390d9b1f64f757ddafb96801eae72003281dfddac4f00452ff7c6a91628ae4c9fcc7668ab2025fa968fb836549d3
- SSDEEP 3:MsEllllkEthXllkl2zE/laZb+ll/:/M/xT02znl+//
- TLSH T11A4402046B840416C5001530409E83901371D4210652674324512426BC996901D01500
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\60713046-cbef-4573-b67a-a027cfb30b1e.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\571fb4d0-e3f8-4255-b32a-ff1619481c39.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9c34c2be-2cd0-4477-898f-bb2597c05e90.tmp
- Size 4KB
- SHA256 45da012684c4b28c87276ceb5baa3771a4fdfd1fdd5e8b7771a49c0eb2bb7fb0
- MD5 706d0cd38d12bee82767659deb568c0c
- SHA1 f88a054a1bd510777fab6958140fc096d28cddda
- SHA512 85af3e609f449d7578b648766d4a39e7f3ada33960215accedb81b1d1d111fb4c97563d909549f41921298d9c2efa9939ddeeebc9b10b3ae8e049a24c2b51ba2
- SSDEEP 96:D3WSq8pbBpec+pbj3gvEObzpap1p9pm6pub9p+Vp+OpWntpnGwQ:D3/q8hBoFhj3gvvbzQL71Q9MVAOInt98
- TLSH T11D917AF783E9562DD92212F0AA186F1FCE5E1955C32C3D2AC4D49F1BA3E2071E241B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
- Size 40B
- SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
- MD5 20d4b8fa017a12a108c87f540836e250
- SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
- SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b945e8a5-710e-4e61-8251-a8b41d94f862.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\caa9c773-a470-4a62-8b22-99aae1294068.tmp
- Size 4KB
- SHA256 c8fab0ab1118d02efa7dfd9ad1081c1321e546a8b2df20ac2aced37df5a30ced
- MD5 2eadfc1d142ba10f9a19641bdd7c8beb
- SHA1 43a7a2ee96eeeeb5d4a94a7f7cb9cadf1af128ca
- SHA512 09a8d6afaed7a30a9afcfe644c11dcf242bcef39dc1ec81358dbb7d324a7f80a1fcd1a781ba0658ed0b850dac4899a7d0da5c2985e2c9e2df7da528adf1042cd
- SSDEEP 96:D3WSq8pbBpec+pbj34pap1pFpub9p+VpWntwBp+OpTpmmiEZ6Hx:D3/q8hBoFhj34QLvQ9MVIntkAOlBiY6R
- TLSH T166918CF3C3E9562DD92212F09A186E1FCE5E1955C32C3C2AC4D49F1BA3E2071E241B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da76e692-14db-4b12-ad4e-727b9209d0d1.tmp
- Size 210B
- SHA256 19039ab53180b7ec2fd1536eaa92ead2df6f6a3490b2416092699c1a202840c1
- MD5 1b13fe956bfcfec1b45df956a85ca7bb
- SHA1 27fe04b968e35f16c6287d48129266d922c79523
- SHA512 7cea54a5ef384624e0b8ef64628cb57dd0cc6131c883afca6d48fc56c2da53efbbfaeac179c5fc2f778573a129816f89f4dfa0ced34f2185bc0a7608dcf5ee2d
- TLSH T13AD022B32105B17282293AB96029FC4EDBB22024085AD1D561E1F76929BBCAE160B3C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 1fca83f16c726b62dae3bf6c29b6d59118acdf48530aa36827ea4f5678605804
- MD5 0adb44174b2d0d0fd8a116cec47facd7
- SHA1 a05234ad5bae9631f38c8c695e96bec29bb564f6
- SHA512 af56e6d8779f12076d6e7de39dfdefdf5e1ee0d573f97d9166cb05d1757a9c5120d3c527d14a3a9e58c81635b155e45ef16753d168e395d0f6a84e65c5e5f1df
- SSDEEP 48:KYXIBKwAE/yh6I/Kv6YzyNNIZKmskbyUq9uar:KYXWKwA+S68Kv6ueN2KmsC2
- TLSH T164914341707B42043D7E2A4941F49A5F969135B37028EAAF3FBC40A59E67E140DFDCE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b127b2d4-1557-449c-a403-819bafb94f4a.tmp
- Size 14KB
- SHA256 cf7679b33ddc3b33b82fe9d1103c300f8947c0af931662823f02f2d6e5a2a36b
- MD5 7051e3ad80f12b42108dbc34997e7ece
- SHA1 b04d0a92a9b75ec3b7725b82960c0c454fc99a5f
- SHA512 af5e694e238ae7e2e95bf7fa78fc0281ee72ed559aabddf69d5c61da2458c439e19acedab9758bd7e2d8e74791110c724ec159649411675b0424bdef1b6c9293
- SSDEEP 384:sxZ8hmWe/fjsMWv8Aw/0/bVH2Vd5vYEVu:s0hmWe/fjY8An/bVH65vnVu
- TLSH T11352EB526934D57BCCCBD618FE35BF16E6F9102299D21E4CAAFCC91C01EA6ED220740B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8f45033-7a71-4037-a6bc-950eb133d64f.tmp
- Size 12KB
- SHA256 e1ae98006042e00e316c11b782fda30c5fc5529d7aaaa218bc9e157fe3f5ece9
- MD5 f4a1dc6d396955f8927d2f807cb68421
- SHA1 96e953a3680f68d8ccf8c2867eb39babad06e14c
- SHA512 b09b7c9b6dec69962ea22be7b769f3e30f963b71fe39f1490b3050701591f9a8592b64553e624a67dcc2f8cdb4cbaa411d34515d68cf1825773b25fa77a6da87
- SSDEEP 192:sxZ8LHcBze/fjsCKHlup8GvLdyq/W6+WNi1N/Y0n4u85lvIg5GDKQBvG7:sxZ8zmze/fjsrHwb3/by/5QXMVu
- TLSH T13042EA526924D577CCCBD609FE35BF16E6F9002299D51E4CAAFCC61C04EB6ED220781B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2977491-16dd-4c3a-b120-aef8766affe9.tmp
- Size 28KB
- SHA256 bbeb940547130648274b96cccdd8ec1eb26a07745aa57e112429cacfa0169357
- MD5 ceaebb64e2030c93ce0311dfab7b579a
- SHA1 2a1ecb45e20b704e26658b314b99b6655d0f87ad
- SHA512 31904ab2c1a10cdd33eeb10d036f3d7b3aff69439bf931094ff736ee56cbb1127e0129469087d3f2e723219ff843498377277b1289bc49de7138c8d11e6d23f0
- SSDEEP 768:UOnwK8sN2IsWRmkUQ3z8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3fYLl/Yi0EtHroAv:UOnwK8sN2IsWRmkUQ3zu1jaKfYLpY7ED
- TLSH T184D2FA3F640CCB7E8FC01E99DC566F9B6AE802C796688D4047FA994C02C77EE511A4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db9b32af-31fc-42dd-9555-c37b93e8bda9.tmp
- Size 12KB
- SHA256 6f785ca09ecb5b925fedd3abc0277e1ddf78674cca20d74b2da421fda818147e
- MD5 469828e9316e7a62ec3b5fba10e2b5f4
- SHA1 f055552efff458a2cfd10f1d6bc5d318e4070090
- SHA512 01e862f165cfae8f399f9bb123dc76edca7713b584ad9030ecea966197fd37564fb7f3ba272927b5c8a019518f2a97fb7b6de1956e0997ee54aea14c61a93bf9
- SSDEEP 192:sxZ8LHcBWe/fjs3K4lup8GvLdyL/W6+WNVG11N/Y0nQS85lvIg5sDKQBvG7:sxZ8zmWe/fjsa4wbS/bVi/5mX6Vu
- TLSH T1DE42E9526924D577CCCBD618FE35BF16E6F9102288D11E4CAAFCC61C05EB6ED220781B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\edb3f8f9-a283-414a-ac87-d9505623309d.tmp
- Size 22KB
- SHA256 f429961ace041200b0a6f4a3fb8e693fbc03721c6ac63bcc34c17d3e99ae0e7a
- MD5 50e5faaa44d5d76aff26a151a18c4cc3
- SHA1 0c539a4106cf75f34c81db5d295df51f35566354
- SHA512 9ed9e069af12cb64ad0e1dac13912dfa8ca78741416e1c71d48cf8726b6cdd17a91a63ba9a642fa0bca5e1b77bed00e60465d75df1f4ab83dabe673c54bbb3a0
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ul:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAk
- TLSH T17EA2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abd6165a-c7ae-47a2-a829-4219734c511c.tmp
- Size 18KB
- SHA256 6cad8027d559d7944d8b39f0b41542a88a0fdcecdbd81a0efe096648774bd14f
- MD5 474a1ee90fb52391ab13f80101098ab9
- SHA1 f4c86e95c7ae9ac2c30a1c3742848910eb2e0245
- SHA512 aca5b6d21bdb87f27eb5546a28b38ad23b46109b9e6633001b500e98e6e4ad85f98eee2320f23f207b937908c072b6a8d68100a370da239a08c3fbbb9c4a20fb
- SSDEEP 384:BQkUSv38N9U5f0JYaxH72CGnfGDH7vBEfBIIle:z3sh7RSfGDH75EZLI
- TLSH T190827D72A8696D2B4DF7D510F04A3617EEB89127EAD81E40D5DDAF2C00CB29D3347917
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0c29defa-c410-499f-958c-f3514eb8fbca.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000001
- Size 960KB
- SHA256 8b83a0d4bba4cfcd4a4e7ee89b703014a00a5c08e721e568a5c552a732827fff
- MD5 970bb3ec3b388214a78efde7fcfb88a9
- SHA1 7b6be7756ac21103dff0eb2fe3a598b9ba6ff88f
- SHA512 f1c34da8403578a7a716b3f54df358713717ce3c91dc47823056663734bd2847574401b717f31babc9592cac81615e034e64ce961ebc495b7d8144ffa4c88523
- SSDEEP 24576:1htHO9ORBovARYwrzRHU+RD29j9kl6tdzp4sv9v1nE:1kI
- TLSH T1682571BAD3ABADF3F9A1C5F904660D30677ADA857C2142F10DE9303D3BA93D450A506B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000002
- Size 25KB
- SHA256 a1ff7b3cf1549f9152aee9bf7d475ec69f4a5d844c4054fa53a68102c758100f
- MD5 91f7ad7162e8018b0cf239c70735d664
- SHA1 6b49dd2abdeab38b0ad60aec1609a7a368b7be43
- SHA512 a858860bdf4113877a15f48abb1f831c4a73897ebc64326ad6675010b090716f4a79cce8d419292d39680f0b0664621c4853a07f798d14a2bfc12048f4894fb5
- SSDEEP 384:yHMiCkz2YJJ8mfmVjCAqZEXoCRf9oVY8NeVUX/RjLQRmXXh1skqfn6fItqy1Yeih:Nw2q8mfmd0B4j8sC/RjLsmXrcZih
- TLSH T1D2C2E1A45A37490CF0602FB45A1D89FE80E3EB503FF142A1E6B4ED2DC671E30B4D9A24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000003
- Size 27KB
- SHA256 8073ff708bc0b02ec62325fcc119b7cc6ee9df9a47627167da0d48128781891c
- MD5 c0d25ced7cb5dcf4410e6968f7f7848c
- SHA1 588e199ef0f9c1ce54702140ea9c978bdbebc43c
- SHA512 6861efb3cc71247e94325c9ae0d0c7293c87292ddf59962701889e83eccf555713779f59800f681d885a8dd04fb4a67b53457457230f423c9e97f36241b24c52
- SSDEEP 768:LzrKoUrDcA2ity/zh78YR/DJNwuF9bzy92Qgwxz/l:LfKXfcI4rCYlQujbsgG/l
- TLSH T11BC2E1ED24886953CEAD519C3F4DBCD32F71DC2836419D4A96AD771B03BACCC91491E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000005
- Size 76KB
- SHA256 f7c6a2161feb10ddf828b88fcf0d56d99853a80158fca5fb954c7714691bad1f
- MD5 b2b5bfcdf9eb508da51ecc6beacba7e4
- SHA1 255ca8451b3bf9c0fd1eb78f423b90416e224d0a
- SHA512 d6e2cea027861c1708bf7e249871279184d8bef730e103093c45de21c369826a42d6f5b4dd561ce257ffd7e533505f4a9594512568750bbaacffb8c0276b3c35
- SSDEEP 1536:O/4C7SlNr6FDp3hqIyOF6VGOH6/fclIKSFlYpnnmc83C1+tI+Jpfc:O/4C+l8p3ovGOHbiKSgNnCC1+6
- TLSH T1AD7302401CEB6D6561FCE3964E188076F473759949326A9B8CBBF9BC42A6A31132CDF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000006
- Size 22KB
- SHA256 27c2d618c0d47325ae3ad0844d3ed96d03ef6d9019b779335abb3932f1025dc1
- MD5 f63524c3dd80d21877ced689660d62ea
- SHA1 2e35ac18ac3553ed016125897ecbb218bef50439
- SHA512 82e2f5629952cd534e9669d15a81bc7599cf30af93c28d961545627215bc8b1d341ece7cf4cd7ffa2701a76f3ae566d45949fb105c44c4cf6fd6b1f22cd681d3
- SSDEEP 384:pa5fFPMdl8ILZu2NUXbZF45R2pSWjViqI6Y/8I7LefiVbBVJZvTydKMJu+OCokSw:pa5fBMdK+ZuLX45R8oqI6fICMdVry3uA
- TLSH T1FCB2E07888742B15E0C3930698DE53EC24D4ACA97FB6E4189A1D9FF7C43B70D6A90970
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000032
- Size 22KB
- SHA256 eb3e110e5c4f7805813955280eb54efcae731771a7232357756604390b34b247
- MD5 760f6a1447abe1e062d9c5a9c0d520bd
- SHA1 a7b3b06df0ecd6075541b60cc28423cb076bb32a
- SHA512 9b891b9ba074dc3d18f8105774fe3e1914a183654ab7633a31ade71b3c0a07367036f7f915a2818bac18a9a5ada2f2941b739a1629d6fac34ff2388a280a540e
- SSDEEP 384:Op7JTST9z3InpWWm9dz69ieIvyRQUStRMzAXFiy1SX7LDyHc8dh5kj84oc+72nCx:MF4UeWihvvbMz4Fiy1ePy15kVoH5FPHZ
- TLSH T124A2E147F4D29F2305392D962C55864A2DD0C9A56ACDDEFEFB793E7E9AF40216004832
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000033
- Size 28KB
- SHA256 71bb0d19ad3f11bb93779b9a23791a9020c9fc39c04c5bd03ef53d8daae50277
- MD5 6eaba6c08ad3c2b1faba1ea68ba4e637
- SHA1 79228c51d1a40bc86c49ad8aebc415891b0226c2
- SHA512 de89bff019e5e329591719626f4964327ae1c82ce76f330cfaf5040e8c852d422dddb0666e22f91d45adc9955fb61ab6d4fcab86d1c1e7979756c9fa2cd1b382
- SSDEEP 768:00tK5IkguZV0CoP20MlK8HVsedpqutvBDW7:PUGkg2g7sH2Cp1tvNe
- TLSH T14AD2E00CB9BE684EED4C4378E8E0E3D99A840477BE7773A9E08504D59ACFA1F490C657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000036
- Size 128KB
- SHA256 e4db38f15f04c4d78ef8ebd7a4d9337e2fad670e2bff7fe4e5f3505577bd8fb5
- MD5 6dfdfb363ad2ec51544cc0d9acbaa2e5
- SHA1 c4a6b940e6b0be80eb66a455fcaca2910e25cdbb
- SHA512 3b7da627d587fa6d20f69ce99662e1a99decb51f13cc61677490af21c499935948f4f150bf8181aae13fa647f792543b0c201350d99bce59126c97d22434b4be
- SSDEEP 3072:I/I9ytnWxkBD4gQoO6DcocSyuXrzLCexGVwLlzZtA60D1VjiEEvb:IQ9yJWxkBD4zScSdryUGeVZtADzjiEmb
- TLSH T1C3D312DB23F258E3ED29533E99EBEB21B37983A16318C3C79B123054BD306A55F91412
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003a
- Size 16KB
- SHA256 53c7c08337b4f5be6f7942897b364afd73bf4753786664659d303b5e660b118b
- MD5 9830fb86af17e1952070d26eaac42196
- SHA1 4e12ffa4ffa6e553032bb751c66a6da416561880
- SHA512 a8bdf80580813515b71e15ec369cdc2c436972f4fa09e72d1314b007c9ebb9e396638081265852b6e09365f8940f38f90404766c903d4e2d8ac34cd6894dd13a
- SSDEEP 384:XTir8ItJp0ygYyZ03GIXp7LsQyN0LcS6/NueyF:D7MdgaG8sQygLFF
- TLSH T1A672E099B782FAF42C2E30B5868E2D7EA02274C9A5F5938243D01F902119A1826F31F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003b
- Size 23KB
- SHA256 e50bbfa9012881b4393ab4989a200e78647ee3ae3c0d1ff4bb0f80e6b4bb7bd0
- MD5 43881a474ab80ea6f793db5211d28cf1
- SHA1 36b1c5e033d7a5ca884eba834aeef209702c7362
- SHA512 87fa402d97283dcf26506f0e02ebbacf225e4f830fc8400707e8a813f6b75b9da724d91ed6a156378c810a162cc1d9694a1a4203b6bee087f3a65fb307e02433
- SSDEEP 384:MxGjFubchT1de1/bMXB6hBjrz2u2OdMgqX8NuRjUHOAjIiCMA9CXrHaLh2DyE2Hf:gGBme1dyDMR67fzP2OluRjUsiJR2h2DQ
- TLSH T187B2E154FA325C42E67417E34BA5D7CB5AEC8C3166A26E00BA2F003CBF219F04B64E57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000041
- Size 24KB
- SHA256 e6f2cbe338e55c7522e28cbfeeca2c624afedb61ee3f03e960c2d80dd0a73a13
- MD5 e60e73d581d1252b7eecf8337a174f2b
- SHA1 2fae570ad2d58dd299edc0a85bbb712d8b9a2124
- SHA512 1f815ec6c7f51266e368e7b55a283da0cfa25a251164aee6db1c8fafb2335c14332d1e7b2f0d36329022729a30d1c773c581d88802e3ccad50fc83cd6e838c9a
- SSDEEP 384:X4E6jC0Efb6VdNuqv3DO7mh/2leRgexxLcIOJtQioaw/i+4xJdCv1KyDctIEFc:XBjsPHySVdzTc1JZoa5+4xJs1KywtTG
- TLSH T134B2E1FA5623FABB1168FF942E44CDDB3658A44084578253CFAB41EC93AC58B8C1539D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000049
- Size 490KB
- SHA256 d24943c4bd534f78779d3c43d5fdb42652418603581314281e8b32dad2747ee8
- MD5 4ee3c00c71ae28761934b609e78c59a4
- SHA1 3c59dc92872983624c9aec821a5b2b703e2c3eb3
- SHA512 b3e3b22780d859ff3e11f4b24984fa913c4534565d140f8e9b8fe663654af6be459444796340749f7685b1fd31fdb31e686ba479e99a9765057af1c3f9bddbbb
- SSDEEP 768:PSXe+mA2dqgk5wVWDSeaodE6ph4bbbIifUoawVnIrF1bjJCIesGIFtfgadnEZPqN:qO+l6GQWGe/q6phfolVnIrFRJ9GwFrnl
- TLSH T1C2B4E1908333C56FD6018A3A50CB47097A75E2709A8F4B6F47BDF47C0CA66281F9A5CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
- Size 20B
- SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
- MD5 7177cd1b3e21f48a23cb47dc11b36f7b
- SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
- SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 164KB
- SHA256 66fe85533072ad345a12562addcfc82a49732cf8dd6d0227348a3470664705a2
- MD5 9e7c70c63e55ca0bb1a3b9fdb954efde
- SHA1 9cfcb574b79e1884a08dcdb0e76d96c6ec3be3e7
- SHA512 182ebd3feda0dc0cdb95cec94139b65bf233a8376ace4bdd9009a79e29c559adeb704c3cd0d3d15057dc661ebcd84c84002f1a9d8c8b0e2380455867363e311c
- SSDEEP 3072:8NZNXdUyAmmz6AaRUCpMOczpNvfkLPGzEgRx0cKg3ODRnqcnBcLqlDom2T8CA1:8NZNtUyANYpp7czptfkLPGzEWqDgMcLQ
- TLSH T15BF3125AF2F1ABDDA16BF048AD226AC7F060B744025543E00FCD68EFA96651DF3CD05A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\140.0.6074.17.manifest
- Size 225B
- SHA256 c330e359a269c3722083dd78922fa313b9c6ee4f464435d455ccbacb09e17c6e
- MD5 7e0d0632ead1ca6b83b47d108d374329
- SHA1 687c592789c99797035d7943a75ae2537a2485ce
- SHA512 a8464673ddd42e753db2e95c4a474df498e480b1e79cd789f1b1d31e02014c70a27abff1730eec1abd053f5e888802c7bddc4d59e485df57a0d23cce69281083
- TLSH T170D0A981C0D52E097B2181223CAA7021AA1CE72B4488606C70FC7DA7AF13924D0828B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe
- Size 8.5MB
- SHA256 2551baf6e946a6b3845c0dc50fd041713c112db426ac40f66209f3aa62a1cca3
- MD5 ee02418590bb34ca034953d1d2168e58
- SHA1 416258c0bf480d65fbf1ed882d77b2b62ecca35c
- SHA512 e00a8b5a4a88374bc2a271d720fa17d28bf28f298f1e831a95e4128b5dc2feacac143c2615b91325e882ec2c247f0e8007400f5eb178136138eee03fa008ff8f
- SSDEEP 98304:r9TA7AtUd6HOP0o3no7d0ofRuLdvovYMO9s+CRWEOI553E3DwPR:VA7A6YOMdNYs+4Wd82y
- TLSH T1B4968D53F3A601E8D06FCA748B3A563299357C564B30A3DF0AA43A250EB5FD45B3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
- Size 5.3MB
- SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
- MD5 1190287cf70a9c1f8d1419bb8a1578ab
- SHA1 8f2157812920d792afda16b1635704382d7690e7
- SHA512 5f18f396777ae25915d90854c4309800ffb8e17802aae9011d50d3c2c8af045f07d4dfbf6ff0d5e4e4babebe0643ae122e28d9a02a36e718bae9150a7e77def8
- SSDEEP 98304:V6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwO:l1J1aqNY52B3EjP6Li9WyVjYr7GX
- TLSH T19046BF53B711207CC84B68B2643C6F7B8C291D63972187DB89E83CA25B749C26A3D75F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
- Size 7.6MB
- SHA256 884c7766c26c12d51520cb95f805644cdfdcb443ab76207f11ba21fd682eefd3
- MD5 19f91363887c1b179a0a889183fa8e33
- SHA1 c65a07df0770e0ffaf5d53aa3b3577269dc98ac7
- SHA512 2cbfa99ac4d99f1846c704b3588352749959394fa472ecb65655b1a370eb696dfda4801300e86f1dc712d2c7aa478e629aa6117dd5b3c17ab1ea7e3cab01e9af
- SSDEEP 98304:YDe+nW//Vze4kDjlQXbzy7lGHw29oxOkdz9+Q4CJ:YDe+WESoO0
- TLSH T184867B13F19611E8D05EC179876B9232EA71BC490B30B2DF0A9077152FBAEE4AB3D754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
- Size 2KB
- SHA256 7858fd99235b2911dae168b051b2fc7607edb986ce0b297902fe4f3954b89005
- MD5 820235bf2e7f98fb4bc9988ba8f68745
- SHA1 85039db9c99ccd0e1c3ab077638f43abf1dabb25
- SHA512 00c5e12afda4ba26669128fed09a49e1de0f434ca99631587a775958d2ed2d6fa17304a525e0a09b3ec5a33b240c38d93de624dae71b911cea64ee1fb2c5681b
- TLSH T159518310093650307BAAC31AEBFE3A99AA571313D01428D175EE162CD4E7E5A93F691F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.jsonbf59a6b5-639b-4a5a-a232-cfc56588dad0.tmp
- Size 2KB
- SHA256 89f9a0001055d018cb80b6623ab7f5e227d768cd3f7fe65a62237808e8c6a85f
- MD5 0b96e4ceeb0a542eadbba3511c6a0870
- SHA1 1f6b20f8f8237abea6772c1657764ca03f297dc7
- SHA512 9d5e72172c8d51afa58ec7ff2729f6b81f7c4d18fddb4105fb38cac15551a602118467ecca68fb217f160658608c0f831e03e81012bd45e1fca661a938d3fee0
- TLSH T1AF51B410093640307FAAC31AEBFF3A499A571313D01028D175EE162CD0E7E5A93F691F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
- Size 3.0MB
- SHA256 9f1f130391f2727c07ee911b38b208dbe33d5ea2cab4004d8c190ffa3b08cfd2
- MD5 81e5cdf033524c9d76576cd4e7dfb3f0
- SHA1 92d3b6adf621819d05eba80d36daa6b94905b075
- SHA512 b2b9c01d7e9532516b1b1dc11d6ba97ca6c11e10b4f543ebc51c90a2a39e2cd556fc26bbee9b3d9e55e7790595936d77be97333d673fcd0cfb2857c74729df8d
- SSDEEP 49152:vL1bBN9IJeNC+Z+p3mdmLQ/fTcWb4Do/ks125:v+ZM7nk5
- TLSH T1E0E57C53F2D910D8D019D039875A9632EA72BC550B3177DF06A076262FBBEE4AB7D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\Browser Opera.lnk
- Size 1KB
- SHA256 b553c34a4686a3c8110471264816aaa1e1319584aba2622a05589432968dcf9e
- MD5 dc9a1d612d277c56de52538724fc5727
- SHA1 85340178e3bba890643c2cdad7218e97f5cfb0d3
- SHA512 29bbaf43cc43e6319c0148fda95bd84f6fef6132b7e463101de9ebf9b2ff336d27ad39151b1580bf5300f200a63aaafdb086bc4b40adeaddf9943bb4a2d41945
- TLSH T149210F563BE96722F2BB4A7110B33B19D376B852DB964F0D109042812D74202E49CF5F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\additional_file0.tmp
- Size 2.9MB
- SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
- MD5 cca6f6c0abc234866a5ea00e97d1745a
- SHA1 6ebf31a5ea9b2d89a21fc565591185ee93493553
- SHA512 01b9b870d6ac45f9908c6119d48bb82b2957aae2d4d72153da5efa81ca97a4f13136fdb24bbf1ac8ab2defa094a573e2137c1202f324fb9b6453c5c79fae6cb8
- SSDEEP 49152:3kinowp5Tl8RRjPXnYcilTS8rmJ6e99FiHgfCNJwFdIKLpUCHSa2PNvVseb:3kio+UDil+smJ6es2I3PPpVLb
- TLSH T142D52330B9D48870C32756338DA1F7AE55BEB6B0473989D773980B8EDFB15C39A26406
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
- MD5 81a58f8ff0989c0089e24dfa658dccfe
- SHA1 7db84aa7d78ca19a25f5d2db30f169590af165c1
- SHA512 e91f4faed65a043cfa7e350441d5c5849b81798951d574e8b42330e1d645b1e4cbbd33315fa1aac258e00b9883dfa8c3d865164c07d7d498e98f4c754c6779cf
- SSDEEP 49152:4fuSIF/tZVHY1OADJCH/wmQ5ofRUwzcvz86eCkWI37aVU:4GSIF/fVHY1O2o/rhRzzcvzRetjGi
- TLSH T176C5AE02B99094B5DCA63032721CE77D9A355E114F364EC7AA90BCC17FB4AD2613B78B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\dbgcore.dll
- Size 196KB
- SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
- MD5 84d406838e3b80a2668c466ca5cc8e57
- SHA1 bb60b9c299f28bc05eb7a29dd19ad64b37c612cb
- SHA512 b5261aadb18743835bcba65b2f5aee0b888e8b7c6bff21deeeac546236ac892ac00722c2d486dbab969f8bef8957ca9576dc5301780ffe088fd5065b6c57a84e
- SSDEEP 6144:zASh0NdOkBakZykbp/eyhr+SJors+k0L3nTI:WYIqFLnTI
- TLSH T1DE148D6296840833DD9F11B8B29F333795FEAFB0139194D362509AE4E5647C06E3A2DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
- MD5 c903c1fd205157a96848017f1cc5f245
- SHA1 1eefb8e49a4c663253e75e7a862d11524a88525b
- SHA512 f9e5a1f03f18b226a9e3d694aac4220c806cc30dab0fe951dab1c62dabcf9c937efb79b4c4a469966a141b49aa358a492ada771d67426fbe025d59b25e51f705
- SSDEEP 24576:zDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsfq:zqhRcFPxhHYCBRnyHO6W6NIyX/kQs2x
- TLSH T101856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 3.9MB
- SHA256 5addd9824f7f56c94297975ee8e59a68bb4f0a9618b792a66b38de617870abab
- MD5 581a5bab64b6fadecd6e0763d5385f7d
- SHA1 4a61315018d642603b2e704ec6c662dfe72758e3
- SHA512 e483c36f4be28346e5acf493beb5b996d4061286def777e50cfcc3a81920ebf0f42a075d1829d78a7f1070c616646c614fad32ccc9e8965a53e23214a6077c80
- SSDEEP 98304:dI+WIwDD3cZ/uZn0l9T8IdsWXYmrn5Ojacii:CNDDcon0lWvxmr8jnn
- TLSH T1D7163322F036A248D91EC9BECA453F85BD7428048A49B1BF78E016C17DDB5D1B61EB7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.json
- Size 883B
- SHA256 d840499f86327d7916a424b7ae029032d0d95ad76def7c67f846af1c79141710
- MD5 59002eb7f61f06ad6bc2ca7db668928f
- SHA1 dfb51983a3cdb1bffdefb5f2e6737e89f0d83442
- SHA512 ed2f7ae3425d0cec6c2737dcbbb6577de609e0073e8513ef697be146504168756a4c63dde90edb6c5c299bfda1cbd7488f54a4ea553c55b7df8cbf669b33b328
- TLSH T12B11CC008D3B842035E9830233FE36D8D9D2371684401D89B6DE327CC0A571AE3E6A1E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.json2a8ce33a-964b-42de-819e-ac583ad33388.tmp
- Size 898B
- SHA256 2ef52af3142f5a0dd7be7012e80684706cd8675b3d7cfea42f8f5c2cdd3baf6d
- MD5 a2dc9e16784b7bb1ae53501baae2a956
- SHA1 04ac60c28fa793fd2fac24cec635272914ec254c
- SHA512 da7e4b15f9e6996c046ecd8182b1504cc1fc59730d06fc15cfeeced1e3398cf9fb7e3f628f208d6dcb07e5a6378e5dfff6b768700f6d1f2de81acb3ba5c710d2
- TLSH T1FC1199008D3B842035E9830232FE3AD8D9D2371684401D89B6DE327CC0A575AA3E6A1E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.jsond530daa9-64bd-4968-bdfa-a5cd17d56088.tmp
- Size 1KB
- SHA256 1c8a1378133510221f0109d12c9d3f131362c48d8c41a9857fd523977e5b9590
- MD5 795b5e52ae4cb64bcb6786814def7b31
- SHA1 35bc171da90b6bfe0f80e84e1a38ba8dc7543e39
- SHA512 0621630d957dc6d35b86e7591e923680d119141457949e7b3b256847c430fae01d00037e499019c2e30a39ae010cf889a0069e0c13dc4452d137aece13674ec2
- TLSH T1223162104D7694207BAAC309EBFF3A89DA832703C4502CD671DA267CD4EBE5593F592D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\27f96776-5835-41ba-8263-b1d81acb7819.tmp
- Size 46KB
- SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
- MD5 8485decd497d32d49f8a6b83d42c7635
- SHA1 0ad7b9fdece0998f1b66a5979da412b9aac7e3a1
- SHA512 82ffe4eba0d7defaac0b5f034b71db136704c919f5fec240fb1496799d41efb56857772a05aa5013e8d205c7bf8775f6ca59f3f3620eb256dafe42930eb259e9
- SSDEEP 768:DDKL8NQZ4B9QrLRIrfyyK9R5dWLKrbIK4a6KsV2EjfyyK9R5dWLKCoIR4aBKsV23:DuL8NQZ43hPU4kbIK4a6KsV2ELPU4fo7
- TLSH T13E23E16E8531CC30F5754E31A30582DBB12592E4C537397CF0CCA5E1AD0376167CA5EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\2c14ce2e-0085-461b-9ed2-dae62298ae51.tmp
- Size 711KB
- SHA256 b72090a10c10084d62e29a29f9c23805f0117c1f8c3dfcc914776bad7c9b560f
- MD5 94007d3c0b33cc3cc6bc1527c7fbfbaf
- SHA1 c1baa22f596fcfd9b2ee2fd680b01769dd00fbef
- SHA512 040b27a7420833a73a1143e7fa1cd31c6ed3aecde13315bbf2b834e569019080610c1c9d3c0b1c3506395d19107b728060bcf1085ca1f293338037298a9ed23b
- SSDEEP 12288:WNUh00OVI4okZFUlBOfn03asDwz1FTny6LH8fGvw9Zymn5IvnGC5NkNlu:w7I4okZFUlQfGHivzLcfGveZyDvGCrI0
- TLSH T104F4339ABE74096EE43FDD741CB316D7C2DB405BF441A296122D8BA80BA757B8D103C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\686c9962-4e59-48c0-86e4-6d47649f2520.tmp
- Size 1.9MB
- SHA256 058f5fb5f248f11781e935db57faac037177392547a40c23f20a95a00b53a49c
- MD5 36954ba815c1bb10b0c86ac565489069
- SHA1 c81ef644709805cca0f153fceb611b8679ee0167
- SHA512 15c8193405291760521c66d747493b04a98b389ff35ab7f5c77b9cd5f6d5b24a7d3bd4a42e7cdbd799467bac10ba2cd7c3cb3e5096fbc1a41475d18cdda8a016
- SSDEEP 49152:m06qPK4LVPV7r5Z3QVvK2nb4OW1n3A333emfQ0smBsEIjCSLGoVyvZ:m06qPKA7rzgVvX63++q7sksljCSqdZ
- TLSH T14D9533A2CF6658BAF4A0BAAFB654159E8F1C243AE5C154271D1A373B9B5C3CD4F01383
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\76e68a34-5a4f-4ecc-b59f-d5ed70bb821f.tmp
- Size 390KB
- SHA256 13377ca30d27f34562732dd2f4d7d41dfa28364705742449aedcdd8a72406326
- MD5 3fd1a448254e21904cac0bcf4d909083
- SHA1 5699995e70f7101c080b7a09cfe534d480a50027
- SHA512 9acb2f15fbf123e92f18cab8fd15639ee394cd13f82d572786c46080ab61efb58bee81d2a1a2c3e1255a99c2434719edb502235d8c6d651beb094ce7eb178da0
- SSDEEP 6144:inp2toyRFXTTBP/znnGOhvxMSyRFuUxp2tBe45HXWes7b71M0O0TWHQUOS7XXW66:inT2dTZ6QMS2bxeey3FsVOvwUOwHA
- TLSH T1D0841366C02E2816CD2FA772A41DDE26940F986147F32FFF2D3C1F47456A9E21B36A05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
- Size 8.5MB
- SHA256 c006d928ad6d42dcc951d76ee120b23bfeeefbe279f03b98a6f9eee958982f53
- MD5 8ebba4c4ad91e7d448ab813c18fc6771
- SHA1 37ca76afafd216b4d864ec416e520ee2cc24bac0
- SHA512 f8f18103705c5372e7353a0c9c3414e880dc00efae5e9a25ec58e34c950521c477ede2c631a0252fbfdbe87cddbebd982a0d5c383e21d10fee4c4241611ff5f1
- SSDEEP 98304:A9TA7AtUd6HOP0o3no7d0ofRuLdvovYMO9s+CRWEOI553E3DwPC:8A7A6YOMdNYs+4Wd825
- TLSH T1CE968D53F3A601E8D06FCA748B3A563299357C564B30A3DF0AA43A250EB5FD45B3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\c8926bb4-674a-41c5-b2ca-9a5c8cf73921.tmp
- Size 14KB
- SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
- MD5 6845fc58fff640f3cbbdf4b2ee00be8c
- SHA1 883c95059a1c7ff393b6908ae577ebf92cc853bf
- SHA512 cd103cfa5c51f69f18a72acb51c7ced52b59afee1b6639e6f9b66253f1a68e6a8dd9789a2a40012571143ff9ed7903dab92ba5bd82f2c0db7f6a8a072ef42d7b
- SSDEEP 192:F4nMSME5b5cHuj7mSNcukNm20g0Eikk6Bt6nUxylKctW6IDIkpH4ubxwddwtTJlJ:o5mHK7mSNgwk/4NlntW6IDj14qwdwNJj
- TLSH T1D252D016C81E7F70FB48927A8449454919EC9728FAA6C77776E7BB45CB0FAC2F42240C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1423.js
- Size 121KB
- SHA256 215c630b7d6f721c662372b4af570b99a62dd774a03d546901f7fe9e6558edc0
- MD5 ceac0f0d6459c57d9ce831e2f021f0a1
- SHA1 a4476f5e22af74dfb32ea9d18c9882b0f8b99f90
- SHA512 bf9b330a9b49108c975a8c4a52a2cf9ec5e98715f273af50b5fc31b2362f2ea1b41e051bcaf2b30eb5e0c9248ee259869410c1d90de79b7bb1cd5405402847e4
- SSDEEP 768:xka6ska6Name2sss2o8ajP2YgCfNgySx7PAJ6eMZQ3JYr12kd1mqIJoykoyicKe0:xka6ska6NamjGZlcdQp66Zjj1LgS579
- TLSH T1DEC39901793ED210DBE703B7352CF15945780B4251DAA72C5EAF932BFA8BE6E4883635
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1567.js
- Size 516KB
- SHA256 695436605ab7a07b6edc3cd2ef32d37e6089c1180ec53b118fc5eb0b6d66a1f3
- MD5 52f1ca1ab3e390ebe80aaa3bb08a0d10
- SHA1 b6aa7c79350d920cb2a6056e3c8e55759623b4f9
- SHA512 68cd6a78e76c5464599be81d8bff775c736a06a271945f329d7066b2a2f86e3f4311fec796c1b1b938aefcd671069e66a7a22cb1e7d2c807fea472147f97ec2b
- SSDEEP 12288:7+bdARfQXhw6CKFsS0TbmO7M/SBRzEsm960EDgm1E/:6dhlCKFsS0TbmO7M/SBRzEsm9phQE/
- TLSH T163B45DD3F6B5B52647D702A1E0AF1102F33C5A04645D4030F39AE9EBB4A9C49A6B3F76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1622.js
- Size 61KB
- SHA256 8f9a0edfb20942ea069e98aa03c6a08d86cf0821f130c54a1d74c09fa82d3d47
- MD5 ec46c1ef34ce6d41f65d473f483fc44f
- SHA1 e2f79452fa058a5dec0fe99e7b106505dba6ad76
- SHA512 d07c833e86c52b0fbbeb7bd41fe4b61ce8fc1742eec6cfba197aa566826788f03696476c76d77842584aba7542d2264e0111c93c116b65f82c8f37a6c632ff41
- SSDEEP 1536:xka6Uka6NamiodQSBmgtgk+Pt5q6XrzLe:xka6Uka6HdQKgl/q6q
- TLSH T15C53391487BDCC7E012AA3D8EF5D151650E823898AF89877EFBD963C05E83CEC1D2566
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\2667.js
- Size 130KB
- SHA256 26ff518485a5907762d168b9838d90aadfc9a90a6e00c25fcab9ebbd55e54b0c
- MD5 9f17b3cf039fb9c261132dbc639c98f5
- SHA1 834d25bd6dd8370327745ef8f3a3a42676e6767b
- SHA512 44cfccf2c37afa2e288defc74c549d9b2191af7726243e18e8c51c3b67aaf9d4bbf6fc59085e73a69347038469f29a71e0442ada0b62f14684845649b1993d13
- SSDEEP 1536:xka6cka6Nam0HZpx6sX2M71JLPy8ErPJbewMaUsmuf:xka6cka6MVN284PMa5
- TLSH T117D3ADCE923EEE890E93288F431C535812986215D46AE3A2BCB55F15D8DCD9DCF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\269.js
- Size 80KB
- SHA256 34c3fcd0a9703355eff5993ee143b459da9dac9430284a5df69c84fa1093a686
- MD5 3b1e05af83511323cbc0ea5d56213689
- SHA1 26c3b2a1cc9d82fb1113634f92ba3d67625c7312
- SHA512 aac62f6c2bad467f1b6d44c0a9b113b0e0dcdfa255b26249db170f5e7bc7eb9aebc2834128464245f9ae583523415604a7dfb7a70ec5c1a53d393d74aa1c6b32
- SSDEEP 1536:Uka6Bka6tamd5j9/eBD00LIlv2Ww0SoX6IXeyaTZgsKZU7VNwi8lbw0DKGFjbbXW:Uka6Bka6bFeV00Cvc0Soj/aTZLKiLYbW
- TLSH T1BE83D61207B0782300AF4B9DDACE650DDBCEE41AD7D05D92FAAF193C56913DAE12361B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3168.js
- Size 71KB
- SHA256 7f717cd67c29e915cdfaa8d405bf5331955234fdc8f8ef1ec5e44e08fad0fcae
- MD5 12bdb0c524ad13bd4cd96c1c4b67ce8b
- SHA1 1a8879b0a8ed0d7fccf9bd24c5b0984ff2df3ddb
- SHA512 c3fe65482e67939243f08d6ebfa092c82623f6d08700de0a8c1d47fbaea33336da846a0382414bca970de1ae65b048c795f0deb2c40b4cb51c95463298c8a045
- SSDEEP 1536:xka6HGSka6Xam4mZX9w9KUoGNJ9Di6CLZX9pHjRH82Gm/eWkunU++OQ3HF29viuy:xka6HGSka6rp9/6tDlCLZX9pHjRHJ4Ui
- TLSH T11663E8088CBAED3B436562EC6FBA5909A3D4708483B3D866FDBF457C81A4BDE8117705
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3186.js
- Size 166KB
- SHA256 d136fbe8aeeaad978f449ee2a6501eee92bb88c51e935da76cb08d7008424b54
- MD5 211d0f4d70d77593abcc79fafc1da7fb
- SHA1 1cc2ae7de86d53dd965f4c0dd97b4a08f2e16252
- SHA512 1aa2b519f68ed607a759d2dca6a15ca9daf416b6c11c1258c41d54a0ef996117b6280ec801f8b7c1ab6ff90af4227f5c5aa6f3edf21029e738d457d66233755f
- SSDEEP 3072:xka6kka679CBcXqA4ne1tJa8mfCZKA+qmdro:xka6kka6hmjHne1XSKZR+qm5o
- TLSH T123F31B89F157FEA9656304F1402F500EB12E2A04891D8564FBB4EACB2C241DAB777FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\326.js
- Size 116KB
- SHA256 3684d03f0d8dd3252021a8f3ccd2a7f47e81d2bf39b8f28845d4038d1cc3b126
- MD5 4c521dc0e395c0c58e1b0fd8ea440574
- SHA1 00505dca42561a9695a71a36fdbf694f06d2234a
- SHA512 05d92bdf5661a6652ed0ebbf0649b9a8ee5f4040a19b6ff077d91830c0362a020906dc63e5cf95627aa5d02bf8db1771863798bef5715788a383abe386618780
- SSDEEP 1536:xka6gDka6Nam7/1JD+XJU+wjl7kxZxSI+jkPkH1A4Kqg1Fva+eFAA5PNkkIVm42l:xka6oka6queDq
- TLSH T182C376208C7DA4B2A8D6CDC9474C63748113AE978B66F758CC1752683CADDBC8CACDB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3544.js
- Size 1.4MB
- SHA256 c09be62097e73999f17904adcbb1f3f4caba6220061996687d8621955dfbbab2
- MD5 1a2c0a0714f3a5bcce1d63b8536a5c2a
- SHA1 aeb9cfebd8ba44be3a30b052e8bb263d5de5ae53
- SHA512 f49139ed3bea7b85df7e76ff6724e5756b5b1f5aff82ea814269768e5599a22b8d707a78847eccda91d0cc4b974379f7edba83a4c3a9621b804a9cd03f11b3c1
- SSDEEP 24576:LtZN6dh4/Ao9oLddty6LZf/d0GUiuCqbBAiY45Xi:hZN6QPwy6LEGUnYmi
- TLSH T14965AE327A567C3A87D7428B649F090275BC4476F60CC91CFAF9CC7928A844652BBB7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3624.js
- Size 69KB
- SHA256 438f3ff2ccb12d96fd7084b0bb63441e1ea694c3a87caf3bfffd315bd47b78a1
- MD5 d1fbb6c32262b422dd0f584c4d28e06a
- SHA1 fbe765470df09b9d3e84500a65cde6b827ac24a5
- SHA512 85877e626253f21ea1d6d595f481a13bad1d5181a20f35f9fb3994de09f03690634393906e4eeff4fea974fd564c1d44b129afa09433bc75b72207f1c61b45c6
- SSDEEP 1536:xka6cka6damqX+L1kGwDnQGvVkY7Ut6NmcuiklrJ6clAsJ:xka6cka6yE1kGwDnFvVkY7UYNNu/rJzF
- TLSH T1536329088C7EAC2E0B7D13FFEA78AF19F0EA06519174B005DD7A8A3F91947D5C167A09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3642.js
- Size 68KB
- SHA256 a0725e894e8389d083c9122e35f18ced43a829575083e2a2a8d2b085fda05066
- MD5 25624b17b69d85f006913c650a121b7f
- SHA1 7602c6a45750a9642fb0c0fb5bf3722a7eed9d90
- SHA512 019ae28eeb74d8c369d1386a54f9c113147e1a9e54e236a12b562d5749931469e2e76510e99beff2248a8cef49c428db8b54fdc2fa83961e955d2690c9c71682
- SSDEEP 1536:xka6Wka6tamHwGpcq1I3Wt1ON8bHBAW8q6mMjfXwAHWpUodwWl:xka6Wka6ImBt1fAzIpUWbl
- TLSH T19A631A088574CE3B8BB406DDFF9FAA5919EC81458164D69AEC7F023D40E83CEC17B58A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3812.js
- Size 35KB
- SHA256 f030d6bcddc1a0af09fb47106faabca019e0a8fabb4acee607d8843031c9e6d5
- MD5 7866edb78a59e4f5d6fb1bdc1b37dfbc
- SHA1 2d003b2e5ce7adbeb40707bda9852e5ff30eab46
- SHA512 9feb157ca3bef9c9456e3b6531379bb889d80d47c96f3a554cd6d9cf06ad17b3c7add38761fcf897853016a908e55dcf92101fb07de5e5fbdbc12feede09b200
- SSDEEP 768:xka6gka6Lame2sNbB/H9Rnoyp3NKFD1qtlCFruLtg:xka6gka6LammbBFRoyp3NKFBqtk+tg
- TLSH T1EAF2F8AA7583F4A7078320EB443F2605F37F5A0515DBD581FA60C8E5EC2019DA6B3BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3937.js
- Size 99KB
- SHA256 830495431512a7465288ed0ecafd3b9dad6e77b24f5c78d3ddf1a6ebde2cb736
- MD5 591c92d6634dd2d21125f1efbf4f3bcd
- SHA1 be22c572f6a7efc2a9bbffbac940912229874948
- SHA512 e62e5668969879b8118a68eac0182f44539563c736a2c6b5cb4fec0b1199a23d8e7be549b5901f39634356272a626e62c4bd0364fb6321805acd9228b09f9571
- SSDEEP 3072:xka6Uka6aa4JGHVf73wbilnj8Pp5Qnfyv9w4xd6y6rjvHpkp8sX31b/UqtnS70:xka6Uka6aaA0Rtlj8PPSfyv9w4Lmv66q
- TLSH T1B8A351DFF1685DFD8045959785DCB03C27862C68A758CAE8A62ECB307BF81B19522D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\395.js
- Size 4KB
- SHA256 8f33cce183dc32de026a9a00a8dc7bd03eec428daeb5cabaaf8fa068c1063651
- MD5 1d4168ac8a429f8773d83f68c8fe0f8e
- SHA1 0560ce2dcf72b7231f4afb13cd3c7b6f5699f300
- SHA512 5bdcdbd543833c944b452f334843b98d5f0b413bb700fe751a0fb16175aac0b3d1fe80db191a81efed44d25348f5d1d38ae09ea36992607800aa8b1b8f0a78f2
- SSDEEP 96:xSVa6xSVa6YQq38bo5bYe3m/I6FScpoV9FVKovz1fFKAJxFis1Z1uSzTNlJNlOCI:xka6xka6YQq3805se3m4XFVVfosL1XTE
- TLSH T133B1A401805C8D7D8FB4029A8ABA135602CCA2477D77D8E9FFB6C4B9D2623CC91177B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3995.js
- Size 65KB
- SHA256 705dd5fad1551ebaab7e41266ece9706900e3226e3c0cc958e8e7f8c8692e686
- MD5 f276c88a3334f56ece8e7e287232a346
- SHA1 8725c37986993f853ec68016c297966ccf8d56f9
- SHA512 3624f01d752a81d8aa6fe01c15b2192b76b0ba00c35432922b5805f79ede36caa632dbff3c147453ad9f670da4c2201d6a6ffb775ca7b1a3a06d414aa032a176
- SSDEEP 768:xka6Eka6jame2sqDJ9cyVmoDduGjz/V7NBHMq3Xv4k8OSuPg2DpR4dpV22MAbxG+:xka6Eka6jamh5xtpVNtqN+owSFF
- TLSH T125633B068879DE3F46B503E9FA695E0BAAFC0219C268485BDDBCC53C40D8BDCD16FA45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4032.js
- Size 23KB
- SHA256 ce34b68d39c7415eb0a65085d362152ef3a800b673dc4a9d2570d4ab9883c437
- MD5 12cfaa59ceb793ed2497ad1ad309d8e8
- SHA1 fc3c635e15b8018f2d235d211caf39ad8ee2a8b9
- SHA512 4ed823f2c4c063ef5ad5bb46544630ad87366fe9c3835aaf9efa1e532d3609bfd4dbb7193617f41a395134158db1b6ccced331a302b3c48223489931f5f2c7cd
- SSDEEP 384:xka6TvYka6jame24X+spqHhMibEMZrMIAjTgC9Fddp+3ChoeqaE7zhpgoQ:xka6TvYka6jame2spqHcXIETgC9FdT+g
- TLSH T171B2E98C71D7B5724BA35525C42F2006B27E1884245F9851F73AC9BAB82898CE377BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4142.js
- Size 278KB
- SHA256 cef4b8e0c41eb950ff1be891fcf8ebf6f09064378878d536cccbb6838db8230e
- MD5 d85c203afc1791b834e930403a63134b
- SHA1 794b5d64657bc5cef3e2a8bacc56af5d585856d2
- SHA512 a1948327cb92d1f70aa8c386201310ec94a6ec7e1d2db105a590d6065677a4c205a5a4213becdf60c7df623c44af07b8fa16920df5e2e36933d7b5be3bd1d856
- SSDEEP 6144:xka6oka6wwZ7MiSzKO2WOV3wf9UrzceKJycJntE70YHWut/wnAUvZf3uCndVgca9:rwmKO2WE3wlneKpJntE70YHWut/wnAUU
- TLSH T15454AEEE1BB699DCB9898DDAB703140C762E827AA5058B54FF1C5D1C6805CE8F613FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4198.js
- Size 513KB
- SHA256 3bcc4ca06f0ef3f020d6385ee2ef5188f3e030bcd5992b844a7651b287320624
- MD5 b7bb9da65596777915ca30fdb882eb98
- SHA1 f65516eb1730e8487d9b2fb44ec3ca5d3a6ff6e0
- SHA512 8b40325304caef95f700616a482a4a288997b1af2b2f879d3643fca93e6ff8ab963e7288d5d740baa74f3d228f2ebbae568f4720da0969dab615cd71d3af1c08
- SSDEEP 6144:xka68ka6roIHwy4j0ieBJ0qmDaCHf3pnTEfR0blgbU1ryReiIzL9EL3n/I9/lg/4:0QySvDhTaRWlQR6L9r84p
- TLSH T1E6B44ACCF583F966636354B6802F204AB23E2E04555D45A0F63AD9D57C288C9E373FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4257.js
- Size 181KB
- SHA256 85f7eb1057e458611e3698c0b9914f95a24b273f4563d80540207553c6e874e3
- MD5 ee9260e60327a5bca4dbf0d5f55d68f4
- SHA1 ebb3836aab38714c3f9a722e7a66e91aad78497b
- SHA512 5621f0df8e1d3d8eef77742561ea190d6d0a46ac335622f4b2051fe0e66eef560c74e840d5d7d58e4a97836feaf6d1d2c195aa39f267a0905aeef9de067ad1b1
- SSDEEP 1536:xka6ska6jamMikz9mM2X84ybm6ijaM4MQvR4EZ2J8RnLgbrbwMG/gIg+K1e9BYWJ:xka6ska6ZkGX+bm6dDRRckMGUccT3enB
- TLSH T1A104198CB182FDB9666344F5802F500EF22F3A44991DC560F23AE9E428645CEF663FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4294.js
- Size 66KB
- SHA256 8bba1d21ca3c99b3ceb4772a58cb43ce4e2b3b2b8bb884c6fc3af9f61651358c
- MD5 4db10a877cd583dc5256eb0d61b455a6
- SHA1 051a271f9add9fe9059afb5c4e94020dce1669e0
- SHA512 07c4c3817ed1667d1e0e57ed2bb2edf27bdd128bdc8cf3bad2bb2c8b611b6686148e3c526916a4aeb3933c57f77761d0d47017e36fd414c613060c5c30753c7a
- SSDEEP 1536:Vka6pka6LamML6PJWOJqqnL7Jyso1cQCrE6PTiDM532BEA12qxf1hTTTgGzNRBV:Vka6pka6YqK6PmMgBxFP
- TLSH T1646309054FBDBC3A077943E8EBE91A0A34FC036153A5A96BCD794F3402D43DDA227A59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4398.js
- Size 68KB
- SHA256 89ce7e4ed7e795306e034b5729eebaeba01e97b26972b923d4cc95aa99ee4cbf
- MD5 64e3b1ccef8138c15afb0521fbfdaba2
- SHA1 6ebae06b62aa23d40acbf8d483b5632b931f94a7
- SHA512 bb75d227f0269a114ce8f946e7ec1001bcf8e55960da7c666cfda933549f3a80246878ea586c308b6f96ca7adc95ceee23e6c3dc9152ed87e11546f056d223b7
- SSDEEP 1536:tka65y7ka6tamMYzqZ/AZugnUZ1/nNkBLf66wmZojab+uJKlmt0l:tka65y7ka6jBuitBLfk7h
- TLSH T152635D008A77DD7F473443C9ABA98A66D5FC02448AF16876EC7EC33EC0A4BCD9067A55
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4547.js
- Size 52KB
- SHA256 de2b0adbb72fec4dd75903465ab20338f88e101ddd92260d5a1fcd08b955244e
- MD5 be9cb61d18695dc342d1330cfb846dda
- SHA1 18a578e56a4cba92f22df56ec339b726a0e511fd
- SHA512 660a243b66d36f71e201a4c22ef0aa8b2b7e193580bec2782e29138deec0c68ba261ef847361d325a7eaf97f7b54c37a066c81fbb3a82f34899153422317a26c
- SSDEEP 1536:xka6Eka6jamMkLx1ZU2Cc4rm6qVXCGgTWIrKL7WqpmpOvFxC:xka6Eka6bxTUNbABGreQ
- TLSH T1DA33A69CB5DBF62B4393A566501F3046E26E2C4020AE6412FB39C9E7B82440DE7B77F5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4583.js
- Size 69KB
- SHA256 d274f695de4316fdc9422354db89984713808617b4d58bc75d594f7b54c1e5cf
- MD5 c09621bb836aac4ca919ec1ad4469bb5
- SHA1 21b0fd0d65215938533ebe651ac6a4fa0c8f95dc
- SHA512 7d09eee5f40e2c562ab12efdf7359034a77f88113c52d85b073e649d972f2091b6396ec092591b19c623b2c6900fdc5a68dd3baef0265abd5324ea598f340742
- SSDEEP 1536:xka6qka6NamMROvkG1yaomFbaZxKV3igEmnqJAsOzkZ6bf:xka6qka6f1ynmJsqzkZ67
- TLSH T166631A1589F85D3706B643C9AA57FA07B2E4C08846ACD467FDBF423C40D8BCDD1A7A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4669.js
- Size 65KB
- SHA256 f7f4e54fa44d92dbaee73c911312bc78a7947870e2f8b7269f7df2a7b9598d31
- MD5 84771d0c69cc9557064d1a9e02b73ef9
- SHA1 cb0cb37e67bd8c250872b960c56cb81da58efbef
- SHA512 5de96e8cf89fe93977eb9465cbc8ffc3502bfa6e9b8c6910aa9be1a3faeb1f12a73dd2f999450465d90e4c215bd0d2a33fe963d77f75e205c73308649f16ca16
- SSDEEP 1536:Vka6lka6LamMYvRd85mFaKswGqellk65solZy:Vka6lka61Rd85mWVyYZy
- TLSH T1C25319064EBDBC2F0B6843E8EAD9690E39EC03654798656FCE798F3401D43DCE21BA55
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4699.js
- Size 206KB
- SHA256 21f743b690d8316c23b61415115b21818dc28220bdf4beee82b26c9ef0e6e465
- MD5 af5c690c20be3c429c42fd41e13a0185
- SHA1 fc47b725c89f7aa39172a32c45bef97d7db3e342
- SHA512 d95aa47f467326ed2de700378670ec0bb25cea7b15150dbb2c3dcc1fc458107ffd37687fcf7f00deb2ff5ad2fcadee6b3c74a0397d030649215b1fb8142749af
- SSDEEP 6144:xka64ka6t4gDyjK2FhS0TbmO+MHpe8zEsm9wCcGFZT:2DyjK2FhS0TbmO+MHpe8zEsm9wk9
- TLSH T1C9246CDAB640796917DB029590EF5005F37D2A47A05D4074F3A4EDEBE032C89A2B3FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4730.js
- Size 110KB
- SHA256 a959b0057aa3dce05777621123b7d2d25b64ef1456ceb6aa175746246ecf37e7
- MD5 91c3b9c5025c74d50a6d63960a428442
- SHA1 7f086696f3e900f0d16dff28c0dbaa2f80e2290a
- SHA512 7dad40af0d421057d3ad966ab4d337e5646201cf18ddf83b794bd34f09594925b8e3e3ab27bc867510db541f29ecf0ba5e49d4bda8554323e7b2152721072bfa
- SSDEEP 1536:xka64ka6NamMIPZRqMlJV6Z43cSCkqkEcPCd13h5MGeEJLB8YHZjV:xka64ka6BRqMZCkCTh5MGjNB8YHZB
- TLSH T1CEB3F073664FCCA875041B4F692E73896679AEE53F72F8D084C9152A62F4709C432EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4829.js
- Size 92KB
- SHA256 90955651290c13017942082dc21cb843fda462039cb651602b7a3ac0b4986a82
- MD5 17df19664952f066e152b0c8ccbb662a
- SHA1 a1835e6aa5c85214f328fb1cc76a6e29b28e0bd6
- SHA512 d9c25f7f8488a23904775cc24640e0708af4ad42cc68bd1c0e97efddf1806088f3dd72f662c04ef4bb2d3bf1afdf874cebc4da7fe689f8bc64e90eeaa1f37b85
- SSDEEP 1536:xka64ka6NamMCIhAOt7dKVeIn+cfumXZwCY+P9EIkJFaC4uLLYGuUl94ynaY8G1h:xka64ka6CAO+VeIn+cfpwCY+P9EIk3jB
- TLSH T15293341146AD78AE0205B05BDD087E0E3AAB45FE3F6B53665D742D7E30F2278C23D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4958.js
- Size 69KB
- SHA256 fbb281fc555269c4704f706fa532078f3cbbb89a5c10d20dc9a68efbc8ff9356
- MD5 7162fec79dd998211536b311069c7f81
- SHA1 9314b6b49a4dd6d2c9ab1deff4751b69d488b07c
- SHA512 9c43a137827c3e130074a8970621e8a474c33ae426227b236f2cd6255d8a5873fe0d22d51692f392842108750a601bb8b7251f88992fd705647d9b2bbbc75f57
- SSDEEP 1536:xka6uka6NamMdAQfIy8jdx9ZZjkniRlZZ3JBwmjWf2Co:xka6uka6AIyMdx2s5jWf2b
- TLSH T196631A118DF89D77067643C5AA57FA07B2E4C08846ACD467EDBF823C40D8BCDD19BA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\511.js
- Size 111KB
- SHA256 330897ed8cae2537b8bc642db9603a5e57c776d088e513173d9bf2cb5cf8baae
- MD5 969455f0cf9c0c4f40ae67abca06d9c1
- SHA1 68a4803539093fb1abeccc30c8b80b8960bd5dbd
- SHA512 bfcd0ec68b88fd5e5e36cc4f6374a15ca34f28125b48f98bd300922155af86bd5870931c7e3f6a67152b61309102063726df2f4f05d9a5e0512037e222576376
- SSDEEP 3072:xka6cka6PZkXkdJ7nMtK0A5oZ0JPOQHgciUFxdP/SKo:xka6cka6QtbAw
- TLSH T1EBB38D0CD7FDF3B60DEC38CE3A5C0D3B899C327453E9416788A5B3EA8458DB4556A292
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5336.js
- Size 62KB
- SHA256 da8f8ac243a06fb0aff3c74d859159a3eeb38facedc8b26c87f3931924a7f165
- MD5 95a5ff31c92021a6aafc6fc980370d8a
- SHA1 8a2885c183c17c46f46b634ff5c8ad7b239da299
- SHA512 a86bc3c3e9c3a2e6372f20d9cf24efe93eb721742f8be033c7584db250b4bb3da78fe8465a5a8c85dd204d5f994a2087593709bb5a955f870a9658d190a2d956
- SSDEEP 768:xka65ka6Xame2sZf6prNmcTmeevCh4aVvL+6RFTOfETTUgzYnGBAqUga5fzCRv+2:xka65ka6Xam8MrNmcTmKKaV66R2PfCyQ
- TLSH T1F3533B1EC739AC3B07B603EAFE9A664677B4005853A41476ECBD813C01E43DDD1ABAD6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5345.js
- Size 89KB
- SHA256 ccd100d5ede7e4c384cb66af7be82af4263ed6a52c22ff93d498c99b4d2449a9
- MD5 cf1658c7029ec02223eee47c7656b0fe
- SHA1 9d6f9438750f22ab397f22ccbab08b834561f371
- SHA512 00ffd15ca6740184e017a609fb2024d93f605adb6f60b03429ccb528dc0d76bdd24f2af5ecd971cb913b3394757bb9cb2e1003a1169a8fff0b3e1bfc682f1d3b
- SSDEEP 1536:xka60ka6Lam6cSEJO+b8b/+mSpL70C1obsMkJS8RMfRQZbGskby6fXI76yhR+:xka60ka6xv4zhSpL70gjp0skby6fXF
- TLSH T14D9308DA73D2B07213EB0271903F4106E3BD5994144E8928F668DDEE7AA505DE3A2F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5570.js
- Size 61KB
- SHA256 7fee38050c373f0ba090f96f34bde0c3c860694ce512c96892af047ded7cfb17
- MD5 e11c4959ab5bca89e970095c599dd769
- SHA1 89d26984417ca953e278eff47d2683795df9ecf3
- SHA512 02a03b6fdddc56f8ccc786def784e12857c5e7dab92eca0f4ef6bd3e2218f19df5c9932efa35b2aa4d695c4658fdcf0c9e855d05b7856e5bff2c01d6ad06d72f
- SSDEEP 768:xka6Uka6Name2sW4uK0smUFp3Bsi6YdeaHPbI8038ot2tXaATIf4wqs+MT/zNts:xka6Uka6NamHSRGWIVt5+c4
- TLSH T103535A1047BDDCBF012A43F89F6D651A61A4138581F498A6EFBA8A7C49D4BCFC1D2B13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5649.js
- Size 79KB
- SHA256 a43637a97132c7790251dbce024ab5e10667cdf218a28e80b04f7bf05f89d0d8
- MD5 7e3ee8cbb86a7bcd17c4f311b981c84d
- SHA1 31b6fd79d44998eea548f48d869eb34968689920
- SHA512 45a56464296ba83058b2c0f99d3d180b6d85a67267ca2ae01a449b56aecfbf0116b91a1cd6af4dbd81ef55a69afe6788c66496eb434efe2292a62952e7099751
- SSDEEP 1536:xka6gka6Nam6mmsAfQhP6aT5ETF70ig46rL:xka6gka6QfQhP6i52w+e
- TLSH T13683952CD3EA9C3A8A3543F65D1D36C170749C9BD9A639B6893EC03899B07CED141BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5907.js
- Size 62KB
- SHA256 3ccce33aa210bdee42bdc6bb13794e013f5cd5c25e6a4e93929657638dc3f0b4
- MD5 3dc2889ea6527351d6f360bd4984b65c
- SHA1 b0763bb565015a6a3482dc649b1692749d78418c
- SHA512 a593dadd79ed7a401fd197e9a411dbc7d7defebf3c09c0918ba05ecf73eb16b361c85f4c8984d1f5e317c0ec4a0438771d4a621f3a0ceb856fc2cb4937c0fac4
- SSDEEP 768:xka6hka6Xame2sRfJB3Nmcvyee+3h3BVvLikZzTOfETTpOjlGsrACq+Sdaqfe1ES:xka6hka6Xam0j3Nmcvyq1BVGkZ9/GctQ
- TLSH T164532A1EC739AC3B07B603EAFE5A660677B4005853A45476ECBD813C01E43DDD2ABAD6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6046.js
- Size 61KB
- SHA256 d89d4425183ae5a30ab20705b1e82d4389afb262c744be67b3feeb411632222e
- MD5 3de4dc73fd4ecc14b9f1537ca15898da
- SHA1 029dd6363249d8bd850ddceaa189f5419f7d0907
- SHA512 d082bebd5bbf466fa0412401dd910fa6cfc5b4bf72419f567c491ba80b1c2bd1784c0483219c3523adeba446fc9b94b56509982fa25782cbfc63057f674789b8
- SSDEEP 1536:xka6yyUka6NamuxN0AquBBRJm5w4xX5DRxWu6bteETn:xka6Ika6cNJqGm5Ll0zD
- TLSH T15253491487BDCC7E0126A3D8EF5D150750E822888EF9A877EFBD867C09A83CEC1D2556
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6166.js
- Size 91KB
- SHA256 5fb161b3771b70e4fd4eb25e5aeab460e031150363c4d0e79f93316c0c9fff67
- MD5 e246571f5c410c1e1599465e54028a54
- SHA1 5cf0fef1b9c404947539405a13dcb3fb16eb4ad1
- SHA512 27315d724cd99816d111ff3f2af83ef8c60677bad302d092ce9fe2108590f330ca14808d626fd079f9e5745dd036bafca7a85e3334f96d82688086433255930e
- SSDEEP 1536:xka6Eka6NamY3l15dLZQZnWgyMQYsdgWEFK67xF4K2le8GuJ:xka6Eka6O15oZWLrEF//DE3D
- TLSH T1DC9346618AAD98EF0105F05FE90C7E0E3EAB01FE3BA6435259B93D7E24F1164C639719
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6260.js
- Size 66KB
- SHA256 c261e191c92d5fea22e6aed06a76ebcf63957bea4382880956384bf6377384a9
- MD5 cb69f76865e20eeb75a13c722531d86d
- SHA1 1c46abc41cd12d2ecdc2946739c5ebb344304402
- SHA512 0b5fb4bc66de90449decd1f167e1534e3fc0cc02919c0b69a9d0c6966ffa4b9ac46869fbf3058b03629b06a765501c9ba10e36326cb4e7f78409e621e23afe0a
- SSDEEP 1536:xka6Oka6Nam7hzvvafWasp9u4knFK4lN6FKwIK2NrF9Kxuw:xka6Oka6FzvvafWasp9u4knw4lN6AjNg
- TLSH T15C631A159ABADC2B06AE83D8FFEA5B0626FC018CC5A894B7DD7F423D41D07DC81A6509
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\630.js
- Size 73KB
- SHA256 c2fae08112fb3d9efa1bd4132ac09d35833a1e279fe612625f447565d2623b0b
- MD5 3c376c08d856929ee698ea3fce517eb6
- SHA1 705cce6c1f101a22367e398e471f4a1f1e2f8337
- SHA512 11af9bc23796779738c314ebb813d59d2810d5c6abffe1b334138251ad6276e1a3a081a6ffbd418db3d5db084e7902fc2578b4b41e29d1398149d779d2dc69e9
- SSDEEP 1536:xka6Ika6jam7Czr5dLVVY1MIXDQayasq4KEMcwBAOY2eiX5TOm/K1rol4c6lTAUs:xka6Ika6FC35dLVV6MIXDQayasq4KEMd
- TLSH T10E731B0ACCB46C7F07E603E9BE5B730791B88145E2948810EDBE467C52D8BEDD1A7789
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\649.js
- Size 11KB
- SHA256 23e179dd962c393d749154f17f119c0e22d93fe72c99e05ebfa68b104cdb8da7
- MD5 9de532c68e2e0abc38e0436782b0e673
- SHA1 76549c6b57220d692535352305cc7d8d195d6fb1
- SHA512 57aa62dfaaa45a1fec115f424c6f362b1efcdfcb65c511d3e5a54ba16b02b5cfaf68c78cac63c6c903cdea5c3013622ee59668ba42e2412f0fac63e6c48cbe1a
- SSDEEP 192:xka68bka6Tfq3805se3m4XFVVfosL1JoGC5+GLAIatVQlGMAUrzVgcOukyeok28j:xka68bka6jame24X+sQGLuVggGob65kO
- TLSH T10732A489B19DBC754EB21299807F5206F2AD7503287ED4C0FB52C4F4ADA13CE8127E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6589.js
- Size 58KB
- SHA256 98fd6afc9a03038ff4a889d8a05933108c21fc82843afaa303dc30767ca96571
- MD5 003a18b7c230e57820eb3d7f2ba4b2e9
- SHA1 1ce56618aa697c3431137a4e01686c75a03c22a7
- SHA512 19cfa58fc657397630dd1b415fb5cc1f85bee022e6368cb4512a195fc8142dd5948e9b087c6467aa188c6be277de06de22079913af5870b7b36b05888895486a
- SSDEEP 1536:xka6nka6tamUS4Z7fpmgT1IobifCqOXpcs:xka6nka6MS4Z7fp3R2OZcs
- TLSH T10D432A89725B76A747DE408564721305D33A9A856808680CFE31BFE7E491FCDA2EBF31
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6699.js
- Size 367KB
- SHA256 e98af2f31c91d108e64f21cdc7ab1f7d54da0dd12a8ce5e3c47cb0b5bc32dc1e
- MD5 85dc4acb45a078fce60d0c3b3ca3b8d1
- SHA1 45db69224527c2c0f0b1758a650dded48edf5a60
- SHA512 2ebd689d52f0c97a9e3c40eb1ae53a967e7ae552ffc96fae9d61fd8a1a1a3e9ba5ccadbcc0309e1e10173594c85378def899d45d38629a60080ab70ce7035061
- SSDEEP 6144:Ska6yka62p12FURy9ZHzimDjSF68RCF4PbU0h00duzaMNl/toSB29fqhaDZ0zbw7:rcyr/cmtw9l25u3
- TLSH T141842AC9B292B02643E760A0507F1107F23EB919548E4868F398D5D66CBCD5EE1BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\685.js
- Size 68KB
- SHA256 0b3c32c5228913a3314f9c8882ad13f2441aed379f0aa08008672acd9c4bbefd
- MD5 0c145cddc792ee0c4bf490a5b894f02d
- SHA1 f15da22f4a424755449bd92818dd781095e52048
- SHA512 a708e95d45f2cb3304e068e2c5957de322ecf957909eae000103f3f933e7b4788243768211b4a142289d3f9292fbdb31696964ee596569985c2ffe9e7e8cd6c8
- SSDEEP 1536:xka6gka6tamhDwT6UV+PiFH+IwsGFenKZmLvKglkfDGDh4u6jX:xka6gka6pDm6aWiFHryFenKE7KtqmuU
- TLSH T166631C2589BB5C364A7B03DCEB25B106A2B844CC9E98643ADD7D433C12DD7CCD0EE65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6980.js
- Size 66KB
- SHA256 ccb2eefbb03a1349baf2735c71e2a47b8ba7bcc11046b32f8b52dc917077d83b
- MD5 3079c8979e6034dbba8fe3fff238e9bc
- SHA1 38b6150e211648a81499ca4f08e4d8f027f30db4
- SHA512 fcac884532abaca15a2957734c5b79e53f6c6239aee53f994406b503b7dde3e8e1fe06b7c1071a70475069493f09007c307d9bdb386c9b7fee1a75c6bc7b2ab1
- SSDEEP 1536:Vka6Eka6tam+gHV+RDl2CVMX1udGTMG04e8Fx2CX104:Vka6Eka6y2b42Mme8mK
- TLSH T11963F8158936DC374A3943D82BD9AF1617EC469C467A78A3DEBA2F3D01CD3CC815B90A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7090.js
- Size 69KB
- SHA256 603c81c90a555aa9afcf5b745b211a56ad71b758fece144cae590c5114078ad0
- MD5 1f1bf63380fb0fd357ec7fd95f120432
- SHA1 58f4891867470ae4906dc47e6369daf1b09c1c94
- SHA512 d5274764f387cffc78fa7ea72cfc5a291cb1c08e8e35d7a60fda05e2ec761f6497200af0fbe18c31a33b2909f311235b75bb5ed873bdbf1b2faee868b2403750
- SSDEEP 1536:xka6uka6NamcCC1Ez30+zZE3rswNPmWA/bRO1OGQ:xka6uka6RC1Ez30+ze3rs6Oxzo1Op
- TLSH T16563EA098EE98C3606AE03D8FB5BE603E2D8C14442ADD896EDFF463C41D97CCD16B659
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7103.js
- Size 69KB
- SHA256 99824e3820b75b6578f5a3723ea1678ff974f94a08b9c6d9a9d6ed05632f1aa6
- MD5 0e8fcf22fd1a002c24c82f5f8025e39f
- SHA1 424a3ee76a4b1bd40634a60d294a00845eba5663
- SHA512 cab76b68f1062c306a362535699de9e7164952410b191988558402d47bb0d052c7aeeec7fe274c4b217a35417a79c402285de3a48de460b0268bb5ba3eda94a7
- SSDEEP 1536:xka6wka6damZLe5Z+/p6SmV0uw7b4ceNBFtRZS:xka6wka6fx6SmV0u6bONhRQ
- TLSH T12D6309128639CC370A7503F4BB6A7947E6DA02985A9890D6DDFF857D00E87CEC1279CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7219.js
- Size 76KB
- SHA256 39e9a80f5664089505dc8d9d7c39de7cefacc89b6d129b55f1213dcaaaf73584
- MD5 5d6c74f3ed294f286b68871185b46e5f
- SHA1 3b58210a8f371d239825fb763f13333dee6a1ef6
- SHA512 da2d14f8ad58be01cf28a9b6d44efb109fa72605b02ab016b6389b806298afb4e352caa629c99dbef3e9935d41444c50710be851c4dac38ce2a2923c1f7e8c4a
- SSDEEP 1536:xka6Bka6tam5wQ6PQksjC2ojUuHh/tkywLmrzvLw37j+wDR:xka6Bka6CQUD20Uijkyw0jjwN
- TLSH T11573F8008C35DCAB5A3453E99F9E3507C2D8E248C7516866FFEA887D9594BCFB013B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7390.js
- Size 65KB
- SHA256 613e188d006e9dab60cb13ea7920b20f224dd9d46aef12cbf9a31f7740ad49ef
- MD5 b5174a6ea1a99d3de8993bf105fc6674
- SHA1 64f6d2144d88018d3311afaf88839a728498a297
- SHA512 605a382a11290fa1219bfb49511d4d3ac5f35c9c5411e1579c2bfc5e953bb6fe49473812dd42ee81a688f711d4dd112449fea17a29434dc5e1ec46c7a6adbcbf
- SSDEEP 768:xka6eZka6Lame2sXG1vr85y2oHV+/c6oRq1JUiKyFMlExeiwxHqDX59jHWP8FbtL:xka6eZka6LamXmoqzyEIZY8MgBjvTOlp
- TLSH T1CC631802C879EE3F126A43E9FD696A4B5BBD4109C2684867DABCD43D00CC7DCE16FA51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7565.js
- Size 40KB
- SHA256 072db223b760c94690519124132f26fb86b927cc67ee0e5e514f9260ca2068b4
- MD5 e2574557093829ab8409e4c7cfeba24e
- SHA1 99754907d00302b37532ca63f584dfdc26146c81
- SHA512 fa2eaf7a204ee81f182c5386b6aec536d4384139604b9346fdce757413689e428666d3d60c572503f2ae09446fe412ba2752986b20c5a50bb174b732c135be97
- SSDEEP 768:xka6ska6jame2sqMI9186GCDOIxDZGas0/pJSWJLWMupD:xka6ska6jamlNs6fHhXf4V
- TLSH T16903F78D7ACBF92213632424D42F6102B21D2D45254E5E12FB2AC9E77864C4FE733BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7615.js
- Size 84KB
- SHA256 89e232d294822b9ffbe116a00323c79faaa3e8181b6d4dbdf4f3763ea72c86e0
- MD5 ef3254b997c4a6a7cd537b140014e87a
- SHA1 b97b8c91b353ac69c9fe846a24b5cd78755dba6e
- SHA512 b15de6af2e8b2a4b53e17dc5ff940c46bcda7a7d1a289e92f5146df9b77b37fa742e2312382b275e0c0e8573e51814767da59e4948c5e8807ab0edb665acc2f6
- SSDEEP 1536:xka6oka6LamHTHf8YuAiaCiCuweFS5dNSihoGLDIg7EYkYTTTn/9M2r9ZWjI:xka6oka6qYOMFS5CmEE22r9ZWc
- TLSH T146830A8B72E7FD365BF6016660EA0202F76C09581C7D4824F69C46D1769ACA4B1F3F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7755.js
- Size 545KB
- SHA256 bec6d041ac5b9b3c0e26d51b2deb2b257c1f108846f6913f657ddb2f2a1b8113
- MD5 a67a8d626e05e4f2cc6fccdde05689c2
- SHA1 5ee1a8913f80ed4a864711adbab88f6ac89ed7a2
- SHA512 46d359892f24cd646bdd0f5fd2c64e6b6ffc5eb5277d3f4f36c165362a56e986b7c31791cb23d97a3e41bcae2700f76dfc6102033a98b784e50e304e3b009343
- SSDEEP 6144:xka6zka6DUJDvow9WQ+o6VbxHXsrzFAE2dmZ5Q+N4gTPmF:iN2k5Qy4gTeF
- TLSH T195C4D523B1834132F527067F30AA919EBF7C7002E6189969FB99C1A18FC9BFD6197711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7946.js
- Size 69KB
- SHA256 dc16c8929b9e7c7d8eaeaa481804f7f3ca5b7ed28a838be43a4eb1f37e04d352
- MD5 5c8803953449e17652d2b366c3bc0fe6
- SHA1 a33927bcf722e1e5d153d755eae29a452435de8e
- SHA512 8013901b7dc9e6419a9fdc2f38dc7c847311f5b88b5a636d6df08b8ea16cec501c1166fbd4a30414c75bc9bce6316b36dc72eed76d9d2985571b02a132eaaca6
- SSDEEP 1536:xka6Hka6Xam6jemTdqeO0bnuz0r4PNQStcWO3R5F6WmqLCFbr:xka6Hka6mTdW0yz00Qw4fF6WmqLC5
- TLSH T16A633B11CAB8AE3B47A213D8AB4AE707A1ECC14456A4E466FD7D063C41DC7DCD137B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7997.js
- Size 70KB
- SHA256 2f4141b7f232b0da2c6885498f0c916679c2aeb26d93d021547b90b24d935186
- MD5 cd36fbccf64546e6ce39814c486a1150
- SHA1 f54ab0a4943f7932c5ae5c2344678cbb3365d977
- SHA512 33f2fa683339e06868fbbce8f590a125d272eaebaeed47fe62e2cf404da589b440469deb9f420f971ed7d0f6ff5cd06d53a424e4ec3ca65d057724960c9d7f73
- SSDEEP 1536:xka6Rka6tamRDUXdSnHUc8ZtpU9QyIrAUinSIVSp:xka6Rka6BUXdSn0c8ZU+rAUinpC
- TLSH T124631A104A36DDF212B583C89EAF691FE390534981544C97FC7BCA7881AC7DFE523A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8122.js
- Size 8KB
- SHA256 74eac130c6b456b6ca32e8d5d69122c741b2e4b98e3488f669876c2a480e55d1
- MD5 a45c209ff3df9678e8801939fb988b95
- SHA1 bcc1613b4ec68b463478992a69d3df6376ae6a53
- SHA512 d85067a33aed4cf120003df88f07355ed53aaef7143c76e5d7eda4c3c400db0a4394f65588afe407bc99232781064e1e3f0e97652d73c57265dee4ede168ce80
- SSDEEP 192:xka68ka6Tfq3805se3m4XFVVfosL1+oKPP3HX3mSO/Awqj3E/w0r1Q4N61iLyjU/:xka68ka6jame24X+srOwxl
- TLSH T14402C910A1185F7EFEB2017F40BE418D52ADA204ED66C8D4BFA6843945977EE7203FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8242.js
- Size 749KB
- SHA256 d3b03bb49093eb3829d9ec08bc942409edd5625806c361667e932a1a0341704a
- MD5 8a0be0e63cd267c4a57bd246882b381b
- SHA1 e481a386c5affca8fb147319ea26123c3d50087f
- SHA512 23585f8f66d863a24430c85dc530b292643e2da07bb65d61108b9b4d85bd5ffe41ffcf48950ed939f82c301344c102b207512cb810081488df0e394cc8311860
- SSDEEP 6144:xka6ska6dRXbDp/5FRdsHIh/z8Glz72XD3M1Sn2+1G/IKItzM1ApkEwRyObrFWlq:sRXbDp/L77hgL7KIF6m3dzi4K7/GO
- TLSH T182F44BC8F197F96D556398F1403F600EB27F3E449A1D8590F339A9C92828489E673FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8319.js
- Size 27KB
- SHA256 d71b842d3ef7ca903df5c4d133cb2e9aec9cfc1f2331d1d05eb0b361b4616679
- MD5 9d29ed09e76abe46ab3a04167834fc32
- SHA1 2f8b3bdb8c42752ff47955e8ca89218695c9521f
- SHA512 4c64a0aa8b95be96c501b34284f1df53ad9b5dfd42e5b076abac3bc74807a5a87f102d966b91922cdf43c9f717476c0ed04d6aa1f7c4e27ea9af7b65be957a05
- SSDEEP 768:xka6ska6jame2sXsjBmQisdpjHj/b2G6/CrrpUkPuKz:xka6ska6jamnhisddj/b25/CrrpUkP1
- TLSH T187D22AD2B2D9B8B24BF6029960BB0102F2AC4815147ED8A4F7E494E17592DD9F1F3F39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8345.js
- Size 69KB
- SHA256 102fae8be55e9e4beda3de4adbf291237112b4304eb3b4c961392efa54883701
- MD5 521b2e6f873f6ec33b8db5d6adf1273d
- SHA1 34847cbcef579df77c06ebfecca13b414f2e7454
- SHA512 42ddb5f1dd843f3c910541b1a1bcfb09bdb443ed995c7df99727ac637defa0f537bfbef4c046d46567f29886a5458cae2eaa0b98d4106d11dc792043428eaa6a
- SSDEEP 1536:xka6uka6Nam6WsYEUp4IbuQIJHuy6Q02v39B7jxtK7:xka6uka6TsRUpfbuQIJHuy6Q02PnHxE
- TLSH T1AF632B118AFE9C6F076A93C9EF5A5B0637FC019CC7A899B7DD7E453C10D03AC41AA609
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8395.js
- Size 70KB
- SHA256 d1555d1b417dcacb15136bd77613a28dfc5b9eae7e8b8daa0409d0646d4a6a8b
- MD5 37b6978b674b4aef71c9c8ffe93d8b49
- SHA1 e0884cc3dae3e5b005a674d317f61973711d35c1
- SHA512 006ccfa4a271198457cc7dd4a46469c6584f462a3b9b9f36c41f5f2291167dc78f25a9cbb518993e8f0c85d7ef930b8c8e8fe1e83d7c341d7b5a1820ff65d38b
- SSDEEP 1536:Vka6/ka6tam7y2wpwpxn7MV/mleprtBH5r/2wJuQX5DA:Vka6/ka6Upwzn7MRmWTZL2wJuUq
- TLSH T13C6328159B345FBADFD943D85B645C2E32E410A83B84A86ECFBF427A43EA6DCC171442
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8671.js
- Size 70KB
- SHA256 56ed127ce00939e95e640a68763dfa8be07260d15022f32eea9dd2b988b0855c
- MD5 7377bf52e24ce2a8e12c7c176f2e9de1
- SHA1 c1d458caa860af290aa2415e59f9beb007c0ea7e
- SHA512 974000a0048025a298ad793e3d6b8ef8f166a1cd8973a2c27f242541699ea6fcd8339522d0e4d6109ffb009157a70fa7b9e4423da518cef571b49700d975f609
- SSDEEP 1536:xka64ka6XamAAhU/hvFPEsB8Z0V52eODoP2yQyczLT7QD/x0SiyQBOu/Gv9U:xka64ka6/hahyVZ0ZOlyOADUl/C2
- TLSH T1C4633A12C87AD87B8BA663F57F4A9D0F7398435682946462D9BFC13F008D3EEC16B650
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9025.js
- Size 58KB
- SHA256 77c5d3d978d21c5fb11084f04d2593fd4abcadba21e90c9c7e65a46fdb4b1fc8
- MD5 188d88207061d39c67930b0ba446dd61
- SHA1 10a05440beefa4d02ef5a553e3ec7e70ffd8f216
- SHA512 e992d4724b024c2248be9b5c2bbd2efdad2f76d0445f1781bbfa3ee23b80b5c02470a6ec276b13847e0e3c3fd494e8cb39c31a18ba1b4ed21470fbccbbd82ea9
- SSDEEP 768:xka6Jka6Xame2s7gIVETSbZd77dXP4Y6uEw79JdkoX6+ALaQM2KZmzyRPUI6N/A:xka6Jka6XamegIVETAd7xviaf2KZDUFG
- TLSH T1FE43190A963DED3F04E502E9EB4DA90966E400F842BC9369DD7E5F3C45D43ED836B982
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9028.js
- Size 71KB
- SHA256 babd1347ec20562b6e57fc0ff095577e824b0077a133b40bdc10d233ee621ad6
- MD5 8d9c9890b5b458e4cfb8aff2d7a7638c
- SHA1 adb9c5193b48738743f90df7dc213af1ab18832c
- SHA512 12013fbdd511bc5dd549b15166336f763880d4c2d4e1004765ef2f53e443002f929dd46932f19b4f97365133292d627e58c2602e952d3b49ee864afe3958f810
- SSDEEP 1536:xka6Eka6NamMcg+/k6OpDHnykbHDr4uVK:xka6Eka6wWOpbykbjr4n
- TLSH T1BA632DD199BFEDAD049286C55EE8F90552D092E3D3670068DD79CE3CC8A47CF404BABA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9135.js
- Size 24KB
- SHA256 246546df40a3df3c709bfe74fce86e73eb3b5feddd79f4a1ee66b4a8b23c9c92
- MD5 00376a59063ef329b614047794c6246b
- SHA1 ae2528150887cd5e1ce2756c920442d273de05dc
- SHA512 8be4d3e53cc75cb41d2432899617435b06932155bb6d1c21dfde97f2633cbbcd63c7c4202563c78d6ccc9fe530eb4d75953de05a9394a60872577a6cbb243e1b
- SSDEEP 768:xka6Mka6jame2sUsqIakWPp0ypyrR9JB2zPZTbhQv:xka6Mka6jamXsq1kWh0y8rQbev
- TLSH T1A2B2FB5A7354B0269AEF4217D03F020A72781145EA0F94D8F6A5C8FD3D692E96237F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9213.js
- Size 331KB
- SHA256 8907e966d66be4d0c7d44102c7260a37067b4d6d9a20a2080f3fac5756b3fe0a
- MD5 bf3a247f8d807e394fcaf62e581dc4ef
- SHA1 b2635dfb08f2d7f6d2118015771e74fc1b6dc50a
- SHA512 0b4765371cf497e8d38a3c4a20a8f2c54e73e5610b659087d4f423cdd66fa48498f82baf1b406c03e0af39e576f9ea890f67bf47427a4a6b75f399f2a2109fc0
- SSDEEP 6144:xka6Uka6TbxO2uZf4Yi9ZC087sOqJLtwsMIQSfIn1pbYd6bUf:gA2gmtS0dgUf
- TLSH T18B741ADC3A96F16197B212B750AF1407F37D291A280D4860F210FCEBB87495EA177FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9221.js
- Size 16KB
- SHA256 0117882839ba08237f8fae9352e12a033d472ebd8e59bf4886c29b70e1526593
- MD5 d547e8f77ba6550c540d868ea49efc73
- SHA1 60fcf73b54cf347db5b3e993644d8603d41b5506
- SHA512 8450de170da75eff8d8f3d703485bb887d39de72f1a731eb944d3ee1a5b1611c8ebdaa744a5e2f5d041796510773644054980e21d7e8bbc42dabaf1d42f3d9d5
- SSDEEP 384:xka68ka6jame24X+sKl0+zd5Y791sRuQ1Q1oFkDbEq2g7DcI2:xka68ka6jame2sKl0+zTM1sRgch
- TLSH T12C7208846186BD76E7A34216983B0105A27E3514344DC068F76EA8FBAB611CDE193BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9432.js
- Size 70KB
- SHA256 20988874be16ce6d45a36481469b0de7393ccb75577b14df2b99d1fab8e38e33
- MD5 f8bdcd2195501fca4337a485e59024d6
- SHA1 1b3bef9f4de508c53d4561ef18b757b856b9ea2b
- SHA512 b35d57412a5a0cb37e84f56059f18753112f4e17942c0d112fd262f9338bc6b755c8a0606bde381ee7d0f26342b4a081e27fb6a6135c18987ccab731f8e012aa
- SSDEEP 1536:xka6Kka6tamqbwJ6GtTJkgPTFkdq0mZ5qNL3MfdFjQWMWZA2ePahO3RsqZCMaCc5:xka6Kka6XJXFgq0gzYR2OLZCM6
- TLSH T1446318194DBA8D3B47BA43CCAFAA5A4152EC508447E5E862FD3E023D81E87CDD277709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9460.js
- Size 52KB
- SHA256 b9491e17db642268455953b650580d95a9247db131e890734b4c563113071beb
- MD5 8e7e25e672c25943e8ed91ad7856906f
- SHA1 7da0027050cca6723c12c2519a5cc01724ce3c86
- SHA512 d48c8628ebe53fc66b3bc3d1ba67d2f1812ce37a9269b216c6b7488978c74de8c15e610ad964822d1ae3c99d1f38f791f7303eb8dac849750e1f1a1368101785
- SSDEEP 768:xka6zka6tame2sg7CnoLxEoSmk+4Ks5Lg5iZ5BSJ2GFOXluwHeZYsg:xka6zka6tamXWo9x+va5iZ5KOXcjng
- TLSH T19C331A8932AB76A747DE40C564720305D3699E852809A40DFE707FE7D492FC9A2EBF31
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\951.js
- Size 92KB
- SHA256 fddca854f2cf2e97823530abb22f16f8c3da23e70ebce241d59f5e8a4f51f28a
- MD5 61e415637f1d318f6d34175dd08ae579
- SHA1 b3c97a75651c44c0993290fddaadfede6e2468d5
- SHA512 17e9c9cd54b64f5081153ce71e168e47bdaf0f7cfa4b68ba62c0b7ba3fe84494fdf47ebe84fb33cd67e3ef37afde5083a6b15725d3a2141f61106c6b4689ce01
- SSDEEP 1536:xka6Uka6Nam6GHfi0w3u1Qa+ToGmfaF19sYWmy5R9lWgQlU81nUQ:xka6Uka6pHfip3u1QFToGmfaF19Amy5k
- TLSH T18C93EF6147AEA8AF0101F55FDD047E0A3EDA40FE3FA7869285741D7C35E11B887BA60E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9600.js
- Size 69KB
- SHA256 dd8f928142a42978cf468a4627dffafd6b86b95e2c760e59b5b40310802ece3d
- MD5 3431a54ec00ccaae531d82c35de095c9
- SHA1 572af0ce433390d786d1b5db4084bdc74eb72601
- SHA512 4d481c2dc42d1ee72d1102c51f4b57169cb708f9534af4967b5085eb3c3567748cc67d2133bb875d93cb6c47c639f8d359c7029e8f407e572af9765a45d7780c
- SSDEEP 1536:xka6yka6NamjCcw3LCCoJM8jwtDlgjPz6Riz5w2v:xka6yka62cwbCCoJ1jwtRyPWkzem
- TLSH T1C163E9058EA98C3607BE43D8BB5BE603E2D8814442ADD85AECFF473C41E97CCD167659
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9736.js
- Size 67KB
- SHA256 1c003396553fdab3b043a88c99b72a4cf151b64ef96c753a3e42b90ed54c4415
- MD5 43f854eed1db0351f8220d42b2b4b70c
- SHA1 38cbe6e846c1db342b11a3ad7f9c60bff18af19c
- SHA512 62a2146c22142a7889743be9438b97fb2caf92bdf1acb1664b62e694724eda7df19d7f1c2366589ff90744d6552ccaa82e5f5a17c1466ab8c6c8bb2ed30d6f33
- SSDEEP 1536:xka6Qka6XamMOtp9zJZU6VgGeyGH8cgLWgJr/NTB99:xka6Qka6myp9zJZU6VgGeyGc3/Jr/139
- TLSH T12C631A0688799C3F0BD593E9BE499A0F37A9415886A8D4BDDDBFC13C04D47DCC09B986
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9844.js
- Size 68KB
- SHA256 25a99ccda428ae00702c2c5c805eee827daa291648ce6e1c806a5c6cbb5be0bc
- MD5 5d91922b2d1c3087f36c61cac9d02cff
- SHA1 0671484ef6d32616085a788ed4abdc18c910f527
- SHA512 c27fd770ae6c710e032fe384cc6e7f5735d37b25874b0de40e4a8b631ea58875115be76315ecafb577ef94abfaa7b30889909e545c2a40d4c7bec29b369c5e74
- SSDEEP 1536:xka6Uka6dammfGNXnqerITXMTFh6VRwMKCH9E:xka6Uka6uuXnqerILAFhkRUCHa
- TLSH T1CB636C18CD7ADE7B4B358BCDBF2A651662EC83448958B462CEBCC33C919C39C5077992
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9887.js
- Size 32KB
- SHA256 80db3d65218411ad68740a1051866dd3b2c3de5f54e5088cbd9b875de856dba9
- MD5 c9a29735e0d5a9a9e81b01b2770227e2
- SHA1 9f2f80f5995e37f6e3417032304b2e361fa5ca4a
- SHA512 758ae8c10c16773b5c5d01fa9a26ff9fb9de5b45c7428a9ccc47d1f22852b0cb57899c22e86b37ba42ae3c459740b259c39064031fb89052475f84f00ac66af4
- SSDEEP 768:xka6vka6Name2shnt0Lj9Bx3tjtSP5X95rTZJNtB/D6luhP9UA:xka6vka6NamAt0Lj97tjtSP9DrTZJNtL
- TLSH T142E2EB50E7512D6D9BD603EEE88A2186B16D40C1BF78D0547E7B807C1DA98D902BA2FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9901.js
- Size 68KB
- SHA256 763338539fd2c11af1896852febcfed64d7e8b600b2f80a07580167fc34f3b14
- MD5 815384d727b8663e40e3b0727e1040da
- SHA1 bee1c315da79ae14aade842e42d0db0c698f8c3f
- SHA512 b24b9c6ceb1b1b23395bb8f93d092b268c2927bd02be0bb23e04970cb1d5a6ef0612ee03c31e1bca190c5405dc70f73bacffece5b6f0b6e754bfc55ce65e6e47
- SSDEEP 768:xka6Tka6Xame2sw0nqSLOIrCDeSDHeQmXwK/FTwMdQPlbBcl/bI9OqlfBuAe5gIj:xka6Tka6XamloAmX1dgc4a87vVA2Y
- TLSH T1C8630A068C348CBB067602D9BF9D2B07D2E8450983A4589BE97EC93C84EC7DD947BF59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\aria.html
- Size 531B
- SHA256 4e06e363ec440e54c47825436157f4458572af415118f665a4159b934564fd16
- MD5 b4db0d463c1186c132e0f0aeeff843de
- SHA1 1d9e825ab12fd5370811b20672a257cc88036c23
- SHA512 18b0035e0bd06ec2574df3b4620709a9ecbef2b759bd682019cc4b12dc0e8f38614ac87d216da0ff3a45530f033b900d6abd63703d52ab88851efc7f118dc1cc
- TLSH T193F09ECDCCA5955F52238DB49C31B61C08DCF746C7618E007EFC61B5AFC0F548992A85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\aria.js
- Size 12KB
- SHA256 a8dd935de8166585f954d16a41c59c4d117599abf4f00718635f1d65cfc838f1
- MD5 7516e5f3c40a7e502254b150c02b1919
- SHA1 f96a5b2e693502bf40d2f3f21468c237a9184215
- SHA512 c750308234aaf05e3e87d8285dd15961cf5951787d7c88ef09ef2620e617f93a9a7c299bcf4427b29c8e8438b4fb088cb2d9c81c4d780949ff31711dd4cd1eb9
- SSDEEP 384:zka6+ka6tame24X+smdKp5DrJIbumuCdMXGJJ:zka6+ka6tame2smdK5JI6muCdyGJJ
- TLSH T1F352198875CAFC354BB301A9847F1206B2AE0545387EE4D1FB22C4B5AC647CED227B76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\045499a2e328133d.svg
- Size 861B
- SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
- MD5 ccc05bc315600b2b2185d8b0b9acdded
- SHA1 3a70cc126f90bd32a895c0689afd17e2719d8538
- SHA512 25f0cdff5798145cc429ea9a160b7e48528b0e0b40adf1250d49c70a08a7f764e5c9602726966074d45ccf9d3404b118a43e2e58027e2bfbd0a2ee2e909be2eb
- TLSH T1671112FAB194C9A474C7CF14EE7AB40B396674B22A52D24D40B5D9787520745C41FCE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\04927c4c4e30821a.woff2
- Size 34KB
- SHA256 beb9246f2bc1eb09b536f5c59f83cf792c21872e6c321da35847c28a759d2878
- MD5 6091ce733b1dd03b8363c0c117bf0110
- SHA1 7e9f76d6f8b16b623c2040a217d4e84c9656ced5
- SHA512 7e5c776dac2b2ed0efaa9e0d222dff84e39c859647d837011b2cd48118678f04911ca406ff1b90c66aa532ff3d88f4b17b0ffecef3beda9633843492dd4eafaf
- SSDEEP 768:Ey3s/IWIZs47OOb8k6/S+Pm3qjltDcRRKThvzQaks:bktIy4qOBwM6j/QHKT2aks
- TLSH T144F2F29130E3089F84F8C8FBDD45241B1AB6BEF81DFF7529F5805356E2003886A91B76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0561eac25d821104.svg
- Size 779B
- SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
- MD5 9481b5491e03bc2b078ade0bb61d2fc6
- SHA1 242f4a08666f8ff02dd3ff350b2033305cb45c60
- SHA512 f483afe71b02166908cf200f2191c70100f63783937df4c09df7a9382ecd468c3c528c6a06df71913ebf40891f2e236c9313af57ac3fbedd30d4cb0d44f285c2
- TLSH T16601BDFCA2F4F694B8B71304D233A578C46F68F527E822A08450F6D8A2231587D77CD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0647aa53f7a1ab03.png
- Size 4KB
- SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
- MD5 a8452af8b8e45b771d16c62844947bf6
- SHA1 702137ee563eba2fd1ebba9e20b6a74d5ef41e57
- SHA512 1c616468571cb13a2770222dc6bb73ec6ec02d400f808ae2b9597d6f9797789975e68039d75a5e7cee5d9a8309d12a1b6ef81dc2b99bec3b81cd9d1002d9005b
- SSDEEP 96:KIX4eDi3xoqD23XLdbyYrhIsT5N0rhjSB+mCODv4RJVNGoqxsDodC07352T49F:MeDiaAOdbyYyKTaj6+bODvuQU27sT4F
- TLSH T15FA18DFD8A20CC226D7F251F548DD5610EBE73214F9161CA73A29BC4EDDE843D3A4584
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0666508ddb76e695.webp
- Size 6KB
- SHA256 3209b65910b034a54f1916100a1e70900f5833e83429bf1300a5ac4dc81fefdd
- MD5 01cc4d5a797b4b91dff783a1207fbd1c
- SHA1 d9a66eccc0051143c9eb96fb22d0e9b0da2fe9a4
- SHA512 a5f65d3373a12812caa5140eddbbb24695b3640ac2d7643307be476bcf204d13b11e1cefe427e71f5c93e8910b6f26f4c890e7e690d7d52b26be99500d61d1ef
- SSDEEP 96:8cv5V+8yTx3PLMvRwpjYBLv6Nl6WAIanv79NG61+Xh1YTpNOpdoQdIdQ:L5kL5PLwRBBLVnv5NGO0AOpdTe
- TLSH T15DD1AE1B493E6DA1CE8E7CBC92832B5205613939B2744307BF239D3131B9BD558D86E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0c065981a363e375.svg
- Size 2KB
- SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
- MD5 c509b68776129a86e22325b55a6253b0
- SHA1 53a96acbdcb25b64a6b0fad932594516994e7a1d
- SHA512 05e21b404a332d532cb376a70d3eaf8ea618b581767f60f6506778f8caf2e3fe74c8f4461e1ad34410a471245e063af1dfa7406d737644a50b39f9ae3b8db208
- TLSH T1A84188F480F6AAD6448B7738D67BBAF9F00AA8FD7B0809E026757BD52AA0071850D5D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0c31e8f306b5f2d6.svg
- Size 686B
- SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
- MD5 8b2f479d49ada3b503848316e449b7ce
- SHA1 a60efc76e8079aba471a15d07e446ebda8929e45
- SHA512 d48eec879d9b239406e95b38aa15153a59ea787f36670659435a00212169a8c8856472ea428ad4c268052ff1d262efe7ff1ba69d67693f697aee591ee8cd9f68
- TLSH T16701D6EA2585F6BC08968731F52995E0BD0F45FCBB6C6259A110BA58B78F0638A84C82
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0cbcfc6fe4cb443b.svg
- Size 200B
- SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
- MD5 c05274c165c506d13b466843cbd3cf13
- SHA1 3ce6e2181772ecd032d8bfa1a05a2ae021e8cc85
- SHA512 79b0bfd865e3ebcb6ce0a51976f91a3baeb6dfd67148c8c297cbc879b7537e20f8faa395311986a9271dc9882c295ff301ac4b99fb1ad23757b180441c8b0925
- TLSH T1E1D022F9410E8828F0198A60E238282054F62193019E22C8D8153A33A982C86BC2F6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0ce1e0471c22d650.webp
- Size 2KB
- SHA256 fc6275888a83ec3ea6fb5e8ee9ad009f7b1afe05adde781f3260acf4809c6244
- MD5 8bb2052c0154c0e4d6da548dc403f8f4
- SHA1 f6029f983269048b21765b614c928ccf2576bf73
- SHA512 ec44b62a1e1c9c7f12a74c0870515662904391c86a98d66da321d538ee15ccc290e840ed11fdd9e89ac0df8c539adb4f0f20b39a0d6141cb858c150e74e79b34
- TLSH T1B4514C825023310DDE2DEAAA3573C14228D46DBD21948D05B3032CD16FBA2FE356AA9E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0d0d0fdaeacb5e45.svg
- Size 670B
- SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
- MD5 f4d6744ab4d013a6071ca1fc38084b9c
- SHA1 275a28729b8586e5cbb2e784f3d806018dcd8763
- SHA512 04788c5b31b481ae2f759218211eccc3d0bfe2466167cd55ce2c08290cb0f8f3992230d19bfa9a656d69bd8ca032eb30fa55d5ac9920eb3aee7a8ad59e0f6852
- TLSH T119012D79D6C8C984D19B8300E3339228E40EB0A3A7C9A08DC122D031629909E6C7F8DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\103eff58785ab58b.svg
- Size 534B
- SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
- MD5 efa456c80932304abf1b46b9d0161a76
- SHA1 1c29a9813e989694ea367f537a0779e47d82d333
- SHA512 b4f5cfc6497e0fa8243e8b4771e2b7ac372835b4448c37e355e16e7fbf4a17d93ca34c7c311d977491ac436b6d670fa6dc07ee34a3b97c32ac89b0b0545242c4
- TLSH T13EF0C0E110794128C8268334B768779231EB6CF87F04C9E511F03DA5AD5166AD89CA48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1046c13174d8b145.svg
- Size 653B
- SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
- MD5 0e11bb9ba97b509226442b9fa98b9165
- SHA1 02e76ef129c17b6eff2d154215bd1e164d6a8895
- SHA512 3799502c8cd8390ffee4c7f0a99084e3f054be2b9a188905ed137a0c39bcd85488fd1a1db322820b53077088959f729bd087b81abf8004a4acee7d81727db877
- TLSH T103F0F4B6738C8D2D7FA70B14E3773536C0668283060D6144B532A278505959E6E3FACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\123ab2cc0ee9e515.svg
- Size 22KB
- SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
- MD5 f26fd1f099416b4487b44cd06f3c45d5
- SHA1 5765e188047616f6f23c5f58de4b12be951f78a5
- SHA512 b785d69d94398c3a57d598e1ab106a830dbc53507cce120d643b580bd8c1e9406ba2c2364200fca61478e2db10cb2504b7851fca2167b896ec6f80ab479e532f
- SSDEEP 384:7+enRerPuQuiBylmZDV/5YGheMeIVIdhiI4hfIIIwIW:7+SRMlJgaR/5pPv
- TLSH T1B1A223915B148B3C3FC907B1D7B419025667D1EFF83569C8AA5A993070F3E2D88BB887
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\12e3fff4ce882c02.svg
- Size 706B
- SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
- MD5 83bd327da6d8f72f8c9ca6451be219a0
- SHA1 95eb1b4346f7f156d2f4eae24dea727529bdb66f
- SHA512 56998f72e0a3870826536648f8660ac24e44901e4ef5cad00a5f13cdc9621990ab919e2ea48ea86e94082c6c468b3022375ebecb5962c0d3941196d6a89df4d0
- TLSH T1BE017B7D0B5D0D3DF213816CFBBC76B55B6A10D3070CC228B46019B4BA5258E6C375D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\14e91cb3dc3fa6da.svg
- Size 467B
- SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
- MD5 6c5976afd1244ff971c91343143b99fa
- SHA1 fd4b71444aca0f33d1aad1169c96afacf1d8e6b6
- SHA512 252d8d66c427eb857ad2f935122ae990b7ebbbee17d1d7fd9528f5e1993719a5a6f90f3cf86288409a525ae53e4a0475f41fb0cf64661efe429116a4ddbe8103
- TLSH T15CF0DC775208EB2463C2C314F377B2A8E1BF2097131580C98020F534B1000BE35B7ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1688c4091f2a2e26.svg
- Size 2KB
- SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
- MD5 d08005d00ce075a471cc1487106fef7f
- SHA1 7ba28922957c99acf6b6a90bf0f7d466c3969054
- SHA512 487720063cf12cda94d63f8cd17cd60874576f20b88e0956debadd48e9dde1b6b3d45ee53f3e0b3017116bc378e1b2134f0de516bc49b7b84da318ebe3bde287
- TLSH T12341F1B79842B8E0E443DFB0DC369D916627EDB73EB781884048989AF6D617D8A4DC48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\17cbd66168518049.svg
- Size 308B
- SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
- MD5 d02eb950982ea35f6ff1cd8227813e51
- SHA1 546e4e3a32e5a53cdd1be0a45a9f54c1dfb6a969
- SHA512 208d237f9f64c32982a540bab2206d19b9eb62ceda5ece241661c306fd5884035a3ceeb215f50a87851b6227974d6db177518b6890d453c858f67f414b0b4e00
- TLSH T1EAE02BAA63488D2CBAF30728F37A363AD4B75153054C2284C832A03490155CF7D7BADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\181d51d89dd58b1c.svg
- Size 619B
- SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
- MD5 579800dbcecca36672ef94c9beee7c95
- SHA1 8963d8f1bb18c8245ba1c79746b687c094f68c9d
- SHA512 b161bb2a9ed7394e5024e91f28d0800f7477cf6f0ae00f54f96d03af72a37cb4c5b08d1947a6bb4bc2b8ad1cc83ebecd81cf92d33338205559902782b5bf0362
- TLSH T11FF0ACFAE7C4CAD456E34326F7223455D09FA07D328D82988530F170EA566DE691EDC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\18b4316285d3185b.svg
- Size 6KB
- SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
- MD5 4fcdca87f7bdcb024e79730a515f4df3
- SHA1 6bbe73fa964c8e4b6067c851182ad5237e56a410
- SHA512 273e61f7c85fa50637892d4de76cee00b2d361370cdb7701f90ce3b91f4a0508d3fb7e7b334fe764edfbd39a9c7a4f6329e533293154378a77c85812cb7330a7
- SSDEEP 96:LS+0Ur8NRLuNRLNRbNRZNRGqNRPNRxBLwMdABEMNGCwMen6FhTkx:L30Uy5MnrVMwXzBPdA9NGCwMkKhT6
- TLSH T144C194E8A2A8791C15900379FFEA8492A026F0D3C605035DD51F3B366217E97FE2E6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1c9159e6d6d5b88c.svg
- Size 1KB
- SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
- MD5 0283ffb52a4537657b2efc007a58f500
- SHA1 583b542ad4196293fb21d1e8892ba5a3ebeae09f
- SHA512 5160920b5c6a4911f5d0153cd3639584be1b756127ea64b7808113ffb715505296c8aed4b04238b4ed9a63ef882bfdaee013a6badd0d95a5df02fc7c357d55d0
- TLSH T14931DBEF1252BCD4F7538704DA737A39906724A65AE4C1898872AA3189142F8587FFC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1c94572b8a82384e.png
- Size 6KB
- SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
- MD5 272d1e6486d51c8e82d9616363f31f5d
- SHA1 1bdb2f58f790f6c00832c3dfbd949161d8b2dc22
- SHA512 26881b1ae413b2e001e0b7ab71b6b162a5fb913475b45a7b42a31d6ebef6523125bf30ec016a91430bb31a000227f693d30a3bfb12abd98436a47102ff5cc902
- SSDEEP 192:yJOp8jc3sgYde7hZOG+etcwEiAGJUqNNh:yJOpaccgWe7Gv2cwMGJb
- TLSH T122D1AFC9C1F3092C5FE814F6E6E31ACFE66E84B8B2C8D4B45C3261F84C427694069EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1eb51cb7434ba396.svg
- Size 2KB
- SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
- MD5 d21011c9553b3101bf9cb2ff9e918385
- SHA1 6be8abcf9e4a9d318c8c44e7ceee2adeb5647e2f
- SHA512 6adab9c100de245aa5185c6efe2f1098783690150d3d740c17980c52eb142c3831abc4f580114e3154c96c569d282836cb1f1547f85ca13daacb585bca61fe87
- TLSH T1B951BEEB72546A29F043D7649B0AF978A00B51ABBCFD535E4577D8B2775048CB80EDC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1f8c89981dfc2af2.svg
- Size 266B
- SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
- MD5 e89f994a581ca879e957254a6406ed42
- SHA1 73c1f737eccec59d608c6093d02ef9727941fcde
- SHA512 f18a21cae7c66eb41df2b94d5e841bd5ed28677edb69ad42e8953de94a538542e4588234e4e7a913656aad667e6f7bbfb7254b5248d4f19928480ebe35ad4434
- TLSH T1B5D05E36B388CD1CBCA24A32E3A67125D0AA5042158A12E4943EE135A05598EA9FB5D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2108d437d813d94a.svg
- Size 322B
- SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
- MD5 995e2a5d5a3c53ac9521ec6b032ac62e
- SHA1 ab982e8d640b6b686b266de03ca9d244b25583cf
- SHA512 a0d345b1716a4aed44edc08ac801f3593fb9d0a77b184c7c99643d832b2c40714ec3af78f99135a1972e559b55a399f33587de3715eab0cc288fe3d710afe6a3
- TLSH T12FE07D7D1314882870964318E37A35E9847F0026034C03505911AC3DA01B6CF3D777DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\22d2121364e44949.png
- Size 1KB
- SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
- MD5 fb1e9c1b545c97ad94e08f8747d62858
- SHA1 e26fab47b8f1351e7cbf757f5838280adaf4eddb
- SHA512 6e7f782ec8c996ed58e2dc81ad59c6069625fb066d7237f69216df2e942a4a105315a24ff68758e82440c863cf79adb4ff0473d0c6cf85e481ee393cf40086e0
- TLSH T1AC411BE46FD32C7F371B6A5B092642960F0357ECD71A16248D78341FF7E1DAA2091C80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\243e789a53847976.svg
- Size 585B
- SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
- MD5 ef7cdc2523c32170cab93e4b831669e0
- SHA1 7606e8962814a80ee4e5ae002ff15eda604c920c
- SHA512 42fc11b7e31f309c8f174f795d55157fbc207cd30080e5ed31e8fd763f47650aff5ed49761f37c6b7e54d207328e454d3ba3da846d361666f2d867b6bf5d1999
- TLSH T159F0B4AE7348AC3CB9B3463CF3767276D8BF410312592254883294785105ADE76BFADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\253f1599e4c715f7.png
- Size 10KB
- SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
- MD5 8cc0ac7aa217088fb28ce39ed548fa3a
- SHA1 339ef1bf8b20321e4a207a8cf181d9932900f87e
- SHA512 b08cb12f07caaa3923c30f456979ab842aa1a5ec6521ca8b05e6c0ddb8aec4f1ee0f66fbbf65a886cc24bfbc1d53907d99fc0e747308af42035f3643bc8d861c
- SSDEEP 192:wSUvILkX0Reka+8/WNzWfTO1UkEQPPHkbXlcKsI3Un0Cul73cB9HFsCC3U:XUvGkkRNNafTOpE6HkbXlcRsU0CqMBZ7
- TLSH T12F224BC326ED240F04D003B64763E4DC0AAF7B63A93335E9EDDAD615146E28C4629FD6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2dfdd8918d195c58.svg
- Size 6KB
- SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
- MD5 ead204ff2d87fa70238e636c7b7b2e61
- SHA1 6b9c5fe90c399f249001bf190c0f062b7a10c68a
- SHA512 3a23a08e80225f586a28dd134e6a8ef654a269088986f2871d3633ee4cdcf2c9407122f62cdf939c0f9b39e4b5a7d17fe9253ae9b2fb5ae750e8b95293990089
- SSDEEP 192:gUeEDGjnnPulmcMGQsVwqB8fEGpnmnhdKUmUCQlmlT5:gUeECjnPuFSziMWhdhFC60T5
- TLSH T12BD165ACC7080CFCBF8CC75CD3C4115519A953F7D66A48E9EB4E9323AA05BAE017A746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2edf079df2181fc4.svg
- Size 1KB
- SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
- MD5 3e2dd88baed90f7d7f3af337af01c46c
- SHA1 ce2bba1476948d1361bc7d813d3bfebd5e15acb9
- SHA512 bf741f6df91efe71a0a1434dbf84322cbd6480d47543cdfd5237adf2fdd420c376b962a745720020e48c0125003705db97ec35a8cd9c872c9da13c1e042cc46a
- TLSH T1973131F5A1E196FAA149DFF4C92B54F132213CEC7E60C3019360A92AE19346F8D8D49A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2f4d0c616cea0666.svg
- Size 589B
- SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
- MD5 3b451231fa25303dd9b84d110a9a157f
- SHA1 aeadf763c4a3ccf22b16f0601a28842e98df0d3b
- SHA512 f2008aca2e15c12a9d417b7df77a16efed5021f159dce4c5894c2c8b63cfbd3b6891943b6137178b25632193ab3d185c1ac432746c099ff700593d9a154e89cb
- TLSH T1B7F04677F3DCDF96A9E2CB35CB232471C0AE60A21408B2E8863AC120B3502A94816488
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\31ba446b2ad075f0.svg
- Size 635B
- SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
- MD5 a53df4ae230f93ab80da45e49d8684e0
- SHA1 9c71c3b2cc023b378104e0332e3c240c17dac449
- SHA512 1d4cc35d9cd9c41ca09f43679ad42262719dab200c754e3b47755e9ee2bf403744252754fd6a7007f35015c0966bad804692205cc717cad84ca776db9f9fd190
- TLSH T1D0F0EB7850EC241A8836414AF3059B5C6E75E08381249900B88D2DA0FF059E3F8DF9B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\33bd9ebd264104a0.svg
- Size 2KB
- SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
- MD5 34f2e59e593e252d27a2a9814a25a482
- SHA1 3eedc32e952de3aa464a8ba4bd95205ca37d6222
- SHA512 0e071711c1d39cb65c06413f9c05da879fcd7eb505fb155a13a759a27ebaf48f9fb2106bd2717436f135f4add7e2d61cce9ac0ef5b7ab93942e823da2e49b13f
- TLSH T1435183E7B5D460D0E403D7F00C1A5F6A669B2CFD3FC447844EAAAA427FA06BCC445C90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3607fe7f996c064b.svg
- Size 4KB
- SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
- MD5 3398b0b53ddf50944f7a9c63fd729af3
- SHA1 a7e7969a0f8995c602e0eea6a40c7d3f48fc186d
- SHA512 2debf3a827e847ec4f0046591009af1b1c5f7b0d83a37f6b7f3e5d1aab12f60c803334ff84d56aad8681d629b129838278d757c2d05427be6f7831fcd6d4cf8d
- SSDEEP 96:c9EoQaqq4kMXKKN0yoqui7cBZZEZ55/hVfoZq:cCoDqxkWl0LPY5FLwM
- TLSH T1419186FBA3E4F5C8C587DBA0DC27ACBA661F387C6F5643D64194DA812B140D4CE49C94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\36bf914fc5de6f1a.svg
- Size 3KB
- SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
- MD5 e7334b5ff3ad14dd85461bbdacc46bf7
- SHA1 973d466835017fd5d4f610e6aa2106f5e13dfd13
- SHA512 c569df223715af42ade4c48ad569a3c3adfd2903dc7e5c483ec655f37e093057b9a2d8cde121f637ca74c4f2ba3c333cb2bdf924cbd3f1f52c97e15d195784a9
- TLSH T1D58121FBE2A4F6C0F003E7F18909997667A728FE3B6947C546648AC1FB500A4498D9C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\37192a2a129f5ff9.svg
- Size 224B
- SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
- MD5 1af25ace4dcf9b05b2fd5b4bd6bc6210
- SHA1 c8a34538730cdf1c975ee89ba1975fb87b83a597
- SHA512 398f48f090d063feca18371e3ddfe590f7f142cdd0bddd8c4f335b033e6fde45c8c9c7e2833de7b7c125db9a404146d3cd89a3bc5743ab87b0de5fca4b20765b
- TLSH T1F7D0A73663488C2CB5E34A20E3B53135D0A6404201491194E4329034A00558E79375DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3a2ea7738b340340.png
- Size 6KB
- SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
- MD5 853b6f0280dd89603351ddb27a4804f4
- SHA1 41c533ff4283ba85941a7d748c5f5bab0e4a6e8e
- SHA512 f7c72552a9b08a5f5c3e37b5bc4081180828fd2339b3766c01a2bc1e7955250a347cc60c552dfa66bc5b1e0841f6c9cebc4c30cce4493ed16f8185b6976e62a7
- SSDEEP 96:gb3rVXQ8IK1nnQUzPkjDx+cUlE6cA7zve/T8hqdXMZcoW/JqwQaBfwcdBk98iZUz:gbbVA8IKFb2GEnAHvsZ6WcMqZO
- TLSH T19DD17DB3AAC66DB7A05B3243128CF2565186C726BC58697E31E04A72C3C0A16659FB87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3b9545916efb17d9.png
- Size 3KB
- SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
- MD5 9e3f648549ca9b96af38e6792a257e1c
- SHA1 2adf2c53c971cd7e5005699d1e56f9f62af08e28
- SHA512 6cdaf606e5c3ec2ad113d83bab317e72f2adf8e10f604b26702558af04124ac4931605effeb5c65664484539469425f2e58eca0cf85cf96eeb1b509dfd80af70
- TLSH T18D716C9E01C1221F906E58F9A13B299CBA761E402917EB3C9805054D8B43EED6E7D3A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3c91fce8ee8453fd.svg
- Size 3KB
- SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
- MD5 d49e69adf27da6ba89ded69c908d7e71
- SHA1 d1842b83eeb465a18e5420cad23d382fc6c580ec
- SHA512 6e25478bdef2dc250c26b5eafab399335abc4af80faa9504d109c8a2e514a3ffccabd98a99c7ec021b9ffe599f3cfbd7e320fcfdff7b9b40a7c17f85a5bd543c
- TLSH T16C61A0A903F2C6F1C13E8F3A84649D6D99BE3436294443CC90EAB782ED661610638DCF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3c9e7cbca1e6a295.png
- Size 4KB
- SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
- MD5 357f3695fe200dd10cea5a1024879e3a
- SHA1 bc52dd32815769a390a6c6d4b3bca65623185592
- SHA512 f283e952f7ffb80fc3d9616fdfcd83627ff86974ebb0dc39e3489be5526e3bf66edb9dfddc503f571bdf36536e897f3577203d7006667bd65ff3ade0a46dd6d1
- SSDEEP 96:uqajpTnvdtgvvvVoA+ckLn3nOw6a9aE+V3yKXcRgWkFFaPcS4A+cCW:uqWzvdsCnBT3f9aE1YcKHC0S9+FW
- TLSH T1C2A18EBDF913B8DB09DEFD2C94D80AC0200ED9AE393CB8532A21E8CA7595707D8D4201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3d5e7395e9ffbdbd.svg
- Size 537B
- SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
- MD5 bae51c1ca1bdf9386f8e0e603d25b66c
- SHA1 ac96e0446345444699009455b019b1a3561f51d6
- SHA512 df9db41038d6c2b6f6ed2d83c70486ab82454e20f39d53096660dcbe8b9d0ce290b8b03b5de26d0917839ae46a26d315004d25a4a949e1e12a721b3704dbb31f
- TLSH T1A8F0C9A7321E2BF874C3C718DB322228A069255372CC43B440231B74F0081ADA5BFDEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3dad3b5da9993b6c.svg
- Size 767B
- SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
- MD5 fd8855faf19a81dd768c4a394c954014
- SHA1 f8d9ae485f73468ee1d9405f36827939c3c9add4
- SHA512 29facf391512b61f46743c3f758bc563ada6e1f87e036b85354f1871b7bea148b5c3d36b3be9cbb38d9ded504682baec898b8219c0714830038c9ff7f014d0c5
- TLSH T10B018EFCA3683EAEB6134313EEA1313806B741A715552ED0812645B42A0450DF72F5D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\436b779e283e4cec.svg
- Size 304B
- SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
- MD5 c5f36b06adb5025088949bb400705acc
- SHA1 af071daf9c61762956ca3cc7a8e3ec015d9ce273
- SHA512 2a661460d4c1aa7f55bff53f027bec3e160490e4c9a341b1e4a91b3e9c521269cfb3240d830a2227e484e41260b6bafc180c4bafbefb90794b92367f3f470be2
- TLSH T149E0CD7D157D5E05D03D8345A1F7183809A5E0F1035458E1DD109016915B8D93526DDD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\467465eb8fa50b5b.png
- Size 4KB
- SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
- MD5 5d4e62f84dbfe756a57a4569dedb7515
- SHA1 07590ad6d4465ec03de30d1cbb346eedc12cb45a
- SHA512 9628f627d96a5487674d8690ed1983a69557e07764b362f76a468145e51b3eca5e975970b3d58744de6dd6f73b6456291dd787e8564a665dfc86cfad1e4c8e2f
- SSDEEP 96:0GNNUtcznI/umkSFny/XhL94nyQ0//m1EGDJuJfEs7LXAiKzItdEm2:0GNN4c7I/umDy/XAyp21ETJ8s7LXy++L
- TLSH T198A17DA9473BEE7CF78420B5AA3BC490517550F507430C4EC956730C38A2E42A677726
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\48d7ceaf46faf1a6.png
- Size 16KB
- SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
- MD5 15beed1b084c4a5dd3542046a36d720e
- SHA1 856477299874f5d62b2ef1f82f212dbb42c78c8a
- SHA512 64cb60c0851f7da441cb80a1ae1a2f7c10764abbcc510b081b459c0787cfc9d6d6fd2a19dd7e3f04d674af14092b2bda45a0f910f86604ad0e252da5778824d6
- SSDEEP 384:Xc3YDxCa5nktUs0A47oDAK/Wqtjh6ULTkkdCIY8/O:s3YDxCa5cUsZ47+A+t5TkkjO
- TLSH T186729EFFC12DE090871B1E2AD4C9AF1987FA00604129BE1868566E0B7962AF51302EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\49c99c607978a8f1.svg
- Size 343B
- SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
- MD5 12233c1ea34c03d3c3f3599aa48a935d
- SHA1 796d616e76136868f4b9152f133944b46051e516
- SHA512 98863774aafe2d5ee340e1e22f1445eadb5e838e255208fbfc1c2a052977c57fe28df03e7a651a30d9dbc8fdf673875e0741e981f07ab1b7c5c60326e7711ad9
- TLSH T136E07D5DF2446A1D78D60320E336B325FC774093008A31E8CC3191B5710148DAE7B5DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\49f7d977039c303e.svg
- Size 1KB
- SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
- MD5 9ec0ab13bbbec45be34a1489a3ec4e0d
- SHA1 6c48bc2d7363de4f25cd16a30313d215657e0f94
- SHA512 cb325ff07fe01fd2ef27ad1fe7c532d96a9dfda5e8d65342ed1cede281c497adb06de2a10436a4275fd9f06e782af5482e21f46fe3ad7d1c4e369aea14b68fa5
- TLSH T12531D06184FEA82B4A3E014FF281CA5979328043C70458057DAFA940EF0EDA6FCE719C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4a39a099362c32de.svg
- Size 477B
- SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
- MD5 fc039d059dfda6acab5f601e63ef26c1
- SHA1 f34d3984711596cbdc8aa86580d93507aa160844
- SHA512 0966da83add99629af2f8d1eef35d77e1562e6ccd1a5c167bf353b64bed12a9cc866ff49ea41669d6d5335f448354b9322f9503449549c44b354b1d00379af28
- TLSH T181F0203022ED48CA790ECA89C89ED71D0D50E583830A209CB30D8E06EB10C23A4173FA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4a903e15f57d70f2.svg
- Size 608B
- SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
- MD5 930b07dbfe6bd41ed043d9a535fa7cfe
- SHA1 30d85af8f37b0f82b78ac20eec18d53f8c09f384
- SHA512 da28c4937f6e59565e8ce3549796318d6224d882698ad176c7c74db2340b04238abb40fe47e77a52bacf7b7bffa86c93ec518b4335992991ccf60aa13b60bd49
- TLSH T11CF0905A63445C3CBAF30B1CF73B3578D4BB5043025A70C4C9316139554A69EAABFADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4cad3768b65a46fe.svg
- Size 8KB
- SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
- MD5 7d6376ae83ce3d2e8e90805b37fed731
- SHA1 0b121c20c3f87a738eac497fd4349b60e6734944
- SHA512 4dc52ee118d0ab53b47669d51f2ddf84a1482814b0b01680ec1143e64ce3420a1e4e901add96bd52f4401262166f1f00b6b9dd7e623120848d077c1c5be430f6
- SSDEEP 192:gUCrtTtwteetGtwtMLtu0tfELXDWlGMMRjaAc1RWzeLDFcENpe3vr:gUCrpa8eYaWLPBEbzcH8e/a08/r
- TLSH T11002AB445B001EBA78C41394EEE9195A0C4F81F3F91EF6DCEA460E329C65A2F6837D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\51f491f244f5f86b.svg
- Size 13KB
- SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
- MD5 fb8225778a13cffea291e06726890873
- SHA1 f08874364b930dbfa4a895e77b5b85cf00eee15f
- SHA512 08c7d97952bf8deb81b12e83355716745c429b2ffecdbc4ccbaeb35dc0429016c990d3c1ecf903e624778efc54e2ffda1d6862f8ca8ab62ef6fb24bcfae1b64c
- SSDEEP 96:+RUv0BIrDxVg52hnv5EqB/kkFht6/c64KA/kkFEtr/7krtJT/kkFfEMB3tBFiQBw:gU/sCx2/n4A/7uf1tKQETSCh
- TLSH T19952FDBA85500A7CB8CE8717C68A4C20B518C1BEB5D0CE65CF4EC77B148DDBF8662A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\52630788a25809fa.svg
- Size 503B
- SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
- MD5 7c364d2766a83a723731bd95c6cb09f6
- SHA1 06ad4bbb593f98b9fc35b1b1dc41b5bcd8db869a
- SHA512 98b0ded2f7a02df42d832ec53f4fc914122bec8df0fbbec46acaca32e7f153c09390037d43275648ca3f0eaefb7b85251f33c6f57ea9acf0a8c3f55100acd527
- TLSH T13EF0277B63C84A2CBAF30B59EB2731B4C0EF7292014860D48A31E039622569E2D7B5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\535cb5713fe4ca16.svg
- Size 365B
- SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
- MD5 820de2288ba5428454058675dce83917
- SHA1 5ee3d53323d0ca2683ad9f70343bd756890fb553
- SHA512 db2f1032ba1749c698e8f0c6f8f08a79d3155d5b7d3e1cbd86c6a48f5ac0d9b52f5712857f49b447aee0d3dfa93cd2d50dd9b202fcea0ece001ca5843537f150
- TLSH T18AE0265DB314CE2D79E70328E325B62969371093028E21E8CC3151B5324858EAE3B9DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\53d73708b13075be.svg
- Size 1KB
- SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
- MD5 13a3445999a25934b985fd552a714d9c
- SHA1 73eb1e6408d92bf3c842b227ba82150b9b975a27
- SHA512 a767b17705fdd8d1141a9da613b6f5d072548d7d643bec6882eb2eb5372ddb863964e43eab7a01592650d10e7d4b9e90d85428ec1ffb4fe48bd335a8fd39cdf1
- TLSH T14E3165FBB5A4B9C0E543E7B0DD276D5A66EF78BC6F0753C104C8AD4DD1522E18888C88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\578e94e35aa16d97.svg
- Size 2KB
- SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
- MD5 fdad14981be59a1bf967fd207a5cb8a8
- SHA1 8d6e0c8ecc27ba987b50d1465e8458aefb9634af
- SHA512 1162fdca5eb003b022d322139f7076e48aa2cfffec6762852ea62242e135440217461f1aff88271335939abeec622025a35768ae97be554fbe2d24be42649e4c
- TLSH T1BA5184FE2568D6E0B64BEFB4DC775D44A80F30F2BF6962D0438399E1B2112D89D05C54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\581fa70608c7fb8c.svg
- Size 2KB
- SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
- MD5 31c68ab3d960417b36eb9f781588217b
- SHA1 6f4fd70386b67fbdb4f9879dc4b57a636d1c7995
- SHA512 95ea29910787ca8802455a0e9d78a6fa74d268741e82861418c91ee078def379ccef6fbca6f67384c5f2765c5706dc3fcd212d63d2055938f50bfe5788f76622
- TLSH T1014124A9C5520C9E1CDAC1ACFA8C249252ED92FFD64D54CFCE05E6375046A37C826BD2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\5bddb929efb23217.svg
- Size 813B
- SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
- MD5 38989a60674557794957d8970ea0616c
- SHA1 ad6caf09f64766883a7142a35fdac0cb00b359be
- SHA512 84c3e3aa4eda247dd06f7007731d09cfbcd4062e32e3aadfad5071a65630bd2247d3e34387c18672a7306ab3d50f28f25e3de1fc0f426a5e7451f2c99d9295b6
- TLSH T1DA0171AA33084C3CB9330B2CF7553239546662435D8D32408D37297756155AE7A7FAD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\5d5360751452a836.svg
- Size 6KB
- SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
- MD5 362d6500721c3c8a8d580972f967576a
- SHA1 203ccd2096365bfc043577d3a42905e244495765
- SHA512 6dd67610a245febdf9e562da5d3792449ad31bf9cbbdfea773c467922055997b1c7e21e7d4be21e7da8c62d77ca107dcdfa2d2f0578caec54603f93238d7ff63
- SSDEEP 96:+RUlkkkkkkkN7egkkkkkkkVkHn8hakkkkkva2WOIc4B/v7hVtM+LrGRhMhju5UtO:gUSXWIc4B7hfWhMhC5CxZLwQpyz
- TLSH T1C8D10E5AC31409A87A8F45A9DAA91E421954F2F6E808ECDCF3199C33E063FFDC13D582
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\625b924eeceb153e.svg
- Size 3KB
- SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
- MD5 c64f89fab020cbcd74c935a27409a4f8
- SHA1 b97b5db9661ccab8c86122336840f43dc95e59a5
- SHA512 a171f5d43c1f4c023039a5e36ad8332ec2588191c257f10c197e62cc7fdb66f1be0d10f57813d2237699a8dcc958a4d92c33f907c258c604b6953852bb9fb074
- TLSH T153813079B6400D2CFCDBD6F4F3AE3436A52A82F79325A4CE9E874736C0866268063118
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\62b733d362f51663.svg
- Size 505B
- SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
- MD5 1906fc87115d852fee4b1f56d179e6db
- SHA1 5ac16fadcc3b88895876ddc3e15cdc10b58909c4
- SHA512 45772359fb1efa045f86515e453ba5918fd8d2c5f8a178fdecefa127db2b285ee79c1c0f79b5230e9d5b1e4de8090faa13a8a0ece879073a0a065c839633706d
- TLSH T1F4F08C652289AC3C7EE24218E32B71E4E0BE4092425A128084719939B9095EF79BB7ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\62dc31e3f318054a.png
- Size 4KB
- SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
- MD5 15ffa7be7f9859345203dc23bd3014a2
- SHA1 51ede507c030e11e887d65d39a2d768559e72ac2
- SHA512 58cd8fded32527fabe5a4dce17a3a415e79565f03a0828663ee3da299e3098c77d0cb9dfd460e5a7f3bf09f7687fc7f5daf3b56939f953fb915b12e6d4a98dad
- SSDEEP 96:1x2X7gcJbbQAcesEwmzVi4lDwLUuXOnGjISvkLLyMGy7+FEg7:HKDbUksELzXdwJi5qkLPGy7Bg7
- TLSH T19FA15D0767672D075DEA04E70E153874B9BBE15D49ADBA3A0F81C4A4C4729A4EF80A4B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6327ab0f8e3c16d7.svg
- Size 37KB
- SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
- MD5 e1a63ea271bab3f89450b44d75598bd4
- SHA1 5356e09f75249f1f4fac76b841eb90ab5a02db8f
- SHA512 fa9491fe42bd69a3c6c3d54e166936d12ab585fc603076ffafaf5c36751cea7ebf052da65046b852237adf3194a1435755c0824599a3d3c4af3d9e16908fd4b1
- SSDEEP 768:LGZ8SxbymsMaJnOuKXPUp/GawV7ChFa2xSQf5QzAcYm6Ay4W3HPANWbBMTAfuQ7S:LG6msMaJnOuKXPg/G17ChFa2xSQfGzAi
- TLSH T1E40351FE1FF448C46AC497E77F1950AA1D1992E3C9898D69F10C0B0C6BD246E8DF6AC1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\634f72a779327aba.svg
- Size 249B
- SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
- MD5 97e51ddd74adeb8530f22d5b50fe0f35
- SHA1 cc0d8c8487f69337c839b710e3c1cb68dc3a94c1
- SHA512 699dc3703c068e981d17861e75631810649dda153ac928c6a9203e9cee36f423382435326729e6e2cfcad36a176c038de0d984e711cfd329e62a42f8e3ec5e6d
- TLSH T1DCD05B9D1259C554B0928770F375312490A650C26348114498629575F05559F263729C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\65c1db15d2c85dc2.svg
- Size 695B
- SHA256 40d637c10c1b119b0beaf4db4a1c53bdf423331b0b5a15553f4602ab06effef4
- MD5 b69eb9a1d91b40be9ae006ba11804223
- SHA1 75666a49d81e5439dbb93f11ab6961145ee1325c
- SHA512 f41860b006f8efb2e983ee6af582dde590545220f6545d60494411151b0d7cf8d378b4e86ff1ec1a8d3504d90048f2e84ec073b536b0cfdb7754196bffbac065
- TLSH T1D001D3E7051DC9C05043C73BD513E6E19CBFACDD793D93C08560B600F3484918A89D9C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\692666c0b9f55408.svg
- Size 2KB
- SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
- MD5 b3452ccda9c0d42323309a1510561ece
- SHA1 479a8ebe418771ce0bb9b03ba2c03854191b2b1c
- SHA512 906fdac757a558a5cfdff6c92990497c4f3594f69700e077f71f62661a5cc356e8e3807f377b82c5f4c7830fc9de40125286133a426293dc187ddf8d3e226145
- TLSH T1C24115F75360D8A8760F9338F7771821B825B0F34778A588B4744D365A5899C58BF9C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6b1f3d57b04e487d.svg
- Size 3KB
- SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
- MD5 84f784b2e4097adbaf09ef4614a4cb92
- SHA1 134012f4cf3376c45ae718c13dc68fdfa155c7a2
- SHA512 41aebb74a39b8df2e363603c0bc4e20da8c461493ea60aa91edee99149fac2e10303fe35884116f2fe80cb8547b416cfd41529ac988e4c80c06b0973940805e7
- TLSH T1C36197E6A39972C0C2414771EF57A876742620F5CF04C74E466EBED0722A59EE81E8D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6e3ebbcd0a39edc2.png
- Size 4KB
- SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
- MD5 fe6370161f94b5fb9aafee2bbd9d5ba7
- SHA1 eabd33ceba95384c845f2f77178c6c6c3e5f3e06
- SHA512 52e178409f392ec9427413a0d9fb40dd691c10689dc32b9ea72fa7172162172c3b6f59a0c1eccc1d8bd990b362029c58d1cc24215a4e8443e953153f28baf5c5
- SSDEEP 96:9UcqcNfTXRqw+2dFK8L1ywDNQLEL/Y7wvSvAUDxy1DN:acqcNfAerL1ygOLkYwqvbNkN
- TLSH T100917E4C65A1401A674FAF32C65923993C3B166F2B8B7890990D82E299A3830B8079AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6e6472b3e10aeb93.svg
- Size 224B
- SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
- MD5 d25e2f322afd677a68bab1779e2bf2f2
- SHA1 32ef6d3724f9ad79aba204ed018672b0c3d9badd
- SHA512 9676f817f9c2747027c3cf838cdbeb62cb69cbb903b229331d2a6683827a6a462615bdf85c5c58448e95278064d046c3f4895214ad9768004dfb947fea3f9d9c
- TLSH T12BD0227EB3488C2CBA628620F3BA3279D0E78083024C11A4D933E034A1055DE7D3B6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6ef20e0ce2751205.svg
- Size 202B
- SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
- MD5 ba80d7c61555d55d76b071157c67f678
- SHA1 d9ecdb38f47a4c002419993781a18adb2e2e5da4
- SHA512 355994589fbf930ac7066d3421adda341d366cfea843346448bab1348ab7021bff763debed36c5c9ed4a483a75b265fa0e97ab07889dee56b7e84a87573af24b
- TLSH T1E4D023BD3109DD14A8115110E63CB05310A750D343CC61D4D4433133E0555C9B9776F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\700fa70309836a11.svg
- Size 804B
- SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
- MD5 ddab01322009a7f977fddc4f4f9e5912
- SHA1 ef9c659d4ddeae06813e34fa73566e0a996147d9
- SHA512 dd86867ad05917f1c0218345e734642987c070c169cf8654a90132fefe4d51311e54695b7c4b55596614e9642d03ae88ee3a205562825ca6bf54169b841cf182
- TLSH T19501D059A314987C74730B10E7A6313AD0CF41B31B8C625004B2ED38611924DBDBFCC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\717cc4781a98e1ef.svg
- Size 517B
- SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
- MD5 62c2001339f05323a70c7e8615d9a3f1
- SHA1 27403b987c322e90a15ebf81e79ca33deb0e050e
- SHA512 cafca99f9e063cc9ebc77ad959c730554c9d3cef4d42c1ad55fa5ea67a000a8270b63747b71b178b13d7afa2d53e3b8cbf35640de06fefb261429a174013c490
- TLSH T183F027B3167CBF81C06EDF89A2B21838596AB0F203B94EF243101165605B4D6381ECFC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\72c1fd3caec7d678.png
- Size 4KB
- SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
- MD5 24ebfd7bfc876300fb5e1c14389a0199
- SHA1 d35781d9d3b59f68fd80723bd71a7ed2df7444e2
- SHA512 b4832d3a978f064e4e099d82f7a0713a30be6661d18408215631c30739fd26e8d4fb4a27057ac6d1b5b57203b2405c330d8260a2399d1e54cda8520e8e5d5f25
- SSDEEP 96:fRSB7T1oPeSGO1a4j/eqjNh1KSjzWDjeK392XskWAcSW:+7T1oPeSy4j2qNh1zvsEXzWz
- TLSH T17D816C18FF9E647F211B0970149F7ECFAA3C72A21C60D95ADE6135B03907E426BD8310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\72db340eafb58783.svg
- Size 515B
- SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
- MD5 a2dc425931132d7c17a8fb5e3033232e
- SHA1 88555531a1d1c07fc147660e951055b9220aee64
- SHA512 80b5fd386eed7be242ec7faa04edde8268af7d2381671761d7557ea8edb5022182765ddd2382b8ecf7efd72ad15442724f0d34bca946115003e61533b30ebd90
- TLSH T1D5F0E9352188BD1EF253DF15DB737919F8A980521388215C89B7197D90050DE7977AEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\74ab371d1003b3d3.svg
- Size 609B
- SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
- MD5 ba1eb00b3c8c547ed41bc5411e07c7ff
- SHA1 7c8ad74e9005245fdb5d038c5f57cb095e3db047
- SHA512 23551c81f10653eb50d526455739a63a9ca9a8ae1a5c1a391cb7fa87fc760e0ba4687ff870a6c1db867b9c538a0661567e51adb5b90d7ca178dce087030dacb3
- TLSH T160F0AC38E3CC962DFA624F0C937324B8D05AA48747492084CE70B03A25690CE6CB3AFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\74ef97b398a3165f.svg
- Size 1KB
- SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
- MD5 4630a50507ca8415fbf5b11aee92c6bc
- SHA1 c35e4f1e836c4c7cb320306e045b2440b32763fb
- SHA512 cdd20a080327e23cf97dc80dd8cfea3c851a956ed666fee85fdd781e6460791f8e5c86564383f2e68b59ab4cf0abfff4127b2ac08e35a7bee04fbb5da350f67d
- TLSH T12911CCFF92D448D58204AF84DC138833B9597CF67E9E194D64EC616942312B4EC8EAA8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\77a9dc64dd93830f.svg
- Size 568B
- SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
- MD5 536af5d1866d0ba555cf4dc22019ea62
- SHA1 3489394d126bdfd584883774f70c479325417e32
- SHA512 a4cfb72c5251568837716967dd97ddb70ff917ae41467a61b867dae706a8e610957b823f3fd51eded5208095348e337a7b6b2ad366b36aa2490b3048afbf4294
- TLSH T152F0507673A84E2CB7B3471CE3273571D0BE4086274491D0C8769474910519D297F9C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\77d97894772b8d2f.svg
- Size 5KB
- SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
- MD5 9b4c6f25ca110c09cc4c9b73bfa62e1a
- SHA1 9eb090fd2efa6382607a0d536c49384cdb24fb66
- SHA512 41a363e8f36379db26bab2d60e5fc257516868aad4b70f9b9273fedf1c352bd02089d505e68a9b3b30c9fb4827e219acb128b346dfb923917e584808a57c31eb
- SSDEEP 96:cylQOP70251/6zuDLAY7NrSzF5iBNTkGZCfcQNdeV0aiCmY80Xxso5cSTUf:cymODVwSDL1y5M6cm80aizB0XxF5cSTg
- TLSH T176B185FA9688D9E0D787DBB1CE13A9B5B95F34FEBF8193C90150D8E456A41EC494CC80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\785ed704eb4b0eb2.woff2
- Size 34KB
- SHA256 be536d8595b860ef2346d7a590a1112782e479ac132d6d59ad0f7db9a638794d
- MD5 47a7e145ee24da279e4efa1e2cb008e6
- SHA1 abef60aec983c94b969601ac71a3c587879f782f
- SHA512 a3eb1dcbc4cb6abc5e1804dc4497cf22d332c8d6c0420ef8d136cff2a365000c6a8190fdf48717867ed267bd7848550fed78a2f1945e11ed4fc53dd83992c7ce
- SSDEEP 768:/7tV1XiE57gy2bSf9nFjhOaHAqcryWSE881H8BzOhu0ysuJaIls:/7tV1yOfoSfDS8Z0yZQIK
- TLSH T13BF2E11EFEBB50D68C1A662D9829BF7CEF0DA4D7533D85EC42C4479D93C13E150A6828
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\78f56f56b149154f.webp
- Size 116KB
- SHA256 839b4e0a8deab0fe9eb13c59595dd23f7251839d8a1ad89abf7faeaf983ad1d1
- MD5 5b1a2855a272e3b6fd0672e94247ef97
- SHA1 12732649e6756d70491cb68f46faf3db47c5c98c
- SHA512 90d0eba053e0d30795cf58461a2e931a8fbcb32ba401141cbe7841325f936021e0bc7b725815b03f55170d8382c3fd5b09aee183ca8836a72dff1119a79436db
- SSDEEP 3072:OnPgZsyOLdsSEWWUjgLNe7SbsEiGk8HfKuC/E9gkdpoE:On4ZkqFLUkL47Sbs2kiK8f
- TLSH T179C313030C939E49C22642F2CA50F3ED27F79B05E444B60EE17AD9ADE6F500A177F665
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\791eead8725e14fa.png
- Size 6KB
- SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
- MD5 5c5ee848d30d3d57c4499320cc18b208
- SHA1 be470e3f8fbc64c6d0d612dc0bd1475aaa624b1a
- SHA512 f1bf1aaf0e0ba8ca4fedae425799206bfa365c1723a03b3d77119be878209e45616bf77a7a8fd48c4c37f9a79b3b9346649a57136da9b300427b00b4d946843a
- SSDEEP 192:VSAoZwRIBh0MWtMQy7Zmstmm759qHMlmb2E/v:XoZwWpfFmsp77dlw2En
- TLSH T141D1AEC68C548655164A1747BB03509EBEFB32E29B312DADD8BD3D9CAF6402CD11F10A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7bc841d9002787a9.svg
- Size 573B
- SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
- MD5 7b77a01abbef5455dcef1ae5dd1a6081
- SHA1 d6590f7fa8a62d35b948701ba4049fa387b3c0b3
- SHA512 188769d1ab07e6bc67aa15aa8f3a9d60b71805fa4d293778deab1f32c7e9fd483e55f4874d616065fb31be42950f18602096cc14bac7439d5a349b3b32503347
- TLSH T15DF024B8E3C08A1D3EF31B0DE72BB564D5AEA642118D20D0C432D1B471146AD69FF6C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7ca3462510c989f2.svg
- Size 429B
- SHA256 bb1f4b7d266f983d3dbb9445e9738b78a574190b1437dbc6527e3df60c4874eb
- MD5 7eea59c0e2ee2079a265d2e409fb6ffc
- SHA1 4e243083912ab22b54482b88760809370807a0cd
- SHA512 9532493e5f90eb206eb80b0a96ff026cec7c3be8cc4478b054e49ea747c18f2063c2427ad5a1e70edd0e63e3f3d1c12e21139625eddf0b7ac8f7eaa0da4bc517
- TLSH T181E02B6913045C3CB7F3471CF37B7578D0BB40530249208085716478701A59E3DBB6DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7e16ca1274952ee7.svg
- Size 8KB
- SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
- MD5 b4bd5e64195a14e9513a258aa94a7b0f
- SHA1 620ca304c4892f988b059e582c0ea07681fe7f0e
- SHA512 eeb4fd83d865033a689ada032d774c93ed6570a5112d97b208f377eb76aa78b45caeb5d258e84d3ea06240a8b786160cbb27620e9583f016e5f8c38dca621e74
- SSDEEP 192:gUdM19ZOSA+ATALAutzftzQALANfgdzdg1dUdGdUd3D3cFNpemA9vEd0:gU6DsSA+ATALAuZfZQALAJnRL8mAxN
- TLSH T1BD029CADCF180CECBDCBCF4ACAE6569506DE11A7A41495C48FEF022730627AF6433589
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7e28f70725b144c5.webp
- Size 17KB
- SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
- MD5 cc2016506ca46f0e04ccdad76a7cd5db
- SHA1 7ca5e0cbcec4195332392cf3a616e09aaf87acf3
- SHA512 e89f9a70a9efc110c356ea973c3996e357171c952eb8ca0572abe12cafb6221e35e9b86e899d2bf93a7ef39a5fdfc6bd2e9e7f33a5c682b6167fb98ead086df1
- SSDEEP 384:NRFBxFF/zuvlRcltOZSipop0dQ0+pim3TvDVDmrjmqiGobHj7:HNFkWtO60db+Y+DV3jHbD7
- TLSH T18C82E15386CC40D2EFC67857D8A6974D5BB399A1F1EB7CE929C283560560E381303CAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7fe0482b83201fc0.svg
- Size 750B
- SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
- MD5 2eb9dce7bd04ff2e0e315969ae7edb92
- SHA1 f73dbed701731094614361ec027d2d498e56b13b
- SHA512 81392903eee888684ddf8cb8a15de3c385395ddb57d8c10e7b56ec2e8fd93f97eb915559e5f9b4781d381fa2f32232c789614c0a6d6d2c8e2a962c01b1df5cda
- TLSH T1D1016DBFF3A58792B6C6EF60F3262167C03F19F45FC602C114A1C598680944A6C9A79C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\809a1e218234bed0.svg
- Size 1KB
- SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
- MD5 5f994f0a682f6799951ec84285f44c18
- SHA1 227328c087012661186ac042aef6c3657997b5dd
- SHA512 3d6f88c1dec543b16c8cc607f8dfa6dd3d0ad4586b7860872298eb09a6e3a7db37e3285c8c0f841bc74a5a1413f3d6a989620dfb207977cd785c54f02ca2aef9
- TLSH T1B82141DF23D0A2D4A8C3C768DD0A3E6611AB01FA2E2D82808923F5FADB041A4C45ECC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\823861837143cdc9.png
- Size 3KB
- SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
- MD5 64f40331141db5daa7d9a0e532750dc8
- SHA1 6056727e0260c8658a7bd52f6ba2905e0b3e1f8a
- SHA512 859ea07989ea172d94ade163493bf2c6e02aa0f7da95415307cb3ec6a26c1dd675e9bfe35f77a0affb736bbde80f9092365ddf3704cfe3dff81e2be5eb48d518
- TLSH T1CD816CB6A2E0BFD938359175454A92BA18BF23FE5483C81250335C1822F36888597518
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\833aa64d0b4e0fae.svg
- Size 25KB
- SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
- MD5 2dbc8f8b3ca75ed9ac5a869e23591525
- SHA1 87f712a9df018a8356e2da8af412e26467462db1
- SHA512 8a6ef67a053d4b51e37be308b954527d6c4acc9843ecfa63dc0b2e791fe3afd2b0885ff09fdbec69ab5f4f01db27eac5ab70af816b394b92748d52b394a730d1
- SSDEEP 192:gUtCunnslmQAbwtyRKnpDbwwQQQQQQQQQQQQQ22RdFXRdFXOTyIySxLRLGQQQQQL:gUtCunYmQA8tyq8P9OyIy987jDTtvF
- TLSH T1EDC23B20C97D25AA1DEAD650CAD81470EEDF51DF6620AF2478958B3EF013CE950323BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\83a9049d6e0cae5a.svg
- Size 251B
- SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
- MD5 ac23cab059662ced0b6ca1c5f06bcc17
- SHA1 8d5c7a9cc642b966a2e237e1a8d93e890f63d638
- SHA512 017c411cf345822ebab30a5621d5cb5109946cc6662e3f47f65fb8f950ff0fe16264d4e665ea2ead73ba18fd4d06c58f3f491fc5be5e2f9ffc0e20e0f1c58b10
- TLSH T19CD09EB5602DE9355840C118526FF5D6F06E94D5918542A450A1DC25BD449EF34353E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\85004375da840fda.svg
- Size 694B
- SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
- MD5 9a104bb6f305c360ff275a8d1415f6af
- SHA1 d90e898e4cbc863aef5ac7e4323c1f810ea881d0
- SHA512 930d14fd584233d1805924d0792748e47db8edcb9ed6b037a4361cf285a9861bf32c14ded9503db7d5536880bd24d25bd7ac856b5a5feb5d221aa4a94daa30dd
- TLSH T1FA01A4AA2318CC3CBA334A28F356363D20222653565E3154CC336179061915EBA3FAD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\86235b4464b5fafd.svg
- Size 2KB
- SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
- MD5 9c7e0868176b9454fa25308a053904ce
- SHA1 f8257e2abaeff2167a817a693330df86ddaa1c14
- SHA512 f22caba59b45274c8babf8f298c008aa8508e0dcae7061b0e5413ed7bf310083eb463c013efe70067a24b7e6f6a5c1f312ef1137b7963eeced1c58e5dc9516ba
- TLSH T12C513EB98B150C2D7DC9C594E3D93906311ED1FBB518A48ACE1A46737007B7EE433A89
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\869ca107851f570d.png
- Size 30KB
- SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
- MD5 17d68ab7d0199d5bee574d54369ca4a3
- SHA1 843493b0ff62ec3d6d56d7b20cdb1a649d5ea118
- SHA512 b028548d44b477ac5870ff687a8904c5d95fa1eb848ea7a5e10be9e91fed32dbe7adfd4d2280a3b81132d5cb916be621fac610658d8b6e3d1a1ec9721ccae4bd
- SSDEEP 768:iTeGt+eZRcF8AuwDCQH/V6E8QWuHzADDkQQBWUhtn04eEznAsETwO3j:yeGt+eZ9NYCQH/sEJGDlzUht04ZAsEdT
- TLSH T1AFE2E170B928D1BE76C5E1F2C747213CB4004ADA95D39B36E299590A93F14EFB14E1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\86f46fb860e9ed7a.png
- Size 3KB
- SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
- MD5 3d0dd59e1665b27583e760ddbd5560c5
- SHA1 51e8504c46d94704717094a917e6d1b34e7cddf1
- SHA512 fe8a98efb29dd8f2cc46f7677401204cbdcdf933f99f127fdb19d96704e96a25492aa2d18ce3ba418b7de5556df671be5deb6b43429f048f7287ef12e54e7433
- TLSH T18E816D794990C9F54A332E1387F1DC7CB15C022543A4C54A4C9BF2108BE8DA12FA64DF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\87869749858a9270.webp
- Size 4KB
- SHA256 771ce803a984293c15bb4fd950f58f77fe8ba3aebe9c1cb41a209ee928bb7761
- MD5 51edfdb4a3670cdf7dfb18a1699da4fc
- SHA1 4ab4a167d2c54be2fa4613738565cf531c22762d
- SHA512 0def96557a2cc51d2c06ced4a539e537d6797bba3b68caa8f51eb75bb92a8c2ef6012c327c7fad609105a448510cc346cb0e35e679920069b06021e700af381f
- SSDEEP 96:yAxrY/H1CP5M639Dr/3wy4ZR/gUZwhlB9FYrpEpZTcWumMbNryBNlS:yd413FvLM/Gf9FvpNzu/ByBNlS
- TLSH T160A19EB397E50E90BC525733AEF276E2D71A00C8C842D791F3A469D5B7E26D21033788
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\878f446ee6de2255.png
- Size 7KB
- SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
- MD5 72d220a8eccb47399a3e8ea297067e51
- SHA1 f5673c263009216248dfae9261673cb52af68767
- SHA512 23cca38b14493c1c3570acbc7c1ed189b1dbef6119c1fcd25271e730dfafb7f0aed7a78c127581d607c9c078ca4ef78d918c49455c34ffabbb61add50cf45806
- SSDEEP 192:2jKPknU7E0bvoEko79Fpbe+rL6MWp7Qnq6Ja:YKsnEcEko7/1e+36Rw9a
- TLSH T1EAE18E839616EB445C04D07CC7DD5F9A373EB21242CA6A62A98CAA457D73F11F67020A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\87dc241b2c0177c7.svg
- Size 42KB
- SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
- MD5 24f6ad0429924c3e33a561165f3da2bd
- SHA1 7186877c137b5d86bcbde22157efd87062f72f9c
- SHA512 1a09f1ebcbe1a0c69ff837f57228dfff980204b10f3fee6a9277728ddbf43a1e75d05d8ba28df5336d70beae79cb3f061292a44353b646a36c220b8294687b8c
- SSDEEP 768:1i2z4uhB3uJxb+7yN6s4iYQc09CjAkmrcACaCzajRY7pv:pBeJxb+7DiYQxCjAbRYFv
- TLSH T14C1395CC3B744A9489C847D7BF46A0BD682772EA4EC48848C05D6F4D28E19FF4E69DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\881503b944af06d9.svg
- Size 1KB
- SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
- MD5 f9db57f31b39f6da22bf9d9a72a2ae47
- SHA1 c81e3a8b595702ce2c78505c371da2a3dfe54ce9
- SHA512 46ebc638425ecdea3933e2b0271ee8f696832ec2afadbe9d841c034190314cb8cad0e4bf7520d17af6c5554a0c597f1c13d70a3f210c0b8300e7ba7db309a8e3
- TLSH T1782121F333F17A97A213C722E5BA2C0A21AF44F52382499240F45E908FA14AC7B8DD85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\885856d657cdfb17.svg
- Size 272B
- SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
- MD5 51351754c26f9a3c41f86f2d2e2b52ac
- SHA1 b0c8ec4e2e97bf609b2e3dde81c937763b317332
- SHA512 314a13de5cfb45e816a6dd9f9a735494a645a3418e4306865760b7014ee706d0f4fcc9e00c2748dc81467da86194ab0fc3c9f3e0ca924b8b3c54f5bfc58d1194
- TLSH T185D05EB96348C82CB623471CFB653568D4BA604346CD2184D93AA9377045AEE7E3B6EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\896669c7450ccc86.png
- Size 6KB
- SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
- MD5 1f45be0094bcb4ac8ec9d827da9af706
- SHA1 0f1e3d2f7722858317d64f1a74fcff5b5c7c00d7
- SHA512 ddd11d49428c42962b31da9e6f99537d37f3d956fad27d396398757967bbe034015c5a35ab272ac6a612bb042a3f4de2aaf7ce548462fc4eeab66d7e21b47621
- SSDEEP 192:wWumlSGgzMt4MlzYwHonVQHCAHo21+Z15:w9msGg4Tl8nn2CAV+Z15
- TLSH T10AD1AFF5298E18DC0274B16707D3F935C8491E0D37498ACB64B7438F90E1C7A1D03E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8987293ae7ba4469.svg
- Size 388B
- SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
- MD5 c73eccec9045a469690bf8d25f1b0572
- SHA1 1efa1d7627cbb95bbce5278f123636e830e2effb
- SHA512 a60150c1c6e376905cceb5f61527a25ba31d685bd5ab62caff1c809f69e722e7c28a999d168598f43f57587062546741ed8b84a2c30bc2c010e89a12ba8657fa
- TLSH T10FE0D824EB0C4B3D9A17C1A4DB6DF334075EA292325C0438E8ED1631515B74DE837AD4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8a62bca7498ca4cb.svg
- Size 343B
- SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
- MD5 0d31b32c08dd1fbc6615723d67497f5e
- SHA1 24d9c66824aa5b906aee7838293d022cbc358ecf
- SHA512 0378b40c5abcbc55e56dc450fd5e2e00f8e458091235bec482a30db90866f2c60cbbd8c67cff08505f5167df10e2e8ad8522aabcc85a70cc86681d71a50ea327
- TLSH T19EE086797398CC3D7A274A29F35375A9D06A2012578A2120883AD43450149AE39FB6D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8bf0bcc9a3301fbb.svg
- Size 798B
- SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
- MD5 1f7bcf3e43446e202df261fcd5ddbac1
- SHA1 011f0cecb831445f17b395f57a814c2c918b048b
- SHA512 ea49d3bca31871953ee7ebb883465cca7d97a8666500b15ccbd75a4b7de05a3523ca78cef38edc92502b34d0f55b122d67101521f56fa1d1c7c2d69cf2f04d36
- TLSH T143018EFA23D4AC6E62124358E7D7385950EB2031435B61D0443296FEDA808AE0EBF5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8bf79756f58263e4.svg
- Size 3KB
- SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
- MD5 e497663405ed33536122ebe5d487a6d1
- SHA1 887bafca5ecb3826032a9d195da4e4d28c29aafe
- SHA512 1dc057920f2a3b29e066889553227184400a46171bd90c07d82602ecc0f3a85fba71f9fac2e9333e9bf76e2cd6d0823233713473ebe7bfe5de7c8a07c8e178c6
- TLSH T15D6199E5A3D932C0C2414771EF57A876B42620F5CF04C78E456EBED0672A59DE81E8D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8e2cf4504754d310.svg
- Size 272B
- SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
- MD5 93fa396a892528d66410df19e86cddf9
- SHA1 25302966743278d2618d7e4fd48c4df25e6b25d7
- SHA512 4a46f81d2eb7fa983462b9574c250df74ea826e2840bdf78b5665625d42f09d5b140c648b2fe120ce404c93c6b67a84ffec28794365f2403285813961b65e39c
- TLSH T1D0D02B782309C83971A2452CE37634E9E0BF4001038A119094219439B0099DE397B2DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\91ede6982d00ebc1.png
- Size 4KB
- SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
- MD5 bd87d5ca7cfe7492e0111cae4d06af8d
- SHA1 945cb3826ba4bc43576f5abea0c706ef652c15e5
- SHA512 0172f738f9e433b296f45b0928008db613c3a32ec14cfd0d22a676cc0cb19b25de2bcd8f041e8bb90f29a9da52223d8ef9b6f717e1fab25133fe9d51648e001f
- SSDEEP 96:aLPWZnmjAmWoc7+MPPPPPPR/XWSDPlKFEimwRwRBt:rZnPmuPPPPPFXhYnmwRAb
- TLSH T1B3813C4E2382E98D75DC4DF4922CEF549E3DFDD87850A2586CA999F8242100E2B7169A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\931d0abe7a9ac97b.svg
- Size 485B
- SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
- MD5 0a4087e9033cd3f504802369a292bd89
- SHA1 cf5be0762ab84d983d33210c73f818858b24f37b
- SHA512 583df81897003198420390d6b0791e0549500109934409302659c33c402bc10b184c17872320cd22b6ef91b4ee8b181e52fbd40945029c0234f5a099b1c16528
- TLSH T1C2F02738D3E889846E426771E7B17438E85F88940609488C9534B928B26C6FF587A0D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\96cc5bea8cfdcdd1.svg
- Size 1KB
- SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
- MD5 b9f2f799498a4f6bf9bd6b15fe630521
- SHA1 259e1af04e40983cd2de683e93ac3de1431351c9
- SHA512 b057bd4250122d4f1cbbf5b98251cbc48209f481ebdd75743bf239ac1d5ddd20909cd0380feff9960d188ab58971e24d734fc4f8f41c706f19f5f17006f1d61c
- TLSH T12B212DEAA340D7C0848BDF3CDE2B6D20F69F34B5BA014BD57205C4046C225D89C89C90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\96fa9a8683ad0a32.svg
- Size 534B
- SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
- MD5 c55b3c4d31a8b329f1444302d61b66ad
- SHA1 30eae0b1be2936123f979ff4a15ce66cf0364c7d
- SHA512 6bd55d96d9c3a5fbefff662bff236f76a5f5542c9f16023fa987ea6b28bcfa02707045c4e9ad4eafb0ae7590045ed7f580aab266a9cb41385b1a9f0310139d66
- TLSH T135F0C0D210794179C427C334B7A8369231E74CF87F04C8E511F03DA4AD586ABA8DC654
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\97e3abd934c12f4e.svg
- Size 2KB
- SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
- MD5 686888d9e85462d367fcb4b15a111782
- SHA1 e330c4b13e3beb0ab1ce1c681e231df270114d6a
- SHA512 2f2767aa6c3df1d013cf77874cc3af04a57b73b3deeb360d4a7c512c333f0aab621d42983b78f3c02e0b0029809aa0664584bcab8f6a270fb735c70133e3222d
- TLSH T1EA5141EF3384E5D0E48797F29C266836759728FB7F81878109E49B91BA142B54C08DF0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9819b4866b7e8233.webp
- Size 2KB
- SHA256 9a9ed20b388d3ec5c9a0297d2b995ebd330f683c2d944174f9f0f31b2904f794
- MD5 5b08dd71c2c9c1840a2af69c86d650ba
- SHA1 a7aec71bfab85fdb232a8c40394eaf77d9193e20
- SHA512 3c8518d3394ed227e4a1bea0b274e4db8df6f6145483205a54f7c391b334474b20ef6585f2982b7b704bfa2218d6259ee412e0304e7a5c04ac1a5db11f11e554
- TLSH T118514DC864D1FE9D654094716A758D6C183E9173C1FBA7478E43DE1D71811321E2E68C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\982d29750cf2efe8.svg
- Size 1KB
- SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
- MD5 6b478b36e8bed97c2f72b99c307d97e1
- SHA1 089873f7acf704f95e6e5bed3376cfb0c45af191
- SHA512 33e3a9e530fdd0bc98dffef3750edac594ada22416192fc9cf9220a921696897fdc66a82066ba0a4c5a9224d299bc838e200f64b19d60e61f191f1bbe7128834
- TLSH T17831E0F579ACC1C695458B3CCE3D2AEAA1B378FE2F980094B2D5AD58EC743F54C08285
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\98fd046c4f286143.svg
- Size 346B
- SHA256 9723ff176ddfd31ad74a4bad9e14dc6265e8042018621fba64d7110f2b82e322
- MD5 a4534d5634eaffaef1f655e8d18a09d9
- SHA1 3b2ba207247048742dc8c7e93fdc1c6bf0f3b229
- SHA512 bc8c1cd7b93724d01a3fc4097c23d31999b7c47469b495db923c708064b382fbb9c6192c5ffb7ce48b7ee12fe1bc42b65e2584d1d9cb35857df789b830843ca9
- TLSH T136E0266813085C3CB2E2462CF37BB578D0BB40520289208084716478B01A5EE3DBB2DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9a23d988229f3c4f.svg
- Size 501B
- SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
- MD5 24f39f97dd5dc6ee527a38bdaa1c7c7c
- SHA1 82fd9f0a91bc4e1b7b25efe5423f46afd04685b0
- SHA512 4b8a012bf052cd1cf619d1308b6bcf6aab055a3e4a6683a1caaeead7f847320479366f657bc89908c5ddaa08a67510f136f6643b43191e8d29ff7e9524067cd3
- TLSH T134F0E2B997D98B058AD1173EDB2A48E2D26FF19A708842F0CA3596B671502B14C5C2E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9b8afed344c17eb7.svg
- Size 196B
- SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
- MD5 3aba1e29264a8cc23af09bbf602edf04
- SHA1 45adbb722051b6fd01189aa163142a6460c83203
- SHA512 6ecc87f7a0c370675f0323cc3ddc0863dc63f57234c066d54e3204710165f2d952b451beafb005e61266c2148ed9fd3e2c6ce7efd2c54646aa4aaab14315e047
- TLSH T12BD022B9B108DC2AA8208620F23970A104EAA0A2448C40E8E814B833F0465C769366E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9fd27840422642a9.svg
- Size 365B
- SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
- MD5 aff6bd6fc9aae8e659ce753a10a56c9b
- SHA1 ed60a0a1c9c00331c69b7ed5aa282e08e8cb11d6
- SHA512 072699f25e2bad65f5d7822a66b5836cf8dacccff464d47905db9ba7060da67742dd2f793e484660e74b64bcfa2a3419e3771ef18a236b9da1bca423b6082ebe
- TLSH T130E0C0EEC1CC92D14008C311643C1891F86630F16DCA0494E6C2B5E1B01A5FA9C85DD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9fe4e4ead173d4dd.svg
- Size 643B
- SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
- MD5 e24076dcbc50a46cfd1a3edacf16f7e2
- SHA1 ba34de7c502f43c3913ef7cdf335097620a28585
- SHA512 86dd9beb77f7e747d6c5ff93c061bbee5bed5689091e60fd79b2705cf399f7bffc6a2148be351a66057426efbf1c713fdfabc814bcbda8750adb9dc562b4a220
- TLSH T18DF0DDEAA3C8CD2DBB578730D353A426D13F38BA260911008831E278150428C983FDE4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a0ee19f03b9940aa.svg
- Size 227B
- SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
- MD5 474b4df812974db350e641b4b0290204
- SHA1 3347123b5e243fdbea75585361d80c4bd1653d3b
- SHA512 0e5b5d90a3cde0eb1e2d675602661dd7b9a0a1cb5e203434e55d37dab51502ac7d19aac095941013447247b76c3af9e9ea47e5cb12959ba92d44441de0c95a0e
- TLSH T122D0233563C8CD2DA8D14614F3B53535C556C053014D10D4A472F074B0445DE7C772DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a1a3ecb5c68b205c.svg
- Size 166B
- SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
- MD5 eefdeb195f6d7b895ac9bb6d65461e88
- SHA1 c60e511ca5cdc8752d9ae0debe5a108f66ea05a4
- SHA512 3ebb83654d9f1d2584d4ca478ba422f48a26fde8ef52d64b759c2c93e7591ed4970dfdcc0dfef76cfc2faeb2d25b82173ab0dd545c41bdf59abbc39643ab1d08
- TLSH T155C08C76A46CD908C104862491A8B89A2693E0C3978C0058F692713EF0658C37C202BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a49ea8daf7467bb0.svg
- Size 599B
- SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
- MD5 b8a6e66755a9aaef650eef20e03121d5
- SHA1 0cd37377b96f4eccbab78d4532945a9da045b03e
- SHA512 8d81052a3367ca5179677c04d61e65ef48d880074ae90d766da29bab49fa90de9182330e731e7a5d94322bb52d77bf0ad2b08d8e2b70880cd7c75092ebebdf85
- TLSH T147F0ACB992806458B682CB00EB23380CFCD62436478AA648CD2B6AB882010EC543FCDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a58a2e93a4b54988.svg
- Size 304B
- SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
- MD5 2de8b091bb780333b06debd79d5f5321
- SHA1 487072ced909650f67e5acdc1ba9286a3e1e36b9
- SHA512 238d5afbac1d73df7e02763e174b378a128f34a376f7f99bd0dbf1083ea33aa44f0806f4c48b6ff6f257bd949be7e7fa1ef0e3af968d792a598c3faca446114e
- TLSH T194E072F3A0DCF689C08F833180B9180382A244A18A8C048EE78A2205BB144E31C48AAC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a658c46672ad28f5.svg
- Size 198B
- SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
- MD5 1ddf2c975c7b93fd75763147c7310002
- SHA1 ba07ea431ad635528789fe1b5858bf64ad786db8
- SHA512 9f1005b781759d3a8a7ad438e0db494dad2dd1b2656e5fbe3398775e5bbc3de22f28618358856e8d188a9ebf011e538b44ee8318289e4ce76c746ab13833c5fe
- TLSH T1F3D0223AB18D8D18E0548120E22D203224AAD0A2008D00F8E8222036F0091AABA37AF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a7a18b10642bfd5f.webp
- Size 7KB
- SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
- MD5 4e5360c443a379004fe0796a97922eed
- SHA1 fb812bb975bfe68d7993561f7507f52a10f0f9ec
- SHA512 97c812d1417182ed427d2b2897a60e13a095961a1f2efa491ed8c15734b9f7aa699b307e48951ba8af7516173cd76fc8f16fc9e1a23e2cc0c1ca1ca8390bba2d
- SSDEEP 96:GG88hLYzOa33TbkSGrpQkI2tmBPGJpUS8Xg6O1/sWi3ITZeZJ5QNvYsDRUIeGAV8:58POaHToSKTIWpJOS8wh1EyMGvYEGGAC
- TLSH T1C6E1BF07F8ADA0C7F28EA2F20729C5C7286AF6566B7D493430C63ED840F17A5834C90B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a7dbf1405144b262.svg
- Size 1KB
- SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
- MD5 a5bae8c7658dcc9b173fb37a3b706130
- SHA1 5d77045996898b5280b5afa25a57e9b98c560ed3
- SHA512 e6b3e071d8aa4a3a8b893605acd61e6cf87d38059b2556e8678f565d544491f61caf831379e21cfe9eed03ff5fb5946418e307f689d64128498588d6d6a9fd8c
- TLSH T155212EFB8A487984F993E704EE1B3839FD9E54B6121AA6008E269E3857000DD081FDDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ac28779d03531772.svg
- Size 452B
- SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
- MD5 5321ffe6b12de01b95e95fdc515592b6
- SHA1 a337fbd79770e63089ca1ca5577ddf46fc2b89c5
- SHA512 3d404eb19b9d84341864d1b817643affcc63865a4a0835304b151331d7f40fb72c696af7856183800b871bf828988c9d4b90a9a16659cbf57a84069b50e0d0b1
- TLSH T16AF0E56D2304AC2CB2B30718F37A3428E0BB8043025E6084CA23A239505A5DE7A7B6DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ae846f7eddd04278.svg
- Size 1KB
- SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
- MD5 0b3299be8b4cb19444ba84a7d18cf957
- SHA1 e425ec928d7047bd332f7b2597be41fd9a282bce
- SHA512 1c8ba769c42190a1d1083fc1a2c24f4c7849587ed8bce0705fc17bd5ddcfd2f3469385b0a075307462b9ee0ea2c0846e982aa56b1352f5bbc6a8220cd698dd0b
- TLSH T1E6112770A3DCAB28F692074D5762A4B6E0AE978357480184D920557DF4254CA5C7A1FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\aeba9f15ecf7f43b.svg
- Size 224B
- SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
- MD5 0b82094958c8b660aef4652371b21898
- SHA1 4943be7c464d13f465834cfee1f6616bcedf576b
- SHA512 d4328e48073fd0d5d9a78a6a639fe80287805308e5b39a861f8bcd335a0a22b3536898ac314d0bb3d7991c4793fb100e7b2ee56148e0d219d06ab281806fcfdf
- TLSH T1C9D0237963188C2DF5724630F3F93535D0E78043014C1054D573507491455CE7D375EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\af5f97cd7e418012.svg
- Size 973B
- SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
- MD5 09970ec3a3e40fcf1ae64596a4821257
- SHA1 4d665bf30b678eb3d9213fb1934fccbebafaf2cd
- SHA512 7f435aeff4223794f8fa1e6a12cd73eb0c16bad82d3fd1769bec699dcecf97aa7d6406eb47f7b520860424561e209e34c761faffecb8cfe0146fb53f3fc90bff
- TLSH T12F11EDDC33488C69E88282C4CB26323DE17570B78A8D4065EF517A755E4A2AB18337E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b294d3d2f70d508c.svg
- Size 515B
- SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
- MD5 9541a2955a0bf297c841c4f135d0dab8
- SHA1 48a272b857250e28ed73bd7635baf64ca984a1d9
- SHA512 2c2ea27967142de624db1d8ee40aca78293282e025c744c454b5c7ca2c32a756ae931f2428fd981d9202afb13b35cfca8f1d3d18a8f34bd556801152fc21633e
- TLSH T1B1F05969AA2CE919FD519212D22A61F40673A051168DFB10D222EF32B90A08D253EDC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b37bf551ac569d00.svg
- Size 939B
- SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
- MD5 bdf4c4279d555a858a27c0f68e05511a
- SHA1 6ecba8c0aca6f6cd5314cb61b8430dc9efb0474c
- SHA512 7043b9fb7b3ab0002a43570334ef4bf7707b1c3fce0a705497b6bff314de77916b19da5d5cca260e18e584cfd51fd892e07bbe8478d557cafc60b7662fc01a4b
- TLSH T16A117DFA972598D83923CB05D7376C7E1056307E5D25610D0833E87262245EA25DDEC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b4e5db2f8e466503.svg
- Size 534B
- SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
- MD5 e073b511ec1c2c0a51867d6d0809e00e
- SHA1 959db4b8abbe219a0482a82f1e71722165a0dc3c
- SHA512 9c0b80cef603fe2843422563376c0899088342b2c793b84fbe1a3a1722e91d72c93e35afdf107f999a91bb4504833fb9af0f22451525a4f0f8770dc2dfa1443b
- TLSH T131F0C0D5107A4128C4268334FB7936A231E35CFC7F08C4E421F03DA4AC4066AE8DC684
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b631c209ab478391.svg
- Size 913B
- SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
- MD5 4b40df36b925e9247048a6add67985ff
- SHA1 0dfef21a4d555bf37bb7c47461cd76e8151393a9
- SHA512 72adb9587ea581e3c7322df9317b36b6300cdd218be48cdc9494dbd914b44dc4fa62c13094dd8f5e664b92c4c391f84af1c27a999acc6c41f248621c9404aee4
- TLSH T12D117AFBA3A1A8C89D428737C1D6356FE2AB21B5041101C4CD71CEE16BE48ED0A9EE94
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b80fc20fe385bc09.svg
- Size 870B
- SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
- MD5 64b672c5070c3e2419c2be0685b75732
- SHA1 0fc7cb96fcffb31b1152226ce5ee927a89f9452a
- SHA512 51c94af12a91d3e2536e366b0c1450b00eb15a210cc9758b2b472d127be3c6d9a794a2df2b3a909d9c934b094a3323867ebfa610eccb19eaa812beca0e9b180f
- TLSH T12311407167686E6CB6AB8F4DE3723538C4A6A0B2034465E0CE309075020B4AD393FDEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b87ddd7d399ff7d2.svg
- Size 795B
- SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
- MD5 29dc7d2e1a7ddd06f41a5493215a2916
- SHA1 3e31138b55c736f6f1bd1983ddda06bd5ffbaec3
- SHA512 f201473ab71ea2731d6dd474b5e0f77db5f3baefea08e4f733cb30b459c6485583562d76acc8f9827aa0b318fe46958aecd76a44c3b7357c94cd893528a49665
- TLSH T1D3016D7273F4B6293AA74374E3D4303ED1DB5061111A04B09571A87461428CE6BFFDCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b8ddd3b0a5acfb1f.svg
- Size 916B
- SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
- MD5 65b67b30ef230d1fdf6ddecfdf8e6798
- SHA1 b2b7f8630dd6b54d4202ebeb8cf80a27c4ee14c9
- SHA512 cdbd1a5a1619726b303fc129d75ddb11291fbfe4f3d456058bb824284554bd41c70fa00df62c3811dc4849899ac9e5e83e95184fe8a1c2b549d5c6a91898a0e6
- TLSH T1A8111CF26388F1C40509A730E922A8CB600FA0F56E19408442A0AF69B0A73DACC49AA4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b9e2526d946fd3cd.svg
- Size 2KB
- SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
- MD5 da1d6bff9ea092859b8f2af19892a51a
- SHA1 a4e4a35e19b629bc51ad690c986e463b1543c2b9
- SHA512 300ef0881b7363a95bb3acc26f9198f5121e07b928aced0abe030c24231a908f1d188d0803944a8fc8109154f2639f9cccf9a1bcdaf8a8585b831b5c184276f0
- TLSH T1B2518ECC0338BAECB82456ED9B6635B8A8911CE72D339160DAA305E5106185D5D3BEFF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ba9bf1c3957e59f0.png
- Size 10KB
- SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
- MD5 59fc427e5c4bb9d6672e09c4cd84c9ad
- SHA1 997d87eee437432ff8e9558e776b92395dc27695
- SHA512 99dc306ec1ee734abd8f3ddb0a0b70b41ba94e7991104a5ea963dfcb8146510f0920147e5b704ff0ccb8291167ffca6b4bea8a1ab90037bf184e23f92a89cebb
- SSDEEP 192:wSxPCUkL2wtudO2AOVF6swc1eJGMbvmzGIv+81bg83epthkZh:XxPS12AOVF6LcfM+Z+8tH3ept27
- TLSH T1BC225BC73EDD660F09F203568317DDCC4A7B638B58333658DDDEC71902AA2994B166E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\bc4e54d6f0276d36.svg
- Size 8KB
- SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
- MD5 420b7f6246589947f326067bf9ce3725
- SHA1 e7146140ca1aac3b9e47aa13791d59a980231714
- SHA512 b7ae78cfb896ee4a9fb57f5271a8b3ef9eef46729fd76fd7f22073c311fc8e87bce8d8bc3e30d7e7acf4a115bd1dd0f3f30853de56a394503b1351eb7cf63feb
- SSDEEP 192:gU9Q5e7M5e7Ar5e7d5e7h5e7X5e7z5e7vRiupAppAxoBiGM5e7nvN:gU9Of7N
- TLSH T189028EDE861207AA18F6C2FCDAF415363C27C1A5B9A97DE0CC7F57E6C00A3DD4462568
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\bccd629ae7cb011d.svg
- Size 217B
- SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
- MD5 078d33346ea8905025012e5ce35bf0ab
- SHA1 cded092f38c0881aabc7f2d78840f9bb96837f8c
- SHA512 39e908c8880e4c6d4cc5009b4be6ace706b8af65c12da747c14e15e28444fde66d5f093154e173840f8c12c8d860deb24356dfb7a90e3d63be4fb625d87d7c7e
- TLSH T1AAD02374719CCC6992078110A33B705564D6E08F414C415DE520D431F5156967F775F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\be50ce6d9253a5a9.png
- Size 30KB
- SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
- MD5 d78c527a67f1b079d13cafdb39953355
- SHA1 9c3d29767a33680bea37b540ab60e37bf908998c
- SHA512 822471142af3546917a18dc16833a71429952ec6323bdaccd9fb2dde2ab187018e536a8fc7675af0c0736d7ba76c15ff6d77866fe3f20328243c92b52600dd6b
- SSDEEP 384:XFnihQJHu/QGFfO6srruaOkcQ1J7zGrH7RnbLnzfAn9p0/5+jeqVkRWSaC/kuqqd:1ni9/jlcDf7z0H7RnbzzIExWVrBC1Qo
- TLSH T118E2E190B47D17964FBCF8D69AC160F0051EDAC221F0E392B1F580F12A8F99F24496DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\befe724adae4279e.svg
- Size 297B
- SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
- MD5 0d972fcfeca13bd6e44107f96ef69a13
- SHA1 b99e0f567b1adfda5fdc9917ecc8ce60684af51b
- SHA512 a1dd4c5efe55414f2c65bd0d6d5b777c0f9ed1b0ae1cdc3eb3b5ac70eb0ff615b3fe6fff9347a498bf4c43df2e2c656ad19a1422a336049dd60af2043cd9a5f8
- TLSH T19DE02BB9235CCC3EB2374218F35379FD207B2012034D221088325438600499E397F6DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c2975b0d0a40a4fd.png
- Size 2KB
- SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
- MD5 9cdf89587732904969020a862b7574c5
- SHA1 6ad9fbb1d0ed380a529adc13f750803f500eb222
- SHA512 3f677bfffe1162307ab887b6d7f7dae89fe082fbb0e5e38b60a51f9ee3e2aa02688502a0de41362e7871a26ee53750da83fff6847befdad1b63eab3248aebc41
- TLSH T1B2512B039E49401F86272A058E67EE56BC284FD3494F5E2CAD07AB4E58518888FE0029
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c3c4018a4fd62a9a.svg
- Size 520B
- SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
- MD5 7d88be10f22bad34e4770cbf82467d38
- SHA1 d5ba8579c567538625bbe092901ce4cacf4aaf8b
- SHA512 116fefe71be78ac5eb08d5ad3323e80a822cae28e75c2cfa92eb1ecc01f972b2eba35ef9648e54c1ed278180ce39817084782451b542693b029e331e6b9e744c
- TLSH T1EBF0E2F323B49928A9E78F41E39230E452673D12738C52A65471ACB4616C38E9D7BED8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c57ac42a27678f77.png
- Size 1KB
- SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
- MD5 00a42dc8f8c76ab763a31e7546b8de7d
- SHA1 c4bab33008be2578a304e6a91052bd88f83cd80a
- SHA512 0f35f104cecda130f4028c6c0dd7072e7e6b634b49820cd48f5b0362f00dafe5d0684b0ce2339a3d4ed167bbae45bcf3be9a9ec834de02e488b80062caaf684a
- TLSH T1FD218AD4F71B0D06806CCDE1711A2BC0271AB52D5B7773704F29291F4526DDD35469B1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c5e2e5518ff4a597.svg
- Size 884B
- SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
- MD5 0c328010811ae6af8daa9d5bd92d9746
- SHA1 421c2c5ca21828e33280b3f6b7d5a3cb94bd4cb8
- SHA512 a67bfeb401f8d5d9d8cca99d4f7e4ce5fa727212b63fb4804bd041eae58095aa845215811221b85ab6e9bde707d0ec768e441e717f9076cd33e21458373130f3
- TLSH T15D11C0FB428DE5C6F103EFA1EA71906C11AD387C9FD9636444D4A765B3900988958D58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c5ed42bd4f1a6974.svg
- Size 394B
- SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
- MD5 3378d65d135a45bd597602fa2cb15fff
- SHA1 9ced7f7805ecafafb8bf1ab49fbd1bd2afb47211
- SHA512 873bb7e138b3ddb8d2a937b3381b1a8f0976f251c0922a42287b4ec67a56fe5bc87f6abc6031aa866fc48cb3ac91dc7331d48472562c11a8281babca65ebff8d
- TLSH T1FEE0687E83C48A18AAF30B19E37578A4C07FD442120E0190C530E2B9711A2DD7C372DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c6b3624b8cf9684a.png
- Size 3KB
- SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
- MD5 f51b14d920415dccbc1c5d3b90e96afa
- SHA1 bd5d59badddc325bb4747418845a824b1e5ef1d9
- SHA512 ba620b850f329be6e2866ce456aa86e1790e7c1c11dd5740aaad567e953d07a61d7bb7a9cce5e526d0d70977b5137b1d299e5425cef2e127b92e6d19f98094af
- TLSH T1AA818E9AD035C0905DEC2C67609E020FFE5BF907466DFDE12D4298A3214A25FE47A193
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c7c6749d23d7b7f6.svg
- Size 221B
- SHA256 201cb9465adedd0fd56784d027ece0b539ba644ec0ed515de4b5a3c54cb5d112
- MD5 e804f3197ce266495e04f590583ac9c5
- SHA1 68f3eca5527bb166022369970c9b114344c23aa9
- SHA512 9c8f152faa01047d21c63ac1eb6d3e593854224cdef64978ddc6e1eb30fcc0652f0be2df868a714c7e159d1d7aeda4e95b2d4b623aa13c28328f6d9be1538e8e
- TLSH T1CDD023755314CC3870214114E365342C75735453434F10C499312035B0595DF793F2FC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ccdd22e861d21d30.svg
- Size 936B
- SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
- MD5 78ced8fcfb11e0fa8cceba92bdc84d6a
- SHA1 f6c219bb724d8a47e28e2c72386163d71ecd3195
- SHA512 fd04124e67fa9fe834adf5d4e9a9ac4c768a03cfddf0331a6e540febfc9f40e96f140884f3603711b2195470ea8c5f574d950694f3bfdbad480e243b93426374
- TLSH T1C51159D663068CECF6A30FA4D7223271E06F01536A4863A0CCB699F4701929D6D7FDE8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf4e50b4c6dd3858.svg
- Size 711B
- SHA256 b77cf5b08305ec526632cbad0ff3356d4386f00e5d88c76732bf7e9348a4e0f5
- MD5 0381a8af81cba14c2568e4bc57c79418
- SHA1 726cc02e4f9548c78bb6fafbc0afe8cdea85a4f1
- SHA512 95b3c900dd084fc0b0e08e96e584632c465b615dd81db654d6efca04ef14d02369ad4c01066cf3d9b70e79c6f39795b0f7f6c323e29f37b49e5414bb6c43a29b
- TLSH T17401F4D652A64ECDA04F4750D3376939D75E30B22F5544B8C1A2617DC0114CCA62FDCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf589dea802c8964.svg
- Size 221B
- SHA256 8f2a24e72ccb25219d49ab352eba207262587b56eb20d1ffd5320bd1f5812d70
- MD5 ade3815f755e11c2d586c2067274f010
- SHA1 d5a0cd5415174a38515a3955f3ee65c3e469afb7
- SHA512 aaeddbfa7aa78d5784fb895e0cdb366eb2e9f12107e6421b2bb44d045d5c138e6f74926b058bc4128a8db5f8b60b975fb2e8d648f2d09ddbf16b697ed7bf17a0
- TLSH T1CFD0A76E1218C828B0224214E7B436AD657A9056424E11D4A8B21134705858A293B6D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf9e121c611b5d0e.svg
- Size 2KB
- SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
- MD5 5c8e3fee67a1959df017e4b6e1cab5e3
- SHA1 2f85f6d29068ee32aa7b6fc419fafe61f4dd993f
- SHA512 14c2d370e34ec93b663aaecb3e06ea198b4f93a62fa4ab9401a7dfa1b63b9418409d25ec279e293128bf0debb044cc7fcbadb42a770b0ce6654635fb1abbb27a
- TLSH T1B5515494C1D611566A7B0678F79CACA1ED3054CB8110039DF85E31324F37DA1E9EFEA8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d05dd34996b64d16.svg
- Size 16KB
- SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
- MD5 7f91673a342ae61b72cc80558a1b3cf8
- SHA1 e343e0a561bb9072097ee39be1c1ef1dbe661b8b
- SHA512 703b247cc8e3857a463f240843b04dc97ad7c1ef9d95611d77840c984323ea839aa7feeb7d2969a5634be248996bdcbdf6d986f30b979dad4eb8a50bf6edab38
- SSDEEP 384:+A7HiDidZQ1HIoDv3062H+9fxSt3Hci5KL6:5CDidZWoPQ9fxSnYm
- TLSH T1BD7243DE3B744CE498C9D3DBEF0150BD781791BB59D14B24C62C9F18389289E9D2AEC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d065dd41270e47f7.png
- Size 4KB
- SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
- MD5 91c3a4fa0395d9977890bc7677453b07
- SHA1 ce027b37582383c7ad313e4b559e61d239cd03ce
- SHA512 3b9ea5909dd02ad77524dbdae4dd99f56f58cb995dbdfff6a62cdb2373ddc50689a4dd76ce3288fdd8e594fcb70cf124689a71aa64c9420af4713d98f73f72f1
- SSDEEP 96:XdUD7yW/D3I7cN/LjpKpvEUQGdFzPEclx30/qJIfXyNhj+IGcImZdO8Zc:mD7L/D5N/xqZdBPEaaiJIJ8y
- TLSH T1ECA17E73F429CA08963836F41252DD5CA8B2456E8B3BB62FF46143D23CD5414F92B78D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d28440c6dc230bf9.svg
- Size 290B
- SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
- MD5 34ad08b932e183b48616ffa2a92d5191
- SHA1 804010cf0d8b0db78792761c3f2fc190ccdb9b4b
- SHA512 1cbb02594d07bbb227dae001c5172c2b2794a884b1304e2de866d3a3cba4a9764e463cc70c2b5ab6d64cf912c6b055088026cce6af5445f83db443c7e5935f1d
- TLSH T128D0C2A65059DC0551214B34C43C39C22072B88A2DE9009AB1E02925BB586E29D482FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d2cf554ccc93ffff.svg
- Size 263B
- SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
- MD5 068a54ddbbe7c996938526b3fe64b668
- SHA1 03d9409f55c29ddab23f0972169684555057fb5f
- SHA512 93fdb28c7d672589fe6e513886eb16e7ebebac09c0dfa57feb33d1c71b31f9673a591abb15dcb9fcfa5e41a20e37e862af85f209bd7114dca435edd379a58a76
- TLSH T1AFD02B6811088838B1A18218E3B6B17890BA40510288104084A11478B0195EE3D732DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d2e19878110efee6.png
- Size 3KB
- SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
- MD5 418a3102ec0a854f1d8517859fa37a29
- SHA1 0b6e9768aeb3e658ed2ecc7335906418e6a75975
- SHA512 96442ad72823c867a4cf15841d4854917225afac76079ad9fb5a328316c8ca38d0d152813167ace5157048b3ab4d3927112986be27c874026d236fd83dd8952b
- TLSH T154615C9D712BCC049E9CA3EB4F34522DB2BFDFA51CE14B689A81D7E9404223475C86E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d46d147daa1d2f79.svg
- Size 945B
- SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
- MD5 e4d5f84e187908d2f0f7256abfce8f8f
- SHA1 b8a2ac5e98703dd8382bffcbc57101610a37e110
- SHA512 a7a5c87f1a0c5b7fa95de1cbb3d9fdaa60efc91d4d3749244a339364789b1928da744425cdbd792a26346910baab47f3f7b3cb5edc19987561c07d5f4670387b
- TLSH T1A211D0F3B788EDE43CD2FB68EB271039D54A4CFD081CE2486C26D4B9A71008A841B5C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d59a1307c364439b.svg
- Size 674B
- SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
- MD5 76707cf7830db3b0268558614d0d95f3
- SHA1 da39106e23c8be5fdee30543274c363ecf0ae7b0
- SHA512 07ef948c556b7e24a3d90a34847bcac64b811a820491e50fc1120b0d922f73a86e9107627730bb27f5d6a02314a3ffe6d15595fa7ee7167bae9e4dfa8583ba20
- TLSH T1470123E6318CD21C54020B10AC38B9D476A239D98B4E8009F0C1557EFC9C292DFA175E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d78ba875312ee059.png
- Size 17KB
- SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
- MD5 1d3f4f42d3b3aa8f7f4923e340d62095
- SHA1 504f880a935a030c28c2d1be25e3e4e9f6cfa2bf
- SHA512 715d2460ace192a43cf712cd17ffd5d5d0bf0f4aa9fad06a8b56dd3b0da8e963cf0500931a7fa0102ecab40e6a5c0bfbeab773a3bfbe5f5119837e9fb127448c
- SSDEEP 384:XC7s6ounfrhHshunIhXP/dLYDbLscd3DiKjxbWc6PF5/MC:S7s6ounzJ06DXscoKFbWc6taC
- TLSH T1CC82AE5A096062F183B78C9E797F6734D094B120222A906702FCEDBEF07579EB9B5202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d7dc8f3dc0f234e6.svg
- Size 1KB
- SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
- MD5 59e5f687d736e690c037addf385a355a
- SHA1 f81d61de38442fb066fb45923d61d06b5ab3900f
- SHA512 1c696617cf4b617111ac6280cf5a11886f7792fb21014907b8685a5e20e71cff4296b020598a64ea655787240c429647f25b64138097c0c4d60089a8f8d9158e
- TLSH T10B31689D2719CCBCB4F34A50F7423538785A173B1A8DA3E18872E0741A98D7DA67F8E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d841f4bcced2e8bc.svg
- Size 614B
- SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
- MD5 7b0f43826ff67a011696684508cb57b4
- SHA1 a056941714748cb7a7b498ae0c866bafc0d834d1
- SHA512 3b357d99b547f9322ea5414e738bc0e307e4f21f475780ba5ad7504545c2c4ba0eb41acf9c8b3fb7dca020a0d80956da258238d863018c8dd9bbfa67c85ba4a4
- TLSH T193F02269B3900E3CFAE34B2CF342327DC0B7529321082154D93A9435350098EA93FAC8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d897a6873296312d.svg
- Size 234B
- SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
- MD5 239877033ecb5a79173ba24e4a85545b
- SHA1 83a310870e416ddd3427bbef1115ba1aa74e5f14
- SHA512 ff6658661ef3050692c531ac5ce338e20e77994de1672ac32632c0613b29ff5207858823d426d5687120dca4061a56659286a7f93e28055f75efdc8e0404306f
- TLSH T1D8D097B870AC891961309130F779A20040AB40B306CC38BCE6813033F051AEBAE2A5E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d9b627af8bb0675e.svg
- Size 360B
- SHA256 47447a31e6021b1fdd64dfea9d30d74510cb78051d8d04d4817bca0b1775b71a
- MD5 b872963a8d0dd1b401028b8a174f1906
- SHA1 8ecb4cbd6174f06bf0ef664fe06d6db72b8d16cc
- SHA512 97c500a5067d6b6697869ca5e12a69e2f3d085671c85303807b7d23d38b18ae5c301106a2f077328b8f3664a99c3d9593787c37ab22a5f4c792b42eeb3e1edb0
- TLSH T126E02630D03D48EC7013C201D2732270433FD40332A80060953FB678E0CA589D42F298
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d9b97322b3dc4aee.png
- Size 6KB
- SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
- MD5 44f2e58a76e7be054143e8714bb1e55d
- SHA1 f52a9e861c6add1ae86d89cd20c1131a1baea076
- SHA512 eb060212519826b1e65bf913a0a01f2602801b6b885c64bac048156a3dca7cdbb7a37a4c7b9dbb91c591baf5c937985ddb19a85493ce7bf530ebb84f86292943
- SSDEEP 192:+VK9GKhrvp4TgSAv+Ukukt8PtQ6sFdzA/uHAxhXj2VFw:QMleJAvWgu6uNA/FT2Pw
- TLSH T1BDE19E3C43C324E74823495F25499B34D0565003AF3ABA6CC23998AA5ACEF89AF8E174
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\dbd42b49cf89fb00.svg
- Size 16KB
- SHA256 975ba31e49918a0e1ab4f5900a638552affb881e666e95e35089ea18e32d8a41
- MD5 6441f1c09f0c22be3b3d4fd24dd5678e
- SHA1 ed875ba3d6a2b6753622f26c8e90cd11031da5db
- SHA512 4274c5a1bfeb1c6d2ada8f14e6f9141f97f47ca3705b41dd46455ea3fc1396e5158263fd2eecee74488f40dad39159648cb415bf4d44cb46f0b2a4ffb11821fb
- SSDEEP 384:+A7HiDinZC1HIiDv3SW2HO9nxSt3Hci5KL6:5CDinZEoLg9nxSnYm
- TLSH T1467243DE3B740DE49CC993CBEF1110BD781B91BB59D14B24C62C9F58389189E9D2ADC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\defebccb46e071fb.svg
- Size 6KB
- SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
- MD5 7b0373e02bf3d8c44d1e77107f9c8311
- SHA1 a2a9f41bd0c6c77344617870853314db24922652
- SHA512 4c2738132148e1e7d0644a396f4c4ec1b6c6ac3b5f4bdbf4b817f9593867ddd3974ec84a009bcf7181541b7d5ba8e9d7af28ec98fc74ce12f2ed372854a873d8
- SSDEEP 192:3B2LzzcEA8lLzzcEA8fLzzcEA8zEA8ALzzcEA8oLA8oLzzcEA8ETUI2LzzcEA8l3:3BXEA8+EA8gEA8zEA85EA8R8xEA8eXEh
- TLSH T18BD169F99A7119F02DA51F91F6DA1C062D1C13B68B7CE9A44C15F9B2B070FCA4363C69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\df04cc6b3471fe0f.svg
- Size 494B
- SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
- MD5 62f51b2790198d5f5c6e5044d4f8dd1d
- SHA1 2add35ba929f48221e6005a8a23926842a341a48
- SHA512 759c7c7cde272e0f908e66374ab6dc8ddcb90451bcae79ce9a1ff232fa393b9b50ccb02f1b2dd8c1992991fdf887fde19b81751bfc38ec8d2ba299ce9bc09c0b
- TLSH T101F027BE53C58A39AAF30F2CE33679B4D07B9442120E2184D930A1B9711A69D6D7B6DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\dfcd56774003574f.svg
- Size 587B
- SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
- MD5 10e57eba1e1b7b671c25ef60570de97a
- SHA1 b1ea61c11fc6e771552cd1982ce26305c136747b
- SHA512 23098cc1a9f1452e7974e0cf563b8360b85e2060dc5a8893b4ab21daaff992be053fb0a8e5da424f01651d8e0ba41a65c39d56857e7ed956e80f54ece2730f56
- TLSH T1E7F0C22D63889E2CF6030A08DF05B0B9606ED01762AC7008DD25213A912649EFC7BAF9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e0753f4e4fd1f172.svg
- Size 2KB
- SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
- MD5 207160a30e5b758ca5f254553f038f3f
- SHA1 5e7f0d3eb2ac7519594ab9fadb21977ca6c821f9
- SHA512 77b3c1d5c1055331b9d20cd851629efe191a0d887ec3b1393967ab6c25a8910778ef81b6fc3aa67e65f152b4c95b5343b2650ae30e87120ca52f54c03276265c
- TLSH T17A5140ACC4E51006197B472DF7D588A6F830948B91131788B84E35225F33C62F9EF998
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e117838d3c5eda37.svg
- Size 271B
- SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
- MD5 33d3fcf5251a72f1eef80aaa19f7ab55
- SHA1 57f0db39d1fcc43c91ddcca15509242220eea7e5
- SHA512 564871b8f09c200cb2cf0350b73199732c5accc8675b8b291f90cf979fc0cf509330914865169a6fe42e5481dc322de1768d468a1763fcc4f7a00a231e29a40c
- TLSH T13CD02B15820C5C3CF9138561C7587334103A51C2474D121CDA710231121190E783BEF8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e337c07cfdb9efce.svg
- Size 352B
- SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
- MD5 ab0dbfb188975d9639d2221c31a8aec9
- SHA1 fd4c817c539ae2dbf1553d0c733658025b6dc984
- SHA512 f71c74b0448632bc9ff8fa8696171be615fc667e21a5809d14ea1be38b960be9376b43409110ee29f19c1a832805217630d19efb9ec5fa4e9e1d16ace3b49bc2
- TLSH T15AE07DFB4288C8E9D073E715C274502A19BB71AE76CC31ED46533161A9845DD7C2B5CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e8a8ba696fae21e8.png
- Size 7KB
- SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
- MD5 d8196d8a2d105b011a606f00f243beaa
- SHA1 d46ed5e3536f75388c140450e9cfae37549088c5
- SHA512 bd9c328cf69d7536e403ff71a5bdda29f0de53df7bf7c16e6f4001036b40ae45875515aabe08e91b7094ac5578ba4518178b6120da86e1767195560f743113d1
- SSDEEP 192:KZ4X63dtPh+dB7ibJ2L8SxhzcCwDjOxFg5IGG:KUsz+pxhzL6QMA
- TLSH T1B3E1B039E7DC3B6F2F32BC2DAE2B5184725D2F78A711402D8C2D06517C09DCB57852A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e8bb6bfbe58f9668.svg
- Size 10KB
- SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
- MD5 cb3d5f953d3b0fcd8632686573326ec5
- SHA1 49592d970dbf0c334e6f603440086948e1f7aaab
- SHA512 646a8b91255532bc8b3606b3e8fad1d900d095ce0c23e0eb981edd05c59e9f0803a6dd7678209e52c5930e0bec03d356c66019774f42ad51f3edefc0ff322e0e
- SSDEEP 192:gUDrZXRH0rZ/xcUckmvw2RHOMRMRTeBAHSoyauI98pxx5kCTBkE0TjBADZHLvIXu:gUfN5qdVcm0oyc0JPFkFpEzWFg2y0gwU
- TLSH T137327956970004B83ADF0D51C6722E2D4C02F4FDF6589ACEF33B49A488ABDBCB575586
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e95ff90adab8dab9.png
- Size 5KB
- SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
- MD5 8c7ba694f35e5d61a0c61ac15e5ccd4c
- SHA1 e4824fe5c812db17230e0b204c058274005d3e54
- SHA512 b94a4654253389fdc295d89bbf731e259c30582b474ac17e271671b801d48a97e7b51b7bcaec531feb46f41a609cbf6812535672a2fda62e95216836aca9870b
- SSDEEP 96:gm0i/UdCsPTUhYonUmQj/gruR95rSI/foO6ey0/q1G3daC4CGXENKeQpePFmHawu:gm5UpZowLjp/NcdSJtNK9kPUHawK6u
- TLSH T12FC19EF425B5DABD7BFEA203AC5BABA20146D7782E1167BD3D1F121C79228509C0EC0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ee302686425de6d1.svg
- Size 1KB
- SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
- MD5 5f79f6bb09207233ad266a8f883107c8
- SHA1 00081f49a4a0c1f07590d0b2af9027ac5cfafdd1
- SHA512 f127fd5dff3b6ee9e963af901c7026871d4530a779b75dbbfe5a2e4b7a421f621b39540fce26bf8338e2f5cd6d6d06704d5786a4868b2832ac1d158bfddc2868
- TLSH T1A73142F1B34498E8B5478B11D7237876C95F60F72B4822514530CDB4966419E8DFECCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ef9a6d17d898fe64.svg
- Size 660B
- SHA256 3dd662b1629341ac9efa38feac98107ad37568c0e6bc20fc9cbf357ab034e185
- MD5 13e80cf46f1f3d0d4c50480ec7a5acd8
- SHA1 92ddeb4288eb9550362c1ba3daf977255a0973d3
- SHA512 4e9affcf7ca805d1f6c2a9eb1ebc051bb662fa4fc01b27d57fee12f2f0b18914228094bc752740081257e7ef76f62b1ee938281194cbccd815b2f60b6a23f469
- TLSH T14301DDEA13BCCD69AA324B18E764212E7137306A178D34C44670703A6D957DC5F3B9C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f0c9814d841afa42.webp
- Size 18KB
- SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
- MD5 2671593725538af8bf6f29acfe494f8d
- SHA1 943176426b02479480ae9c35475b1705f6d85be7
- SHA512 873bb9d71274ea901dbb5ad8a3c9b2d8ce417bdb03115f9dc48980954ba902d78f4f38896eb97c50b7ffcf56a0a05b9bf4df97c378bf24fd9d455887aa0ce2cc
- SSDEEP 384:6RFBxFF/zuvlRcltOZSipop0dQ0+pim3TvDVDmrjmqiGo82df:CNFkWtO60db+Y+DV3jHT
- TLSH T14582E163828C45C1EBC67887ECE6960D5BF28AA1F1EF7CF9298143564650F380703CAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f156fe54a5a79b77.svg
- Size 514B
- SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
- MD5 1cc441d795ee243512dbc355da9e87ba
- SHA1 573a536d6d9adf6e37548a4c3299fbc0c33b8df7
- SHA512 b976ea33b0f3c68b0d46e895952d0dc04e8a4708c5390bcd6f023bd1d6edf6c959dd0207e00b49aab51c80b4999b3630ac917ddc460c80c93ad8f4409c4f1605
- TLSH T170F09E9522198468B152872DF337383DF4FB4432034559948A31643E99C599F6D7B9EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f3bcc22345312f8d.svg
- Size 3KB
- SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
- MD5 76e6d3bad5cf00e036388addfda5ca4f
- SHA1 00a3844647e873a324e003e3108b3f96a39a7b40
- SHA512 7d37860f08972f74236b8b8fe4caffd32d32d3cfcd3d58c47d8ca8e2c06ba55a8030fece3437e2de112d7d012be11abe79b9d96f539f7044c7c3830e257746d2
- TLSH T1696173EFA744A4ECE647CF90DF233938942B3CB9AF4B839045B2D1A4A6141C8951ACC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f45cbb00d6bb82cc.svg
- Size 322B
- SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
- MD5 01c7fba0431f6101097afe82825cfc23
- SHA1 ab1e6727d65bb741cd4d2505c41c423ccb50cae4
- SHA512 bc95c77be1bab905a95a756b0c77cc59a4e977aeea33e5e1cd50c46189f471e3158bfee072e3cf592fa7622c1645b026eeff32ce2985f7c0b90f01dd6d17e4f6
- TLSH T126E07D55924C6D2CE915871DD7BC32785136A1C31B1C001EE931203E553150DEE7F7EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f515140b598dd3f7.svg
- Size 481B
- SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
- MD5 2cf5de8e40683bf9bf5d402824272d95
- SHA1 68f0bb14ae20607b481335f1934fa59aa3ccb07b
- SHA512 a454cec2bef9dfdb9f34fff88510430ac276e2784e3a38870ad112e389c46e58269dcde1fbb3a7f3f25ef7d7c062de0b6962f0acc9c93486c45c522a43bb10b4
- TLSH T14BF02EF62688A698C088D734815AB49B21A360FABEC54105EA501D5DB4234521C18EDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f7b78d9433c9d476.svg
- Size 406B
- SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
- MD5 1ec1b8301ecab06fa975088ae36179d1
- SHA1 854fa669c15264e79fdafff43bac6a52548c64f9
- SHA512 248cb0c7161a4b9e220b3beb4c6ef7f394c16f897d1c5c2eca554411fd2c906d772f17c47fb457d2470a0e50963a2a479d733955080747af5a6b07b355c94048
- TLSH T14DE0E5E8136CDC35A265821CE757386831AB2062571D12505C605C3ED8595DE393B2D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f7fc539ce7a13719.svg
- Size 1KB
- SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
- MD5 8e6bcb1259e8ce2da2fd11af3787bc4f
- SHA1 42f2ab3cc6a820aa0fbad2f54718b2be0f73e9fa
- SHA512 a595f1fd4e9980739c0d43bad1167c554605b4eb921219484863f16351c70db66a8cd3503860c6a4ef57b6e8a0181f1df5d34d115690ba65d83861ddccefb9a7
- TLSH T10131BBFA73F699E197070365E6D431BDD9DB20B91BA601C0E032BBE46805CD94BEEC80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f8695cbe3a95268b.svg
- Size 870B
- SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
- MD5 9f08a59505fc0bbe901f032750f10ba7
- SHA1 214dfd0e342203c6b638badf60393846cc02be55
- SHA512 28382f9018199c247163329d9f37b202ec70daef02c7dd54cf2fdee0126444d1f5b8dc660cee1e70e100c81f01dfe578290639124fbe429590f11b9a18f5e6a1
- TLSH T117118872A3CCAE2CFB930F0CD323A875D0B981836B842080C835907971554CD5CBB4ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f907caea9dc5c5af.svg
- Size 1KB
- SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
- MD5 46c828d2784a7df604e6d626dcd8ed60
- SHA1 d8c34e406e5370b12687205689fd6c5519a7c0b3
- SHA512 95cacac79ce3d6bfcb9761a6eea87028990159cc5e2b7837d534fda0d8a6df4a9bd2a3226fa173f8388ceb71e30d8047e984474801214f18af888d7f0f6b5ee8
- TLSH T14621C655E70C961CEA23870CC338EEA57063A1C6872A5304D872753E55981DA9E7F3DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f95f5a575299231b.svg
- Size 402B
- SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
- MD5 1b6f47bb9166ef34598eaf143f15a070
- SHA1 044e5fa564f796aac4b41e3f917431bdf7a1835a
- SHA512 65ddd0657195ee27149916fe4a10e0d5fd66425c920a1e58081fda5697e58395e4c431610fc435fc50b8e0f43ab5eba568e993790ac83dd29a4127b3cf42ad80
- TLSH T13AE09279A359A928BAE2465CF33BB0E4E0AF4022034932908531D87D604599E39773EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f9ea9c071ead0706.webp
- Size 4KB
- SHA256 7b5bbf60227043945dda8a4ca2cf98a34dc65260136da04911593a2ff1b1acc6
- MD5 65cceda5b7e77ff4e3de359b84291652
- SHA1 d4249b1533df2278f63ae9034ec24d79239002d6
- SHA512 9dd9e4533e0470852991aafcb32f3569a65a07024d14a23df28463756cd6186b3e639f0460793507c84f268c63f32ab77f3e94d70f134fb20283c8f60d892e97
- SSDEEP 96:HAxrT3sUFm/izH0WzenCcAIZ70TdCAI5fQIhovJVQw9Q+gVxG7E:HQsLMHFy3AIZ70T0AEQ9JOw9QfVSE
- TLSH T16DA16DD1D8D07834C50F1302981794B0ABAF64185CAAEF8A52BD48D49B76706F066FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\fc431416b1024934.svg
- Size 2KB
- SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
- MD5 545aa919b1e940ce5b19660082f2768a
- SHA1 c574234eb8d71b0a26fb0b36ef88db4ab4b40dbb
- SHA512 d727a785f3e35dfdfe596b8730851c5ff2e826f270b829558cf29eca087ee9981ed742e029b3244e8a59d5814ce45d5478d4d4e91012be6d33b30745b266afcd
- TLSH T1044125F723E998E0550FCBB0CD276C7E9D762CFE7E40C2C24581A560AA341E5C94ADD0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ff8d935c2abdcdac.svg
- Size 2KB
- SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
- MD5 5bf5304ec1e3f6fece2ab5d8195bfe86
- SHA1 81b2b4eecb1c8ef1cf8ed9c746c9f80c4b30d472
- SHA512 750c6d8b9e6bfc81a2da1c3dddc28d46f5c5d33dbe8829a6017332bc38db0adaef1ed90fa74a6bfd4cc12910740e93769db37de97845f44c93a4e0849b923fa2
- TLSH T17B5178E465A4684C18C80775FFE945D62826E0D3F604079EE46E366A1157ED3FC2E3E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\blacklist.js
- Size 76KB
- SHA256 e0e8a7d3bb4e91a9838bb2e94a949b19c8c0def901d4e61b646c15df9dc61b27
- MD5 8f498c876c9d0d7f74c037df9d26bb81
- SHA1 98e0926739337486d48e89dea09fcbb9f298aa4b
- SHA512 736af37d5fd7d00c0184f5a6dbd03a263d8e6a868fa1a6e9fb14a1f18cc6c1f8c4e61e430a2ea6aa392d23c615452ecb798f5ec191b719039e16eb81a29fad96
- SSDEEP 1536:Vka6tka6LamJK4PMihQiRAiNJRLbhhND/CVt6LZJqi0SyeSf/PToIGLCZKRjXxSP:Vka6tka6fwiJLhu3XgsJ
- TLSH T17C735020A05A5C2A9AF94F85CC9B7F0710FC25A0A7D2C2FDABDCB5AC1355744E1D09EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff2
- Size 27KB
- SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
- MD5 66c678209ce93b6e2b583f02ce41529e
- SHA1 34494743736fda757197d16fcc6a6e1a79317c86
- SHA512 80013c2c97b163a15be1af3396e4b1ffed84e2ecb4f66d9c5384b66946dd2553216229dee175e46bf7a168c6083eca3e2af123cb6d8dbbd2e270281e7db17f82
- SSDEEP 768:WacbxMoRJw6qDcfeSNHvQpPujir2Uqf7/eDW:obxMo7wYfeS1UPqUqraW
- TLSH T12FC2E1EBAA04E55CFFB242B40EF1827D4F38464A4CF6205BB4DFDF13942B45856E052A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff2
- Size 6KB
- SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
- MD5 a9e9b0953b078cd40f5e19ef4face6fc
- SHA1 5bfa49cac46cd1d7ab1351388d37c11af59ba615
- SHA512 2e37f9dc968e52d56401252c7fc93db69bfa51e34bf3530af4b47965ca3aa9e219ee5ee82f785e8784a04f99a58dc71870f790dfea81d091bc18b3a2c9770d02
- SSDEEP 192:eZOvu6Xt8t6LKfGGGqGWnaMZlRCpPSIpYno3:eMxu2KfGGDbJno3
- TLSH T150E1AF604C991D55C680A0B56656A7D2CB807E6C8B5DEDBF0520B12F9F39BC23D43F93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff2
- Size 6KB
- SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
- MD5 08d95d99bf4a2b2dc7a876653857f154
- SHA1 9f8077e0b38a290cd9b7b136b0ac29c8375e81a6
- SHA512 9715c7764db9f5f7c28def1390fc22f6fd23b49ce59ddd8ee0529883399d3ce18715d13374cfbb16202e992d029473eea94f742368534a6a437299884ff3fcc9
- SSDEEP 192:p+CjOw7LaU69JcXtBc36Tiuns0ukdo6FF23flSzC:8CjOwqU6nstu36TfqYF23fOC
- TLSH T19EE1AE7D9C6086200632BEFF3F329839897115CC9958140AE7932E8F32E7ACA5C5902E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff2
- Size 11KB
- SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
- MD5 796f3797cdf36fcaea18c3070a608378
- SHA1 f98f89272eca11ae417672c59a0faa6a88805a89
- SHA512 cbba625fef455a7b1d1dd9fe65e21b00dcb4bf729e08cc1bd1882af082a766af6d0adc85c8493d3529aa49cfad872d0c4b241484762174f0a48d21e28c76c980
- SSDEEP 192:TjJXaVyX4SjNC11RSqMnXzEqg43IvWU8FrHAzqjZWhWWgtYWyn56xhAq1dFp:TjsVyX5NM1co97y7Azqj0gtc5YA0p
- TLSH T13732C03ED2E005A5DFA8957BCD24DEC55D8391623A62E03707A7F3E0BD8315C1B5245E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff2
- Size 11KB
- SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
- MD5 f9e6a99f4a543b7d6cad1efb6cf1e4b1
- SHA1 a5764c6e2784d02820c0b904089f3fac798be4fa
- SHA512 b1cc99df5d5e2833ddb4ef5d9eafa3f2bdb56a14da8b2813ae9444d787bb63152cffbb6332feb598203e7292c0cf4fa5ceb0da668c8cb82afcc93bea82c497e5
- SSDEEP 192:78eA+9M1ccRhZQHRhw7Tagg/34PXMqtLFEVsX+zDGBD+K5664utN4Jr/zYlsCYMM:YlZQxhw7egg/3jqJIDOD356YEJzz9vMM
- TLSH T10332CF350D6E41FAEFBCD8E5B20A7151F1BA84528A82F52611E35A1BFCA98300333F06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff2
- Size 24KB
- SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
- MD5 a9382e25bcf75d856718fcef54d7acdb
- SHA1 31050a1b1b123fb2c59cad1f74b7dff90deb8fce
- SHA512 1fe376c2a185cddf8629b3d62f66ff3f610c0b6c7dc47c165a4bf6aac6f9eaf48c41903eb3146979b1de6c575d36ade449776513b6e1a1fcaea443be1fba0f96
- SSDEEP 384:fErO+j2HDm9KIwKlIzX6g7k3XeFOwgJbzINKvV2U2UB5HM2ivNddFZQssZvhb26:fE696+sUX6/Xe8ZzXvZL2ddPQsghbp
- TLSH T1D9B2E1253933B3FBA764372B2D2A39489E006535B6C55F18DD83C2C1BEE81E28579A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff2
- Size 16KB
- SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
- MD5 d873734390c716d6e18ff3f71ac6eb8b
- SHA1 a4a4905b8b126f9ffd553d21a72a0c24e9480345
- SHA512 47c70cc7c7f277230b60909a0b0b593953b97433455ebefe1d0e24dda9e1104c2dd43fdaa68f121d5c7a3fdcfed1bd568820771dac909109965a05b7f6b2acb5
- SSDEEP 384:64WbVCMf9h8ipIiPh3L09oDYriZOi51915PkNuDzdGDG:l6UMfeYFDDYM0ufdGDG
- TLSH T12B72D024747BE293CD28A7E5EE224208C501349DF587A739C0E7D38E415E6E076BF972
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff2
- Size 16KB
- SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
- MD5 652970624cde999882102fa2b6a8871f
- SHA1 c9b2b5ffd2f27aa5c6b6f9ba41a7b2b4e66102d3
- SHA512 48d760c41762fe1df5130ebbcceabb1e93781cc49ae2f70239b6f8a84cb0a00d6db0c3bc57e1508d932bcd5820a24fd920e2b9e2660e641c0d1cfc6224bc2197
- SSDEEP 384:JiZVAVJs01R9oWev6H6IYr6Hljb/xozd3ouOWQsXBk/K+ZWn:JiIVaVwfbux3ROWQYBk/K+ZG
- TLSH T19B72DFE8428E32B3F95A65F1D75274DC3905B9223078B18D8562D188EFE0F1DCDB91B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff2
- Size 25KB
- SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
- MD5 f8a7f19f45060f7a177314855b8c7aa3
- SHA1 c884086c25cec8558160b2026f906ef7da3570ac
- SHA512 1bfa9f1d2c39f4460d200403f2e2a327d2b964ba4e00d61495e9833826cc804144b7536860704f741694935d8058ca350586f97ccb319e57d14723100f488620
- SSDEEP 384:r5RMCvgUpEc5jcq3kByElj8REB7hcyXDFQamIw3SoXnkqx6zDreFDjcE:luUD5AlOEJhVhQFCYLoreF3cE
- TLSH T15AC2E11F1829886EA11C0AE7E7BEA3A0FD5DF203DF381B0988786B99551E8516F58360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff2
- Size 16KB
- SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
- MD5 1320454d951ec809a7dbccb4f23fccf0
- SHA1 8fcb9d2de65ac71a0c4fdd986173db730592ed8a
- SHA512 b11ddf42e60a54b95fe8e18230fec593f4bc8ad2d82c3658ff237d6000c30cf11b634222dd768e011d32b4e4d480bf277a1c2305d682c3e88c5ccc13d2bb4aa9
- SSDEEP 384:jVJKlNlu5KSYJRZA9Md7dSonWjEXS51aBmhW+2:jGNlumJUMHnuaI9hh2
- TLSH T16372CF907A983D58DEC7476A1885058A042C3239FCCEE710FCF26CD177A41BB7B5662A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff2
- Size 16KB
- SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
- MD5 d8b7a801bd87b324efcbae7394119c24
- SHA1 db4883d0cff95ecb5c03410e3283a737c51ed604
- SHA512 2d1c9be2a5fb303557cc3254c5a8c59bcc37c9c23fd2bfb3e85e2a63c73f61b654605c76e3a2361e235e41fa6c4c26ba9ec0adac5e146a1e86d2bcc985947eb8
- SSDEEP 384:lj3mhHOJAC5jwYAVQQfH2uL0+cJOukA5B/hOSCEcISRR+uq2osp:lj3mhHXYSLH2uA+cUukA5B/hTc98up
- TLSH T1EE72DFB11A3D5380FAF682E5907C967C4BA6118A9E78BF3361C70C7DBCA7074478E124
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff2
- Size 11KB
- SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
- MD5 ad546b4719bcf690a3604944b90b7e42
- SHA1 886e61797a525d4aafce0aaf57414fdfaea1b873
- SHA512 5560de886dff8f6d61f27afa2252b721c0fd493f604c61d301a0c2d2114c22a0aa5b3b6bccee87edb549d8658e969f6c7aaac5090be4adca042942dd601c5212
- SSDEEP 192:CnT/JQKjvG+BwWXe9UqBp5+Maxq/UYwjceBGJHW2necmCkq/wizbRHPQ0YNcY7GZ:edC+BwWXe9XgQDeBGxWG1ZkqYinlZY7A
- TLSH T10242D081F0D2B50188688AE5A699A91B33C0B045B27F8CD69DF8C93784D7CA0F6573BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff2
- Size 11KB
- SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
- MD5 e934cbc86e2d59ceaf04102c43dc0b50
- SHA1 3d5fa3cb309f8d83b4dcbdd27725f270f60f3eeb
- SHA512 859ddb066f1c65544627c96edc2f4702f19b04159cddae602bb3d98f905c50f98fd331f10a7510c008f0e4cf748f6e8dbb8f439861dde81a540b7b4645d81257
- SSDEEP 192:b2d0WOF6A/0eTObfAmyPS5H76K3u4LC87vs92JBdz5ubiblYrNrLUgq1LfAmgZlH:G0WOF6ApTObomqm76eRLJzEublSNHjZx
- TLSH T11B42AF9A1EB29700DA4B5EB16908AD01BCF7F6042E3256AA360568E76AD360DF8D341C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff2
- Size 10KB
- SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
- MD5 1ac3ed6ebe34e473519ca1da86f7a384
- SHA1 e45d5f4f4a7f2ff3dca9fccc2f148e781e23f292
- SHA512 13d2b3e916ba817892d9d10674ec3ab7d6c3c30a9868b1a994ed2c630b6c87d6af795f71bbf8f49304a4af455927ea2daab48fce8c7ab09293bf39558d0b50b1
- SSDEEP 192:DtmJKb0zOSfggu/SvhGJiL7MoNvVFwSLuNWiX/jmoQUrV4liuvdjZafb/b:ZkKb0zjfggu/ML7M+v7nuNWiX7Yrvdjk
- TLSH T11122B0C40ABBB540D37AA17ADC3FED0227EED601392D265E1A4CB11D7CA56ACD1AD106
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff2
- Size 9KB
- SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
- MD5 1b3161eb8cc67462d6e8c2fb96c68507
- SHA1 63b80959f1fc56899ae21ba0cbbcd39a6cb08390
- SHA512 fe385fb22e77b84a4b789a505da3759f335222e473b5992217ab59d7afca289eb7d430fad664015fcd0212715a43afadeedd9cbaa4d41f6c51fd6a18f31bef3b
- SSDEEP 192:g24BpUkBy/o5EL+0LvKjhuJVrkyrRTCpT9HbEXuJHjVsuT1dih6G8ZUgu6Rve9Es:g24BdBN5ENLsh63R+DHwORsuT/AZuvej
- TLSH T12B12B079EF099237E95C37FC70D406E659B38D0F60886143A3BAB1F45D9509F3892127
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff2
- Size 5KB
- SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
- MD5 82ef26dc680ba60d884e051c73d9a42d
- SHA1 57fa599974a1bc0b37d5f0e5cc8602302f02b573
- SHA512 2d6a4609c83332c99d52b9ac04837939a60f1696e9629127f989ab9cb7e209b76af2ceda353b4da9dc94c66131bdd676568d81cfcee97f38ef37ec6d2f8f894e
- SSDEEP 96:NufmKSPvcTOIeoeCin/iaMFyUwRXmd3o7HeU1EPwf2dDYCVYG4Yl:NuzSXZNoeCinaJuRW47HeY2dDJYI
- TLSH T165B18E1DECCDEA90CA52C0F93D39222ABA96B82CE00E54D1B15F1947AC606947D2FF25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff2
- Size 5KB
- SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
- MD5 95a1da914c20455a07b7c9e2dcf2836d
- SHA1 ee18713634a3be8c997276808552ab195a598f43
- SHA512 0475c7d99124976ae88ee96da30d332cf14aeb3e02030e1fef362d3024cd85a5d89e610bc07b9f8a723c57731ce3970b803f883f0b00f61a229ee80c4229aec1
- SSDEEP 96:+7aNn5LBJ4EV4tIfHZC+ipcKcJNSpbhVcmDm8Xl3Wd3AJHVfniVEJ0Sz9sapxqG:gO5VGNSZYyfAVcmXlGdQjfi+0SzG8qG
- TLSH T14BB17C7BD1277787E4AB74BB0CBF0E6CD280D1E82EC60C48495526758BBBD08A569485
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff2
- Size 3KB
- SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
- MD5 9108a400f4787cffdcc3a3b813401e6a
- SHA1 19a7caadfb66bd2757810ae47e5c7a0e005101a1
- SHA512 6afabee5853509df4ab49d14ea1ba31648787cc355642e7d63f1cf96a51793179495671ae059aa9f5600f162b5d7cf061b9f6a44706da19cef4600bd93d7c664
- TLSH T127717D49A390C078DC5D9B3CBA683D75C8E0D7DA4859FABE4D52C26D3990009C49D4BC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff2
- Size 4KB
- SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
- MD5 61522cd3d9043622e235ab57762754f2
- SHA1 9bed17fb92f2650501e229862c40c6407e1c5528
- SHA512 17aae5931eb6425c4d5bebc6b318505a06a4b4dc3e1b36fa7e6345f5f133c793bf15613ee8befbd754398ca8f331055e7a011d892792aaf9dc6051378fcd43cf
- SSDEEP 96:5ugtEPZm+ntyI4Wvj8pSZ1smhblb71YsjEdhB7:5ugtEjMC9Z1zd73jEdhB7
- TLSH T12FA17D74320E4B9AE81F5971A03FF8564447EF98BD88EF42307B7025269393A6735AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff2
- Size 13KB
- SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
- MD5 b8b8393d2e65fcebda5fa99fa3264f41
- SHA1 7a08883fffc6958c71cc01a75a0b99cca3e4b475
- SHA512 4b476187e6d6b30f5156e1bebbbc2e7fe30a52107a168cd9328a13735ef6540514fa0d638d70248bc77effb79ca61ae6a36ff8bae981d9b6cc7566ef539bbfa0
- SSDEEP 192:we54Z34Ig7Jnrv1zS38hYdgAQiTo78KvGbjSKKQPUyPE9yFelRBF57x:LiZo7Jnj1mNgAQim8vCpO+yMlRBLx
- TLSH T15C52D0ADAC814D43F14D756AA37C01648D01E44EE7E0729F74C0D2A18988FAA7DAE98E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\handleReloadUI.js
- Size 4KB
- SHA256 a05abfe190494444680c0ea6ba237a70bf2f4d8250a401f1182e8ac8e85499a2
- MD5 7ab7624a84547457baf9e9f8a9667974
- SHA1 d9d2604dcdf92dd8cdb88e65e601610556dee5ca
- SHA512 3a6a90fbc3db25c00d2a7e71d2cf9f125db6ec8cc18a4b90f625e0b1307bc530c54de0b5c734a79bc40a7f31662207604e6d260b3099ce7e03048bbe33f29359
- SSDEEP 96:xSVa63SVa6qCq38bo5bYe3m/I6FScpoV9FVKovz1fFKAJxFis1Z1uSG+B2r:xka63ka6qCq3805se3m4XFVVfosL1K+K
- TLSH T1A2A17201815C8E7D8FB5029A8AFA130603ED62877D77D4D4BEA2C479D6663CC91077BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\html_preview_sandbox.html
- Size 3KB
- SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
- MD5 8135d6ac5a3d719de99fb268d8693e69
- SHA1 4209e222f07d8b2fe96e6d147fe3b8605a7c24e0
- SHA512 052f608e7060e98e85eb5b6b50cf64f199fc2800826c47a8a4b545c97df45f836d39256edf2c5f39cc227f30c108ec5b66e0d2b539d4c20eb057cc3d85a9ce5d
- TLSH T1B1614E0EC9B64877026375642B9FB009323681576665EE063B8DD3B07F80ADECC253C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\neon_tab_update.js
- Size 15KB
- SHA256 5f5027e82ac4350829f128a7c18762755d18cad22d9e40a69cb5b55b26bc3e86
- MD5 565d7b43992689a94adaab144a41e3bb
- SHA1 276f7b9e0f156692a10835d4c13f3b66d4920c7b
- SHA512 19bd84964d59ac21dad3978cd0b9fa0a2a715b5bfdb5bb2eda80bfb8bba19a865755d99ccf71f51c12aeec7b57f5cd970afc3d4f55850d42b3e0f31ab52a4471
- SSDEEP 384:Yka6Bka6Hame24X+sNT8UA7n+0+XJlE+HFAlU:Yka6Bka6Hame2sijnUJlSW
- TLSH T13F72D5DB70C4F8A507B39379C13F044AB2AF15AA285CD6D09705C6F6B63529DC21BBE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_animations.js
- Size 8KB
- SHA256 4aaee8efee42bb2ece5fe095f27528546fdb1bb18e6581063759cb7795feaa7d
- MD5 e11dc99946d9c28735506e17f44b67a9
- SHA1 3107af57904602aa754b0c524fbb64b0eefe38c5
- SHA512 cf3a3bb75a3c57cae84b702cdd4972afa6bff4731c974471d49961f381230f7976ecf4ceb264667e6a374e6a500a3e323cd374eee5cdecd67024d40c7fff2171
- SSDEEP 192:xka6Hka6GWq3805se3m4XFVVfosL1N5FDqJXPY2ANh/OdAZpuZlNt:xka6Hka6Name24X+silPUWdAZpuZlj
- TLSH T14312A6455089AC7D4ABB439781FF034663AC62032C36D8E0FEB2D47AA661FCD9213775
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_startpage.html
- Size 1KB
- SHA256 b1ff2e57b29a38351ff16205c009091011bd3643f5c78cced9c866c8fc98932e
- MD5 f284a28bef6325e06099f52eb8027bd1
- SHA1 fcee5d4019c278a75eedda1a591d64e5af280103
- SHA512 e63108a1a2bc5dd5153d4c4417a08486381afab4419f56334efec070b375f691460c1f47b987c35b84f0d7ff49334447c6992013b7f00b5f085cc0e6d9b91fcf
- TLSH T1E521CB898CA5D7AB912E0D9CA970F51C1D9CD24BCB64DD207EFDA1E99F44BC40DC2B84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_startpage.js
- Size 387KB
- SHA256 e2415a7b3114947f097f3fc8f7ceafd394eb23f4bb5977cc321a6ea1a82a6a64
- MD5 0dd5a7c378a74aa8548212c5a8423c45
- SHA1 557e729dbeb929501a2a1a2bed09c9c1b1557ae2
- SHA512 6e34f03e08cc448ed705524546eef0ff5b721e3e0a59fed4d67f8a46a86efbf3291a2546d627a37c72e32a6ce1b7dd361f7ef38eaba1888d799c840249f71c15
- SSDEEP 3072:Wka6Vka6kBzPK1CLE2dmLzx5Q+rn9AQzlxp2zCNUTPQUCUZ9GTn3vaVo9Kw:Wka6Vka6kdK1EE2dmZ5Q+cTP1w
- TLSH T1B484B663A1924136E427067F31E9D09EBF7C7002DA5C5E79FB8990A08FC9BFDA493605
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prevent_new_tab_opening.js
- Size 7KB
- SHA256 d4851b41a3d9dc7e9bad42c392cb6e84c6f8fc49ed0ee50928b26cdd2ece1802
- MD5 1769eef9a3bc1b4501848c6eeb5aa0c1
- SHA1 ce451ea3a862581b7cc9ad593624dfe60ee15bc4
- SHA512 ff079a1d6122011ed8eaa87787f88a440d6d07e1fd5149c41c42754aff8f42a394e564f5c305eda1a0af6eadabc2aa6cdc6e0c51ed662373cff6d4e90a781d2e
- SSDEEP 192:nka6oka6fTq3805se3m4XFVVfosL1g4S5fEqwoR/xoPGKheM/upsDZE46:nka6oka6Lame24X+sB+7jgPGKAM2YE46
- TLSH T146F1CA85A28C6C794EB743A9817F1306539D2187246BC0C4FA71C8F9DBB57CD9213B79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prompt.html
- Size 753B
- SHA256 04479fb07e73544b75389ad9422125a2dfd3749f7bcd43c10efc5e23804d301d
- MD5 cc052ed0096a0483d5bc32b62ae8c967
- SHA1 920cd46c5747ba1c52bf75d3e8a870cfc3d0cca8
- SHA512 f6b56d16a2108adde1e2f66577f6f5fccad3f606186f65e5043d8560bc37b57e65f54c7a7e653c1a756eee62eb061a159c0f5550f8e78674ff3ed54721a9308b
- TLSH T12001FDCA8C65D76D822C0DDDA970F41C0C8CD249DB21DD205AFCA0F9A945BC44DC2F88
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prompt.js
- Size 25KB
- SHA256 257639bac09d83011781e8757477bf1c87dcd2fc10527b27f7d2926554023e4c
- MD5 6f92f71ba6e66b091b9b29da17f1e6be
- SHA1 d6a455a71d6b665f3bd1d741d0dffe8f6aca62fb
- SHA512 15a3e5a0e90289b7125da9a155336ffefa650560909a4d990b78ae5ab6bc44233a3f19966b4699527732a5b3d2855d511053fa2a3d9a43d7bd65738642c27b54
- SSDEEP 768:Hka6+ka6Name2so6uqpUzGR9ZZzSC3DSjg4YNqdaEw2i:Hka6+ka6NamCFZzXDSE4YgdaX
- TLSH T1E4C24C9875C7F9715373A1AB823F0042B7AD9906116D98C0F926C9B5EC7858CE23BAF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 610fe197f8198c13f2e1bd13c456fd31b7b36afe6fdfdfee38b4566e0fc06ef3
- MD5 7d88aeb8d9df03011390888f248ea34f
- SHA1 5a62152512d106169319c0f26875801312a38876
- SHA512 98f727e72d1141f39a500f5ab95a2b6b5929e1df307e180c1771f6fda0880a45c03d93a3c31ca9fd326e6d855f005574780b9a8366dc7b91087c668ccebde534
- SSDEEP 3072:Ska6rka6tIALD2PO6bNZ3iVCwsgnnX6wz:Ska6rka6tIqDDK3CHsghz
- TLSH T12CB3D9ADB3927199928320E502FB0047E3355D451C1A5038B769E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\shaders\operator-scan.glsl
- Size 6KB
- SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
- MD5 a569d4a4a1558e84c77c6a135b3f8b26
- SHA1 e689d614b4742ed517f8e1521232ae470c75c0e8
- SHA512 a8e983251a0c6291680e9a6ed5de437a180ef03fe9e939c441dd8b0e778bcdb1b8837dc8894344baf6789c39aa27e205f5e24d2b6832e94c7437eb7cd2f5267f
- SSDEEP 96:J6oW06H6pzfsW28CscjHcoWywtKXZBOCs/Ou/uYrvWe5mGz:JpWfH0zchfrbkC4RdreeRz
- TLSH T1E6D103EEA65705275C6B71AA8F43400C976692D32937C689380DA30F4F9709FB7127EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 1ae491b97fec5fdcd82d5d7a82e9e107f8ce995c84bb5837bc3a3cdf038854be
- MD5 43673b80b6bf4f30ab81966755c4200d
- SHA1 37197d8111052373d7d580a5af2f9ada216f87fb
- SHA512 8a26426c5147e5e5ccc580a835565c3da41ebbf9897c917eebeea9e87e1b1e03df9e4781ef9a2faf97a4c69662eb30c988094a5f7903fc2664b2a14a8b1314b3
- SSDEEP 96:xSVa6rQaSVa6GWq38bo5bYe3m/I6FScpoV9FVKovz1fFKAJxFis1Z1uSa12Ho6Io:xka6rka6GWq3805se3m4XFVVfosL12xA
- TLSH T1E4B1A401819C4C7D8FB5029ADABE135212DE2247787BC4C4EFA3C47597253CE9207BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\voice_capture_worklet.js
- Size 9KB
- SHA256 755e71034b73b232e0a539ac2b5bf8acd71062f83017cdf23b1d5288f1dddd6c
- MD5 9fe3ebd62060c70ed04a4a303a9236df
- SHA1 faf4a91f9da28ec8c475cc3ff71b345b6b7ab233
- SHA512 0362b9708e349c7e239d88ec11c0bf79211310a85d7136c13872df0680900fecb8ccf1206ad86f9d165c7ead6dada9aeed0e68273765b2e91a0e16e2bd100412
- SSDEEP 192:xka60ka6Tfq3805se3m4XFVVfosL1d4u5trnsg2UFtaGAybBNJCpICS:xka60ka6jame24X+sQKn/96GAy9LCaCS
- TLSH T1B922B684B1D5FC748BB2526A807F060BA27C65466C7EC0C4E666C4F49DF93DD822BB39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_2080418795\CRX_INSTALL\logo.png
- Size 4KB
- SHA256 2f32d26eb9d2418b5678bdaf6d22407f426eca89a10afa05a2a3d7115f710bc4
- MD5 f3e326f1fa12b61f33e58a5bbfebd4cb
- SHA1 d7b4e958e4e0e70b9fee31874a72bd2713f96f08
- SHA512 0de7aba0be94fba29cb8be9fdf70f849d80553db154f849d29b4462bbd1fb5bb6dbfa4b3762e9474f89a60dc18de761233cb7faa2cde0e723c44f02c3cffac73
- SSDEEP 96:DgiRRnVlxEpqsOo3uDScOpre980hF2aLdhswLzyagk8Vk0U4d:fJEpR3akrQ806mwMzgJVu4d
- TLSH T1F6A17D429F2B905BC3E510F60BBA5BC38A5F9CCF964A3F04A41CD91D4F11399160DBE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-128.png
- Size 9KB
- SHA256 8a909845237ef287d26ee417ab15fa924b0c16351f5b31dea656940bf09111f2
- MD5 714d83ebcf0d44db3c17229a0c7c7c20
- SHA1 76f5c5db05ef94e27991bbc863f1c5d3bf698ebd
- SHA512 dd5c618244d4c651159a574552a4a24a0520146b5569e0bc2bae5f186deb984eeb56fd65eaa8069619662ea6617e39f180338559379a588e82da32927765c8ec
- SSDEEP 192:5INFOyxlcmPVMZD9CAfbseHn8yuLkQ2VhW0kcz3Wi/dTitL:5yFfxlzyD9TfbrH8DL0XKi4tL
- TLSH T10212AFAFC9971DF4390FDB72A9644E0B5A0B871002B4C23710B3AD807259AB99D7F247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-16.png
- Size 654B
- SHA256 8e6ff8ab8b4dedec067b7cb06d5f4dcad566d1174430f5e5156be4c196e6af66
- MD5 5bb9e3c889a394940f016998909aeb57
- SHA1 5c18907149a0dc8fa85cd7a6e2dc6d6960fe9258
- SHA512 ecb9057608162c3939a775b7bf7bbcd9a3a3d0960f3eb236d3f457f61eff89b6e54458fc527c313c65173b7b8bb28a1ed800386d4f01f872cfc21f2e31162684
- TLSH T145F0233B2C556078DB2F6FF387701289D8A8024857B132F6C85281F9672E119439236A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-32.png
- Size 1KB
- SHA256 7bafbbc53c7baf9cad8e417945ceff6298b6316dfd89f213f68accd888076aac
- MD5 b7e0a5446467832c4be198548c089115
- SHA1 b999c0bb9791f1cae67bd7d65be2ccf65821ea86
- SHA512 8e0d2d787ce25be7a610b317c60d26a1fb4a0b42f032dc326ec807f8c45f0c035bbdf4ed1149afb0c9ea61bbdb36904b9ad602885750256882725ea56b1e5078
- TLSH T13031FAAED44678B80D0165DCD44E3DEE85BB88F6A7F31847861C2B3C05F2C158414E73
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-512.png
- Size 46KB
- SHA256 2f0ef2b9ecaf5773ec985141a2020497348eb77e71fc852e5823313adddd96ed
- MD5 35381b667461619e5ac4b10f20ac6da6
- SHA1 5c8971a0c1392f09e26dd4e89e3e2901a4215f22
- SHA512 21fb34dec1bc1f60605680bd5dde7d2e923890cf4b6d00a01d61fc3f62d47c03b83ef6b1c33ed1cb59cd52713c5fc4a5c8c27c948368019f3c2f7afc96b01b1a
- SSDEEP 768:9N1XEEtntDO/T+IFYOiGeMoxUKA3VR8JJBXUTWV18BWU5vklW/rN2/4M0rTiT4tY:9N10EZtSRFXRKA8JJBB18AJWzM0r24tY
- TLSH T15723F1B7547271D186F40CE0B2905255F34C14FEDFB98EA4DA37048DFDA6892F689A07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-64.png
- Size 4KB
- SHA256 69d4bdc94e86a99d29d0d78300b246d08f4957b957cd81d400a2cff2ed815477
- MD5 293091f5652231fa11205ec1450cb37e
- SHA1 53ed57774ba7750a6026436cd2895898837dfd4a
- SHA512 62e2f00df37f5e3ec81bef806df6678c4e5627a7bce7046c5d7f5d6a97d34ef76eda59bdc4c7b92a1f4ba1f2bd97ec61aae0b665099dbc4db189e062a96b05a8
- SSDEEP 96:8s+qJP1bGy9TobRBxDKEqcwTl1MbSHxHOYmgw3FGQaaITc1ewj2SN:8byMy5obRTKVBl1MSRUgw3cQaaIIB6E
- TLSH T11F917DDAF430E97ACC23950B37581A66241EC5D0F0849B3F6AA8F4874C08E04EDA5FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 d5afc71087818afa83a97d71b37d7ac53999386ae9aa49b6e3d1a1acaba55df1
- MD5 c1c66a22d77e7055ea5172cd81b6f341
- SHA1 e12a4c69ea84afdb3a0750d6274f5ef0cd44d81e
- SHA512 711dded66d963d1a60e9be7f1108fdb1fe8e94e0b4af892c4d721c92b2572805b20c90c66fe0237ba5855de93258c4ca0a8c30a83e5c865b8de521ef2dc234c9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering2a3474d7-23d1-4d7c-b749-043311c65478.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras3cbc7b77-2747-4556-a447-cf6bafd3c91b.tmp
- Size 157KB
- SHA256 b80929d2f2ab206a3fbbaedeb1b2008d5617c6e251eff652ef8e42032fe96636
- MD5 945f65a6335a24d9bf88e56882ddd9af
- SHA1 1dde2489b53d70cc5f0981b86efe2efb350adfa9
- SHA512 388256a6ac65fc34f78b0362d0fce504a48a9e64df1eddc9715d73aa3338015fd89d2b77c34dd27f2ba02884cc08ca574366bec4f09fa61c48ab3fab28394f21
- SSDEEP 3072:eC5wQuI95lsiY/Kg5gic/RUlhgktSiJx6Hb5G3kNhi:eCWqPdY/rgic/R+vEiJc75ckNQ
- TLSH T180F312F9A8861E25CBBC7F3B62181AA2EF5B2D5B11CA22584875FDCC1B43F14BC11C65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarkscb8be109-ea34-4ef6-a8dc-be56f00241b4.tmp
- Size 28KB
- SHA256 afedd2cb4f476e99fa3b5e9581af8de79092ab88050af3738f2951b42146532d
- MD5 242ace272eb97ad8fdd4f91e54336159
- SHA1 81e1769e69c6a6d9e497eba8eaed6fce20773b69
- SHA512 6f95f4f3992f231e5c5dbc907f7cc0ad950324412570c9898b31a7162c8b0b735235fb9db183df137a40ea19e216d57f20d2e8e6054ec857bd9499e0f4159db8
- SSDEEP 384:DuY1cXnqV02nh1bB789vml86gc28AepU2Zo7Uscm+3uoCy2702Yi:CLYzo4okA32iY3s
- TLSH T1A6D2D833C4066CBB81B453D564F9A61BF745332F26848D8B36BDD84DCFB19236256B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
- Size 336B
- SHA256 aeaca59b0c00b04f96482dee791e30faffba8c865cd42f1f77df3c3b7d74d9c8
- MD5 74115bcc473507541476b425318fa535
- SHA1 0ac9d4c2b8a766e80c2ee521aaaced738eee3d2e
- SHA512 dd957268526fd3511f872d614260f9434d197ea3457177d906a1dacf06af1ff1171082a1556477f03dba8648171056a4329839ad661d705b6d25b0dcb0e80622
- TLSH T13FE0A7A440CCC105CF5E0E709D665CC1051CF83100C25BC7D091D36956FB6EF496E6C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\temp-index
- Size 48B
- SHA256 766539de3a6b83d9e9d5a00668305a9f583d8a2407e5e2362e35ec7fc14b4313
- MD5 abd8782eb205c5e417821d6253141454
- SHA1 586ecdd2cafeed7aebbdc45e32edfa0dcbe772e9
- SHA512 4c01b41989db7cc605a309975865fa7b670d74204818d537ca40bca2692bae8190ab55167d7733352d0fedccbe098fb4952d104eb8e072ef8772b7e9eb44af04
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\index
- Size 256KB
- SHA256 9230f4070c2857ebbb953429b48a9f2bdcd7c7ef28ff43d8c23811793eeeea1b
- MD5 330d7ff788dae2eec3d3d379f8bde9d9
- SHA1 40129416adc45a2d3f45046f8c57762a6db1437d
- SHA512 395178b0f533859875abb926124a60e625d2cf22eeb2ecf438508f6838327b0055627a59acfeb98c119d5c86d3ccf0118ca6c933415429081a1102bd9d8b5afc
- SSDEEP 3:LstlNllkll/luLDal/:LsX3lEtuLDu/
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks2.bak
- Size 3KB
- SHA256 a31a4fb94797da1529fe31ac3c584f179eacc76a9b961d0f8061913f734e65f3
- MD5 9e640842a994ff266873ed3c510896ff
- SHA1 5f07c59a0769e2d01f53a6cf3b32c121bd73c14b
- SHA512 2b460f27a7b5da956f6720c3a90216bd282051d7a2da2c62f381c716d4c988ec83fe7c5bbfefb101078320c7df318c5d2a426a5b1702581af6511ea199bd2d3f
- TLSH T186716C218ED5635D26250E0491894681FBE07A161F6D89CABC56F2BBF56022150E3F32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks281e6137d-28bb-40d7-ab67-d5a951a6b957.tmp
- Size 29KB
- SHA256 a83144f32c7991967713b87244b955d8f6f51d0c7e7bffd870d5019ae1bae650
- MD5 0a79fa8a5626023e97f23a6fa02b4474
- SHA1 e074d9294c16fb106edaadcefc793ccebde5e6a7
- SHA512 cef4d2b82446d38d03aa9efcda32813d91fb670999afb87436bbf91147775f6ebf317b91a6a836b17780fef50278b7f761c737d846417d51994fe0c2f1f5a91c
- SSDEEP 384:0eEQrYYRQ5icnJGDU7X0aAyTxCpXuzRNuEGA/4bWBrbm4UeH3hGBTEHykKdwrTh0:0xEHyJAMkm2UNhluWBfH3v7j1A7+d8
- TLSH T1F6D2E0A27D09FC684126A7642F970076A3798E6F93C3A7CF12CE099D214AEA4518523E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks2cce28839-a45d-4e26-b1ed-c4792ed95cf2.tmp
- Size 29KB
- SHA256 89bf79d6669d5f422c5405545ec6d09f90a5f8588b698d90b9b77a477743d1e5
- MD5 4d388c88cc0cf4ba6e63527fc48ab159
- SHA1 0360425503c1dbcd0d814b1fbadaa81ce031c58a
- SHA512 c96c4661fdabfb153c124ce8256e489346a089e95193feceb505a574fe77ca4d66c2329d5a076d987164920614d083ace03f06be58edc9874336ab24953b86fe
- SSDEEP 768:vKfrwjCewvwirwJlZW7CGdEmMCdfZuRkYnEjyaI:dviwJlo7C+kCZDXjyX
- TLSH T18FD2E141811E3611731F41556AF0CF3AF3CCD788365EB5627835497B8C0A5B6ABBAF80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir1380_1914380464\CRX_INSTALL\manifest.json
- Size 3KB
- SHA256 e99b64403c6c3cf5804d735084798ed4bdb74f9f34e2fc28dc22d72a28e10bfb
- MD5 8622c398b4f7593a10786c6bf18207ca
- SHA1 38792617a458e023208b25423ad241f81c201b78
- SHA512 65ddb9bf5ca816da710239492de37165e2f6e2b0a473c87dc2ea28fe2be31ad44d1cd603cafabe80a50f998e26aaa36434b6ab8936842b9f1cad878b7e8a59fe
- TLSH T1527140A6E4DA597706F457A89CB5070BF210936B8B8E5C4F7BFC90888FF9E60202D51C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir1380_1914380464\CRX_INSTALL\service_worker.js
- Size 1.2MB
- SHA256 2aed56952b9c7266ac31f5e773dc8fd0f1c1203308a81c883916e325894171f4
- MD5 047bd14c37e515c8d6b63c14dda17bf8
- SHA1 a83d3cdf49934bb5c2303391efe8a04273b1e6d0
- SHA512 849ae681e9e268995fbd07ee890e29a01ca7a097dbeb40a7690212ccccae6216e031116de5626a5ffe202402e22a7d6c54dd63be35f7f23d8e45a845965aa7b5
- SSDEEP 12288:Wmv/SrrxxJ0FDeHgdiDbes7t8aqoXiG4FwEUmeQ/NP+13nA+I02SIvZE+P9zMomn:WmvKVxJqLiDjt8aPeFxnKn9yBEia
- TLSH T1FE4517CC34DBF15A4393A422405F3502F67D1E86215D4A62F768CE97B858809E7BBBF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
- Size 48KB
- SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
- MD5 3aaf0b6a10ab3c0d020ac8eac32e415a
- SHA1 de636ca0c3614ffda3d2db228ffcb76464a7a37a
- SHA512 b99dca9df7b4a19cdd777b11590e24a7b37c72fce204275c9d207f9e7ccb3bcd3c38c5d4c27dd3194523cc53c5f26e5a056f1ef6d88bed3fc482e6d82d228bdd
- SSDEEP 1536:un8okzEbWXxYNG8/A85DQqkslr46JUmC+0vzrzJYBBp+M:un8ouEMksq7RHJUmCY
- TLSH T1D22318992269787E0AC6D1ED926D1313552460F8681D84AC723CEFDE660FD82127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
- Size 6KB
- SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
- MD5 fab39415a729d22b161ccb0f46006897
- SHA1 01aae91afcc6be7d0b4d0866da1da1e4f3dd58d4
- SHA512 2f2366a2970d89e6944df1da53fa8f68ecbd8daf655f7e898d6d7c07cc27324b8d7b43b21c7e9955ad8355337be4cff64920e894d1d07ed109d6ab3aec6234a4
- SSDEEP 192:si4AdmyjEmh3Lml/axenXI4qcr6TaUbj4oRCJOSmJ:sxtyomh3Wo
- TLSH T142D174E1F2F3A8796A32A89EF8E74D94F8A583105173C254E51B5DC4CB30B93DF20966
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
- Size 13KB
- SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
- MD5 28c8dc913e80f5480c20e200cdbefc5e
- SHA1 f0bb1b2304877eaf4163f514e1382829c1f828a8
- SHA512 45a12b57b6585d7260fcc197c8fd03171157f81d08a6a226764c182c9b6da62efd509d3ecc905c9837bd4597c9c4a9b9800cd0364e595a10ecaf16561ef23f80
- SSDEEP 384:Xp7UwWzZIyYXRWRhkVAOmts0OTSLHmHk44Y:FUve9XRdV3mtITSLKF
- TLSH T1385299B2BFBA542702D8603DEC527A01B6295651682D405CBADC74EED1D8B4C4DBFF38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
- Size 49B
- SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
- MD5 4924ae3164cb599ef50e43d008a34cd5
- SHA1 09ba9cc17180bfa2c2edeb3ee367dc545a1fdd3d
- SHA512 2adfafd18927c17fb11b0c7834a99fb4df50ff5f97873f424bbcff392cabdbbfb8f2d984575e293a531be14a602ed090ef2c348717f090a5de851d8818c344b9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jialblogdhkabmefghicaknhginkjbgd\5.2.0_0\jq.wasm
- Size 2.7MB
- SHA256 d51e6c9b61382bb2c635f242ccd110f1eafa41791c19a59ae5ee9970284ec20f
- MD5 ba3677831c2da3bcd7ee9addbe81bf67
- SHA1 599a55cdd2d5b337231f2c9dce5e7679b3b15755
- SHA512 bcfe0b4e8be58e0b5784294559ac0dd8d3522584f4fc4951a68107a63ea85abda0b7ded3061425f2a1a113a745a6f4960614269f3b1f775604ed7a0491a4366d
- SSDEEP 24576:oVI4v+XdEJeU4tQ4UjXXigvxDQCjyGa46cmnWT8hW5Yfzd9awIErQEozPwIKpfuG:G9BXigvxDJJ3wIEcEozPwIKp
- TLSH T142D50826FB1AFB69E40C1A795CB79BB93331DA016E01511316087B2FBCBB2D4ED513A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jialblogdhkabmefghicaknhginkjbgd\5.2.0_0\sw.js
- Size 3.2MB
- SHA256 33e21e30c5245a62961ba599a29398069a7339f429687d2048af83bff8d172a8
- MD5 27c93f410282f4edc780041e262d363e
- SHA1 4d19869a65e0bf3cc5cfff3c811266703b8d6524
- SHA512 9db3aa05329f48bb1850fba46e921636de08d57603bd86a11ce0a3d0e5dd7103c615c2e8f3c51536e955980adc7b1a06f02b0eb2b26b6d71a8e4312f6b498240
- SSDEEP 49152:3lDOVixNXrxycYELJuteESQQnqtEjXpfwXnTFVzueoipQros1r9OdSXe5i3ovag8:xR
- TLSH T152F55107DF790F266BDC82D9219A1D0C12BC004F539AC2F8AE5AEA74169B70371D5BED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.12_0\assets\icon-32.png
- Size 1KB
- SHA256 92a8f864ce76af0bc1dc7fd186589d464b1f696a35d10bd94fcef5d0db608661
- MD5 0fad7cb606c6a0e16ecb6c574097e49e
- SHA1 19dbbbe93abc064caa8c0e25d1c10b46c0af38f7
- SHA512 3eda96c5c0d2f894465f7e673dff89342ec9bf88661c75bf29f559d6ec2f57f625a6ae10c66a76675e6cca2cfd6e52555d3db16aaf7ea2e200a953aef0be011d
- TLSH T1DE31EB9C6F20B42BC1EFEFC9430556C3F8F6065542DB62EBAE6446CCE408690A459218
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\_commonjsHelpers.js
- Size 236B
- SHA256 9625379badd4849610dfe6c15453cdf0c0071264c90eef177307fac094d2aa6c
- MD5 146eaf85c344cee008c91f2685dbf82f
- SHA1 42d63529a2c0f2f9cc2b797622f6a3a71cae3e66
- SHA512 2251bb035f0032928f3b8eb47d260be9f4a8b15bee896f308ed1f4316f8f2a194f2cd23a6d9f4780dd92e5221c99f6534bcd7f1d6c613788800ed05e94ac0e2a
- TLSH T140D0A7886450D17540AA246EC21739017755217E42EC3991A39D867423A81EFA414765
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\format-cashback-reward.js
- Size 55B
- SHA256 7e164b939a95c61637b5faa0995715b739215f62b7cab8383cd33d91684053b3
- MD5 5486ceee5ff5ca470fe6a1921c3935a8
- SHA1 b9d0443132cfc4433184ac39a80805deb4eddcfa
- SHA512 3b7ecb533b49978d084614a241ad36e09a06e3a93108cd8e7d94e880565cc45e030e7a5f7d8d53dbe7ed4705a134de542f08e55a08d10e2b654ccf9731e5cf20
- TLSH T1B7900249B342707455139015813B6856B3186A94061966A9445365827954DA56215C6B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\protocol.js
- Size 705B
- SHA256 1817003df2a0f3b54d30203accc200a0358d12bc893cecc9bac7fda3a58a75bd
- MD5 9b7e497b07238895e9e3baff7f2cfee7
- SHA1 6790b2b11e8cff12ca2a8eacebb315b689be9474
- SHA512 b0f318c63d893213048728c5cd9abdd1e2aee15c63ecc4e2e6dc8baf8f64f7db46300fe93148ef834d853b447c7bd34e6fa5874a6512d224f6ee1b34ea61a651
- TLSH T1E201159CF4B2A1F2516611B092F6340F723C5701B5248001B54CD4BE9C308BC5771E5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\logo.png
- Size 3KB
- SHA256 dd8f8853289900fe85f91f94632d61794b73939dd02bf87be1131704582f0d46
- MD5 d8176200ce491dfe24c0c146dd7e245b
- SHA1 667d60ae62d943b2cfb1af93d67d031afb9cc9f5
- SHA512 2025d3a5b3382875ec05973e3999b8e4eec02c21e70046312fda9fef33f00cc57b770597c562890fd388304e65a8778bddb59d1fe1164e9333d3fb987e0100e0
- TLSH T14F716C1FEFC8BC0200F55459BE0BD86343744E6B6418A0B562DE5CB692F8D58A952E73
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\sw.js
- Size 419KB
- SHA256 6d42980eb367a61c70bfa945c392dc95321a4e79799a1e26221909dfe25959c2
- MD5 cf9af9984fc5514b348637b1fcc11a34
- SHA1 201b843acd91152081c79f892addc081330fdb4c
- SHA512 234536459a4fd6c2e83ca6370a3a0cf86fd1e686107ffe52f50b3c4e97ce975c0bba46966911ee2f41e28f1f789a50c4890ff3f1ac180f175b78a8d396295936
- SSDEEP 6144:9UksRik+Rx1r/yffSui6WIbLcHMaxnJkPORQuHKb7E39AnzX+27gCH4Y:tw+Rx1uffLRIN6o39AnZZH4Y
- TLSH T15A944A94B1E7603A07F601E460BB0211F7395D14B41988E4F75CC9EA29FAC8AA57BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\chrome-extension_ompjkhnkeoicimmaehlcmgmpghobbjoj_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
- Size 351B
- SHA256 93c08f7b99f9e60a3d80ada5cb598fc465841bd3f3cdd3aedb40aee55ade10c3
- MD5 186bdcf49f12fd44315c331a80040d34
- SHA1 737d389ef0b3be16eacdedcdff2934ec85d016cf
- SHA512 53fbba1dc058f39e28ebdf8c81c2735ab2e0895dda9829f298773da0a9b5fd973cda5b0791081c900e2829e227125c7618df85b8ccf96e4f0e794f1f7f3fd2df
- TLSH T1BDE0C0F3C2D065BE860102F49A182953CA3D0843531C3C1AD5E47B1A87E1878951040F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences2c105d0e-2de3-4a2b-aa27-c4dc87ba756a.tmp
- Size 15KB
- SHA256 cbc8c4702fe24450062012be14eef22cae0fa236c78c6fdf4ddff4e980778195
- MD5 2f0b5c4507fe0d94c357fd3bca147134
- SHA1 5b186ad37ee5e99ad9192b3d16e2b42c4166e2e9
- SHA512 b5743e8f1c60ddba321b5b207d62d72e94f2f919570f1b97d492f5ca2a8a7db1225db822d1f45af08f17f445010d207360e2c3436833c5579d0ac9eb8a0b6a77
- SSDEEP 384:juJXmPpH3nBJiiIsXqRW+6ZZSK0BM2oKrIS4uwwlOLf0q5LsXABNJQw:jutmPpH3nBJiiIsXqRW+6ZZSK0BM2oKc
- TLSH T1676274DAE9705DBF59D6D935F591F32FE2E80010A1516DA8A7FAC83C00C72EDA412EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences3c85571e-59d8-4060-8812-c4d9b23b5e64.tmp
- Size 18KB
- SHA256 9bc7c0730ec935c959ffdb74c3aeec084db67cbd836d7416c64247b23a8ea4c0
- MD5 dbd79001fc3deb7cfe91159882430a07
- SHA1 34d2daf9f0d0808024dd96145c016a62137a9639
- SHA512 ec6755f91e257089ee186d65bfcd3b8ca56a85e623104246c766f0db865e1b3f8eadadab4333738e24e932ef2b9b6e47567043cf323fc166a7a04b21fb46195c
- SSDEEP 384:qPBIPi4XmWhGH3nBJiiIsXqRW+6ZZSK0BM2oKrIS4uwwlOLf0iWcRxBLFXABX2/8:qPBXymWhGH3nBJiiIsXqRW+6ZZSK0BMa
- TLSH T14B8283DAE5704DBF99D6D935F591F72FE2E81010A1916DA8A3FACC2C00C76DDA002EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences663ed886-f25d-4a74-b909-f838853e18c6.tmp
- Size 10KB
- SHA256 dcb4e72fb5e76ede5bf9c6e937332be6d232e5218bfd638639a17b9e273cb2f1
- MD5 4c1e81a28be30530f1ece64ae3cee8b7
- SHA1 c41e79d7d5473ca8095a72866a837dc5fdf8b053
- SHA512 ea65c73920359c5989fc7b0abca40419208d12a0e6553a2f3a9d50dae51dee441cbd38ac474943c37c9ed4ebe2ceaf0182d5ebc6a33c91f5d23797b59381dbf4
- SSDEEP 192:h68mUchlhVhFhHh/h0h0hyhsXMhXh4hwhchPhPhkhshuhHhWhYhShshZhFwhkhij:HmpH3nBJiiIsXqRW+6ZZSK0BM2oKrISG
- TLSH T1B4326696DA705DBF5CC69929F590B76BE3E80110A1517DE8A7F9C83C10CB2CCA523AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences7b5f340c-3090-4f4c-8159-9e790c60fec6.tmp
- Size 18KB
- SHA256 e0b2113c003c4a9023702b4856478baf14839171daa036da5a3e593e02cb7250
- MD5 71672006647d38acb2346eabfe00ac58
- SHA1 121d0589345b89c4f3702c626a9f39553fdb9979
- SHA512 bb5fb84a6de382097de87520812a327108dc8dd293f7805269090cd2db7dcddf1a0e9b2b0552a302d82101c89a6c7f1dc145b2cb3e47994ebb3ba2f105024da2
- SSDEEP 384:RuIPihXmLhGH3nBJiiIsXqRW+6ZZSK0BM2oKrIS4uwwlOLf0iWcRN5LBXABm2/Q5:RuXFmLhGH3nBJiiIsXqRW+6ZZSK0BM2S
- TLSH T10E8282DAE5704DBF99D6D935F591F72FE2E81010A1916DA8A3FACC2C00C76DDA012EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences89437d11-61a5-48fc-b999-458476943095.tmp
- Size 17KB
- SHA256 2398d46ad636aae0ba730d92b2289a9b453de7a3374f7ec87265d7db0ee9eb6f
- MD5 f373d095a2d1edc011e09c51903eafdd
- SHA1 3059edd6809068ca1f03e96ffca69636bc21bfad
- SHA512 46c1ed3cd8df1e6f5cecee0752a4312c478da2a43cc51f0346c5a2cc69b189b56d77a291cec8a7cfb91db34c28ce316161e50afd4353aac136488c636f566467
- SSDEEP 384:juIPjSXmLhGH3nBJiiIsXqRW+6ZZSK0BM2oKrIS4uwwlOLf02qN5LCXABNJQw:juSwmLhGH3nBJiiIsXqRW+6ZZSK0BM29
- TLSH T1518272DAE5704DBF59D69936F591F32FE2E80010A1916DA8A7FACC2C00C76DDA412EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences95557c53-2001-4661-9a77-d309bb2e4d9f.tmp
- Size 18KB
- SHA256 a85907d5d848ac3192e851b5b472b54b9fab5e4aa2dfcf58db4b86018cd896ce
- MD5 06ca9ca6a724c999ffb8641a3160c572
- SHA1 32812abb421709da414a92b4665ad1998c2819b6
- SHA512 c09332ecbce8e9669948812decf707de9c3d6ebc946b15f62104cdfe835862300e885ed794ca3bbd784a7eed5705f5220c06259590f860522908d3d0ec54b974
- SSDEEP 384:juIPiPXmLhGH3nBJiiIsXqRW+6ZZSK0BM2oKrIS4uwwlOLf0iWcqN5LBXABm2/Qw:juX/mLhGH3nBJiiIsXqRW+6ZZSK0BM2Q
- TLSH T1778283DAE5304DBF99D6D935F591F32FE2E81010A1916DA8A7FACC2C10C76DDA012EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
- Size 82KB
- SHA256 aefac514cc041cec7871aea2872fe78efec33d861dbb6caac52bd1771da3815e
- MD5 0672f79ddd8fd6a500444557458ac210
- SHA1 8ee4c69b9f4d61f9874d9e38a3428a127dc6b2fd
- SHA512 bdbc5cabec3fdcdb99eba321319c2f1041645cc2f938937cca6e49559eedd35ac66ef9d23e1e8c3f219d29e12caf0fbcd4456cca01dc310b0f2b6ff3af380574
- SSDEEP 1536:4YzYrAhYk4YMRZXYvuWYezYbIMYOYMwfViCYzCkvocXTJYQsOfHoJYaYcYH9YZYM:WAHLB0v9UkC+FEig/rl
- TLSH T1EA83D8E6C8CD9F758EC88BBCDC37A71B989401499FEC9E14A7EA404C43C6785117F28A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences3071aa6c-369b-4126-9c3a-286ea8cde5c0.tmp
- Size 114KB
- SHA256 59081dc32a6d540975141988b85d06d1d1b3b5fbd57d7420661ccb9932794175
- MD5 5f5d7e3a58f721eec5fd2a9e4f9c377d
- SHA1 26dbd13de8ef1ba654686ccab4e22e4c1614c734
- SHA512 7126140c1cc44071b26a7cd8e04c5a80705a6dc21c73fabfd7b7958e9c3c3ac64ac0651f792d0ce43725b70a8e350433d131acf2a85b94940c0d0ca1e7ce3648
- SSDEEP 3072:wX3wM4d7DE9AHLBM80UJ9UkC+FEigp+XI:u3R81BJLI
- TLSH T14CB3E7E6C8CD9E758ED88BB8CC3BA71B94940155AFDC5F14A7FA400C4386B85217F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences822ff6c6-6680-4ea9-8524-c3aeef60ada4.tmp
- Size 115KB
- SHA256 f41c9a1a6c897d5b2a989a76e1d62f6fce277a631691b210eaacc99b0cbd89e6
- MD5 ef62917ae945de0465d39b4fc5597181
- SHA1 7308ab25476d939d277a8e406ac43f5e559d2aff
- SHA512 7f7fa3ece8e2b325585aec1d334ae0c2f3d612e4e706df0d75259e03b2d2c79aa53f805d6d827821037fac87c785cabd1544e2bf66922a311c9a5ec4048f1415
- SSDEEP 3072:KX3wM4d7DE9AHLBM80UJ9UkC+FEigxlH5:k3R81BJG5
- TLSH T171C3E8EAC8CD9E758ED88BF8CC3BA71B84950155AF9C5F14A7FA401C0386B85117F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences878b4f9b-a56a-4746-bec5-4edf48e94d81.tmp
- Size 115KB
- SHA256 7ab423565dffef5af19f7167938acb68fd52b63c2de5cee83f6f882cf995ef91
- MD5 77290a7558691d6c99b35390e8dc43eb
- SHA1 ea4f499f1371885a32278a271be7c244bcfa88c8
- SHA512 5d1ba1e4c09eeede7dffa2e19fdb4e2f99dba0a290d80a4c016af10a50c99284260ade274fa982efa75ea98fb7e343da773fd29f638400b1f769b0d74114ef4e
- SSDEEP 3072:nX3wM4d7DE9AHLBM80UJ9UkC+FEigMeERt:X3R81BJuG
- TLSH T11AC3E7EAC8CD9E758ED88BB8CC3BA71B84940115AF9C5F14A7FA441C43C6B85113F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 600B
- SHA256 3d401d9006fa8e67e6b4f451227fd4022abe984237fd16e5454c75c4c6ad5c32
- MD5 405320b18f56b0ffa83b0708a98617db
- SHA1 d99ce97aefe2c68f5df1bf14cd212965e92e413f
- SHA512 4fac9255211b30c407118b2367dc98c9dd8fe6c68b8f360dbacf6b91ed0e99c1af7041e5c4e8b7cbf0af6f402bf3cb4cfedc2e143445140fe6a55bfc20b7daf7
- TLSH T108F0680BAE8E95EAC57243753875544C7331E9B6C608A39B42BC347E0C622320EA7986
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 120B
- SHA256 4cdc4189713d820c9904462245c47ab2e748b900c455cca8b28efd90a63349a4
- MD5 953bfb574bf75bf0d737745bc1929095
- SHA1 1519cb414d6a59d97f801fc19f9323ca322934a8
- SHA512 6287d2e90234c837f22adb8332e2a0edc954279f8a82b9e82d62f20f292947724cd21eadfe364ddae40c4537319e677205b1d0e7426b7f83ad5d021512fb454e
- TLSH T13AB01210845E2501C8050FB0350904C56710AF32C5920701A2505265CC624725241401
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 ab6e69efa9afb1bebb6bf400c25b91c6fa46cbd7028a39c17a6fdbb5f44eb7d8
- MD5 b8bae2cbcfbf06e5392c071df5c9cc1d
- SHA1 3aa99454f9a6d322a11ff482e466b69119eead3d
- SHA512 ffa674412d7e54fa1dff86641ea5d64ba92d47d409892b5874ac9a793b126866ef3a618f892c870d30f96e78c15edce08d2e013a5df1fd89cf44c67812c9f910
- TLSH T1CDA002121680C550C98127B06E0583881340B97590000393F6D4034A8CE00514952255
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw
- Size 445B
- SHA256 e645e68826a3c7b6163b3dbabf634336733edf928dc0246c7c9aed50788016db
- MD5 3547314a707f8722e8e374641e062a7e
- SHA1 1dc15b2694e55dd4115d17b1b6d6569563292fbf
- SHA512 9971131c79a95c8e8bcf7530937d163fa162163e49b31a2de741ad2d34d3daae35daab3a0e95f34c21fdcce2cf48be666f56b6e855274b4cf7c7ab77c00881c0
- TLSH T1EAF0A343453141B710B58A355C45B7659D517B447F8DF7E29CADEA543235C020C7FB45
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw122ddc2d-ca95-4dad-b617-3eddb6714c4d.tmp
- Size 1005B
- SHA256 2372ba9090a55a314b23935443451a3f263f97f3b1b3dd6f4c252f851943ff7f
- MD5 0fc26ac7d1eab3d211954c817fed0fec
- SHA1 4b9748b6900d706cca4333ba72abd420bddcb90d
- SHA512 5c68a944bfb6a3a02f3e203f6a7b1364f4c35d4f5ca496d965bfa1ae9e9e620d7a26ee99d7e94f5954631e24b2f4d298c919507d6a820bf97f89e65d221f5d38
- TLSH T1D711C812030276F799CDA96339D5469CB1C12D20DC27A8E7448BA4EC7FA20600531F01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw260bde3a-4ee2-467e-996b-23bace56653e.tmp
- Size 669B
- SHA256 5826b009bcfef5d55a944dc234b674f3ed51b1f9e43dc4aef979da85a5ef7101
- MD5 2ee15b13af8c0a704496dacceed96cff
- SHA1 5319d4c4aeef5d12371d62b077a9eb71d2ce32b3
- SHA512 0df07b99cb99a035d7a5eb199a93ea5b8063747f8066652b4173f8951713778f11dc5ddd59310ad52af7d781305317260f40f1a0ccd46b5db84b46ee9bc9fbe6
- TLSH T1400183578A55E980F1E0728E97C3F32C182C4B168056F2C3850870436A94F2108B0736
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw5e27b14c-a1c3-4045-aa9e-7f2911e44f3f.tmp
- Size 1KB
- SHA256 37dfa3d87c2c74383361878e160726271d6f1fddfa7a0660ac09d6b5018bde1b
- MD5 ff1080bac5f6f30970461bd6a5010d78
- SHA1 8f5244d9d68c7bb0f2e2baad5be31b8cbf06edd6
- SHA512 932f0c3cc21ba84a4206fe668a55556bc46dfe5ebc5b8260b2b74ffd939cfdae5f9c7e0ec6010c4587dfc5ef244c7ca7b954e34b2ba181577307e6ebf7012f77
- TLSH T19531D8401B992043D7C4A90A753B1391FB1B5AEEBDBC963CD20AE3A5424E6E5A2B1394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw61c93b1d-17f1-45e9-a9a6-306b3ab6bcaa.tmp
- Size 1KB
- SHA256 d830ca6882b551d624c408e7a50bd006e1ec0ca28613f44e29359ae22ad6f911
- MD5 0e8a42e71c85185db7f724e8480e74a0
- SHA1 a5281bb878d09ed17e5d8ac33a8b627204d5ee4c
- SHA512 2796cec8a3039660163e982920d8a29fc5d9817583a3373cc67cc68ea3a453b105d19be0ea8d73d0e8320b3a2621291e9beb77da6887087eb4f8990e21a60ae0
- TLSH T16531FC73185136EFF2D128130FB402A5CC04CD852E6C5BE9BA61D63B55E9535EC46381
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw6e036e89-046a-435c-87d8-1438ff5ba5ee.tmp
- Size 1KB
- SHA256 61a48c2d8923e1c04525cef0b4acdea6a2b0ca01b893dba9d3d58feb5d8312de
- MD5 cfa6c576a1c15528672ea87263bceb02
- SHA1 dc2a0d000b4c376bb950dfe9b815177a9d561b3b
- SHA512 2256d8b71b3927ca961511e8efbbf9ad18846cbc41d0eda3ae3da0564a030435a8b7feeb1a994f45dd87b519a6e67955d200e63310c366096a9cbd7ab39b05a2
- TLSH T18B31FA9147195866687D060B96A80CDE2BD704962BF5BC33A314C05FC6ABA509488BA3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw76b74772-5a99-4823-a68c-6c132d6696c4.tmp
- Size 1KB
- SHA256 e8c3d9b69d01937baf9daaed0c15bf7e8476b083a87ed30b7a5c329f8ff9d4ab
- MD5 2507fe874e4099fcfdad229545e339da
- SHA1 d129b1793b09632b266e688d0bd4c31cb1628d30
- SHA512 9feb395fd5e5985ef6c46e7bb5eb6121928963f42a554c5a9df56f06ec72daed54e2678b01be417f65bb9d12d464cfec9c518337870e72dbce07ebe85317bea7
- TLSH T15C21DA4615CA9DFDFC7D213DE1BE79A00DCCB494F51576420F2A1EDCCE11500B605828
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw7b0a5a43-f238-4410-b71c-ddd0147c5c64.tmp
- Size 541B
- SHA256 9efb26e7cc8ef289d06aef0fa49851663a18745eb70d7b71731c90046389ab60
- MD5 b019ec972fb9aa7066dfdf8361dbc715
- SHA1 3441599cee70e9b4b62e9b840648aa69707eaf66
- SHA512 b71c63e835bbab250a295dec3a2d83858827550811c7110ef8ea93b002ec8abc39ed6305a4ccd0e70b00f7b1af973bb627d8bc34cba4ee572558707a99b9be7d
- TLSH T163F02013B8FCDC8E8ACA5D540748E8074A9839482BEEC0769ACDC4D20160FB581D2DC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw860204bf-4e5a-4696-a148-7e1c984edbfb.tmp
- Size 1KB
- SHA256 7f28c159961f14476ca1eca5cebdb0bc6a092ccbe6f4aa995226840c6683985c
- MD5 8545ecf7b4732aa0bc9abc502b41744a
- SHA1 f06c30ec56e77f4cab84f379404bd2cdba31475a
- SHA512 89da597f93f63bdbc8cd4d5a9fc5c5d02a0a3fccfcf2e51ceb40e459737223ee25e119a5b6221545530d7f0a32c4b1f0ca987e071c7e48c018d63ccb0f13a325
- TLSH T15021B7AAAB17DB12465B67A11EC18254C6BFAC891341615284FC8482180C2FA9A94530
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw8826f3ca-0ea9-41d3-b79b-453abb298df6.tmp
- Size 1KB
- SHA256 3072f7209ea3b63a68658803d018894839aea010ce3a8e3ec36a784643542794
- MD5 636cc0d4cdd37f3b675df07f9f6fd596
- SHA1 31d29e0f68af64a1ddb57ea90aba181ff96cad1d
- SHA512 d23d7826ef18254560c412c55de1abdf623c0eb3c0f1ae68df95a8971b59bc5031a23b1005ba24b302c05025f95d5912739081a9e88b1dd87c079ca7d95f8feb
- TLSH T1B321DA7296354A6F089F507303F06083A0D9094778D462C7E079F68D6505FD0982CCE5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawc5706eab-5253-4cd4-a85b-97a401d0b4a1.tmp
- Size 1KB
- SHA256 092e7af5af95a4822910f26a495021dbc35684f9b40f773ba1b90437e76b2930
- MD5 770cfb3129452a7d3f62d25cd3e13f17
- SHA1 75f253f30e1421b542f37c827f11f0dace681ded
- SHA512 3370ca6a2e625799d871835fda83ee485fab1480767e514c35ba45c8a6cdc34145fd19026c2174d4936ab9f93b82a0b2ba19651c268494c95f7fb061b98c1188
- TLSH T1D5212B8FADCFC004C2FCD9389340461CA2B13D502C05F0C4C99FE1B2985556C72606C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawd7e6494e-bbe2-4835-bcc5-4d542db7d125.tmp
- Size 1KB
- SHA256 aef3a4ece17301a240b81546f12b46e70ffa1574040f5cdfc56a7e0e43c441ee
- MD5 5c034ff973bb553736f4d71f9f4b1ff2
- SHA1 97fdf1b14bf14f51eee22008fe978dfec40a24fa
- SHA512 fc01984ac8d2ea6c5e52c1c37ae02f0953e785d4d9c5cee3317fd47c74649aabf9efbb5887d87fa5471cd165ed2c30c99fc32556739ba1924eb30e1f61342048
- TLSH T17D310A1E40BF5563683F0290075AF266431E0234C947FE170CF4B8ADA911C97267DB5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawfaac19e1-926a-434a-bcd9-7d738bdb0ac5.tmp
- Size 829B
- SHA256 fdd166bac56651b3413245afe7cbe673f849bc7092ee76f1b88b9fab25bcb80f
- MD5 57663b828d050e44ceb12c09275a3917
- SHA1 8163214bd97cfc6b5250a263e06799b533bbd12f
- SHA512 0b2e0b832ec780d8c829728b71edc4b73286c8e8b9ed169f7d4cd0c359cf36b70185c9e4efc060ef33de7103247991c38819129be0dda41ca74c955c044c7595
- TLSH T1BA01520B266163A989225F16275104B111F950DE80FEAB6789AFC8A9EEE5700F783294
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw
- Size 445B
- SHA256 70ed7d4e750753824c865f6d38642755ea11688f042cdbd70b99076e3b532527
- MD5 4c4cdb12b9df296fa4c770dc302be815
- SHA1 6d8c78154114a60d6f56467c78e3ecfe059f1d89
- SHA512 df93c621994838ca6c1b86dc647e035d916d9aa7a4eb5293434b4c5706b945749580273c7d326359771a407e907505d2ccb8151df085aaab8006bf823367f308
- TLSH T1A2F023CE0A0FD0ADCB4CD1C20C5FD0162AF0B8E407E01A2040AB8EC22BC2651D088D46
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw02f7c8df-6675-4cc4-99bb-d874b82d70bf.tmp
- Size 3KB
- SHA256 b38a6c252f0e82568866c0410770acc28e92c1309ed23de88d618ba1c913bd6b
- MD5 f4452b97844741249f1a276388b30063
- SHA1 a06131da04405c7b3f15ef24921fd0dbafa53fad
- SHA512 343325580bf57e8d93cc8958233019312600d08fe3dbcede4e949ac5108c7d2833b536122987395528f8bbea7653b3e831860fa42f700a5e07799681ac407971
- TLSH T10E614B56DE140C525729E2A30C426A6869058445AD5FDC63BDAFFA0B1AC2307EC0F6F9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw03d3e41d-c134-461e-bef9-e220e2fb2be6.tmp
- Size 18KB
- SHA256 7717b1dd9c15ee98f08e467d049713d87e76e5955a2215d7db7c0d8198b993f2
- MD5 ed62d0ffe2a03747d8958fa4da0a3838
- SHA1 d9eb8fbe2b65d8f642f2600ff0f8cc64020dddb4
- SHA512 2ad3c5cc01cb458feb7e282c67cde686df224230b804b26f2e5f0b36eb0f343ee08012d0909f02a7c53d9f594ce91289cb50dcf5417a86120ecfe7c4e83ab0ac
- SSDEEP 384:cdIHNZrc98o+vm3uOvzbyoftveB7ZVo89t5v0yw010tLf5:fTQ95+gBzbyUveB7/oYQywo0tL5
- TLSH T19582C08B6A31904307206674CF9BD8E7FB90E45F20268BA267F358E1867A17B17356B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw04be0470-1b88-4981-a9e7-968e72848b0b.tmp
- Size 11KB
- SHA256 6ccfb6386c1841c829d8b3b5a62037bf49d94e512df9abf1c96223f97f725489
- MD5 cf531d6885ed51badf71350859f32fd8
- SHA1 c6d11937884783b0b9bad2a4a21aeee6ba1ed2f4
- SHA512 5f92588d2b44ea3ec2494731c61640e779541443fa07aa146fe787fe1d54bd900aa8e9e43cd83d860264b1fc9e15fab244abc9d8ce122eec08a95bc21d71bccb
- SSDEEP 192:KYhg5J8Gvl7tBINLSKCFY7GDT373RFyzy5cSTAkddw8MF+9Cc5CZOigL7CQZ7wvS:Kfj8sR/INLGaGDT3TRQzojTeF+9l42Cu
- TLSH T13242BFCE8D9B57834B4778644F4BCFB7D40242AC67BD2AA553D7524320D6F2A5C20AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw061a48a3-f2cd-40e6-8506-f03dcee55447.tmp
- Size 11KB
- SHA256 207f27598c5793a65f7420ed6b54f37e05ddab1e0ed6e6b5e85a76ffa569ac78
- MD5 644f84c45d7725666019942805e26844
- SHA1 9283ae04a91daf5020cbe7b416393f99a65f864d
- SHA512 1b76315417a46ec0ff87b1fc4a79f33c8a35c6b8efb1fd6907eccc3f1bfdc78332662ab0e6345ebc0017897602560b543f83c8700de5be4736fdd869218fe4b4
- SSDEEP 192:Cn1SNMns0H6GOv0TWBGlX/Ur1frbuIEnD+VDS/GtgQRBoUQUw0yQFaKknkLqhMGl:+S+nZ+0TnlXcrYnDM+/6RBZQmpFaKknJ
- TLSH T1B132C021A6E176BC8E88542BBED66CA6F65C5669F5134E08E0E07C7C178E6054208F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw098fc697-2dc5-4c1b-b18d-5b1f2228e522.tmp
- Size 3KB
- SHA256 c3f4038f836842ea4725fc91d465a42278f6a3c94342136b8c40215ec4e01c61
- MD5 eafbc7bf9dc702309a2c36ae2e70e6fd
- SHA1 73223b55ccca424315f7905619794d8756a63988
- SHA512 b6bc8b51a6cbd4e97a193e7fe2b4b82d970e656fa67812f4c294e78b5ecd34cc9b263ea11ef4cc270627dcb27450aae04c009f97e272be7245a4ea0c672f0bc2
- TLSH T1B3715E1C8BAC0A99D6DFDE1A11C03A51898FF18754153557B5B6D7C48D643079338B31
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ac50fd1-43c3-4e73-aba2-6ed466ffabf9.tmp
- Size 17KB
- SHA256 779ba6eadfa0d964a814fb1ce1e0ce4aad2d16c0d4c2cd4d12dcce6520432f43
- MD5 a03f7f969e92d3a809beadc798ce1edf
- SHA1 2ff7c5048dd5897de1a601767978375f862a9fa4
- SHA512 86aa8907d9e71370a3f31c6757740acdfbff8e67adaca5d1b4ede7279cfe0e59708e3e534d7bf8a99d81af4e9843e157551398776e6940114292b75c44b5cb92
- SSDEEP 384:T8iXXviSHl5kQIFCMIXRXwyLi5VnuPXmAQwuino9i4GVlR:Nvi2LIFCMIBAyGnuvTNuio7u
- TLSH T1BF82C0F7CD1D97A9C14D2F410A8438EB5DB0F2EA6854AE4359E9E0F5A88C3124D0F3B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b246192-5b45-42fb-b81e-9ace54bc74b2.tmp
- Size 3KB
- SHA256 3639ef842c48e3833dcd4ca722180177a5c6d5eacf7445290c00881a374b0e04
- MD5 6515e7272a3679abf3fc2148e09108fa
- SHA1 3c850970ba57b263da334c63c3dc0ced7b166cf4
- SHA512 6541ce4bb738b32db128ebc4fbb1682ce46433b677f52f710c713dae94d521635a89306254ffc8b9e87dbb5b6e250015d3317ca8638a9046a4cd0d26000e31c1
- TLSH T12B818E5951558AC927C3DC7ECC0044BBF76F426A2A98221DDC79AB4524C72D8CA8A482
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b566f8e-18ca-4bfe-b486-9af9a4816e11.tmp
- Size 3KB
- SHA256 606e2f590f052840ecde04736b1f3c5f1f44484292e8774658ba0c0cec8a7e47
- MD5 6235c147b012486bce3e3c7eaa228806
- SHA1 e7e5162878c4a34f79d953dea923851eeeaa71ae
- SHA512 dfbfecccd2297b7a29f4d3fcde4c4083e02df079c97c4c9f3178c409031dcc6775e7b3b3f2f4eed0115f4d573299186a8e1dc0b346f2858f3077ea4a1b71e6e4
- TLSH T1DF714CAF42FFA8E2B535D03ED423E7DA9A6E20ECAE6441157B279007DD0754654B2500
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ee5aea9-dff1-4c1d-ab16-6b04f0be9eee.tmp
- Size 16KB
- SHA256 07db87965322e6b47c0b9e88d29055b9549eb82c1a2ed82a79d448a47d0db9c9
- MD5 4d4e398409951038a89b80a1ab469927
- SHA1 311529317dafdc5bdecfee9da3141ec4e64b60dc
- SHA512 588450a0d50fcfccac11699716a25bae6b9c8885da27b697f27470148df0c6b90eb8fe44b641d69a5d58607f9315f7a01a48de2c52b304c9778e610a103232c0
- SSDEEP 384:AD8VZOk3GvwylxSTmk+Xw+3FeG449+REnLZN05mRI8m3hGEBy0uQZ+taQmwyG6kw:O8Va4dmkv+3Fv44gEnLZZLmxJDZ+aey5
- TLSH T10872C019637A7035BA31201E14C21B5975A9F392EE11A5F6EA110DD8BCE0F8FD9216CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw101e42ac-95b7-4155-8286-4b3159defcc5.tmp
- Size 13KB
- SHA256 97ddc3b6240faa680bfeea28ce9dc9d56ae6fc1aa6521edfc48be70e0d998eca
- MD5 f6cea999263945159ac6f77e46bd6a3a
- SHA1 1148a3576e7673a2027eb86bcff76cb4cd964fe8
- SHA512 20da31cb77f9bfa7a07ab1b4c099dbaf272bf421875d344ca36e616ada46321a5186cd0daab160888922c84cc17ec533de4a67980554cf69b033407589128b80
- SSDEEP 192:uI+c+KF6bXNNlW1mWZW3A+wPitCOKFvH1ptOeKuxteg3ayjmtx9m6UbQX0I/jWzZ:torNN4Zg7U/Jtbayjmtx9mRAUK/p9A
- TLSH T1CD52B03B6825FE099C2E5F85D54E532993B9458C1E3E3E5F3340699ACC46007AF7A93C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw12f9abec-b0ba-43a0-b94a-73aea45a3d9f.tmp
- Size 3KB
- SHA256 5f9ee414ded5ecc77d814afb0fd06e44995d456917feacf49e45d4d28ccc412b
- MD5 d90d30a3583b7850e0091d28619ae8f9
- SHA1 4e70dd0f95f26db243a59676fa07fc3ad430d4dc
- SHA512 1dd1429a36ac5dc783aa9541dd373165232231651f092dee69ca4dbee3674a2b43afc52b93e531abf75b0441836a6ad37e3961684da950ce30e9b6075bafedf0
- TLSH T124616E7B6C76C4974AD832815717F5655A222534ADFCAE3CD65A6526A081DC6640304C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1a818bf9-d21a-421f-b96b-ea2db31caf6e.tmp
- Size 15KB
- SHA256 a94c222e5c4ad12f35bf2d8b89abf498607474f1ab561e10c183ea8f1423c20b
- MD5 f001a68faec7672d78944067624a281d
- SHA1 82fac8cb33f10d274fecd1b1b2e72aafb2048e36
- SHA512 c2d9c0934e07e030dc9dcd15921a46589a2a7dd472e5140d89b5097b2e017281dfa28358111129bd02d9f52a2f9735d1647c6037abfd7d77275548e988f4d659
- SSDEEP 384:J5Mn5D+r3W4BWeN24295luSuJ+/UaplzhIjeMmawb:Jk+r3poeFa5lvuDaplzhIjeM7wb
- TLSH T1D062CF3F413B93F251647BFA10EE4BA99368D0CB8923E85E65067C1B6860D47BC5BCA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1adeed63-caf5-42c4-8a73-d052693d3a8a.tmp
- Size 12KB
- SHA256 d2b1807497605c4b4f772b0edfba5dc6eb93580b787f2454b3dab9723726b4ee
- MD5 e19be86db1f8dee88f1bfb5425441a91
- SHA1 c4c2216377f8d25e7d05ccb50cdf8cde296f3b61
- SHA512 529941be609d48fe4e685ab6fc8ca0c551e838ed37f627e1059e71245dd0606c09b507dec856b5bd18eef3bc421e219012f51c7c737f6a3600adaff10dbb63c5
- SSDEEP 384:Mio4mLDuZG0nj9fgAWhs05unql8xvSGNF8aPP/hzRRw2:tMDYCUi815zRRw2
- TLSH T13F42D0258E8E6E011A059B20490CF599D4F7FEC2835E080B1B3E0A89E40B8F6DC4BEC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1ca62e94-e317-43b8-ad3d-e1061878add0.tmp
- Size 16KB
- SHA256 7771ad324117adea817a18dc493890e59dd2b99d38033ac62bf8c73fd3135db5
- MD5 eda48e61f08993dd8a35f2ace437d96e
- SHA1 a0620a1f09711674704e08a2c818ee8a8ae362da
- SHA512 0947d3568312a9075a7f065db9661398f70383b5b575bfa0f904af5d76a6f1f34f8b0c1efa5c45985981f19bf7be30e56f99373c7a66a0e55f8e4f887a6a028e
- SSDEEP 384:O6d3a4wNNdgIODAVx8gxSGxvc0FJ5AZOzZr1K+C+Qr8B2zuh/KM:DyNSABvBuZOO+g8BpV
- TLSH T12672D014F558D3250F5BADE2965BF37C900F3662DEBDBBE992A03F41891CA09B073861
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0347fe-6b4b-4af8-a111-c6e1508b6f41.tmp
- Size 797B
- SHA256 bcdf8780b0ffb481b937dc2b59ddc72b4d7efa1a17708fe4afa536a2f41407d7
- MD5 9923b8e5b93045c61db23325c7766195
- SHA1 82a2d71a46d122631d45f53d0779dab3b7ef50c0
- SHA512 92234668928c2ae35e30c7c12100f0dcfa997812c04b57b0a07563658235f5911b228b47544048569898e7edd2de4d78ec9eea549b699d8f2304dc27db6d13b7
- TLSH T16D0175044051A3F52136A1B5E97302E103DBA3ED5E747ACFB281504FBB663014E4068C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0b9b3e-330d-4165-b417-74588a0aebda.tmp
- Size 15KB
- SHA256 292c4454a40252eae66d890d110dc5ddfe903ad8f005a67aafd6cdbbb7e38d44
- MD5 f0890a83533e60df0b3b1829d2d79b47
- SHA1 da474ddc86a19911fda0f77c3c0485d263cfb0c9
- SHA512 3c3ed937902a0f4faee5534bc8d0decfefc0f49dce59a2ea576548cf1c0d5bfca013f2cc64556402055aba71d5d719c47890d014203fef63fdf6737f3be99232
- SSDEEP 384:o2Kh3f0X0/Ja71g3ifVUjssIoLSxj1918pGtbEPhCWvIGiFP6d:tnp18ILf1f1EPht5iFM
- TLSH T18572D0DC494717E87BB31945524BAE5B4C9E63D000173224D0717639F2AAE8BB38D1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1e395605-4c14-4769-b853-e772c82aa023.tmp
- Size 2KB
- SHA256 904235152b3b72bddcdec3c68ff2d98c66a7085672d29480df137db638a734e6
- MD5 f19eaf318542749d83a808af7b713d3b
- SHA1 37060801114ebf4141d306c885d0d52ad6d51e7b
- SHA512 d65b712713474f145427379dc66f68a2ae2a72859a5068031842b5f788dd2e10e899186f59b792b95a88519aedceefa7d1a4c8b2a23efd15fb21e2659d757577
- TLSH T147412B27C171088AA9846CD0B9A28A7DD12FF2A56EDE9FA8FC580E3452252BCC1A5C11
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw251fc7a3-3ecb-44a0-8b9d-eb6ce9ab3c5d.tmp
- Size 2KB
- SHA256 a28ecf0ade2f18554a3af30dc983693fcc42d884665b1bc99426008ec2854ac1
- MD5 e057ef287b589ac87f7659569c424597
- SHA1 346d769ccf048404ea57164d2fff267a437789ba
- SHA512 d69590641c4e7e9a66d87a134b8e8ed6c5e6c74e322e11d9a3a7108afed3127b6e2b1e8360807ca5f347064a264eb97e9f20bcb935611d8ba9f9faba0f649854
- TLSH T18D413A92D38CB01EAE928DAF9FAA53FBC982D489BA3CC95B144C032D53284509443CE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26657acc-5810-4240-a733-49f5cb312296.tmp
- Size 11KB
- SHA256 d503610bcb0c820c454141716012f31ac1182c23373c982f4873079e9099f788
- MD5 35b9a1bd627d14cba561b7ae3c06082b
- SHA1 65aa3b0da02545e11d44dae0f83178f8db4a20fe
- SHA512 92e47f5c23674eeb84e66c00fd5435dc648ba029a69de1e5f41f63699a6310e8c4365053fb381e024a4c55976c1d540c5e7b1135aae05244d32e2895d2a60ad7
- SSDEEP 192:vo37Hwg+75pTkMMzaAX9cEUAIGaIBNpL/3RbyKsAMCVQuOREQ/WkY8il05AJGprt:W0gIxb4ayiEtpLF/VQuOT/g8uQAJG3Yk
- TLSH T19632C0AF9A38A5D63A319C68AAEA03560BC36854325DD3348451AF06D7C77DF104DF92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26e7a08c-dc17-41e7-a016-d85827a3f662.tmp
- Size 3KB
- SHA256 93e1763ed1607439139b764fc3a58824da7f23fbba7af80005922f15a0d1556c
- MD5 ebce9dad9aedfbc81ff978340c6c8c55
- SHA1 b07a8a4178295bdafdbe0390d7a257b606ad2c07
- SHA512 65b9fefcb3e30b428f44df07f3860d6bdb8fe3bdb21dbc244cf183d7766f9528142af198a02a8b94144c4ab7e1d363d2b8c00cdedec72ddeffb5cdf74691b85d
- TLSH T18D81AF629F9B062A179CEA70E4D14772C45DAB9CC713CCBE8A948CACE21289CD137422
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw2a881982-60b8-445a-aa9d-209f10453284.tmp
- Size 15KB
- SHA256 da7ca2f3ea15d538d3c96977886a946695fbba5f4019aa43778278be0947b440
- MD5 348b272b787f2e4e785451c2896603e7
- SHA1 5390f3366264cd18de6a63a603e98d3be83e719b
- SHA512 0991cd122e25fa7a5b32c60a9e7833206fd08e2cc6fcf619c89e5b37f5062a2246da8d413a4f5afb50d3470a2ce98a9e087c649df6171defa7cf0b0dde885e4a
- SSDEEP 384:g4d+AaNxdL8oZX8zhuUg2jtzampcp3D7z8qqj/5E:nHafdAo9Wg0tzauIDX8q+/W
- TLSH T17162D00BC4E535EA191BEEA43E70D8E7914839449A0E557C065B373060B9CCBEAD74CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3443015b-6a47-441c-a299-90637efc28d1.tmp
- Size 12KB
- SHA256 3dc5619dc4f69b2a5ccfdf251c4d38f7262a566a05ad88baff63824cf39e7aa4
- MD5 6e5fabe5db999ae68df9789192e973f7
- SHA1 c972372cc445948d2df9c5493c100f3ddd728160
- SHA512 0d507c622525f0272afed233e0e4b022b4f0d6714a83aaadd56a88a0023f94edfe91f261690eb1d735e6fccdb8a22f9ed1a7473e1f8a186d3120a2612709d4a8
- SSDEEP 384:h02WzcCQn/HokLDSkQ8MaScH1QTBlgBDJ72NDI:C2Wzcr/orgScHMQqNI
- TLSH T1AD42C0E2A7B337F07551447FE8506B7832B95A0394EAC33F94E0458582E943F578F610
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw35368f83-fe7a-4a27-b8d0-6eeddd6a2cf5.tmp
- Size 1KB
- SHA256 2bb7c80d8c9103699b7260a9c8c683aa7d348acb58bf2cc8bdcdb5b2040bcb8d
- MD5 7829692cc0db6d882dded85a4966b5cf
- SHA1 7a2ca41820ceb8096aea4ef8b7bffb74b1a4a1a8
- SHA512 b9d6a19874e0b9730e8f259129d7ac8e6f23ce149b0df6c7ded5720e12431ee0f7903ee5d0a58f6089a65eb79d9a6b99539517a67e0c12aea8b6db73aee537be
- TLSH T1B1212BAD7861FF1330FAA834B1702129F6B8D6BC52CEB5D019CB72088831F8A85A1847
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3543e0a6-aeb0-4a85-984d-2be7379b7fca.tmp
- Size 3KB
- SHA256 796ff50bce95057d5ed5d78133a0af22b4599c526c831d17c39839f00d9d64e4
- MD5 a33c8306202499ac873f60567fa3ddad
- SHA1 ffe626c0f1965d15732c1901bf02b2d38add37a3
- SHA512 ca773f4b79d77af5130d119e88569efa9c809c05407d3498dbc8e9145b5e9083d18aea5d0bd9aee4ca6d7c30c8ee65d57b541e9afa98c44774f2190dea480d04
- TLSH T102616C61725D0BD321194A3E8CF6C4A4403BE4F117CD45AB6A9C206C7C355AED707926
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3680c054-c06f-4b3d-a581-9f2bd7d39856.tmp
- Size 16KB
- SHA256 2866eb204303a1158484a29760ff97825ed4a8881191d8be551d9a3f2f420331
- MD5 30389b03fced19e384c515b524900b28
- SHA1 917f3a4bca76ebee288ea50431ce3aa1ced05f87
- SHA512 c942b34800797fd895c7eef1ca3ca82528d743b02a14fb9880fbd117f0ae3a6956cf2d1b451f6f04638ef4877b6e1f4082cfa6c6a752dc329e8d03d46bfee005
- SSDEEP 384:S5fFGyowXw4NvSWR7qiaFke4ZvNuQa51ucTxcQ6agTnSTy7XNr:DyZxS2baMNuH3vTOpWTy7Xt
- TLSH T13D72D06C6D0509764C94FA56C2C032B21DCA3F4B57821FEB9495A69026E46FCEB31FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw36aed27b-c1f0-4e89-a272-70532f4f3f1b.tmp
- Size 2KB
- SHA256 470b4ca7c3d19a42942b17683bc8dc1d86360762ef8808c26f1c7f0cbb95dc21
- MD5 a6917b0ce951c5ed1dc3539835bc4cc8
- SHA1 5028de5ffe92e4c786b182c8a59ebb1b6d3a2ba0
- SHA512 98715d48254971be506dd43c4fb7c86a2ac994af736219787351599b1c3abe6e101a83f2bcdeb766c5b13d3041d279d4ae72359fd453cedbb0dbacde192c8a99
- TLSH T108413AB2F8F6686AE593809E001FCD19D24DB89617F9C8E501BA1AAB0F0260D4845BA2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw385a72ce-51fa-4503-a0f4-cd4f632d30d6.tmp
- Size 9KB
- SHA256 0da3f7ed1bd681856af574730d1b0f945cd6f027fdff541e60806a198424b74a
- MD5 fc8f2e840f1381925ed6779a3a8656b0
- SHA1 2ceaa1391d8c16f1d794b542f83da1af1cc19264
- SHA512 a4e6bb4e597940d58ff3631a5df3699871d40909913c7e2d5c9ea21bcdecc3290144432b829d23e33689ad6a162f95bd5ed95f7f61d277c2c80047af27e8b3fd
- SSDEEP 192:1UvLebVw9px1D/VE6eS+IBYsvhnnT0FzYLZJTG68L0AqyxfBawUpDR:18sV41O6D+IWsvhnnTg2ZT8FxZfwl
- TLSH T12E12AF92306E5EFF5225DA8B8F137345AF2DA9157F259EC26827957B1F04318A000FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fcf15fa-a17f-4ef8-9129-714c7ae667e1.tmp
- Size 17KB
- SHA256 3ef8b9ec19684e44db8c1018ffe9ced109bbc8830b3796122df86f5933bff284
- MD5 952e7b3a40c5df2ac1a67c0f8c347ae3
- SHA1 7d46dab8190841c1a79c5e96278a853285d6f339
- SHA512 4c37e570f6bdce0de0cceb0a5bf9683b2c3ca95ed6b101f0c13825027bd472af9496b184ca34a61056b624688eaa7cd11dd42bf341ff48249e7093a9fb572f94
- SSDEEP 384:Sl5WPGkiLqp7R414OrxzvMcFE+7uNcHVfYM8GSGAiLEb:Sl5e5p7RK4Otg+YqVTy
- TLSH T18572C00E3BFF932D027B058321AA9612D60BE0C491C19B3B0B26DDE1B652F9475B1276
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fe1e202-1900-4c7c-8e7d-c1e90cf9c22e.tmp
- Size 14KB
- SHA256 87d524ed9139edaafb9f6b811c4859cc9a8d7390b34379e22ba8e2cd7a9f412e
- MD5 011e94693ab1f9a4f0a88b368f605f67
- SHA1 2209924c4e8477b01e777a27315e149a3c6070ea
- SHA512 0cd9d31e2037bc6962121f4363140c3645deccf2c6f7e0187b218bae5d2fcc0082703aa9a9afae8b1c0805e0661750f379f25b6f67e54b32559c2e29249e5cb0
- SSDEEP 384:wiN13PEl/UhWQkpafLYBW3jFetgd4hLUUJcfNMrMo:nzPE/UhEpafcQ3jFN4hLzcfGrMo
- TLSH T1C562E14E15A17839334B87076D189675302BC5649250F89C9FB1CBAC804DBEF386C617
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4089d4c8-f695-4d5d-8222-61ebb626ac9c.tmp
- Size 17KB
- SHA256 166ec0c858fa972eb73cb9daf17bc12638cfd7931c35be93463062782a9126e6
- MD5 33b338b67c34a32ee1d6519af1c544b1
- SHA1 98667e19a867c3819c2a959864b3a0d86a5b3214
- SHA512 9d99d82313c6b128c802268cb23dd70be8ffd2038762e8172f00b73d750aa5076dfc2d45360f54edd34c22350bd3ee5fe38b4e4a56681fc229bc58a621fb8471
- SSDEEP 384:16AXT7s7Z6VXBSwVm2rIM5cReZuckhGXLJQ5164d973p:QAXH+6DNVUg0eZw4lQ51649t
- TLSH T17F72D0A80F81637574157A58F1C683B11103DE895795F764D0CD63ADE38D78F96A0B0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw497c36f8-1313-471c-85ba-08b91e7a03b0.tmp
- Size 12KB
- SHA256 bc9f6fe728033a11db4e7257d7cb2ceffbb7dde56112e7e575b550482cb4deec
- MD5 b6b217b8ffaf1067043e7906dfc6e066
- SHA1 2dd884fd30d14c80c0bd3fa0d9e2aa766f1b60f2
- SHA512 dd3969b812a8be9cdf5edad064ba6962d34cea76d816a52f105f9bcb67ca07e08e03ee45d34d19e8d72b0557893dbbc8179e563b64b50bd492116c84fe249062
- SSDEEP 384:QNUTnaug4oK0PrDNK0rF9s/d3sa0xrHcAW8nubmOB:0InagXWrD80p968aaHcmnubmS
- TLSH T1C952C022028553364BFCB5286FC1E645A318125BDDC384BE55B7E5E63D03AB07B42EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4c028f9d-b91b-42e4-848a-a24ae7604bcb.tmp
- Size 1KB
- SHA256 c7fc4dec3679e631ab168350a2c192b9fd5ec64bbd11acd433eb864bac8f3438
- MD5 542c42360abfae3efc66fd0f74b0f37d
- SHA1 833907d4e3d92c32b3c869951a3034f702f0072f
- SHA512 2b3c97982ee2ecab13026f05565fd5b78c176fe1e30500ff5a22f7b504f923bdacac355813c89b6a9872c357a4356be39a4bd1618d606da9a35b30069768e840
- TLSH T13F312CA8B3775598DC2704C51BA1CCC0E06E25391084CD2D24D6817AE669F136F07F8F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4cc48a8d-8df1-4dd6-8008-31477539386b.tmp
- Size 17KB
- SHA256 2a0dff37898ac4f855a0cc7e32c1fc87eadc2074f4b1c3a58604b490ee1aa671
- MD5 4be12b81647a4cb95cfbc4c4f9615786
- SHA1 e8019345c56f571637f1b3e91bc1962e5f25ea1a
- SHA512 093953c155214a52f4e1252a302e948515bfd081130587e67c2901ac0a0fbd4f7c83a7d0dab76b469c269949ef1705e42e1b58500234ab01a9bf25a4d7dbad61
- SSDEEP 384:EALIxWMSi/mxLyly38h10wqMUnEs+1268/fszNAowG4+W:EJxzP/8LyE3O03MZLNjq+W
- TLSH T13282D03A215A9DDC3383B43D8044DBD76CBAECD8B5D685C3200EA02762DAA36B295E50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4fde6ea8-7e92-4fce-aaf5-597f7da84004.tmp
- Size 16KB
- SHA256 c407777652613704a6e06a0531a1cabbc7e17f0ed278e2f8ccedd7a59a37ee41
- MD5 4353efb8f7a259c3bdb6e8db22c540ca
- SHA1 85955dfc509a093c2974bdf5d36933137899b85f
- SHA512 e5e81b384cd0d18466a560eedc5c375dfff905d0da87cfd8a40db394f6f6f2c57fd36d7d9aecf34656cb3d5980e9c40d564ff7c43e9fd333d54dc7fe6efb6387
- SSDEEP 384:agUb0rpvKUyK19W/ENAoWqPoodH8rcQcfCvFZl7B5oehyLC:amlyK19wCeo6cfCvRoehyLC
- TLSH T1C372D101A2F7CD7997233AEFF100B95314654EB02482C3DA52BCAF1001E674F5A6ABC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw50f7b375-efd2-4c47-8f7b-b6d5b944a395.tmp
- Size 3KB
- SHA256 dcb9044bfb8584918fe704427ca425a4da5930cd70e92241c9e2d9e99fb54112
- MD5 513fb0ba698b1b446053a800708e0236
- SHA1 e594b0a020236e79b80a2d89a0c88f0ccc1ba256
- SHA512 d00bf5b58801f72594f7540dff6e17d0c30503836395ba633711b8e77bf06c8f657fe01a943296efc7db226b1ce4a100934fea61347ac242a9903faeb126b4cd
- TLSH T1B5715BA04B19879EC81D35BF6DA9AF2251374100ED9897399CDB63E80027C0E3F1B87D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw53ad7847-bbc9-4a84-8ed5-e3a491bb48aa.tmp
- Size 2KB
- SHA256 a1ff17d55c4dacc0ba4cea5798e44e8203a851f7465f44e6f19f33311169daec
- MD5 f402d3f3608e8570a97c9f5d88632b10
- SHA1 f0a1d53b805b5d33eb0867610c21b74f2582f69d
- SHA512 0a7525fb3b28ad1acb9a24dc205f74785691b1f6948958d462ca0ac33a9d2ce8419ba58eeb58d4547834fde6f6f3db960d2209ef4bd4cec38d81a044c3d4297d
- TLSH T19F518F6F285DC7C5B67289F81F9509D8C5289C7428080AB29F68E223519071CFCEACE7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5406b9cb-092b-4f9c-aa88-5e950ac6c800.tmp
- Size 3KB
- SHA256 8a7932d1b751bd15a5ed2d75a81c6a9cac738bb8598b1e40b8d5a2bc38729e60
- MD5 39fdf20067e8d941cb80bd74cce8f9d6
- SHA1 dd7adec4872d49df7f4b299a3d7562ee66222666
- SHA512 04c11e066502d5dd87253c20308f95538bf0077b9e5b6847e49a08d60e0eb342ec6be9e1822a996aea790f17fee6c24add4d1e7dd797156bca5da1773d12630c
- TLSH T1A2713B702704A7C3FDA741C891BD2BA65B650B2210A94079E28379A10E6CB672CDFB64
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5562c6eb-b26b-44ff-8c5b-33222592ecf1.tmp
- Size 541B
- SHA256 a60f1bb1c592cf2ed1e1bc59d59b9bc9366e376e3015277c0e72a95636bbaebb
- MD5 b142df769a68d67e753d94754e071a39
- SHA1 c67205f7ee025f9350e4eefca58df858ed6af88f
- SHA512 03c5412a4f056174c76790d88ff4dd45dd99a1ce14b081794e8976684c328a0ef666487831751c22f4cc10f2d3d07b12235322a01d2a09ad41eca4c7c50b7e28
- TLSH T17BF020B42D1BBE33D4B99C0D440290CA26142C69DED4482F6EC8A1D3F4163621CF34B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw574912a4-8b47-42a6-9360-2f4cb390f85f.tmp
- Size 4KB
- SHA256 fdf3f95d3401b43847e138c330c485c7a3a04b7f164e170fd9e8307a7c195b2b
- MD5 953f94bd045fd0d08a31a134f2c80f3c
- SHA1 3096c506259e1d2610b4732bb1b0c63d6be46a4f
- SHA512 542949583437f79cef6e6f5a2156c79b736c297069a0a0662f4968f3a6cf767c2a3e40791851dadacd7d0ea8daca669317c58a39f0f0a862094113154f0d2498
- SSDEEP 96:OsmC4I2CkGmv3YrxSWyyz4C494dp7q4t6ZweW:OxCYGmv3Yr4ZTn94nIBW
- TLSH T12A917C932E1DB0F204A6134B5E2F744DA34281CF3991D07B047D78C9A1ECC669CE57AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw58a27c84-5428-471e-a69d-708d88f4074c.tmp
- Size 3KB
- SHA256 6f64184677d53b2ad0b136a98930870bb3d93d21353178fc13dbe9e0281f2bf0
- MD5 8032b9261deee30b0b5562055c1cc5b2
- SHA1 5d8fa3b6af12a2820514db46719f1e5d37cb15a3
- SHA512 ccb9807b241ff5a5cfe681865e61ba31bd0e5013925c37981d835298f2df58b73d5ecc4d85c79b920c2521fee75954d544186dfcd1e4a651f16de34ea2050536
- TLSH T11F816E08B1231608E48897CECBCD5435503B6EB567A867319BE81F906F0B7C3B847A60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw598b99ff-3d3e-43e8-a310-4eb1a2989cb1.tmp
- Size 13KB
- SHA256 ad467757ae8f4fda9c8286ec757f63bb74f0ecc2c49dc774e6fea4b11517160b
- MD5 9859def43ee07d7482b7c89c3caebb4a
- SHA1 7f6868a7e51dd3df000ce01b43a2a291d3e96372
- SHA512 144119f17d75edb20871ba48e85de8c2d272b24dd2f1288566303573832592b5a44cca06aabbcab2ff3132380e765c2a268786b1f67fcad9fcf0cd1efa99db2c
- SSDEEP 384:PkfYHjWMyNVgI2G38jXTVbYIzCd9smnJUSDzIIqFY7Ix0:PkfYDRHfKaFI9smnOSDzb7IK
- TLSH T1E952D0CC92C2E5D193E03450753430A3B0617C4B9DEAEE0FEAD952772372A86C353272
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5e906375-df9f-4380-9722-e886c0c590c8.tmp
- Size 3KB
- SHA256 8f7ae73b52968a795e40ba8a219dd7f700b865d31471390ca55c4dff127d2222
- MD5 941836131e3378e1e4a1dabb73be8d78
- SHA1 10973e2fadb3183c4581dbded22a1e1d0d2b0f04
- SHA512 637d04e490d16bbbb2b47cd638807f3a2b12ed5cc67b28a36c1de191b8a3edaeecceb158cba2e9274beb3137a72ab449bc716b86022565505d66b78d91997b79
- TLSH T147615C605498BACEC5A94185412F424A2B482E5373D388442EF6A39C7EA03EE29E4D6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw677f1fe3-0a1e-44db-bd19-4d1b751eb80c.tmp
- Size 11KB
- SHA256 2803e53e43ae32a9580fe0341d0151419b98dfb03e6d3b0e05b46b8f7159c526
- MD5 b36e1819809857bab670c99e5f9dc0a7
- SHA1 1c2407e5ce534a614142de81175121d2c2f2424e
- SHA512 10dde0afad8cc97a2c2552249dd8325d57439d0f38b3c83a80013653b6765ca3f6ce11b3b4a61bcf9036346432d14cff65ac88bb22e1025c52795673236d5cf2
- SSDEEP 192:oKCtK9oF7RyBRAl9BQyM1HcbpW75UQsLS3tE0RXFj7O3+L5E4sEFLfhHwA/MhmLw:oVU9oFaWBecAlU7g1j77LxsE9f5BVLsR
- TLSH T1D642C0B049942285DC70276DB4A784CD4CEB865FCF20B8FE1ED46189F2F8455752D3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6dce8b75-f803-4901-b9ff-fb5d0b8cd3b6.tmp
- Size 16KB
- SHA256 014023ebebc23c2655d634b9ca9d3bcfa4f623fac5d28e524726b9c57a33e5d1
- MD5 c9b00bbe103998763262427ff0a17841
- SHA1 0ba9758cf94e7f49fdf0d843fd510ba2edaeeac5
- SHA512 488bd1bc0b28e90b790214d38e74503f946ff037247cc8954116d70c479d5787c0dc5503f6dc0805573e5d6a793aa27871bb5031c9346babe95d57b6c2019b80
- SSDEEP 384:sCy0HnMhUzLZh9B8c6RvOI5j06Ov1MDy84yCwnYEHfw7YV4yHMX8m6:xMGvlB8cgO006Fl+67zV4I4r6
- TLSH T16F72D1DDB1BF488962DBDC9A4531F60C0F1733FEAB646A0DBAC2C56C90662847148D92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f3ee0ea-3f32-4ed9-a467-87732280d4a8.tmp
- Size 15KB
- SHA256 d1c8865c226de0ac20ee233c126a16ddda88770b8c1b33c6c6c617318e4f768c
- MD5 10f04b67cd49a9b3c20a2e12b2975bb0
- SHA1 7dbc1025d316932c9da052416f0055bbc96f5e8e
- SHA512 523dd70944bb9097b1f10b64b27d71ea34653c5c1b3b4e7f2cf838cfc8aac65f91bd453a3271584562ac26775c244518b5e5e2be3d282ae5dd030eafe868ee22
- SSDEEP 384:/5oKZfUaT4K/IjYX8vlVAcpmxvrn1Nyf8pSvFc3+iYDJVn/W23sNzAIo7t9uGxM:/55ZfUalwjzucpfdiARD3sNMXJ9uIM
- TLSH T18262C0D2E1BDCE6506C9BE9D5B13D7596B0A6463EBE3CC08DCDC41F07C1252A464B21D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f5cd19f-16ce-438c-a36b-ecdf33c68cd3.tmp
- Size 10KB
- SHA256 161c063f3367d31d3854aeaa113a5e52a6f47522a1f90ecd382e35fa982dd4e3
- MD5 0f807425c47cf26ed0e08b61d816ccb0
- SHA1 9dc6d31260dcda2dd3d36775a8855746087bb7d4
- SHA512 3ba0b91ef43c93267902233e64e1bec715001f1c3b868ce5618810ac897ba62bb3355b935a63c4066e679ba3d79d04233d7b00f6d90b8ee91a767b47579fe03d
- SSDEEP 192:VFmYwX06q+Cv4pPlq7ZnyXsU+siZZK3TuHEl0i0ucgZtw8Kuak0haC+Y1bV2:V0jq+9ANQsU+9ZZrklmgbw8my1Y1U
- TLSH T1C132BF7E0C8DE73E39FA0FBC7A92392365D4740E04C55246E9DD3B7ECA5508401C1A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw703b037a-7cdd-42a1-bc14-b86b32d98a76.tmp
- Size 3KB
- SHA256 ede750cc8fc9c8bc23d49fa68ef150046d103b61c8128a04e5cff27e99477964
- MD5 e0a92803e5d7268085d5dd5a7cde7344
- SHA1 3d499f056b25dee8e2684c47f57ed9509ac37313
- SHA512 d28e4535fe87fea245b8a29a0fb11929bece974cf1f806d08820d2aecaf6e4723f981edafd6aa11953de9fe6582381c9b0359d27dcc5772317500d7e8342fce7
- TLSH T1E0713B473CD121F8B7B1FB1F68C402A91688627B3BE68E670B929D064526D5D0F345C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw74ce59b3-5372-4ad3-b0b8-fc4f40351c0b.tmp
- Size 15KB
- SHA256 c5b0dec66b92b166825cb064f1ea433ee6b8e050ad7940dc66623465b27c5d57
- MD5 8040b68b042cd0e25ec50740fe38e88c
- SHA1 7a6b009fb8c072e92f8fa4e86d689fd24c506a05
- SHA512 7132da55ee42cd3d7048f2c6beb449d83312e22b5021f79c71a7ba1d2ee56fe188727ddc2e2bf1f0f307b0c89455fa9eb21623e1c7d8413b9b74f1c5156f4c0a
- SSDEEP 384:A4gLglEsHar2CaulodQhheFi0kVQ+FSGGWXFQ:A4gS9ar2CaBU0kVQgSGGWXFQ
- TLSH T15372D1B02DA526855BDDC39459CBC41E5D842C572040D8F03293F6FCDE9AEFE28D61EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw772538e3-e21f-402c-89e5-7f6bc4d47430.tmp
- Size 2KB
- SHA256 386b02c89d2b23eec79b71eda10fb94e66d477208ad7fb8e39483951cfaf8982
- MD5 12f9a03f21828385170d82c53e351090
- SHA1 03d51744ba55f6f0fca3b06fd72709cee7152d2b
- SHA512 44e21adb80bee382de06d3f15979f2b4ac12f96a25b5686724fee84c44b3486bbb98fdfdda209e25fa744f06d5d6645cbbb94677fc2b0fca98e8199a71322a31
- TLSH T190514C14377CB0A33A8B8DB562C5F5B2E6941E583B9819EBEF351345788105C218A4FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw77390ab6-0e1c-414c-a21f-9812d43b9539.tmp
- Size 10KB
- SHA256 6a6a954009a0628e850e46468602a0e145e9d96bde5e9345006d400a354403da
- MD5 378bcc2ae02f3d2d6edbf9110734c5cf
- SHA1 32be024c224e11428a4cbbd95e37456eff2b93a6
- SHA512 ef21e779f752ae0001d5ffa1974dff5632ff9d40512afbf8bf9fef5a59408f67189ae6807c70ac8c317d801c01a1cf1a9abbd3f88473b31a916005e7b4dc0706
- SSDEEP 192:vsY2HHZzpp5H7j0dA2IPS9BtY+R/niuC/ONxZz+N7PCeMjimvtryJ87dyh2j:vsY2HdpZ2IPoTKzoS7P3mvN4874h2j
- TLSH T1CF22BFE0C9513005E7DC34ED1AE2DE15505EDFC49321D5B2E1B504D13B5AAE4C3C1715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw7b207d6a-c1d2-429f-8865-d341d7d3e4a2.tmp
- Size 11KB
- SHA256 7dfc61acc65061eb43fdde4ff00e92faf5383339ea5a2906d83eaedb09db879a
- MD5 fec23ff4b7b38a0e605202ae0902f57a
- SHA1 ffcc2930f25e59fe57e4196ca930e22d20531eca
- SHA512 692de957687d29fa6f0f5f7fcf77ce9dadbcdfc96de5c642ac218c721a0ad3ea371c2b21da39b52e812f0e3ffac3e61c1734049b1275d22c5715097cd6520565
- SSDEEP 192:VTt21AHZqcblzfSdsEZqo87N/IYSVf/AGIbQELG9kse+LlJJQWgzWksYaaXS4Ri5:r2yHZLzssEgo87N/q45q9X5nmzNsYaas
- TLSH T11032C047CF0007BD89AC7E4053C34A0F776D632898A9034D71AC711266E667E3E22734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8012507b-a0a4-463a-b104-933df97210b6.tmp
- Size 16KB
- SHA256 899f9a52b7acd4456ba9ae26faec9f47f144bea977a622abe007f370898d1c29
- MD5 2873002b6afc618b7ffe1f035f493153
- SHA1 abb3e4fd8ef06ffd0ce1756ac8ff68995030874c
- SHA512 05533852dd3ef1d88e884c80672d95836f8c7ed8ccf2d28513e84ef607d921e393d8498d1de05c4a94db1fcd6000050d405922d9975c9ea24805d0a8a3cb4c04
- SSDEEP 384:ZYxeTiVuw5RoKMIAFVsCKk4Ht+B4aPPur9jrzrG2d5Nr:KxeTiEBIoWDt4PPupjrX5
- TLSH T1DD72E09651174784F6FD927368A6CFCCC1C5038082F687C85B1D4D9CA598BC30EEB2AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw817bd059-9ce5-4489-b07c-f82cc09cc2d0.tmp
- Size 15KB
- SHA256 847c5eacbe28372677dbb9519f033266ca0400e1fc73d2f7ab45c42a4c62c89d
- MD5 3638f2f19d1640569dce5e8c7c1203a5
- SHA1 6b936cbd97e74ee30be8a00a9df019caedc97d1d
- SHA512 0e3f88c4af8d7bfc1280a99b8540fa98aaaa2251606fd4c90932b449d83935b92422c8dc2e644ea2b2ecd7ef558a946abe9fef09ebb2186b3d3b00c9b1bc6691
- SSDEEP 384:98kgpwxLrWZjzSko+Op2eSZL8IjeWakGe6MqJVEVyEXaV1O5:h7mZjmR+O3owoR63JqVw1I
- TLSH T1DA62D0A38E6524DB5DDD5910336E84128FE88CB5209FE9119B3CBFE6EB15C9A3108B34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw82266daa-7d48-47f5-b5aa-b8e13fa3e9f1.tmp
- Size 13KB
- SHA256 d180a90820364d91f21b1bf7c73fd6b519ffccae4fa05da5271bbd40c348dfa3
- MD5 ba00bbb92db656ffda2fde55a0fe208c
- SHA1 effc71d9f8f51a0cec69ab8d13acb76bd7ec21a1
- SHA512 32e2e3459f37e8fd58425ba1a6967c522bfb4bda008f9ee83e4cbae68353be1cc7b6a1b42a3eb96f40af2c24149fd7abda2ba4c89025b48efcb635c963db4e7b
- SSDEEP 384:xJvqKPY/Gf7SFBVv/Z8Z6RFd96UY55kVBU:xlnY/07SF7ZTn6UY5CW
- TLSH T19152C092853C693A446A3AB7782F277F02E63404C32207BD7319D07CD5592BE49F9F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8540a032-b800-4af3-a90f-e90d050c9eaf.tmp
- Size 13KB
- SHA256 4540842db83d58e02d4c6e7660c450b7fffb19dd3c4e152be33fe5c705a38524
- MD5 e6bb2d7ba63dc7dfe790d5b1e3f524a5
- SHA1 260afb335e1ea8828d537789a9128be3c5015c85
- SHA512 dd1a6a01374b16b36ebacd346ff84de5a31439afa914c48489a0e4bb7567351969f2319dc64bba2e3192bacaddc8df2b475344741fbcecebc207684c5418f1bf
- SSDEEP 384:VimKgd4n23Fk7MoUYusp4GQAzM1XBKLybPA+6c5h3oM:2i8MojusogMZBK+PAOYM
- TLSH T1E452CFE42F3A25113E34B763D37EA8BC1790C385E179E18B08A5C577CA3D9919F46C8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86554f5e-9647-44b9-a35f-13bb2f055034.tmp
- Size 2KB
- SHA256 1f39a532c8fd4f35d9723b48423f1b162d3db7838ff42f1a8c18f6bd5538772c
- MD5 21fbaab32413494d273ca9f19c394101
- SHA1 a3605e8626eb9993988117a0f2559c96466e568b
- SHA512 877e310f9453e3906f72a554b19b8e6454fe1f7d25a65f30a97127d6076402215c8bb03fc5bf878312ea1bb5611ca0556ba883073319a6e31bf18cde2eab5702
- TLSH T1CA415E19A4A0367821BE2D3F0DBF8AD98765043EA4092D3BDA7258166C880E336403F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86ee9547-336c-4da4-b2de-8c95fc8da697.tmp
- Size 13KB
- SHA256 406b55517afac128c689306015f705e422ba0cd9b61d2ff8826055cf3ee683f1
- MD5 35b670e646f3785ae33fa314cc5f877f
- SHA1 202b90e9108ee2f5ae496ea28eabc5b98205fea8
- SHA512 c5ebf5172097599066ec780e10784ad0846260642b697a0749c504a1dce983bc5e03e97ed67bd1f9d1d7fb838d21137e0f3e3ea60bba7cde05f3fe210dd40f45
- SSDEEP 384:m3Bux0nXD+9dcKV2cNnz6HXido1ED2Zf4gVPwFJIzH+SSRu5np4:m3BaeT+9n2cNnJD2ZfoFJIj+RRQnK
- TLSH T1A952CFD977CA351AC7F086A07CAD5DE314E21ABB75AD2EF4D80D88D1C24368A9C375C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw878d4a85-51bd-4961-951c-ec9577c26be6.tmp
- Size 17KB
- SHA256 c873d80882cc4ef4e67e29741e3fbb08ffc85cad988e1f7dfc5687b4982a7e51
- MD5 7a29e0481e68cce5d5a44e015505ff5d
- SHA1 01a3727b52a81a629f52f77327a08aa8a2688c7f
- SHA512 0dd66d1ed08057ae38de2607c9dc84bab2a9213e6c4ef67f19b57785f905776fa2b70a361807e77613f737a86818e7b0aaf5f50e4fbc324d314e243a8fc11f72
- SSDEEP 384:KnikLkLRXqCfiF640Yku6+iY0dB+vtKC8wOLIl+IKlWqsrVhJrUi:FkLkLEPF6xYZIYWo96OqwIi
- TLSH T15782E07FABDB147A8DD379E38BD58081AA0035E7004817E1A2692E03B5C3BFE51322C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw889c54e3-169a-48b6-8c75-6c0fd2b5459d.tmp
- Size 10KB
- SHA256 3f3a40b76ea5fff97a8aa29851b717c50578d042943961111a482cfa88f56b24
- MD5 93c28aad4b9c929e7eddc10ce22866a9
- SHA1 518123522d4ffe72072ad037d37864956298f44d
- SHA512 ab20c9c5a51e9efef290d3f0dcb1ebbb824ba36d2a2cb50f7730f6c57896e3ac0752f1120205baa50d7ec5442dc3923046d3f7475b025f10c15d70f82bff0bf8
- SSDEEP 192:CCDV57ZqbkPKOmgW09yp6+TNuAZ5H+S8biPdP8EtjfY+WTTJEHbz0hc:LDPkmKOBW09y4ZAZ5H/8bodLtr2JCz0C
- TLSH T16132BF96CE30636FA96F128D42E934107D0201DFB82CFAF9511C222BC96873CF46E05B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8aae5de9-0ea3-41a2-bf54-76056c19203d.tmp
- Size 989B
- SHA256 b3e27eaec4e9980ab55e94813bd437993d48bd49dff557a9112c4a18d1546531
- MD5 81e3a845c905b630d7a86aee05e7dbd8
- SHA1 b97d2da85b1123f7d918b5bffcb735b6fd2f1c73
- SHA512 f89f9674978454952b0986d8888c5dc296b1c3538c54970e3e7d088f0cdd7cabec9c41e714b2c906298ca04e30939b039621f2ceb26d47cfa4d9d4c13a5eb0fa
- TLSH T1B711A5EF0AE07F1D689ABB34594261711E961EE7F561A5015111FE6D02D309AC3A2CA1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8ad92eda-2c8e-4b1b-a283-2b58781e30f1.tmp
- Size 2KB
- SHA256 b6694419a92e6ca8952fa5d415f105527390613ac903b0306b05496bf73d3123
- MD5 e1af2e62712a81fb13f1f8c0fc711b69
- SHA1 1dc1913e5828a9033b1ad61fea7ba0c94fd783db
- SHA512 41ea54067b5293aeba0acd4eeb2cb14e223f48a4824a8364747505d3fce2996c62574557fa50427dc25a389ff2e9b2f8eafd50e652611d19cd357f8679d86fb3
- TLSH T15B515CA0DD6CEB49E1A927B537F1824B861F85604755C29CBA9CDF8BC08267E40BB198
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8c83901e-8f68-44b3-8929-653cacebc661.tmp
- Size 17KB
- SHA256 086958ed92ba3cb5863cb76056ed2da1700a684a84610e8f98839a790df711b7
- MD5 35bae4929dc1543e80386683d048155e
- SHA1 d01d5178c87c80bd7917a0dc7440c1b9c675a8ce
- SHA512 4396b14836ceddabf8b6a94e0350f0d0aa40b59f777fe51cffb2444cbb547d1f21dc5be719d1adb209020a7e5ac90cddbd72acd9168049c5c734cecf20500b64
- SSDEEP 384:iLGt7i1ugQec40T96Hn8WseB4VW9Jg+F7nvklUQ:SGt7ikecJzW7B+MeClQ
- TLSH T1C972D10945BF69AF3688D297C0F68F371771CFB1E48E069D42E4266E646A346C0D741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8d427811-6293-4da6-8837-347cfe66fc09.tmp
- Size 17KB
- SHA256 69a1cd6a6bc9b1a63dc94a2607173b733f7589ce27d1c729da39fdcee5de77b7
- MD5 3a028e024116ec9a7c102931377a985d
- SHA1 105673112eb7d6c43b53b69b43c1ff03bd030c9a
- SHA512 96276266e70ef198819a0a6f40d6d5ab91577bbe5644ac2f884dace82db971849460eb0d5fe018a68d6a83c8035a22cf1305ef96e24066dcd877590a72217d5e
- SSDEEP 384:g9Dz99YaPqUn+1NB3yiuOHo5Sf8xSBcvFhyd:QNaaPQLi8Holkcji
- TLSH T13382D13C813308CC836BD59B5AB210EE5305D69A5BC9D2351BA3705E75CAA31F79F18E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8e51f29c-3d0a-4b49-9d08-407cbda11bc2.tmp
- Size 3KB
- SHA256 000f4b7c0f7e0f8229a99446a8c72ac6b7dc3ab68473c4f1e321343d710a3fcf
- MD5 35ab3cb376e92f8f74ae3c274d3b455b
- SHA1 572b1425052a3a5dc98717590861342aad97fe28
- SHA512 60ad751ad61a08913759926e630a63643e9604a9f2b7f478af1f3cc5e150f18242e7b93f6a4a9e0b1dab240ead6fbf8e1a99f44c37d5c9002b491d846324e4a6
- TLSH T12D715BC87341B69033FC8DED9BB6EB61DB48148AB44659EC06DE0EACA90CD987E124D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw921b4e37-292b-481a-93ad-438c6a2fadd5.tmp
- Size 17KB
- SHA256 59fe6c4a3e022dc627da17a13672ce3715d7459469e7da015cf3b6afca50f33f
- MD5 84367c171650b9a237436355b4b4e520
- SHA1 e0fac618685e0d992df85266dc1360fcf8a91cf3
- SHA512 cacf131f4b84a67fbad6433b8d94ac9c8a7f5a41d213acfb3ab0540845f28bb7d739d337f57f91fb479dfa495c9544fba985e587a5120a51a1eb6b37bb42bd04
- SSDEEP 384:b0vyYSGmBVkqQNUJOlAnQ5/g3ogfAe0kmOjZqoNqSr5GTd:b0qiGdJyAyhZnnLwJ52d
- TLSH T12E72E1A5C787260B43CEBA5BD94E0758DCD486443CE1085E53F0AAFA3CAB5578CD891F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9317f7c7-a0de-4a1a-89c2-74fddfad70cb.tmp
- Size 18KB
- SHA256 92eb3e36e17cdbab9317dd3399dc6fa778eb5680d2da5210706d83587353f572
- MD5 133c6effb9123a0bd10c89bfb4934382
- SHA1 0133d24320b13adb62b3653f648ace95d2175740
- SHA512 9c0e39eedcb747eca68db167c231c4682905be581951d4e86fa147569254c7e6a4c03cd2964ee579c6109ff444fb886105ea8c7a7401d487e6023409a204495c
- SSDEEP 384:KlMNgVpibayN5jR6BK0sAyimPMj8gcxK1pF/mt+1nk680xeLJr9QZ29:KlOgVpiRN4KwyimPM8UF/V1nk6r/Zg
- TLSH T1D582D05CD88278A38988DDE7D4581CEB68C4C756C4A4157C05E33B69B319F1637CB320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw955a9c11-dbf1-4d7c-b140-7271c4967559.tmp
- Size 3KB
- SHA256 a33d9cf60573f744ca32d772731d0fe47e4d1a8719694897f22c57da9e74ea24
- MD5 21bac11cc804396cb0eaed778adc3bb4
- SHA1 79e0b564a6ea77896152bbb28723d2c6bd9a3e5b
- SHA512 eec1d4cdab94f1748c3abcfc16cc861ba556785d65e5c5a296fbbef0d40c91b3c04cc9d143dee5ca91694feb6037a19078aceff7e1db5bb3e60a8737563980f6
- TLSH T13C718E40C80D83B44DE6703535DCDED7BC8344D9FE580E55EA4A7E48B64DD906919792
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw98cdbf82-4ac8-4d95-a110-ab72b25c499b.tmp
- Size 12KB
- SHA256 f80981733deb97252c74c61b61d9c8c8377f174ac088c351b51da543b1523968
- MD5 3678abcb2cf6e68df34e32b8453a457c
- SHA1 d1690ccae992b51339e51f45e3db90b74d1f1004
- SHA512 9a8680b212fb6e27417889775a72e3a3bc3a2537511fe063eb51a5de6fc3c03d23bdea5bb9a6337c1d9ac718bf876211846214d5f6841be2261de7f5e88dc24c
- SSDEEP 384:zvToNbd0xjpzeCY6OecfA+EoXrHr4Hz3wEZ:TUFujp9Af4Tgs
- TLSH T13142D0ADC180340CBD7EB66A9A873654514CEC82596A0D7FFD53343DFC6AF6E088A1B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bb28739-6f52-48e3-a505-8cef72e37d49.tmp
- Size 18KB
- SHA256 ba94f526f4156a84564359bdb83bf5276cc7038a1fcb995ac0f60c85c110dcb0
- MD5 a0c0cb8aa79094e68edd907c89fbd9f7
- SHA1 d2f30eeb991dbbe91b0a825fb9a6f1db2ca48aef
- SHA512 f94af2d72b3bf54546d03c20c5acd520c8892cbbb2cf21d8ecc43decc7a288a02a938558389edabe7d7c46f7e4cc2d47fea3b20a0122d1c87068c892252ce60a
- SSDEEP 384:HGO1yHVnmjrtL3vrzq9uuggkjN4VU6Q04IyOz4JZpRthAVaAS:mptKdvrzq9uVKVUVIDMr1iVav
- TLSH T1F982D0437BDAE2E3C261A3CD8555789312F283FA6D35C0442DA73F89894E297E1C3A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bd0b4a1-e843-49aa-baa7-df8e152fe41f.tmp
- Size 11KB
- SHA256 a02b5f6379e3416f6ffae8ecc571e1ee9ebc7b82fc257352c14995a3ac1e4a9d
- MD5 f17e3a61fa96c1120bc1fbf7ba4fb0a8
- SHA1 c5b99e2f87b87986c84fb0ef673eb800a2463aec
- SHA512 fbad1fb01ea5d516c21c9be0dd399bcf3059734457fe5d5bfc9efc4fe44481bcd211d4ad15d051cb625e019cb4f8fa7ce2c7c17b65362187104a6069dc8b2063
- SSDEEP 192:p58Ei9xhXvcC2kOd7g3hdX53nFwWmCnqPQCskg5QJLjnLk0pJRbVOJFSXWw:YEi9x/OJg01IqPakg6FjY0DxVO7SGw
- TLSH T1AF32CF91E364DA80AE1406A970F00F852DA0A2AD8D0F783FD34A24CDA62A939F57E4D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9e567c79-6741-499f-9a66-57772d1f1b85.tmp
- Size 16KB
- SHA256 0b0d1db4bd481b06f6a9c433407d0f1adeb1602a484a953e5798b9d8ec98c201
- MD5 010053913d90959542be0102df5c22fd
- SHA1 d76d9ed59ce4e759a846fe1484f67e1198a724a4
- SHA512 361ccf930a5597742ab7b7b8b22708cf3620679a74e11df1110e6d805d2edf0237d77b7754e3603fe3305ddd0552710adda921ca849bb8c059b230e914a0ae9b
- SSDEEP 384:fgLqXbKi+NkYwncP34W6yfqfOb46RnX9oDvXUTtYjp/Ce05:fg33NkY8SIfib46foDvUT6jV05
- TLSH T1CB72D0719EC9818139433AC58B04616AE3F2281D62B3ACE97706F76ED6D6006CE5B4CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9eef6662-ef1b-4e4a-baa3-5d218749a27e.tmp
- Size 12KB
- SHA256 527da46f66952b89984db41d7daa2bded3a4b6ca5e8743cc34a07c780e5a8726
- MD5 949dc8054039f7b0904a3a262e29413e
- SHA1 b0d6a3e570168a100eaeff96030affc24e7d47b6
- SHA512 4c4557d6ed93aaced1983a5690f7e97a17f303f7a24f33d29861f8dd40d3b7de27c334e5eea49e984a520d13108aaf08318515a12a3f3d417d0f7169a622e772
- SSDEEP 384:IpBWcH6S/9ofxWsIvF3xCn8AWKKFJEfO6Hf:WBva5hIdg5DKCd/
- TLSH T17942C032A5CECA5A691FE4D784843DACC5AB1A00FAD5161E73B4B4820F696733D706B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa354acb4-b7b0-4ceb-b139-212c4c9718be.tmp
- Size 18KB
- SHA256 d332be157c4b0b62c370f99ae424622a318672d3629c40a5f88e305344c616e8
- MD5 edbb2ade84e121d5f2aec5ff01c617bd
- SHA1 e39f7966c20936704e0be751cfbc6c9dda9f60ac
- SHA512 2286e7a180539d8697044d62dad069a78a560914f13da609352917c2458e8a38aa589150e72372275bdb338cd2b93d835b531b906cd83714c0cf2bf792c00955
- SSDEEP 384:XjUGVRs469FJxgT56KzT3JpLKCcGT2iOvAtGUoysUzQ60rb3YLs3M5PwC9:XoqCjPS78UT4AtGgsZ603/M5R9
- TLSH T1D982D13B39B15FC52175B7AF8288D1191E3B1432F8A4BFE650B1248D6FE25837A3909D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5214b87-3d7d-40bb-897a-eab5a9bbd007.tmp
- Size 685B
- SHA256 8ed6d6ded23e237a0a8561131cc66d031819809ff5901e4168311be2654cb108
- MD5 b086252889fa29f04e7d5e507db0002b
- SHA1 e0dee6eec431842272068866a76cadc4866f35cc
- SHA512 d0838d1c852d53e91956fa4990095d05cf2c7ce2c1b3c307f507e96bd9c75bed129d5a9db40b02ae8e5c4ac279cb79d9ab4b989b3bf7ea1141fb10e11c010ec1
- TLSH T1C60144D01252780BE629E1B6EACDC7861055350E9D159E0CD39906A45055B3085B3391
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5f8be78-68ff-41e1-a6f6-38d9f45869ac.tmp
- Size 14KB
- SHA256 630d107de3b900a6ed8d216c9be80d1987474024258a21867fccedb2997cc2e3
- MD5 878e45019baf67e705202a412992db13
- SHA1 7685156c02975894075dc6296cc3241f7098ebff
- SHA512 72be473127f9f67d2c520b57438d2866ccd901da50a9d769df20aa9ca69946e259385f39b42f62e7248c0ec86eba46649b2799ddde0eae1b0269f30af1175338
- SSDEEP 384:VKdEfcw6Uli7/gyY3tDqQJNXSHQ4teDoXk7PWc13QGhY:QuT66i03AQnCQDiwR1hY
- TLSH T1F652C07DB8AC1015BDD157943D11AF1E8275FB08E3216FE239944B980848D6B8FBE872
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa840793a-423b-42e1-9518-03859bd839a8.tmp
- Size 14KB
- SHA256 c44628e38629a00c96d01a7061a7f8349a5a3612b085380761dcc75d476c59e9
- MD5 eb31069834c71b4ef18cd8b9aa753e0c
- SHA1 175e29bcd05ccb51c115bb0cbd81b8920b9b13b5
- SHA512 26e6798d8b560a4bf0bf7c5bbf6928d5bffdb9fbc3cf6cf92e6764b7685f15dd926b1a5a7581ee4b81f0377cca42d822511047495800a3a0b4085421cab93588
- SSDEEP 384:+cKR3Dh2Rbw/CMP+EXcx8iOHRp3llU3PZccQzGn1H3g:CBD+IGrxkxxlMhJhndg
- TLSH T1C762CF8EF0428D0C05DB51624967FADE858E88464B915ED2E15EB17B1B9F03EE2F23D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawaf36305a-d1bc-445c-911b-25614102ebd7.tmp
- Size 15KB
- SHA256 c3682bc918585f0a44de5f9e82ea2d724da7c5b6293d5118bdb4671437ec6e76
- MD5 66822015ed112e27abd77d66fe17deaf
- SHA1 dfd32daea8d127dfad707a87c7294faa8449b4d9
- SHA512 b07cbaee9665fb604b0b4a653d137ac325fbca7ea19d63dbe3fc76ec3edc835c6f4f08069157201323f4942b4a5ff02f9447cd0df14b455b01722a3531dd8580
- SSDEEP 384:TkNjVfGHFrdLWaHTf8MzbQGxJXKiK1R+ojkTbH6DQnh:QNjVulrdXH3QI5poRqTbHUuh
- TLSH T17A72CFB9817EB8F365721718A6C9A79DF33B0CC03453EE1C72517EE4866F4D86289530
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb145c7ef-2abc-422f-91c2-65169eafd5a4.tmp
- Size 10KB
- SHA256 aa27fa6bfbeac21d52867af32e44aec85ef02b8dd578fcf65a93affa172eb983
- MD5 1aa4fe409af022d850b3105feafcfac0
- SHA1 d4d0c9c3601175ea093fb37c279f5b683e15a453
- SHA512 bdeb9976c0ef23cf78bdb4b41ae56342398dc131699333b710cb45a40da3d8f304a4829f00a8e8343996802fd139c340a6efb38030c963d13ecde7915de97779
- SSDEEP 192:0Lf7xNJbuGgwEQF8A8FaBU6EqHuoIqQOu65rapqVzfOJPfNE82AHOHwYwMnv:o7xN0PA46zNg6xaT/32AuH/v
- TLSH T10422C02CC85223577B22FAB28E3BBFA446A8D9DB07E7005B7C0C249E69C70D5D450299
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f517b-0d13-48b3-aac8-8e09ed366ad2.tmp
- Size 17KB
- SHA256 ecf7dcb795059ce24cc9920ca04d5c960b41eb6bb5af84c4d890acef39b3f6f5
- MD5 f3d32b0ca68de15bcc3216d60f60e876
- SHA1 29a602a5263a4e115692acec303aed99f67bf4d5
- SHA512 abdb5f048bb68c471ead2b9f9e6465c64c5089065b27f5a52b3c63313c116c9f1bed55319986a2f90311744c3ab570d937e4ce452b5283eec97121323de7b89c
- SSDEEP 384:0ciD8t5G0lDZ1oOhyqLJiKMIhq6OrLj8amSSkBeRexhLKNy:Nu8t5/Zlttow7uFMoH1
- TLSH T1C082DF3ECD94FBFA49146F255BD577E528F2CABC204AA449413B2F9463226FF39D1820
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f8d46-a734-46c0-aa1b-2d92a8d48840.tmp
- Size 15KB
- SHA256 032b41c1bdc3387090205054fdfe5688d6cd00083d7826f1c8808af94067ed9a
- MD5 97718d9800636e6f22c0924ee2d00292
- SHA1 005146c3acbb7b23e19ed051639a941661a567b0
- SHA512 5978175e0e182eaf799202a76040013bb33277fb45222baa4e55441dceaa991ab01ae02304dbfecc08d00e072ee188084dc27ff7c8a0276e6883e8291373f300
- SSDEEP 384:ShS7CfUoc4DhLCBVKgcmn/7PZmUNw5bU0IgXYdRWNPC0EmsjNK:IS7Y9cCC3Y0bZmgw5bU0IeYdw5fv6w
- TLSH T1DC62C03C3F96FBAB162428B8D98C55D153A0C9EED75411B5AEB265FC05A786B7013F00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb65e89ef-cb05-4bf0-a8b3-37b57de820b6.tmp
- Size 1KB
- SHA256 a653edb4c6bb1c8b9e0cf75bdb4c500df9d018e4434d04ba5b2827e6dcda76b4
- MD5 5943d77dcfa6cec0872085d03b3545be
- SHA1 5667eaa619f5ae9ee626452866655e557f3e5ae8
- SHA512 e679b65526f307fc9fe361f03a0e8257c316201dfde3d46bd8a1e8f95ef343e57868d666b991118bdf0e24d9bb8f84bd11ca0e3de169eb65d0e1a6630968fb48
- TLSH T123411B33C85291B21919607D11C55F4C429169FE76C350C14BBDE681B226B5E28ED5FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb67a2eee-2983-4ebd-bed3-c10bdd2fa66b.tmp
- Size 17KB
- SHA256 686fd47929711a211736d963c9ce72f41a126a73a333931c226d053612b73908
- MD5 d36f1e788ffa862070839fb0ab0eec59
- SHA1 d7c7192389101886991bc7fd1c1770877ac97327
- SHA512 e74532497a7a49bf25dd18944f41bd118dc10cd52758c3d7f8700aed5b65e22e53a206a2ad6ec4a10d90a8e05a49858de7602cb0f56a031311d11c9ff0e3e257
- SSDEEP 384:j0GarNP2UTLEs8Yl3rYZgGkdtcIEFdZTimhjaQEOt7HnXGvZgAt6lC:gdPXTT8lgxPEFiWGQEOt7HXG+D4
- TLSH T1F882D0C5FF7132A8C419DA4B244A1D2C0472955CF90DB5BBA926FFE3F012A5A574B033
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb8e8565e-b7a6-489c-a1ec-b563f45cf186.tmp
- Size 9KB
- SHA256 d3b19da793ee995b688a334b4c8ebff6bc0be53feb06fa070bc9ca7caf58406c
- MD5 b28e5d9dc66be043359671c15e9651a8
- SHA1 272e943db9713183422d80abc60b1f3e1189e4e2
- SHA512 8f4668b744a9a0dab33223ff6ad331da2784a43d077feb7e26fb524eb851a23627c031b55e2e8658a65357f5307586ffbe69636f142fdbad551f4cd5bb3b6e6d
- SSDEEP 192:06gmBcqS7JD/beuqyygyc93uW4dJ9wpAbx1dKzc1ausPw9icFCTFB:3Qqhddlc93uddPcCPKzCausPw95FCTFB
- TLSH T1AA12C01A22785AA06B9A4DAC42ED144622B22B547F4B10B5273CA4CD7E6BCC3B42E491
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbbc9268-883c-418d-babe-485ac319122d.tmp
- Size 11KB
- SHA256 583ed6df4052a8d89bc238dd322d3fbe4bc5a72b4c0d2a91e2db9e9c3221c13d
- MD5 39ec5c8d51b9920914868192f8a95b42
- SHA1 dd493f7ea10fd88793c590457e2e0ff37928bf33
- SHA512 0d17b6a76c88bf6025af068e0d1958212794bb156eeab5202049fd22750a640c9f36803c72f769f28e0492ece778e71a4b37aad29aacad16e0003dcc7e12adb5
- SSDEEP 192:qFZzEaU8MOECwWY4H+oYdK5LjNZjVfIApFksA7p2mVrghusGKMz83:qb6E+onLjDxIaks0MmVEIsCz4
- TLSH T10C32C0D4196C96F2BC91DE95294CA64A740C2F6C605B2F2AC1FD77EC9D20B0C9306AC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbe94dc4-3130-400f-87b0-9b8fc207c4b7.tmp
- Size 2KB
- SHA256 1dfd139df49c42a2bf2f352a3b80e45223d772f848d96233f09c8094fbf4285a
- MD5 69e62d0200b38e4c5839d3d2cf262585
- SHA1 22646ec282b308bde7b270455378453e361a5c8f
- SHA512 82c6124d5831fa09d1d17c0c8bbc48069a1f5bc0786406935fcce5f62406760763a786aeaa3132890ee8dd82818a634c7c996daf12e347094de17affd2a58f8b
- TLSH T1BA41F9EDE44088446CEF1E28F761D066E424DB6C4733FF0551131BB6CEEBAA42D89706
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbd5214c2-f133-4332-85c1-93fd15142900.tmp
- Size 3KB
- SHA256 ab0183dd4a32d70c89cdc7762b23d21d4c9156f0152a623556901109c8bf88fb
- MD5 fdd14ca200c8f5b5a3db2dfb0b2a668c
- SHA1 becfc241bd7afa5c3f8224778f0616a64dba71c9
- SHA512 8459691334bd1bb0fdfa172d7e1f821c1115c1e62b19e58eb32622a482c42f57b22964c4bf16201e98ec09b558364ac36687673556a8fd80296b1b6bfd2ac0fb
- TLSH T1DE612CE19C4C32A3826C963FAE1E05DD484F5978FBD156B852B182C9DAC6E513030FD6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc5228ef5-bc2b-4be0-860c-882f83781ce1.tmp
- Size 14KB
- SHA256 7d0512c328c92b8e5abd307565f2605bac85be4b95433be2446bcfa19535145d
- MD5 c12c1d5b47bfa1daf1c9484ac42839b9
- SHA1 60ddce97282ddd547b2bda4737b9cc0f85aab7cb
- SHA512 54c17382aad61faaadda584cd0b71ebffeef11e6658159276470461d56c824792b280a847aa381d9d562236ffcf3ebd73bcecae4b8948f00cb5d3f6759a439e7
- SSDEEP 192:yuvwzR1WZcMJuCZhnJUvafVpnRh+6kqVHSP4d/cLL+YAKRoCHpZPHlf73Por1N:1vwN/uZNzVpnPkZWZYAKOCrpPoJN
- TLSH T12962E145FFEEC6E85376227530835768A226992FD70F9FB0110A4F57A224C65811A3DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc6e9ded2-3f8f-47a4-b2c8-98db1338574c.tmp
- Size 16KB
- SHA256 38765fa463a8a09ede785abf98b9ea467f0d5b050dc0ca8644d5e6000240620f
- MD5 ecf7a40bf2940d96d042444d3370bc29
- SHA1 54645bb7e35d2ec6833defbd5eda0d1a995472ee
- SHA512 db5d2b9f88fcf8ac6bcf11deaeb3a2c497b093592f37f719856bfad983f3f61fb8e50ab34455aae685c063d6d872f26421455a69aff64935ccee20700eab4a51
- SSDEEP 384:/sXNbXfr6TE/v9lJzd3eaeYli2aAOk/bRfMTexVKb:/2NDYwvtvk7kjx3xVKb
- TLSH T10572E0A02325E491DE757EA32BC6E234FB4CB14D91D0A8796209D97B4D6E8CA833D173
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca7f1366-6b37-40b2-a075-1b065898b026.tmp
- Size 18KB
- SHA256 c04058fe6a3110c24124b459a9a40610332b169f55335e92c17f755fe9b95001
- MD5 a0c2bd18962e51f2a9d62f90295f5b50
- SHA1 77d12121cfd120f6574eb4a220bd05a5f000374f
- SHA512 96c511b28c41018ac3c847213b8bd136d6df436b57353fdcb7f8acddf3533e048705a076f736635470f43bd90b92c0a8698a11b6fb600b0b783333cafda317a3
- SSDEEP 384:3iFRIR+O3W/BQNIWr+BVCHKjn0R3kUhsaTEyNMT4t/ZRPPCeVYASf5I:SFRIR+O6BQNhqVCHKj69h1E49/vHuAKa
- TLSH T12592E13C4DF964BD1A5AD7E948AECAA50B78C22862B564CF8236DE4D56CD31C4211CA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca870c2c-4e62-4178-80c9-2036f52a5851.tmp
- Size 11KB
- SHA256 045882313157da8e8ecc86ef9ef6d3bb3886a30fe2133302e52630dd0fcea622
- MD5 d3db4ea6aca7b2993c31a700b445dd8f
- SHA1 7086edf8dba854711e63514ef3ca85c9b4ceefe7
- SHA512 02bb1f508b0006a9e4a90ae7d18f366712f8728f6b25a97b53963afcb4e5bd515c5a31d9a044d3946df4a95107f90edd712304d912a6fdc786495a88b77ae4b6
- SSDEEP 192:Ty8lTUeCi0ZRk3xTRNloUNR/grJ4+P8mbWSIwIZG2tjJR3uberaP54n/MaF/:TyIUfRsxTPl7/WJ4DqGwWGsrow7MO/
- TLSH T19032C0CFE3D87B688CC68B465D0FE7DED512E8FA62F29EA3C8991F00195420C5380E59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd16ef5f0-e4db-419b-afdb-ea0e78550a04.tmp
- Size 10KB
- SHA256 f9ff49c3f31aa4aa9cc899878da7e094ea0dad37f3e5ad88fd9daa4753967da8
- MD5 a4d2e9d962f13957cc5c514230a5b5a2
- SHA1 9e8797f05da323675f37a9cc2ec0fd5f4d2a3ca6
- SHA512 21514aae39c76932622af51d3c854e64b9539d7411da9ce98211c57b5212a32bdfaf10158a2d6f78a255df6f1dc67f5507cad2085474842557b1f66688572ff4
- SSDEEP 192:3voG7v2+Bat4khLMzX5wcDolba6LINK+p1m2JTD4pzwkBaRQBsy2Emx3RB:392+Bat4khWDolbasu0CopUkIR6sy2E6
- TLSH T1EF32B007796CA17692AA6B7BD007C9BEEAD83820BFDCE01C1552D916D38AF5C0C56A01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd498afda-9768-474e-9a02-37e213399edf.tmp
- Size 17KB
- SHA256 c4a03f9091438830d43bfe7eb98cecf1e36ac4994490f14a81c33d22e8cd35df
- MD5 3906b8c44e414a43af789f695b65d279
- SHA1 7f4fc8a838ff7b40226e5d34f2d42e19cb3d812a
- SHA512 6b921baa9a65ee02c8260cfe4e32ba590f6857809a8ebd99f5205b43628bc030c2f4664d0268a12b84789aaaad0409d0661a49042275bf36c335c4236422b2b8
- SSDEEP 384:+ByZSNG0ojHWy9OJMEbQj7PsqTE7Q9382mKFvQ2nzUrunVgewl:ebloCdJFM7Pv8DIQ2nz6un6eS
- TLSH T12082D0C75D814C72DDCA307958EC72CB776696A391AF2C32361EE0952C20BF9614D257
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd4f7f4fb-ecb2-4aaf-8d07-bda8512ae575.tmp
- Size 1KB
- SHA256 e3defa8cea753f3cd3d2f148544142075b672898cbdb22f7ef386375d324bf5a
- MD5 e52042878911848ab05f217f93638f5d
- SHA1 b0c5d015a4e4ce3718ff2b63fb98c0ced9053ae8
- SHA512 e9804c2fb07ec79b5976897b51bfdbd6cf65640ec869864b2205f9a5790a7e685b255c5e06fcb2da3f9ff20bcbed631655566b5f7f98d69f32d3636a2141f69f
- TLSH T1A831098D5EF361F3272CF493121E39A84D35CAFE20D3945B4DCA71577551C1119A91E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawde79e58d-b4bc-4416-99f6-7ad0bd5eb7bb.tmp
- Size 10KB
- SHA256 ded49e82c8cd83c0d16e59fa2871865e546bd32ce83094fbc55802c1eb94bc28
- MD5 3ae24108205292ef636ffb18cd8816b7
- SHA1 f8e695086b5aca257f933b49c04b2d54ccb38f1a
- SHA512 c7ef40a8efa7cb2bbc73afea7692613b3d9cab7d5150e165f9de4db886735aaeafec62547b4e5002108b819d5a5f0f302f01f9ed82a5da51b1f7bcab9840e05c
- SSDEEP 192:I0NdZyetj3nhlMwUkJ25oVPo7ewZo85pTOT8I698NJiVRewmKcjOxjF5:PNXySbnnMwpJJPo5ZoepPd8NJkRdtTxz
- TLSH T1FB32C0E4D2799D9E4762B40328AC4F0A1FF9458C8B6C9811D3CC9E9068E433CB4E9B7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe2a3fabb-99b5-489f-a38a-4cbcb22703a9.tmp
- Size 1KB
- SHA256 a256d76ee605bc375726e0012254345c04aa3895071d5495943177a59577fd4e
- MD5 5b460e7a071ac7a282266b5655dec737
- SHA1 1efd7834ad5e7af1948a75ed5baa1ec7b1300cf3
- SHA512 2750b5108b437aee3a08228beccbeb8ad4b9ae3fed3283614f10276cc302d4c0775231488181390cfd7f269012982e37b228e6d3800d1e35e5e0372f713b4c03
- TLSH T10D414AA9501B8256FB4A1E660C47292EC102FD9C21CC7FA18BB236C918327252C94B80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe8e0adf7-ab0a-472c-ae0a-580c1adbc209.tmp
- Size 18KB
- SHA256 511ba0d2d5010bf198c7b4a87ef339cdbdfa5be52620c2c64e20ea21dc48ab3e
- MD5 7ebd5e8a4ee05b7b6b637d9295718c55
- SHA1 ca0b2d91eec040983fc50d6dd0f463fa81466cc4
- SHA512 13c5ccde51d0bbbb924c08b06b55732cefb8f0a8513818bbe77a0da9e30841bbce51a06930c9624ff516904f5d60bdae3b61c5a8306ea41bb6a317804d7531e5
- SSDEEP 384:04WKwuXu+72b4F4BO4mXRajEoEFga1aSAdXP5npHzzkrX/SLzpD5iMFYC:04QKubb4OeRSrEFgcuXPzHzwrX/S5t3H
- TLSH T1CB82D08308057AD4EA7C5ADF4DC5336AEE356E2B15D2F480A7A09755F40B3198F2872A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe9c95f4f-63b0-490f-b1c1-eff40f061fc7.tmp
- Size 1KB
- SHA256 8fc38980230ca0910b0f397e7e9f799338a79bd9de85e14c90aff698cdd9d4f8
- MD5 29cc06320626ebefa348421c6504e950
- SHA1 5b5f51ddb6c4e2e15347d63784db22970c98c7a2
- SHA512 76feffafb3e023485f3da29c10aadbeb8e38ec47b8242a70f0f314488d70e08223a9a550dae2fbfb633a826056c80e8e93fd49cbbe620e3181b696cb1efbf874
- TLSH T1F7210A26DBBCE37F4395A2B2724CE949EB92C1E03011191A0CBBD01EDF5442631CA1A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawecf851a7-6114-45e1-8adb-e0fffe05b630.tmp
- Size 14KB
- SHA256 7125617a9f838b6358d10dc580d0ee2f6b74d0f7ce4376bd26bfdd3bdad250f7
- MD5 f542cbe70669dcd0670ef011cdef590e
- SHA1 d519f27d002204d52ec0d548c3903f433c363da6
- SHA512 8a8068e0cddb51ee8aae27cff5bab9ef2bd6153a72106fbc9bd2c76a864dd71400841964ca99ec9045c89243e1d20d16a45997071fd7dea403ed2712db9270da
- SSDEEP 384:A6rytd7vhOOJdl3f2bwZrO+ao+dTYt7CEheaduc0R/Fitf:RmvF73+bwlOoW0pCqemucmA
- TLSH T11362C0CFF1B1DA6D8221892B3C27AAE27C8836264AD482CF315F722E609DD04D507575
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee75d1b9-778c-413c-afc4-7b877820dea4.tmp
- Size 1KB
- SHA256 8c6a157885cc314b00d32d8649076a5109f6459e9adcbd62f7cad3ce8b8212c0
- MD5 bab91509efce33f4b50b5ef49e4c80e0
- SHA1 b7973f832c3c3195fe38edcff77850682c23462c
- SHA512 2e155f7ad656a398a777151b452178ed333225ab8d7c14dd6ea73f98393e0dcc60409453d3270b9b8e0e94e6dcfd0b510ccaee10b0b4a38c5038db784ce40088
- TLSH T145312BAD1386CB705741BA60C0E486E89F3921A8DD619D16C302C09E8F7466F1CCECF0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee7df4ee-3ada-4ecd-a270-169a97da3ff4.tmp
- Size 18KB
- SHA256 6ab029142e029f580c755c36e2aaf3aaa0564791fc87311e14ede33fe9659c02
- MD5 d1cb63791feaf2a48b3ef2af8ad10697
- SHA1 9dda32065baa49dd196ee5b34964af0cb1ec3e5b
- SHA512 ebc6f5128c8873ac3d4131eccf9e67f5700211d22846c2e538d70a759d81c36d881df4882cdfcc0c07dda6bbe70d68a0a38e5bc40a7cf18bf31da2d1dd14ddcc
- SSDEEP 384:Kp519Tj63AormyHAmgh6cVqJEkKGZ6qCHdmRUCvfViu7AQ6ii4lSg9:Kp519TG3AomIMXV+jKW6dCvd71zMg9
- TLSH T15F82E1E5C2CF0024A4D316BF8967A19E5A2D9EC8BB61BF9A010DD4D574FF1662C0D2AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee98f95c-dba6-4894-bc35-432bf311cde7.tmp
- Size 17KB
- SHA256 66049373cdf37cf63d3fe293386d6f5675e01976867bfa4e8822c689c1e9fe81
- MD5 ae6c3e9382d4f8b4f418631cb7486217
- SHA1 f1de38a40b165bf8124597880c9ba55f22b60943
- SHA512 70ef45b4d0d7c56849c0a33880c38473d373b94fb816108439d3eef9c2bb12fbc54ec39a19dc93fc49e68cfdbaee5569b4ed9d4576ff7a641257ce4c83b68f74
- SSDEEP 384:nqv9GZlWIqn7msUgZ8e6TTSMvVJB0nnSlZf6nTA1qE4RHZ:qKm6vgZXaTS6B0nnycTA4hZ
- TLSH T1B172C1443B9CEE78282C72EF51BA4D36603564FB53A6F4CBA0AD86BC14A7449984D19C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raweee1ca28-30dd-477b-afd5-f173099944c5.tmp
- Size 18KB
- SHA256 070def8aeccd4568ba5d82acca53357debf862bb040e76df5551e6cb6bcd0757
- MD5 12acf0e910fd7031be191afc61bb09f7
- SHA1 f464f051133ce104e52d9e8552afd373390a94a2
- SHA512 ac79b74d661f361688e8fc47c2f9b047e0cbd1c1d7867c81ddba81feac849f488da7e8420a4f0e4f3dce25b382e94d15d9b6ec67688ad1f5c493ffd167c7bea7
- SSDEEP 384:JIRTEPquKWrsCcN1/DYF0bDJYF6htCMGHFOFYlpgTY+b3vHgd2jyQXwJkb:JETYquKt9N1/DYcJY0XGHFOWlp2Y+b3n
- TLSH T1A082D0D0EE68B002E74C395C73011E8626A0618880DB663474DF7D7E94F917BDE0DEAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf0393113-c9e7-4c03-bb98-de9738354fdf.tmp
- Size 4KB
- SHA256 313ca07604905ac6f1222bf1c2a533f65797e08a5dd39f95d1a0b1e9a7b0befe
- MD5 13b5a491a3e746395a0626cbc3f3b8be
- SHA1 632642e6c061912ce3e49de46b6552282052c66c
- SHA512 846ca3c49be26f350b4e214a7d235ceb6d461e5768dd08a9b1673cf50b21af8459b69b5871b48974b088feef3731dff5930ffd7ed62228f4d29db078273aca17
- SSDEEP 96:nDM+sJoWcehGSgCVKvoNf7WZQMZRx6w3gWQRjJAgeX4k9:ngy87Eif7WfZgWmjJreIk9
- TLSH T1A0915D1A9C3CC25D21F9ED56CF4012CE80B3B11078EAD15F35DD99CF869DB9A1395D81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf1703139-1fcf-47c4-b1a1-62a155a9b7c7.tmp
- Size 15KB
- SHA256 8a61679e3ff5241ddaeeb50bcf2f6d0cd2c9db8800aa05c8df38014be34eb040
- MD5 315f8dcf9b99d57581e11acd75f444b7
- SHA1 4db9ee7c6b73265c0bc5519b829e7576ff90ef65
- SHA512 1f9748398f346d1630b46bdc6ec096a36953d07446fea8c25c0506edccf20d7ac08e9d25f1088cfdf8e0351fb79ad74875fc3f66537e295ceb7c25634ef57257
- SSDEEP 384:J1KQmGVmFnnf5ppBEQx8aaTbEi2cvyJOQOfqAobU8+1jx:bRqpf55qXbEDSfkY88jx
- TLSH T1BE62D01B66DE64D85CCC80E0FC1C58D4BC908D6F6EE374E82A8FD14648A461C6CAFC83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf32ff6b9-a21a-4733-9ef5-de3f36a5c936.tmp
- Size 12KB
- SHA256 7d492bc12c2a437f0c319a44a24da12b39f90ce9fd9024494c49bcabdcdccfa8
- MD5 81d850b3be69ccf94dea6be0e3d16a9f
- SHA1 547dcdbd9b004d7f6e191d68995a34dd6499ed39
- SHA512 efa8e47d6f388180c3f8d71b6c2bddb67dad6ed6b2a2a2c912eee0c1464c6a543d4ea9f16bb48ec91a2faabd732e68e1e89f854bba9948e315ca2e1568e7c1dd
- SSDEEP 192:st8S9oKaj//EQSc3+AQqeuzaA2ESnLM26T1C/8Rr+plLMqu7CwfbbfXp3v:st8YoF/jSg+AauRz2uw/qSplgbbx
- TLSH T1F242C17D609DE2D17E8B5A4CB242481D889289E47FD1EE6D9DD3BF002CF79181688583
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf3fdf3e3-00ee-43ec-856f-cee504385094.tmp
- Size 2KB
- SHA256 2b346ff93fadc76df82c12a4ab9fbe99452b71f29e1efd4bd9cd1793ce2778b0
- MD5 cbe2ab9f5acf2354f5cb10b78faa1307
- SHA1 d2acac0419fc7a0bb541e03c5f262f3808164b25
- SHA512 ecfe5313355beb34db9fe6a5e2f91d33224bbfba45822ec7cb36b03856239173277d8da22932193293075ec068b915d134ebfa1220392b2b83ad779d5ec32ff4
- TLSH T130516EB884F04681EC642A0FE87F5ECCE6F82877ED954D3F2066959061ECB6362517CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf56f692d-7e4d-4f55-a44b-5c3cdf74c125.tmp
- Size 13KB
- SHA256 e2b5dfb1c4f32b7a008cce967789582af353f8177758f97da22448b77f63635c
- MD5 cc24a0d5e86bfd7806d6c0b56daad404
- SHA1 7afdb9d86351b0382914f96f3a3be2b2ca46c658
- SHA512 ba20e1f3e1b07822d824527359a2d8ab82d866d745098ed0991d8b8f05d7be586f25d1e6812d62be055d15784d172aa5bac5f372dc839becb24d5ab910972990
- SSDEEP 384:LFZqLduQwMm3tvKWiTpoUNErmbAuThaPvsgaG7K8:LrvQw13HKEIlaPuG+8
- TLSH T1AB52E0AF8D57EA117530C41686B322FFDC1532C06BCD6B7D305D93964380996AE38726
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf5cb7b22-ebd7-452e-acf7-4735b72f34ae.tmp
- Size 15KB
- SHA256 7dbaa36a645311ccc0eb343249d367c66d52fd0263b3b10d5d744c808c736ade
- MD5 fd2da07b1f0495e2eab15769074aa410
- SHA1 513160a11bc913ae64703aeb7525660ee737c703
- SHA512 823f22364e913893a3a2b6e7e2a767ce45ddceb8d5151001d8a3851886b5643956c441711a0a7fb19f5965248c4d5c6e8eb23a6d1989bb4bd5ebafd234854160
- SSDEEP 384:Q7ucZCafoTGeOPVyQ0EJptv7wUS0cGEoeSJ2LuKJrDx97irTmkGh:Q7uswTDCymdsG1YZ/7irTmh
- TLSH T1A562C076AAF18ECE55E48C19413A389AD63818E7CD8717E04994112ABC4F2EF12D1BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf7e18ca4-a42b-4f04-a26b-a1de416fe7aa.tmp
- Size 10KB
- SHA256 c8ed1c320978359a2e5155bb6ac155a95a57ef6c1888b3f8d33dc239a810a59e
- MD5 f352b8cfe0f1586b30b2e75b2c637791
- SHA1 a2b093d6edeccaab0e8229efbc6dc85982dceee3
- SHA512 ba59371de4ea33049c2485515f5e602a055dd139e0764375e27fe905d381600acdd88d0971a7a7c9a6fb1c5e4ec1191ec94e40be3ef9cc6d4748b3db19cfc68d
- SSDEEP 192:cZT7tt4cO53EXWCh6ztjcelzENaadSbgP2yExJlyt2mzRyCukRFMcVM7AF+o6x+x:cBtBO53YgjTEldfj26coWkfMZsFakOKz
- TLSH T1AD22BF7ACC48B58D59E04A9C1D2AD081CBDE261AFE013B8302D9DE5BCFC847452DA267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb60bd3e-ccec-4a76-b103-cd3fe7efd058.tmp
- Size 15KB
- SHA256 c4eb11cc0b0f540bd1a6a9eb700ad98b4d5e93bd5e8492a355d59d69cd234035
- MD5 dd9285ee88cedbb046fcde18755dc8fc
- SHA1 c2c63a59e648923edf9673459c836cb508938152
- SHA512 256ce206b7e0c14baecb08d4d306e94a48af5bb91015a96b0c454f95415a51d9c1b6a44e8df26b049fec6c0a35c262edd7c58e7ae52e86ecbc1e7f26f808d0c7
- SSDEEP 192:pGq32432//oHSmmQiZgvl4u7DM/XF5kLEuUuJYDOTE3XZw3HkyQZ1Ju0BcDB:/6/wymmCt4u7Dg5SZqD8iXakd5uwcN
- TLSH T1A262D09389CBB13F78A387F4718AB057E7C881D29DF6B282525893303405EDE693BD64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb858b70-0354-4f16-ab43-1a530fbdca12.tmp
- Size 14KB
- SHA256 4c360a2f2851cb4165879677af9e2589c04322fdc4db5b23a2529f8493d34132
- MD5 a2b0b4862b62f392ed3cdba24ea7a363
- SHA1 b5eb3678a9f067f8a31612dcd56819c69177faf1
- SHA512 3f3ff71f72a49e51b67845c00c42cde45dc8cce01ef271ee28e84123b7e3973518405d9b251ec244c2f4979c89c6de68d99f967ea119f953bac57b7bdddf5fea
- SSDEEP 192:NhvxIgQfCF/zE+cefWvLizHUlGycvaHeSuYgc4M8GHVpva6i0eICQmJP2MnGKi8j:ec773WTmHLva+Svv8GHry5IdMnGKiwN5
- TLSH T19762C0EFA8A9011D65F7BFED5EDEB53D921128C4CC64C86E0601D02F3126536EAD2606
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfd51922c-e67d-4fc7-b870-fb84f4a8962e.tmp
- Size 11KB
- SHA256 153895b5c5e81612c0c7a40fd314f57df9667e84246e6e33f7c12828585d3b99
- MD5 d2b0fef561a05e9f466890b86c5661b2
- SHA1 6d788f3e003928c81abf67002545c0a32e978c79
- SHA512 cf7bfe5ac71e77e00e62068cfe9b456772675c93aaa9bf1100cc42f86a08b61c575aae48b4e1593b19863d8e8c9525749cde6ffde5123568ba7b3d0d977ea4a3
- SSDEEP 192:GuQvDdEcR1un4MfUPVhb18+mRXzVN4Ox8zAibmCPaiuGwW5eXEq1A:GuUDKchOszADh6NrNuGF5CET
- TLSH T11A32AE4181C9FC2BE119F4B39FA895C21B1CCA1BB38408E3EC758B324D296A4F1157EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
- Size 113KB
- SHA256 ebdf6b3ccc257a03b26079648f728456fcb122bc296598f44442298843ec4771
- MD5 6db2531ceae8febceb19e54edfc6ff0c
- SHA1 92f23cce63603de6fd306f4ccd0b83ced55f1c6a
- SHA512 c4474d22259e9df343c1d97a46933bd608cbdf64beb25661d941806173a5ec783eee2f27b41aac63384ddb9542cd8345ae9ac76920d8e0603a01ed0969787dd4
- SSDEEP 3072:jgeMYnyxvbNf141ddHQFq17cXZpfVthZoVb9cZyLJW7x:jBMPN41n2q1Apttmb+x
- TLSH T1D8B312292E9E358B4CF6AE153C6AE096269A32CBDC65BD161B4B705D50CF223DF48D0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475
- Size 203B
- SHA256 6540e9cb565af6a3663093aba7948b47c31ed2f83545d7dd51853ec5c1b55597
- MD5 fcc08d47792cd11228904657a981a115
- SHA1 54e97c5cf68b51a5716f03e080898a8305bec8c3
- SHA512 1d0ddcb3596c0490fae4f7052579931255ae7c5b66434bd682510694464c8aff218b9e50c8dcd7802afbba44412a3abbf2e1e09c4f4f5f751f9dcd79742d5c02
- TLSH T11BD02200FC11A8E8B5E1E262E1B43B77041C093B160E2D38C09C4A7BC29C0E91358B22
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.9600364750df182d0-bea3-4dd4-9e52-d241bc735563.tmp
- Size 2KB
- SHA256 e97c0796be31bf5f06e1954be76d5ecfd42d93291f6f839731963fe87975a5e5
- MD5 4a64bb4abd457420d8da613ae057819b
- SHA1 9a173e6d003ccf3837aa7c6cbce5fa6bbb0199b3
- SHA512 1e71dd17f0156f6d8c201558f49c039303edd218cc05e322b989065a9b288183fb6d0dc508efc9e7be2293d6b9c6208cb334d60794ffc487a213a9a9097564d9
- TLSH T17341C055951179B5EF5BC72EB1F03F270F7DC8A76111256A72CF000E29AEBB2910B21B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475a2951df1-2670-4af2-b8e9-60fddfcfa2f4.tmp
- Size 1KB
- SHA256 5233f10de82432872571f609cdbe2a06df5dde9749e512dbae72768ddf98985f
- MD5 5f4502914142d565ad72aeccef4ae33f
- SHA1 d3f6092ace29e821c092a87308432d9a6f20b49a
- SHA512 4a632d70bfa2eaf51d05161af7ea610298d16318f0ef4c03800f95402cb98e1db0cb262ccec533fd214e2ddd38bef2e154be94588739952ba722925c4f66d27a
- TLSH T16C213351991179F1BF9BC72EF1F0363B477AC896620214BB21CE400E1A9DB70910B62A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475edaf966c-d727-4943-94e5-9da93492017c.tmp
- Size 265B
- SHA256 2d6408d50adfb31dfa4e30ae5d6610bd9ec0e9c4c06398c1e46de992752398d2
- MD5 9c4ee0b554af32ba22288d3e6fd7985e
- SHA1 8ca015919fd9fe6f597b80d52c8ecdd278653cdd
- SHA512 75a7a66a2071b73ab691602754dd1faf88812656025edea06d5924a9cca1250e77a4db5e00f430dbadb8d0b4908422ff99130d13e57a3e7235119698a1653496
- TLSH T186D09550C85A9DF0B7D0E77683B4B77717255916450A1D7450DC052742ED5AD0308311
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028
- Size 413B
- SHA256 81057588aa8e87398b5aeb6e2b40790a7ea255323cfe96ee9579c4d5969781c9
- MD5 01caa5968686735774163ae37b227ca5
- SHA1 329a50b9fec92a81c2428936dcba1ac6276feaec
- SHA512 e0934ed18a86261c2dd2e2bfedcd5511e1c312b0ac07dacae9286bc16a13c6ba2f4cd9703e333751cdee5a4caf7b4998367b452b9e0255228b9115eb0ac25b76
- TLSH T1B2E0F105FC341790EC4AC7F237B93EB4D7674781D8C189E2A8FD348D826A10D0A1A361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028075e2ac7-67df-4412-aa02-2b7effb4c1a9.tmp
- Size 1KB
- SHA256 e80861cd3a99c221948494cd952d1cc6f44ef198f26d7f865d508f066fe84eda
- MD5 d821e0ba080c9f331bd786c84d3b0010
- SHA1 0c660320361940640c61bd5013d559b34d92c450
- SHA512 6523bfc5157530b760a43cff5f7d0bd21856d38b070585d8255951e2b60caf0ee3265a8e0826218f928fd251171226d1d22ecdb257f39e9598b14779f71dc802
- TLSH T15011E2F654250762AE4ADBD17B7C75ECCAB785CAF8C085D2DAAD548C02C723D08002E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800280a7ce628-09eb-42d9-a615-b0ee788eab35.tmp
- Size 873B
- SHA256 73b19ee35ee38c9c8080c9f2658291646108800841e72a4c89a036e6dfbf67b3
- MD5 626dc21695c0745955c577fd9c0115f8
- SHA1 8bdd1a16474eab238e5f7244434a336a06515193
- SHA512 02220b2211c8360abda1e7d6e429568c081fa137cbe14bccedc6b07ba2ab619a5276d5e930d6ea5549a9013afaf03711e0cc79b08a62c17e907780e2023794c7
- TLSH T15411A7F654250351AE8BA7D2777C79A8C5B795CEB4C085D69EFD758C428627D04003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002825a645d8-24bb-444e-9aca-b1415a5d3241.tmp
- Size 782B
- SHA256 6d66dd1c6aa9ee41266cbdc3e848544688421f2ad8edbf17d0fce6c4fb07a6ce
- MD5 c608c2c7925ca816cee7263f1ebfd5e0
- SHA1 fba122b5c6c10fb6b16ca797302574553766da75
- SHA512 08c0b6ea48302ae9fe96ea295956bc98406c4cac975b3e89d9af620a6820645ab83b6c8895c32d3e3e83762e3ad663b202369f4887016ffd27014cba775d85ea
- TLSH T18601F1FA38150360AE4B87A17BBC7A98CAB795C9E4C0C9D199AE708C424A27D0404390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800282f8f5a32-57fd-4705-ad45-b0250bc4cba9.tmp
- Size 3KB
- SHA256 6d18079dca95d72151df61d0dba29fae96171d439ba151a596b4129f5fb20107
- MD5 3587f89d13ca59a50eb8e54a5f56a091
- SHA1 dae2fce32ef11ebe7712e544a79ab84f19e0424f
- SHA512 3dc2b411a26fe6c0a93b20caadff4e05b030169cbf67fac05fded3e2534c8ff9d313cb461ce3af2f573fd61672ecef063b60f4cdc80b39da79c5bbe87fdcca94
- TLSH T1478172E665112A72EF4BCB5FB2F47F2ACF7E84873001619676DE004D1AEE7BA4406247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028312680b4-eb5f-4265-a09e-0d86d2906611.tmp
- Size 1KB
- SHA256 7e9bb780a1f02d5aac83b1912dc2958f0748ab3ebf8e2b09d927da2af46ac2f2
- MD5 67030227f1ab7b050e4c5c45300bc7a3
- SHA1 f9e2d6ec2c16c9931aea5ee6b6ec0abc76d605f0
- SHA512 f0a92f53b2613dcc9b5c899f45a1f281a1b6d296ce60a89570f054e2930ee2c4d01d7eada3ce4259ee2b0d60a7913e3646908aef8dcf0a2ca1bd1ee8e34c7b1b
- TLSH T1DF3112FA24140321AE49EB92B77875B9C9B785CEB88085D6EEAC658D02DB2BD48003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002836949e5f-3878-4bd2-8805-cb60664dde62.tmp
- Size 511B
- SHA256 191e6f9185efe5f33f5e04acb34d71b56009d0fd2b60a0df544669d5c716b9f8
- MD5 895be9759d9ed61f42e4ef4b938535d6
- SHA1 f74f7c058d47d066df8342b8c74d1a15cc424ce3
- SHA512 9c132bb1a8c73ea923f04639c2ebf2e0fd3ba76b0659412f5429b87770bce233daea45aaed8132f9f727b4f55ecd46cd709884eeb20b8369f87ce24d97a9e101
- TLSH T1DAF00E8ABC320221994BC7B237F83EA4C3A78B85E4D086D298FE315C539B15D450A2A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800285d2fb1f4-7207-4a46-86ac-c31714035e98.tmp
- Size 3KB
- SHA256 5cbd1e4d2d8efa25854fc234819255c0a58b3edb5d0c0fff9ad94b1102d6adf4
- MD5 43639004209bdbad5871b0024b99b395
- SHA1 66f5e39bf435d89be2e4a9145fccdb13a64ad07a
- SHA512 89b1551bc92c7eff22553d27016ce9cfa98a5e5f9c09edb2c40860e405512c892efbd439a5e0455bf2067654e65bd527656f9781b64c281c7e1d020d62de4e67
- TLSH T1BF8172E665112A71EF0BCB5FB2B43F2ACF7E84876000219676DE004D1AEE7BA8407247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002868ddc544-a83e-4250-b2ec-60ab66911fd3.tmp
- Size 1KB
- SHA256 7e4c0095c2ae843d6ef4d6ed8a634b82cc0de709802fb90f6750b4ae87699009
- MD5 26b8200f9a6391fb68f19db06722d8b7
- SHA1 28f3bb848f300c0097abe9c67c5cf128e8271da7
- SHA512 f91bbd1d79e9db0ffeb8f52083283b5d6d39edde35afdee3408a4dc5c661aab999ea9f15af84817cb35487933af0c3a881b59677919dda7e1ce2c12da82f9ca2
- TLSH T1B221E1FA54240762AE4A9B916B7875F8C9F785CDB8C085D6EA9D658C12C727C08002D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800286b247a6e-48c5-4a49-b94d-a8aebde2f03a.tmp
- Size 3KB
- SHA256 2bce225f82d550238d91aaff10b38dac4d857fa44f25f423b705c7e2cdd78238
- MD5 03560285374aec8b067ceb6b710f6251
- SHA1 623f07952ddeaea703a7f3af7fca88d128f87c66
- SHA512 141f05233ce7a1a3770952386f93e6dde55c83f419376daadfaef684a2895cee031d266c25e675e6e04dc546aecfc4215a843af7d5a57f583053e482912662ea
- TLSH T1C88173E665112672EF4BC75FB2B47F2A8F7EC487600121A676DE004D1AEE7BA8407247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002874e25e88-234a-46cc-b8e6-1315caad4449.tmp
- Size 965B
- SHA256 3ae49bf11b85a0473f47e564bc594afd6e61f2094be0af63b9ee548917e83ce7
- MD5 579907bc775f08e4441fd7d4ad9525ae
- SHA1 e54144dbf543ec51885764effacc0f1061934897
- SHA512 1ab242e4764b10a4a55e64290068f82e84e1e75551b79d9f9354525c6665af190505c9905fc190fb4a2bf5b824803f0fd6c17d79ebc541cb653ed019370c4f6a
- TLSH T17D1114F664250361AF479BA27B7875ECC9B785CDF8C085D2DAAE648C038A37C44003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002878c3bd31-4c48-4829-8621-7298d84131f2.tmp
- Size 1KB
- SHA256 0cc36d1c90928537cdad833c966c169901b701237f26e7a942c4520cde64a461
- MD5 e4073feb3a094caf0e087e537d08dfcf
- SHA1 9796787ccd9263a25b5d6bb4c0d6b36a9f1c9a01
- SHA512 0ba10ba3cdf88197a7232d0010a04de8b1a6a76883ca2c10c1334656b031fb3e397559dd5745bbaa35ea6339604bf03fc3cb708459556b672d88807d4a7c4ef6
- TLSH T1323103FA64240361AE89EB96777875B9CAB785CEA88085E69AAC558C02DB37D44003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002882942c9e-9afa-4907-aee8-0178435a9391.tmp
- Size 688B
- SHA256 d2fa5af31c84a7c2549da5e28ed6a33360ccb7ec38f26d30426da7d8d9a15f3a
- MD5 75725ff96b772ea2ba4044bf6f4b2c1b
- SHA1 69badac9881e600d83589d3a696f4f773bb19207
- SHA512 fc875727dd838997ed1117e9e32103d1823d4747efc03d45bda85b8479cba6e96755758338fc458d5b47f38f2bf5530e485d592affef279b356ad6cff3cbd8f5
- TLSH T13C01F4EA64240761AD4B87B277B835A4C6B796C8E4C0C5D2D9FE708D429B15D0011364
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002882c9edcd-25a6-4629-b671-3b5db08ac95b.tmp
- Size 1KB
- SHA256 8043d6ae0769c439101aca89a229153c0bc91ff4dcd8e107e71cef0e71b1b38e
- MD5 fddc4957b2c4623cbdaa405479f70159
- SHA1 ccf3ff63e476b8bd8509b71f8e66b53a91964a83
- SHA512 2b8664408a55d1ec4fa7e0ec214b799cd5099495ffd55c5a0ec325662e4761875219dd9a3f9e0705f0ef429db9e081066af70dfaf6f186960bfc7a49b31f58ca
- TLSH T14621C4FA642403619E4A9BD27B7CB5ACCAB785CDB8C086D6DE5C658C02C727D48043D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800288829fb16-9ab7-406c-92f2-a0a0ded6509a.tmp
- Size 3KB
- SHA256 57d0070bc14e8ee709e5817f7ee8b3daf08cdedf1472393f11805e1c889227be
- MD5 2602e679f3beb22613ab8cc8c9d96a5a
- SHA1 0e946db1bba3f1d6d21ed8ad3eb0e7d1c7e6fa0b
- SHA512 66e0734e225701556e740effab719cb61137858a279665dd0c2e073805ff1c4abdedc56ee7cd1938cf6a16d1a637d4292972a78283cb8511273cb9036b70199c
- TLSH T1918172A665112A71EF0BCB5FB2F47F2A8F7E80973001619676DE004D1AEE7BA8407247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800288ba0e2b8-10a7-4dc2-b5ff-f49be46d22ff.tmp
- Size 1KB
- SHA256 b152efb243ca13f9f66a3203c9f7a2356c839b30e9bd828dcd6da931afc6e7f6
- MD5 fd2ebc337ca785b83abef26bdf22e3f6
- SHA1 1d05c7cbd481f97c8a910c967ba987bd9e4d2da8
- SHA512 7e3d059c9a4c9e1f366cdd2679ebf04ae9fa00a6af1c68c2fc1a3b907a5237aaf7f0fdbdc9fe38cf520ee67dde21108fd340d19bc450c18f0272c55342fee346
- TLSH T18321A3FA242507619E4A9F92777C75ACC9B785CEB8C085D6DE6DA58C17CB27D48003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800289d2132a6-0174-49e3-ab4a-9318877cf630.tmp
- Size 1KB
- SHA256 bf00de0805067c55f065cf968218099646a1aacc69958e28ab1e61cdf1ea0f66
- MD5 fcda67b18f0fce7b72bd865926e22f37
- SHA1 e065433ef7958515acaa635b9588551b508fae6c
- SHA512 a53e9b42c83024abc99e56f8b83a31824cabb16e71031aa8324aa7735680c0f2acd5b699284f3cef5ae8b6f97ce275ba1aa84be97e2c738ebe63e819abfeb313
- TLSH T1A221DFFA542507619E4A9F927A7875ACCAB785CEB8C085D6EEADA5CC12CB37D48003D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028aa06ee23-8083-4178-94f7-3af310d6aef6.tmp
- Size 3KB
- SHA256 b53b96a99522dd2c816db86d996b02beb4aa9a089aec2b2d5825ad7aba34bf34
- MD5 8f0fe044636f52c0dd2aa06c32e86e9d
- SHA1 a9d91d9e84ec292cdf46f78a055a7c128819eafd
- SHA512 1b19e9ff89abed6a52182d0563146362748494f1496d2c9774c80d334a0cdc4cb59b8d3b3ca28f35977e737461934b04aaa51ccf132877109cf21607ddd43faa
- TLSH T1E77174E665112671EF4BC75FB2B43B2A8F7EC4D7700021AA76DE004D1ADF7BA8406247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028b571009e-9352-4453-b39c-40a3a8a0ef09.tmp
- Size 2KB
- SHA256 d2128aa950563743e0316115c8d13a0f7363360f4787c6670b36a9fbdce2f5e2
- MD5 10c434d26ded596d3c92e3653284f941
- SHA1 fea8741b0ccb39c98e36b8812c0333edfa30038d
- SHA512 3c6ddf1a8bd8f6d98c1d2f926458aeab820f6af8be42c93f5e5ac6b7be77cd520a0bb061f218f2539d50806a789c5c3807452f0c7bd3a129fb656416e565e018
- TLSH T14C4172F668142771AF4BCB9BB2B8756ACBBBC4CAB44045E76ADD408D06CE77C8406394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028c08d2f20-ab41-4836-964e-c7f3cb3cdd06.tmp
- Size 601B
- SHA256 5488a5327b309aafcf956886099243143158506ad483bb11647abc160c178b51
- MD5 adb855871d45ec52d695c5abaf2fe559
- SHA1 6aff07f2729c098ba7d0dd1f7a41f23eac6947fd
- SHA512 7109f22ff21e1fa6f987d9d4c1a5d01db16fb791202230099d7248d7e2b1ca159163a0ddeb78ce1f656425656c9b41de28c618766904286b193bdb9d074979e0
- TLSH T1D2F0028678248360AE8B8BA23BB43595CA7782C4A48085E258EF308D429B11E0501360
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028d569ece1-cadd-4d15-933d-3840ac50bac6.tmp
- Size 3KB
- SHA256 8e13dfb0564b9e72cc4706f92b0687058f9bb998f7f2be5e6c3158ad71c1476a
- MD5 23f16abcebc29521e141d5ae20823726
- SHA1 9d12052c6c9c1dd5a6d97e88e2f51388a7a8c8c7
- SHA512 ba0cef1833429d9c1ceca1a4029581ef38387b295516196f385991636e14169f7b920d0d5f62c5105beefa921eaf936a10bca191b0ee6fa031eada794ec8ea3d
- TLSH T1D88173A6A5112A71EF0BCB5FB6F43F2ACF7E80873001619676DE004D1AEE7BA4402247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028e376f37c-e5bd-477f-99a0-3d97baa1b6f3.tmp
- Size 4KB
- SHA256 de62d3cc92d52254cb807b5edddbeed850ff8fcd8048f0d2dad5bac23a90c5d5
- MD5 5abacb61aca1f1e738d8b4168f02df5a
- SHA1 352ea2f809d54cbb845fc7947518215a7068c247
- SHA512 0a982fde527ac07933cc434f8c3f38531bf9cf865b84a819cd737d3c4c9023410a004e6ece221343958b83696c1cdac42e5ddd1dfac1f0e8daa68f88263d9d7b
- SSDEEP 96:biuwSyxuxrhJNkkWpMsXKzHx++WJO/d+8KF61CeB:+uftck7QoR+KVA81XB
- TLSH T1768162A669112A72EF5BC75FF6B43B2ACF7E8096300061A676DE004D19EE7BA4502247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028ed7dae87-be0f-4579-9142-78e0dcf953bf.tmp
- Size 3KB
- SHA256 7130d2ec535c216da8a6f07e9fbb4cdbd7c0e4d7689897be7540aac6f93636fc
- MD5 c9acf44e4f1d38a9046657ba3bda54f2
- SHA1 814e26d5a3f659160798c64dceb49c106ae30371
- SHA512 77ccd57317712f9496f50d502f490bc95afe1b9892131e200fba8781c636bed9747b0afb80c4d1750475cf19f567c00b56a1362170ce3fd6994c0f42043afc37
- TLSH T15D8172E665112A71EF0BC75FF6F43F2ACF7E8086300161A676DE004D1AEE7BA4506247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.285561746
- Size 171B
- SHA256 a6fc61dbb0f684a8d78787925f20496068d3d2ad26b011cbe55c744ce50065fb
- MD5 dd3380209c220a875ac32921ea005e68
- SHA1 40f8c2fd73ce535b856ecc3f4221eac0d8fead37
- SHA512 3a8da92e09e4a1cadccd031789ef69fd8d5ad884cb779a9302dbf317a540ef1c796bf9c788960d130f3c8280ef116ca83c80dd9aa29604ed3aea898f8f6c4a7b
- TLSH T116C0809579547A655C449C7CF00876B1945B05810B4695141C9B41DE13174B5D35D754
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.28556174610182f03-d745-484e-a586-21ae4bd15f65.tmp
- Size 200B
- SHA256 f35d855e4f27088471d78bbe8de1e4f4b29037efeaa14ebb18424761df3a2fb9
- MD5 a1b91d3520268f3d0bd5a8d867241bb4
- SHA1 03397f8a1b522c2475293325d60c68895d83c87b
- SHA512 8b036a6f62bd6ccc1d9b9820a9db1db6534a9e3e11bd0769c63481cf23615cb8eec1dad2b48d464abeab2dd985dd2c4ee755b36d721f5b128c0740a07e8f3728
- TLSH T145D022A9B8902CA59C950878F008BB21087700814A0B1AA644CF53CD01162B4A208A20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.28556174613702a6c-0bba-419e-a1be-487ce772e461.tmp
- Size 430B
- SHA256 b0b6477085b7a2e8d441a28c7b68e711205629f1f748b15726bda357d04b2cca
- MD5 2b51823caa6852dab2fbe7316d10300f
- SHA1 cc9492e4ef53ef07d68859aa621f9c0df587fa7f
- SHA512 e2b6ef827b6ee0d94336d94fbc8e299f5709126cb348b01d2fe7081ea9dbef12f905c4cd1601c941dc6344fba4aa113012ec27ca0a6147980dc58398795afec0
- TLSH T15EE0ABD33948186BDAE56A64F4ACFA2285E20846840A2CAAA8DE964D0163C3AA019630
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.285561746b1e6db5c-17f0-4140-b0fc-cdbd9a2b686d.tmp
- Size 224B
- SHA256 096bc6eedb0e87ed4bff8dbc7c3c40e7065067b4c25078476057a0c9658c0969
- MD5 be9baf8e55d8b628a24d24193bb370f9
- SHA1 20864cd39e3b7d7f71946d36964fa4d2f6c7f0fe
- SHA512 835f6c88a6f3067bbfe27354b87551b24d9b6975924fe98e28c08749207f6b57f0f72e8b3cce8528c6c69a5836cdfe991936d4e86cf5d01859fb17ca2ae6af24
- TLSH T11FD02365F5940B77DC4D9CB8F4AAB77395FF14401D09513C14DE558D0113C7D905E664
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json06066a96-3c30-4a15-9ce7-27e12e9b281e.tmp
- Size 662KB
- SHA256 e2293ddf14a2301784ab39edb1920947906ca693114deaa79074c383f695dd78
- MD5 d35bcd1aa31530d054f32c8edccf3356
- SHA1 050a1fed9c0044c0ba818cb416e3f5bea9520e24
- SHA512 7849d06bc3d66ea2aeed84127223860927d321941c1d80fd9c3d28ce7e8b48af11457f6a1b3d59bfd171120f551d8d3df4f38511dbeba63eb53a24c0874d2fb1
- SSDEEP 12288:0ISvCZwtjr/e4+v6OMJ9oJRkv8mFxmfDdFRpfFltEbHNpKZXiy0HTT6VJxFVRw8P:A0TQH3MN
- TLSH T182E4B8AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsone7bd7b41-ac9d-478c-985f-0ab571c8b8de.tmp
- Size 653KB
- SHA256 8b0fd03348fe4cf90010d417ea01ed5d0f72970c67c76484c870f3a2c25bdf44
- MD5 f2996ef3ece85531c03612f20a068357
- SHA1 08a9d6c37dce7ec190eabc9d0c4d98f77a2f955d
- SHA512 318528c7d3c0ed584adf8f7a905ba491464323fe27030010b1ef2877b3a2958453ce98055ff290fa565c94be5035543b99d2156972dd30aed4ca31c024d930db
- SSDEEP 12288:iSvCZwtjr/e4+v6OMJ9oJRkv8mFxmfDdFRpfFltEbHNpKZXiy0HTT6VJxFVRw8RR:p0TQH3Md
- TLSH T161E4A7AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State171d856d-ef94-4355-acd6-dfce8d167b2b.tmp
- Size 3KB
- SHA256 fbb344a56023068cb8789caa1cb5864046712375bd112fce8760fcba81d11e07
- MD5 cc006af4be4d738a90905874e6d5ff0b
- SHA1 79d3f789053a7283dcc3ceaba65ab06f1e23fe83
- SHA512 5f29aac14dc63b5661bb6822d1eebb6fee5838ec2bd2edecb54d1bd2397cddeaa0fc2e5b8a9e6b9df1d5a16a74861bf10b0ea8833e1b425d027578aa3050cb0b
- TLSH T10561F9702C60CD7BA5BBE75DE9493F83EF625113E0101FD851EA4E0C16EB66C2356C29
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State39ea4b94-36c9-489b-981b-8b4510a4faff.tmp
- Size 3KB
- SHA256 a6076cb575be81f360dd9b64e166bf797540aa44190e97d77f7c5968adab9523
- MD5 4ae08b1200a3461ccef35d0b59d80e24
- SHA1 e44be75d903adf75c21699c46589e55211752cec
- SHA512 89795e3161b3889deda359ac828816b282164004bb22cb4b58ff614c9b465212577d89f48cf28e2ac62ef0824dc4632225ed5fb438c26ea066c49aef92efc7f0
- TLSH T1F26109702C60CD7BA5BBE75DE9493F83EF625113E0001FC851EA4E0C16EB66C2356C29
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State5b655907-a260-43e6-a488-b3cf5e71ed20.tmp
- Size 3KB
- SHA256 5197b8e77fafe5db9e59b2ad865ffe3ad8e1d4f12d3e8ccc04c6900d2a8528f4
- MD5 71299fcba23bd7ae2580cd5ade3ac4e8
- SHA1 b3ee85a69cdb229cd7fc2a02fd6082a096a03e82
- SHA512 0e591092a7d752a3a6e1a47731565e08d19113bda388ebafebc7ada7c2966a1def5f17d8b8fc16a3251749ab85b02305f20b9a96d181a325f548f7c917b560ad
- TLSH T1F761F8702C60CD7BA5BBE75EE9493F83EF625113E0001FD851EA4E0C1AEB66C2356C29
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State67c04ae5-2e3f-479c-a19b-4f6a3c725379.tmp
- Size 4KB
- SHA256 19ebd2fd975adae2b4ca53da292d013a3ce134561c8b647bb90fb87add4e04f7
- MD5 2a60e4a5efabe20229ff64f9c630f561
- SHA1 4e1f38b33ec12ea1670f61dcedf612f3db0db880
- SHA512 fc40d9e046cb7e7f9893b4e60da311715765b0e4ceee5a0e99950e4c4602d4a68d6cc73ba78b715e99fb1d29221604938a0b9d6223b6460752b7be8ca699298f
- SSDEEP 96:Ap6A0WSfDJ7IuETX0VyZus5SKXDFQlQcfqTbDotonYKIiqQjS3xeP:Apx0Dy7X0CtfX2KHvDURMM3xm
- TLSH T1F4A14B7118648E772C6BE75DED893E83EB921023E0191FD841EA4F0C26EF69C2725C1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statefb8478c0-ef6d-4f9b-9a24-c843b093e54c.tmp
- Size 6KB
- SHA256 6004c24812739f58d37192c247d51ce8a92668f0d7f8cdcc8e33db902078ba39
- MD5 320f4961fe024062c478abd130f083cd
- SHA1 f384af2f1fb9be30abf285a282b736c298183414
- SHA512 9afa6e54cdd7825c6608be6399f135f4ffb7a753defb6cbb1c78007e3c9cdb581ffd53d2221f335f9aa68c5b0c727536609304af5928151d694efb4bb6bfcb3c
- SSDEEP 192:Apx0Ey7X0CtfX2KHSDURA+QXiKzHd7Gg3xm:0x0PkC12KHS3+SFGYxm
- TLSH T11CE109B55946D9B7B8EEC744D6463D8AD7A83112B4080FCC44D59D6C23FF5DE328980E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV2ce82a23a-5780-4871-af64-581a9e2e23eb.tmp
- Size 19B
- SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
- MD5 0ba451e89bf7a6a0144344570515f79f
- SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
- SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2cc2a79a3-596c-4b4c-a488-93c082d75266.tmp
- Size 11B
- SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
- MD5 78bb337b5e38a8a32331f18d8a2d3cda
- SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
- SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
- Size 7KB
- SHA256 cadfc443f92476613d67eaf9ed1b81dbb2919820e03e1c8be4e28722a24ec67a
- MD5 8c2b3a78449128d7db943fccb404b2d1
- SHA1 de8366fb38a5b4da4269cf09a7242f21e81549a6
- SHA512 ef8e128912c5cb62e0763bc3b3b967c2567cbd25d012c32a67a3fe584591f056531f405e5bf48beec1d067691d5396ee8849a20e00e329c5d786f7fc63bb486a
- SSDEEP 96:drnkKEMHssR0nz79IAf2iO76zwyJRdEzS:XHssR0v9IAA76zwyTSzS
- TLSH T15AF18677CD3CCF52519E64E9828508A5C6B2E0839DDB5C2CBB4C46DD0FA813DEDD02AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\303d6ec0-57dc-45f1-8dee-7466a6053a6b.tmp
- Size 15KB
- SHA256 7658e5f9472ad21e37740e621d0f0a72efb44fea43382303536c3050cbff8308
- MD5 c3a0b4074465774a187bcd81610c852e
- SHA1 8cc01171acffda474c209efb7e88a4254aee663e
- SHA512 37e65e5b7d9dcfb90ddf70052162850c4f9c6dea091945b21d32d94d56f467808b9479e8736cc72d9da3d3b8829f2620926e8a0f560c3e6c9c2e8aed597ea255
- SSDEEP 384:8+N87hM5lelZ9GwEfqzWXKEvGsLC6xeZ8BQNZyj:WvrEfqzWXbXtQ8BQE
- TLSH T12272282597C781A0CBE7CE326D057DAD7C6DBBAD120877111E12E42BA28CF6E40D7261
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\OperaSetup.exe.crdownload
- Size 3.3MB
- SHA256 9eba55cdc3acc9f774f48b0b5e81808fd9c23b0220054ff34a94b0a65040eea0
- MD5 eff01e82869ad1825e194318cd7d4d58
- SHA1 dc75797086e4b45598f4102c47bb0617d7abbc7b
- SHA512 6ee7c9866868e728fccdca9b3bdeed59221a2daeb58662705c43ab233e677dd8b5cb83e3cd55ecb7043a89caf766c4ce5ed10e37fd54df2ea387586f611abc30
- SSDEEP 98304:7A6ySCtbyEsnyOdJFt4ZX7WqBohAtYtgECgEjFOc:1ySfEe3dGIqGGKJCgEjFj
- TLSH T185F523637B809475D62211314F5AE7A8AABDB9611F729A9B33C82B1F4F701C09B31F47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier
- Size 591B
- SHA256 d9fbfebb19d45d1903586a88cd558373a9c74a0d24b37fd6d27d93a42f094ad7
- MD5 1d3376ae5ae26ccbf1e412eb08a42028
- SHA1 4169b8f1e91615415b9000b402d3c0d07cc53b36
- SHA512 258dfe469e6ab580a043afe6adfe9317057f239f9d871b2791743097cbc261ff22aa49d7e063bc8d7b9cec4371e706234a88a3698bb94ee50a008d8b79f7be11
- TLSH T10CF08111C53A84311911854033FDB39CE8D73756C4513D46B9DA43BDD495B52E3E6E1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir5644_1000751014\persona.ini
- Size 203B
- SHA256 8ab3f6191e24c4ba127f127a377ddd1b822ee2a23c71cda7ef200ffea21cd032
- MD5 d262fa95a40ed31e4df3cacb5060f4ed
- SHA1 01c66747d8e69c8693639be41d6bce27bc0c5417
- SHA512 59d0fde8c98a0cf8cceb4cdab6e47ebf7ac5c3f634ce052efd80d2cd1367a0005fcb1f482d8a16869ea924fd94abb24a4e190d930f7de0da3bde0c54d9483e25
- TLSH T10BD0235611C60231D103C7952032B3CD46A751548104035D07AA7067F20719DC1D3950
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir5644_1000751014\wave-light.jpg
- Size 186KB
- SHA256 27cd55b501cff3492e374b7101b8b674f03c63264ba2c3c2c1aef22b6793714c
- MD5 116e884ec91c6e03883ef47cb43a3e81
- SHA1 91024798c945432bc1dfadc092e7a8f11aa6bb3d
- SHA512 03c4924ea23f8fd7d5084a33a2da48efd7b38c62e1158a85d9a3cfd28a8600d6c5d4d39c83bc9bb6b840cff11bc4dc3ce48962b58434257f8618b0638f3d750b
- SSDEEP 3072:/IPVSZYmbkxhcuYJMS8UpT0g+nXUMwiMoon48Oh1xVCqOfA80zFEmhTfx3fcbjre:/2VSZYyM8AgT0g8U+/0kXCqicNT18e
- TLSH T1061412D053A8D688C9FF7F70A46B1493373B14B4916FB67A58A0D6B1E9384D32190ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir5644_1017014182\persona.ini
- Size 207B
- SHA256 4f596d6d8a91d263803f7e50c657775e2c7232b6da702642fb10997817ef31a6
- MD5 6e1d4d01a8d744cd58f3c790c582e969
- SHA1 8c371b99c152c637e752fa4428737542c7a46b45
- SHA512 5d2e90d0c71b05b94ae54c94349c912cab04518ce743728f4cb6a95eb0d511412fdbf715f376b92fa6d9d95c266a5d2691b86a5aaef55ab415591dbc2ee66ced
- TLSH T1BCD02252118B0331D203DBDA7032BACD9ABB5168C20493AD02EA7097F24B2A985D2D50
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir5644_1017014182\wave-dark.jpg
- Size 117KB
- SHA256 e7e1ac6562391b443e486f5da83f999bf0caa1e4da7e10748054f011d0006e34
- MD5 f4019bf2cc4c2ade40f13877e0ffaaca
- SHA1 c94fa8d965b7817318ae4008cd8fa361d310c2c4
- SHA512 bca46b90375147f9dabd815752582146311ade83d70079bced5b75fc0a12417a96b3a876c80d53168489bd1557038148de3b7f31a97c53f048702540a4b45034
- SSDEEP 3072:E+S6jIL36ZBKAimbgv2lOtpheShmQrvtAMBqiYya:H4erDq7eMrtYiYya
- TLSH T136C312B7678B4FDAC63413F061C5D371AC2CD8ABE12C87617A530EAE4287D2BD1A0257
- MD5 SHA1 SHA512 SSDEEP TLSH