Surf the Internet in a safer, faster and easier way with the Opera browser for Linux What's new in Opera 76.0.4017.59 Beta: CHR-8397 Update chromium on desktop-stable-90-4017 to 90.0.4430.70. Opera Software develops the Opera Web browser, a high-quality, multi-platform product for a wide range of platforms, operating systems and embedded Internet products. In addition to the web browser, the other main component in the Opera suite is the Opera Mail client, previously known as M2. Browsers need to start afresh to satisfy the surfing needs of the future, claims the team behind the Opera Coast web browsing app, launching the newest version today for iPhone, iPad and iPod. The new release includes features like the Discover news feed and Opera Turbo data compression. Opera Coast 4.0 is now available in the App Store.
There are not many forensic articles on ‘Opera’. So I try to write something about it. This is my findings based on my observations. Definitely this posting is not complete and going to be an on-going project. If you are reading this, please drop me something, (a link, a tool, an article or anything!). And if you have written something on it, please share it with me.
This article is based on Opera 12.11 (build 1611) running on a Windows 7 machine.
File Locations:
- Win7: Users[user]AppDataLocalOpera
- Win7: Users[user]AppDataRoamingOpera
- Win Vista: Users[user]AppDataLocalOpera
- Win Vista: Users[user]AppDataRoamingOpera
- Win XP: Documents and Settings[user]Application DataOpera
- Win XP: Documents and Settings[user]Local SettingsApplication DataOpera
- Mac OS X: ~/Library/Application Support/Opera
- Mac OS X: ~/Library/Caches/Opera
- Mac OS X: ~/Library/Opera
File Artifacts:
- Installation/Last update information: autoupdate_region.dat & operaprefs.ini
- Bookmarks: bookmarks.adr
- Cookies: cookies4.dat
- Download: download.dat
- Histories: global_history.dat
- Preferences: operaprefs.ini
- Search preferences: search.ini
- Search histories: search_field_history.dat
- Speeddial settings: speeddial.ini
- Typed URLs: typed_history.xml
- Last Sessions: autosave.win & autosave.win.bak
- Cache folder: Users[user]AppDataLocalOperaOperaCache
Bookmarks
Bookmarks information are stored in a text file named “bookmarks.adr”. Some interesting information are:
- URL or Folder
- NAME: given name for bookmark (bookmark folder)
- CREATED: created timestamp (Unix & GMT)
- VISITED: visited timestamp (Unix & GMT)
- URL: URL for bookmark
History
Browsing histories are stored in a text format file named “global_history.dat”. This file provides information to:
- Window title
- URL
- Visited timestamp (Unix & GMT)
Search Histories
Search file histories can be found in a XML format file named “search_field_history.dat”.
Typed URLs
Users’ typed URLs can be found in “typed_history.xml” which contained the the URLs and the associated timestamp (in GMT).
Last Sessions
Last sessions which can be used to restore the website in the event of a program crashes can be found in text format file “autosave.win” & “autosave.win.bak”. Essentially, it recorded the state of the browser when the browser is in use. Among the most important information is the number of windows opened and the URLs.
Cache
Opera stored cache files starting with “opr” and are saved with “tmp” extension. The tool that I used is Nirsoft OperaCacheView. You have to copy out the cache folder and used Nirsoft OperaCacheView to parse the cache files.
Cookies
Cookies are stored in a semi-binary file named “cookies4.dat”. If you do a search, you will probably find a few tool to parse cookies data. However as of this moment, I prefer to set up Opera on a virtual machine and import the Opera artifacts into the virtual machine, and used ‘Cookie Manager’ in Opera Preferences to view the data.
Link:
That is all for now. Moving on to other project and will definitely add more stuffs as and when I find new stuff. : )
Opera User Agent Strings
Opera
Click on any string to get more details
Opera 12.16.2
Opera 12.16
Opera 12.14
Opera 12.02
Opera 12.00
Opera 11.62
Opera 11.52
Opera 11.51
Opera 11.50
Opera 11.11
Opera 11.10
Opera 11.01
Opera 11.00
Opera 10.70
Opera 10.63
Opera 10.62
Opera 10.61
Opera 10.60
Opera 10.54
Opera 10.53
Opera 10.52
Opera 10.51
Opera 10.50
Opera 10.10
Opera 10.01
Opera 10.00
More Opera 10.00 user agents strings -->>
Opera 9.99
Opera 9.80
Opera 9.70
Opera 9.64
More Opera 9.64 user agents strings -->>
Opera 9.63
More Opera 9.63 user agents strings -->>
Opera 9.62
More Opera 9.62 user agents strings -->>
Opera 9.61
Opera 9.60
Opera 9.52
Opera 9.51
More Opera 9.51 user agents strings -->>
Opera 9.50
Opera 12.16 Mac Os
Opera 9.4
Opera 9.30
Opera 9.27
Opera 12.16 Mac Update
Opera 9.26
Opera 9.25
More Opera 9.25 user agents strings -->>
Opera 9.24
Opera 9.23
More Opera 9.23 user agents strings -->>
Opera 9.22
Opera 9.21
More Opera 9.21 user agents strings -->>
Opera 9.20
More Opera 9.20 user agents strings -->>
Opera 9.12
Opera 9.10
More Opera 9.10 user agents strings -->>
Opera 9.02
More Opera 9.02 user agents strings -->>
Opera 9.01
More Opera 9.01 user agents strings -->>
Opera 9.00
More Opera 9.00 user agents strings -->>
Opera 8.65
Opera 8.60
Opera 8.54
More Opera 8.54 user agents strings -->>
Opera 8.53
Opera 8.52
Opera 8.51
More Opera 8.51 user agents strings -->>
Opera 8.50
More Opera 8.50 user agents strings -->>
Opera 8.10
Opera 8.02
Opera 8.01
Opera 8.00
Opera 7.60
Opera 7.54u1
Opera 7.54
More Opera 7.54 user agents strings -->>
Opera 7.53
Opera 12.16 Mac Torrent
Opera 7.52
Opera 7.51
Opera 7.50
Opera 7.23
Opera 7.22
Opera 7.21
Opera 7.20
Opera 7.11
More Opera 7.11 user agents strings -->>
Opera 7.10
Opera 7.03
Opera 7.02
Opera 7.01
Opera 7.0
Opera 6.12
Opera 6.11
Opera 6.1
Opera 6.06
Opera 6.05
More Opera 6.05 user agents strings -->>
Opera 6.04
More Opera 6.04 user agents strings -->>
Opera 6.03
Opera 6.02
Opera 6.01
More Opera 6.01 user agents strings -->>
Opera 6.0
More Opera 6.0 user agents strings -->>