Analysis
- max time kernel
147s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/05/2026, 16:18
Behavioral task
behavioral1
Sample
CheatEngine76.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CheatEngine76.exe
Resource
win11-20260513-en
General
- Target CheatEngine76.exe
- Size 35.0MB
- Sample260517-tr97saa17w
- SHA256 f96eca4a678f34c5d6c5e8b3ebb0f086f17ffc869c021e5576f8b906dace0336
- MD5 e3dfd9ad1f6edf9c413cf96c6beebcad
- SHA1 d10fe35f1ba0d6111563caefd9320950405e075e
- SHA512 e0e4f6235234f7f19b5d720dc9cd2dd5f3951e34ffb869f69d10db92795ed0bdc635f0bdae632a30707f30acc417789068edfd10afe507ec6bdda66696440705
- SSDEEP 786432:KlJS4UMRrFssTfUSCB6bVwZEe8HY6KzVbIYjm7YkdgGlrLtqkWTU9gFH:KlBU4yokvme8/KRFj0jdgGHqkj9gl
- TLSH T1DE873323F7CBE43AE05A0B3345A3A01498F3AB256517AE5287ECB8ACCF755541D3E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 81 4776 installer.exe - Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation CheatEngine76.tmp - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 20 IoCs
pid Process 4568 CheatEngine76.tmp 4252 WZSetup.exe 2500 cookie_mmm_irs_ppi_008_585.exe 3028 OperaSetup.exe 2220 CheatEngine76.exe 4776 installer.exe 216 CheatEngine76.tmp 2120 installer.exe 4088 installer.exe 4864 installer.exe 3564 installer.exe 4288 _setup64.tmp 4992 icarus.exe 532 Kernelmoduleunloader.exe 5036 windowsrepair.exe 4608 Assistant_130.0.5847.41_Setup.exe_sfx.exe 2924 assistant_installer.exe 4512 assistant_installer.exe 2296 installer.exe 3048 installer.exe - Loads dropped DLL 8 IoCs
pid Process 4568 CheatEngine76.tmp 4252 WZSetup.exe 2500 cookie_mmm_irs_ppi_008_585.exe 4252 WZSetup.exe 2924 assistant_installer.exe 2924 assistant_installer.exe 4512 assistant_installer.exe 4512 assistant_installer.exe - Modifies file permissions 1 TTPs 2 IoCs
pid Process 2564 icacls.exe 4976 icacls.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Stops running service(s) 4 TTPs
- Checks for any installed AV software in registry 1 TTPs 9 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir CheatEngine76.tmp Key opened \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\AVG\AV\Dir CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast CheatEngine76.tmp Key opened \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\AVAST Software\Avast CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast CheatEngine76.tmp Key opened \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Avast Software\Avast CheatEngine76.tmp - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 cookie_mmm_irs_ppi_008_585.exe File opened for modification \??\PhysicalDrive0 icarus.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Cheat Engine\languages\is-OD53V.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\badassets\is-3131Q.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\win32\is-5B6BI.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\tcclib\is-1RCCH.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-9O7CC.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\tableobfuscator\src\EncodeDecode\is-R0O1L.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-5KN29.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-3C198.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\images\is-UVD8S.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\Tutorial-x86_64.exe CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-VE9TA.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-ABCKV.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\plugins\example-c\is-AKNFE.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\libmikmod64.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-UVLG3.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-STEM9.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-T9G43.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\languages\is-SRDA3.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-3N4GA.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\ceshare\is-PIJOV.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-01O2F.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-8PUKG.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-2HQTJ.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-2B7CU.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\ceshare\is-JAM82.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-T71O3.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\java\is-0Q1UN.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary\is-MDDFT.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\badassets\is-F7662.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\autorun\dlls\64\CEJVMTI.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-F80Q3.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-PAQ8J.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\plugins\is-RJ1NS.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\badassets\is-0F4PR.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\CSCompiler.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\win32\is-GMLK4.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\win64\is-J6CD6.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-DR5R6.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-G6GND.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-IAHBF.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-4HMTO.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\ceshare\forms\is-O40MD.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-7SINF.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\tcc32-arm-linux.dll CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\ced3d10hook.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-V5N6B.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-91B8G.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-LKVBK.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\lua\is-L1LU9.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\sys\is-OK2P2.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\autorun\dlls\32\CEJVMTI.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-S5CT8.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\is-EOJ4J.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-C75GT.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\is-JIDL7.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-URSCI.tmp CheatEngine76.tmp File opened for modification C:\Program Files\Cheat Engine\tcc64-32.dll CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-0PJ8T.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\languages\is-2AF7S.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\images\is-9VMPO.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\autorun\dlls\src\Mono\MonoDataCollector\is-637K5.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\is-T9P46.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\plugins\c# template\is-V9G79.tmp CheatEngine76.tmp File created C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary\SDK\is-OIV8S.tmp CheatEngine76.tmp - Launches sc.exe 3 IoCs
Sc.exe is a Windows utlilty to control services on the system.
pid Process 1836 sc.exe 512 sc.exe 4236 sc.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 12 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WZSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cookie_mmm_irs_ppi_008_585.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Kernelmoduleunloader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 55 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 5936 opera.exe 6192 opera.exe 6712 opera.exe 6188 opera.exe 7828 opera.exe 7804 opera.exe 1316 opera.exe 5392 opera.exe 5444 opera.exe 5508 opera.exe 7028 opera.exe 6336 opera.exe 7856 opera.exe 7996 opera.exe 7884 opera.exe 6400 opera.exe 6220 opera.exe 8040 opera.exe 7756 opera.exe 7584 opera.exe 8168 opera.exe 8100 opera.exe 7216 opera.exe 6156 opera.exe 8028 opera.exe 7984 opera.exe 7908 opera.exe 7816 opera.exe 5912 opera.exe 5600 opera.exe 5536 opera.exe 4840 opera.exe 8052 opera.exe 7920 opera.exe 7892 opera.exe 7196 opera.exe 5276 opera.exe 5996 opera.exe 5672 opera.exe 7928 opera.exe 7844 opera.exe 7788 opera.exe 10084 opera.exe 10076 opera.exe 6116 opera.exe 6164 opera.exe 6176 opera.exe 2616 opera.exe 7204 opera.exe 7768 opera.exe 6488 opera.exe 8008 opera.exe 7936 opera.exe 7796 opera.exe 10104 opera.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5444 opera.exe 5672 opera.exe - Inno Setup is an open-source installation builder for Windows applications. 6 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/412-1-0x0000000000400000-0x00000000004CB000-memory.dmp innosetup behavioral1/memory/412-12-0x0000000000400000-0x00000000004CB000-memory.dmp innosetup behavioral1/files/0x00080000000245c0-173.dat innosetup behavioral1/memory/2220-174-0x0000000000760000-0x0000000000844000-memory.dmp innosetup behavioral1/memory/2220-228-0x0000000000760000-0x0000000000844000-memory.dmp innosetup behavioral1/memory/2220-1018-0x0000000000760000-0x0000000000844000-memory.dmp innosetup - NSIS installer 2 IoCs
resource yara_rule behavioral1/files/0x00080000000245c2-87.dat nsis_installer_1 behavioral1/files/0x00080000000245c2-87.dat nsis_installer_2 - Checks processor information in registry 2 TTPs 5 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ CheatEngine76.tmp Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 icarus.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString icarus.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz icarus.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 CheatEngine76.tmp - Enumerates system info in registry 2 TTPs 8 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe - Modifies registry class 61 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.htm\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\131.0.5877.55\\notification_helper.exe\"" installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.CT\ = "CheatEngine" CheatEngine76.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\ = "Cheat Engine" CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node\CLSID installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "067183a7-0b1c-43ed-8b9c-37396758ca39" cookie_mmm_irs_ppi_008_585.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.pdf\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon\ = "C:\\Program Files\\Cheat Engine\\Cheat Engine.exe,0" CheatEngine76.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "0EC03442A4E93B807782D73BF46C389D" cookie_mmm_irs_ppi_008_585.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine\DefaultIcon CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.shtml\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\MACHINE\Software\Classes\.CT CheatEngine76.tmp Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine CheatEngine76.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F cookie_mmm_irs_ppi_008_585.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER\ = "CheatEngine" CheatEngine76.tmp Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine\shell\open\command CheatEngine76.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine CheatEngine76.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\5E1D6A55-0134-486E-A166-38C2E4919BB1 = "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAkXLG/qtebkiI1LxdHFf5XAQAAAACAAAAAAAQZgAAAAEAACAAAAB384/wT0k785NZXj5djl8SfWzAjpksZgWdYBSPxym4lgAAAAAOgAAAAAIAACAAAACWis7/GPSNf8qu6K/P6SdgnyWDhUqp4RqhlqF0b8zrK4AAAAAP/1W7WnS/JLv8cujylLnbE0BJK+gfRaZsnEL1kfSVGhEnCQZYzWheUcUXt2u7Lt5hTurd4biQYdcFBfSt9yNx/708KrnEpD6ySArNLXe+hXTaVID/pylwojMjSsVA32Vrl9D2o8zBiji+hJvLIX49HWA4PySxEp+AoV9CJNAzj0AAAACu0sf9Zf3KsLM8W6iK7k6rtzMSwmAVrSi8aFnt+k05d7YdNlLn5L/7WBIOVr0crW6D+C39+wHWGOXoae5/EmKq" cookie_mmm_irs_ppi_008_585.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xht\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\131.0.5877.55\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command\ = "\"C:\\Program Files\\Cheat Engine\\Cheat Engine.exe\" \"%1\"" CheatEngine76.tmp Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.html\OpenWithProgids\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\opera.exe\shell installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Applications installer.exe Key created \REGISTRY\MACHINE\Software\Classes\.CETRAINER CheatEngine76.tmp Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\.opdownload installer.exe - Modifies system certificate store 2 TTPs 6 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 0f00000001000000200000000cf408e20830ac839f2a12143ce4b3e53ac6a27b2338a504f200fa3a154c4fd80b0000000100000052000000530053004c002e0063006f006d00200052006f006f0074002000430065007200740069006600690063006100740069006f006e00200041007500740068006f0072006900740079002000450043004300000009000000010000004c000000304a06082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000003417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc6514000000010000001400000082d1857330e73504d38e0292fbe5a4d1c421e8cd1d0000000100000010000000aa0f958845d6cf47c0442d3960f923a4030000000100000014000000c3197c3924e654af1bc4ab20957ae2c30e13026a2000000001000000910200003082028d30820214a003020102020875e6dfcbc1685ba8300a06082a8648ce3d040302307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f7269747920454343301e170d3136303231323138313430335a170d3431303231323138313430335a307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f72697479204543433076301006072a8648ce3d020106052b8104002203620004456ea950c4a623369e5f288d17cb9622643fdc7a8e1dcc08b3a27124ba8e49b9041b479658ab2d95c8ed9e0835c827eb898c5358eb628afef05b0f6b315263413b89cdececb68d19d33407dcbbc6067fc24595eccb7fa823e009e981faf347d3a3633061301d0603551d0e0416041482d1857330e73504d38e0292fbe5a4d1c421e8cd300f0603551d130101ff040530030101ff301f0603551d2304183016801482d1857330e73504d38e0292fbe5a4d1c421e8cd300e0603551d0f0101ff040403020186300a06082a8648ce3d040302036700306402306fe7eb5911a460cf61b0967bed05f92f1391dcede5fc506b114646b31c210062bbbec3e7e8cd0799f90d0b5d723ec4aa02301fbcba0be23024fb7c6d80550a993e800d33e566a3b3a3bba5d58b8f092ca65d7ee2f00708686dd27c696e5fdfe56a65 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 19000000010000001000000011a2b3490cb6c379a89e76c3569452d7030000000100000014000000c3197c3924e654af1bc4ab20957ae2c30e13026a1d0000000100000010000000aa0f958845d6cf47c0442d3960f923a414000000010000001400000082d1857330e73504d38e0292fbe5a4d1c421e8cd6200000001000000200000003417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc6509000000010000004c000000304a06082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703080b0000000100000052000000530053004c002e0063006f006d00200052006f006f0074002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900200045004300430000000f00000001000000200000000cf408e20830ac839f2a12143ce4b3e53ac6a27b2338a504f200fa3a154c4fd82000000001000000910200003082028d30820214a003020102020875e6dfcbc1685ba8300a06082a8648ce3d040302307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f7269747920454343301e170d3136303231323138313430335a170d3431303231323138313430335a307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f72697479204543433076301006072a8648ce3d020106052b8104002203620004456ea950c4a623369e5f288d17cb9622643fdc7a8e1dcc08b3a27124ba8e49b9041b479658ab2d95c8ed9e0835c827eb898c5358eb628afef05b0f6b315263413b89cdececb68d19d33407dcbbc6067fc24595eccb7fa823e009e981faf347d3a3633061301d0603551d0e0416041482d1857330e73504d38e0292fbe5a4d1c421e8cd300f0603551d130101ff040530030101ff301f0603551d2304183016801482d1857330e73504d38e0292fbe5a4d1c421e8cd300e0603551d0f0101ff040403020186300a06082a8648ce3d040302036700306402306fe7eb5911a460cf61b0967bed05f92f1391dcede5fc506b114646b31c210062bbbec3e7e8cd0799f90d0b5d723ec4aa02301fbcba0be23024fb7c6d80550a993e800d33e566a3b3a3bba5d58b8f092ca65d7ee2f00708686dd27c696e5fdfe56a65 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 04000000010000001000000078f2fcaa601f2fb4ebc937ba532e75490f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e4190000000100000010000000ffac207997bb2cfe865570179ee037b92000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe - Runs net.exe
- Script User-Agent 2 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 17 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 19 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) - Suspicious behavior: EnumeratesProcesses 16 IoCs
pid Process 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 4568 CheatEngine76.tmp 216 CheatEngine76.tmp 216 CheatEngine76.tmp - Suspicious use of AdjustPrivilegeToken 9 IoCs
description pid Process Token: SeRestorePrivilege 4992 icarus.exe Token: SeTakeOwnershipPrivilege 4992 icarus.exe Token: SeRestorePrivilege 4992 icarus.exe Token: SeTakeOwnershipPrivilege 4992 icarus.exe Token: SeRestorePrivilege 4992 icarus.exe Token: SeTakeOwnershipPrivilege 4992 icarus.exe Token: SeRestorePrivilege 4992 icarus.exe Token: SeTakeOwnershipPrivilege 4992 icarus.exe Token: SeDebugPrivilege 4992 icarus.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4568 CheatEngine76.tmp 216 CheatEngine76.tmp 2296 installer.exe - Suspicious use of SendNotifyMessage 10 IoCs
pid Process 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 2296 installer.exe 2296 installer.exe 1104 DllHost.exe 1104 DllHost.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 1104 DllHost.exe 1104 DllHost.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe 2296 installer.exe - Suspicious use of WriteProcessMemory 31 IoCs
description pid Process procid_target PID 412 wrote to memory of 4568 412 CheatEngine76.exe 88 PID 4568 wrote to memory of 4252 4568 CheatEngine76.tmp 95 PID 4568 wrote to memory of 2500 4568 CheatEngine76.tmp 96 PID 4568 wrote to memory of 3028 4568 CheatEngine76.tmp 97 PID 4568 wrote to memory of 2220 4568 CheatEngine76.tmp 98 PID 3028 wrote to memory of 4776 3028 OperaSetup.exe 99 PID 2220 wrote to memory of 216 2220 CheatEngine76.exe 100 PID 4776 wrote to memory of 2120 4776 installer.exe 101 PID 4776 wrote to memory of 4088 4776 installer.exe 102 PID 216 wrote to memory of 4720 216 CheatEngine76.tmp 103 PID 4776 wrote to memory of 4864 4776 installer.exe 105 PID 4864 wrote to memory of 3564 4864 installer.exe 106 PID 4720 wrote to memory of 4004 4720 net.exe 107 PID 216 wrote to memory of 4612 216 CheatEngine76.tmp 108 PID 4612 wrote to memory of 2296 4612 net.exe 110 PID 216 wrote to memory of 4236 216 CheatEngine76.tmp 111 PID 216 wrote to memory of 512 216 CheatEngine76.tmp 113 PID 216 wrote to memory of 2420 216 CheatEngine76.tmp 115 PID 2420 wrote to memory of 4028 2420 net.exe 117 PID 216 wrote to memory of 1836 216 CheatEngine76.tmp 118 PID 216 wrote to memory of 4288 216 CheatEngine76.tmp 120 PID 216 wrote to memory of 2564 216 CheatEngine76.tmp 122 PID 2500 wrote to memory of 4992 2500 cookie_mmm_irs_ppi_008_585.exe 124 PID 216 wrote to memory of 532 216 CheatEngine76.tmp 126 PID 216 wrote to memory of 5036 216 CheatEngine76.tmp 130 PID 4776 wrote to memory of 4608 4776 installer.exe 131 PID 216 wrote to memory of 4976 216 CheatEngine76.tmp 132 PID 4776 wrote to memory of 2924 4776 installer.exe 134 PID 2924 wrote to memory of 4512 2924 assistant_installer.exe 135 PID 4864 wrote to memory of 2296 4864 installer.exe 137 PID 2296 wrote to memory of 3048 2296 installer.exe 138
Processes
-
C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:412 -
C:\Users\Admin\AppData\Local\Temp\is-KVC3R.tmp\CheatEngine76.tmp"C:\Users\Admin\AppData\Local\Temp\is-KVC3R.tmp\CheatEngine76.tmp" /SL5="$502AA,35769578,776192,C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4568 -
C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod0_extract\WZSetup.exe"C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod0_extract\WZSetup.exe" /S /tpchannelid=1571 /distid=App1233⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4252
-
-
C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod1_extract\cookie_mmm_irs_ppi_008_585.exe"C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod1_extract\cookie_mmm_irs_ppi_008_585.exe" /silent /ws /psh:agiSfNdCX7RQkMnzgVAmMhLt3o77BzWaUiqkOazHBHLIgXguiu3dAaDSWC6MyLWPbcV5u8EiCzqvdaouJ4 /cookie:mmm_irs_ppi_008_585_c3⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2500 -
C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\icarus.exeC:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\icarus-info.xml /install /silent /ws /psh:agiSfNdCX7RQkMnzgVAmMhLt3o77BzWaUiqkOazHBHLIgXguiu3dAaDSWC6MyLWPbcV5u8EiCzqvdaouJ4 /cookie:mmm_irs_ppi_008_585_c4⤵
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:4992 -
C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\icarus.exeC:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\icarus.exe /silent /ws /psh:agiSfNdCX7RQkMnzgVAmMhLt3o77BzWaUiqkOazHBHLIgXguiu3dAaDSWC6MyLWPbcV5u8EiCzqvdaouJ4 /cookie:mmm_irs_ppi_008_585_c /er_master:master_ep_89bdc59f-ecc3-47c3-b555-f46f18806bc9 /er_slave:avast-suite_slave_ep_6d53f5c6-ad7a-4a96-b07f-8823644c2bc7 /slave:avast-suite5⤵PID:6452
-
-
C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-av-vps\icarus.exeC:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-av-vps\icarus.exe /silent /ws /psh:agiSfNdCX7RQkMnzgVAmMhLt3o77BzWaUiqkOazHBHLIgXguiu3dAaDSWC6MyLWPbcV5u8EiCzqvdaouJ4 /cookie:mmm_irs_ppi_008_585_c /er_master:master_ep_89bdc59f-ecc3-47c3-b555-f46f18806bc9 /er_slave:avast-av-vps_slave_ep_278c3780-f6d9-4da9-b2b9-3acf1986ae66 /slave:avast-av-vps5⤵PID:6476
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod2_extract\OperaSetup.exe"C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod2_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:c,utm.id:agiSfNdCX7RQkMnzgVAmNNFIHnPInDVojDk2EH0qJMuLbDTADhDQJfuDukiAnNGu7GpwQ4EJzhcVyXlJzI3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3028 -
C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:c,utm.id:agiSfNdCX7RQkMnzgVAmNNFIHnPInDVojDk2EH0qJMuLbDTADhDQJfuDukiAnNGu7GpwQ4EJzhcVyXlJzI --server-tracking-blob=MjYxMWRlNzcwOGRiMTdlN2U2MTIzNGY3MGYwZTE3MmE2ZDBjYmMxOTg2NDAzYWE0OGM0MDE2NGQxZDAzZDMxMjp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3NzkwMTU2NDUuMTUwOCIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiMTAwOTNhN2YtYmM2Yi00YWM5LWIwM2MtMTQ4MTcyZjM0ZjA5In0=4⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:4776 -
C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff616162e98,0x7ff616162ea4,0x7ff616162eb05⤵
- Executes dropped EXE
PID:2120
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\installer.exe" --version5⤵
- Executes dropped EXE
PID:4088
-
-
C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4776 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_20260519212926" --session-guid=1d4dee5c-0169-4394-9ee1-eac3c92c9dc5 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=5C080000000000005⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4864 -
C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x278,0x27c,0x280,0x248,0x284,0x7ff616162e98,0x7ff616162ea4,0x7ff616162eb06⤵
- Executes dropped EXE
PID:3564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\installer.exe" --backend --initial-pid=4776 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261" --session-guid=1d4dee5c-0169-4394-9ee1-eac3c92c9dc5 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=131.0.5877.556⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Modifies system certificate store
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2296 -
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff61a4c2e98,0x7ff61a4c2ea4,0x7ff61a4c2eb07⤵
- Executes dropped EXE
PID:3048
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=07⤵PID:1652
-
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x714040,0x71404c,0x7140588⤵PID:5020
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=08⤵PID:2940
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0xd94040,0xd9404c,0xd940589⤵PID:4552
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"9⤵PID:208
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵PID:404
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e011⤵PID:3640
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵PID:3264
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e011⤵PID:1776
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x13fc830,0x13fc83c,0x13fc84810⤵PID:2184
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:5040
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e012⤵PID:2128
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:2576
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e012⤵PID:944
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:5252
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e012⤵PID:5280
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\de932af914ba00303d4a2778a383ac9c831101e2.crx"7⤵PID:824
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e08⤵PID:4648
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,2031734259344931584,11832124058520785674,262144 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1928 /prefetch:28⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5392
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2152,i,6412794473688635804,17047706809888976072,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2208 /prefetch:38⤵
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:5444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2336,i,13892002337334688019,18034410883527192289,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2340 /prefetch:88⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5508
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3792,i,968867933068847098,9177200703238506491,2097152 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3828 /prefetch:28⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4300,i,12804668701806480640,14568392713043996184,2097152 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4308 /prefetch:28⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4528,i,18304442435621480445,7695911558000272644,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3784 /prefetch:88⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4700,i,3076333732958790080,15812723686802262667,2097152 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4756 /prefetch:28⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,10179000350510427231,11012769061481200407,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4376 /prefetch:88⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6400
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4984,i,540469413681689521,8507845106322773130,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5000 /prefetch:88⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4972,i,9365159461030379465,13820941991617765974,524288 --field-trial-handle=1948,i,15806380588656077052,3259372345700536351,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1952,i,6233175243414278662,11420738984474378694,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3332 /prefetch:88⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7028
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized7⤵PID:6936
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e08⤵PID:4440
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4608
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe" --version5⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2924 -
C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x714040,0x71404c,0x7140586⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4512
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\CheatEngine76.exe"C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\CheatEngine76.exe" /VERYSILENT /ZBDIST3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2220 -
C:\Users\Admin\AppData\Local\Temp\is-G3399.tmp\CheatEngine76.tmp"C:\Users\Admin\AppData\Local\Temp\is-G3399.tmp\CheatEngine76.tmp" /SL5="$302BE,28695682,869888,C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\CheatEngine76.exe" /VERYSILENT /ZBDIST4⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:216 -
C:\Windows\SYSTEM32\net.exe"net" stop BadlionAntic5⤵
- Suspicious use of WriteProcessMemory
PID:4720 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop BadlionAntic6⤵PID:4004
-
-
-
C:\Windows\SYSTEM32\net.exe"net" stop BadlionAnticheat5⤵
- Suspicious use of WriteProcessMemory
PID:4612 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop BadlionAnticheat6⤵PID:2296
-
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete BadlionAntic5⤵
- Launches sc.exe
PID:4236
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete BadlionAnticheat5⤵
- Launches sc.exe
PID:512
-
-
C:\Windows\SYSTEM32\net.exe"net" stop vgk5⤵
- Suspicious use of WriteProcessMemory
PID:2420 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop vgk6⤵PID:4028
-
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete vgk5⤵
- Launches sc.exe
PID:1836
-
-
C:\Users\Admin\AppData\Local\Temp\is-7GIQ9.tmp\_isetup\_setup64.tmphelper 105 0x3945⤵
- Executes dropped EXE
PID:4288
-
-
C:\Windows\system32\icacls.exe"icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)5⤵
- Modifies file permissions
PID:2564
-
-
C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe"C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe" /SETUP5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:532
-
-
C:\Program Files\Cheat Engine\windowsrepair.exe"C:\Program Files\Cheat Engine\windowsrepair.exe" /s5⤵
- Executes dropped EXE
PID:5036
-
-
C:\Windows\system32\icacls.exe"icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)5⤵
- Modifies file permissions
PID:4976
-
-
-
-
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1104
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵PID:5004
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵PID:628
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x258,0x254,0x25c,0x234,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e03⤵PID:3396
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵PID:1284
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x24c,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e03⤵PID:3320
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x228,0x278,0x13fc830,0x13fc83c,0x13fc8482⤵PID:1632
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:4116
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e04⤵PID:3552
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:4660
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e04⤵PID:5160
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:5356
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e04⤵PID:5464
-
-
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:5568
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵PID:7016
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffad4f5d0c0,0x7ffad4f5d0d0,0x7ffad4f5d0e02⤵PID:4288
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,7393895951890197585,13723378028177184349,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2576 /prefetch:32⤵
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:5672
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,15430460803777728513,14349968396413546051,262144 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2512 /prefetch:22⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:2616
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2160,i,395870373880078843,2391404498359576165,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2584 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2996,i,4711256502165126045,12291729557997189680,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3204 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3004,i,16042056869550281077,9896453016222350654,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3228 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3016,i,16178893612954097472,3053573081914770299,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3252 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6336
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3028,i,3185219342927335107,11229785167260191326,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3272 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5996
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3052,i,13352285660361239139,833207279109822982,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3316 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5536
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2984,i,16519728742583142020,773545886522636028,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3184 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3040,i,11931667474890008264,3822659360787882548,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3296 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3488,i,16324261678833801219,18333723361897793055,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3508 /prefetch:12⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6116
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.55\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C962⤵PID:5876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5980,i,14154190308164708607,12671641998650478940,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6000 /prefetch:12⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:4840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7048,i,11673322993753642934,1740257301016566575,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7072 /prefetch:22⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6976,i,2840155651677179180,4097343000520821548,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6952 /prefetch:22⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7204
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7424,i,18155733266449016403,13365568851511000618,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6856 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7584
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6800,i,3822812391422339232,7409604003561874745,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6172 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7552,i,2236165328226665150,9165369708996949011,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7736 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7768
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7608,i,9971175476368325791,8513305618844237810,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=4688 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7788
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7596,i,14891340376847948009,15978112552151954488,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6176 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7796
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6792,i,6654468964328421169,14250403632961176500,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7796 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6020,i,2286743002332606799,520970907806390445,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7856 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6652,i,8828875849071524796,15524747360146885016,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7816 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,11766552341470547904,10609013630057637338,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7836 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7844
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,3944866755146378237,4679070142400233515,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7876 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7856
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8612,i,13570530276069064916,14530970468810791672,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8628 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7884
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8648,i,3316389479534081714,9086458764881470454,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8660 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8668,i,9300505117332987186,15404198136803573072,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8916 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8920,i,10596689052494947140,12028430329657361616,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9048 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7920
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9096,i,10010943432881980182,10670200849383720741,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9124 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7928
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9068,i,440574320132901715,6154735383247010809,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9104 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9496,i,14632869903796206756,1561615357315329006,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9504 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7984
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9624,i,3247541469390760126,9888469530199646286,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9636 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7996
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9772,i,3131951963793382470,16439619987187665991,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9784 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9916,i,687951510312676643,778133926066717999,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9928 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8028
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9932,i,17364640551684536675,11621562832141470667,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9964 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8040
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10220,i,5482659334347209596,17030844537755298705,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9972 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8052
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10360,i,13120143144058888125,13144910521288475691,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10368 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8100
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10524,i,778464408954030860,869605616800618485,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10528 /prefetch:22⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8168
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10736,i,2743835683528280676,777494675522477822,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10744 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1316
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=11292,i,17518803474731401392,7731891046901592784,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11304 /prefetch:12⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11492,i,10548889488805193746,15532357518553582349,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11528 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5912
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11884,i,16181511509566958219,5776796883226344747,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11916 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:10076
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11904,i,5878632373126984972,5931540894658973021,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11936 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:10084
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12152,i,4793533042985834911,1690115946769298679,524288 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12164 /prefetch:82⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:10104
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=12336,i,1535414129579139913,14497105065297188990,2097152 --field-trial-handle=2516,i,11316057185548052580,5980295565212882728,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2508,i,2599992886489876742,7464867576582385832,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=12172 /prefetch:12⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5276
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵PID:10120
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.55 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff6325e3eb8,0x7ff6325e3ec4,0x7ff6325e3ed01⤵PID:6944
Network
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Peripheral Device Discovery
1Query Registry
5Software Discovery
1Security Software Discovery
1System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Cheat Engine\Cheat Engine.exe
- Size 397KB
- SHA256 5313618d93640bb29b66baadf2339de85e593a51715290dadece6d58e039a75e
- MD5 0c84c800533ae5dee5923d5351da9923
- SHA1 b454dec7e2091712fa9ca8909dbc176d1f104c17
- SHA512 93974a559392c1ac37095d0b60239e16c2caefeb893c10ee726060a8f6a42c41fb7b72ee032e01c0d47ab350072e80d4bd1f9c892112418e2992f32154a6c4d9
- SSDEEP 12288:h010wHrzPcHFQjL2CVpGzJ+44EZ8B+gugEnoSE5f6:TwLTclQjL2CVpGzJvZ8B+gugEnoSE5f6
- TLSH T1E3846C21FA01D237C0627DBC4FA995E52A60F9202CA594CB73E71F4F1A79AE03D79709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
- Size 236KB
- SHA256 65fa2ccb3ac5400dd92dda5f640445a6e195da7c827107260f67624d3eb95e7d
- MD5 9af96706762298cf72df2a74213494c9
- SHA1 4b5fd2f168380919524ecce77aa1be330fdef57a
- SHA512 29a0619093c4c0ecf602c861ec819ef16550c0607df93067eaef4259a84fd7d40eb88cd5548c0b3b265f3ce5237b585f508fdd543fa281737be17c0551163bd4
- SSDEEP 3072:Bj9mOBuELLZXBJPCR6ygny56rs+iO2AwCNCtALb44TPk3Ap1rleY/DptNH/P0uHV:fn7LhBJ9W56A+iOlfN/LbZnbptN0uZH
- TLSH T174346C6ABA818277C1633DFD4ED6C4E66F60FA202C6580DA33D60B4F9A35BD03E65345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\allochook-i386.dll
- Size 328KB
- SHA256 b96469b310ba59d1db320a337b3a8104db232a4344a47a8e5ae72f16cc7b1ff4
- MD5 19d52868c3e0b609dbeb68ef81f381a9
- SHA1 ce365bd4cf627a3849d7277bafbf2f5f56f496dc
- SHA512 5fbd53d761695de1dd6f0afd0964b33863764c89692345cab013c0b1b6332c24dcf766028f305cc87d864d17229d7a52bf19a299ca136a799053c368f21c8926
- SSDEEP 3072:6LYEDJlXw5pAnHp2ukwTX6N8B4A84zMtEl1knxgaPZ3nbanlYZn2l1S2CAYOpIOs:6LYEDJAAnHp2uk2KNO0tEQV+b3n6
- TLSH T1AD643C52AE419333C6AE273402C3839CF534DB14676B97D6B8D96EBE2EE17D06E31112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\allochook-x86_64.dll
- Size 468KB
- SHA256 8422be70e0ec59c962b35acf8ad80671bcc8330c9256e6e1ec5c07691388cd66
- MD5 daa81711ad1f1b1f8d96dc926d502484
- SHA1 7130b241e23bede2b1f812d95fdb4ed5eecadbfd
- SHA512 9eaa8e04ad7359a30d5e2f9256f94c1643d4c3f3c0dff24d6cd9e31a6f88cb3b470dd98f01f8b0f57bb947adc3d45c35749ed4877c7cbbbcc181145f0c361065
- SSDEEP 6144:Tch6UtcJYg8yRAkB+vsoqOvfkv+y3ilZkaCeMG:e6Utc6gdcfkv+KIR
- TLSH T131A4F7B679918A67C1DFCB3500C386A8F234FE1413AF579584D523BA2EE67C0BE7501A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\badassets\scoreboard.png
- Size 5KB
- SHA256 a8d8227b8e97a713e0f1f5db5286b3db786b7148c1c8eb3d4bbfe683dc940db9
- MD5 5cff22e5655d267b559261c37a423871
- SHA1 b60ae22dfd7843dd1522663a3f46b3e505744b0f
- SHA512 e00f5b4a7fa1989382df800d168871530917fcd99efcfe4418ef1b7e8473caea015f0b252cac6a982be93b5d873f4e9acdb460c8e03ae1c6eea9c37f84105e50
- SSDEEP 96:9fJTvp2iAJf329FCfsjYsvEG56SyjfEa186J70Lhvxg+NVE:9dvpPA129FC0WSyj06t0LNx3NVE
- TLSH T1F8C18DFD0E4B3E1A968C45F3BB4F4D654C05F382A1129B8BAC2D81E098AD19CCD91C3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\ced3d10hook.dll
- Size 128KB
- SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
- MD5 43dac1f3ca6b48263029b348111e3255
- SHA1 9e399fddc2a256292a07b5c3a16b1c8bdd8da5c1
- SHA512 6e77a429923b503fc08895995eb8817e36145169c2937dacc2da92b846f45101846e98191aeb4f0f2f13fff05d0836aa658f505a04208188278718166c5e3032
- SSDEEP 1536:jRXPVJPMo10+PfXl/IRTlsfQstLh66crJWeWyPCUpfrCWV13P1+CUOEvCvOEMI7:BdJPMlMb1g6e0dU9rf3P7UObvOja
- TLSH T119D39E127620C072CA4A597D8096C7726FBAA6719BDC40C7FB661B3D9F203D16B7930A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\ced3d11hook.dll
- Size 137KB
- SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
- MD5 42e2bf4210f8126e3d655218bd2af2e4
- SHA1 78efcb9138eb0c800451cf2bcc10e92a3adf5b72
- SHA512 c985988d0832ce26337f774b160ac369f2957c306a1d82fbbffe87d9062ae5f3af3c1209768cd574182669cd4495dba26b6f1388814c0724a7812218b0b8dc74
- SSDEEP 1536:onOLYqoZQBD3m7bmVLcuVGpGXlWXQznQN8erRxQEmsYOT1GlERbo3iV8n/7DkCWy:o4YqoZNHi7VBAXvXMZ7ll3iyn3WOR3Oc
- TLSH T188D38C12B661C433CA4A0C7D809AD7266F7EA6715BE844C7FB5A173D5F203D06B3A31A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\ced3d9hook.dll
- Size 124KB
- SHA256 fd2a2b4fe4504c56347c35f24d566cc0510e81706175395d0a2ba26a013c4daf
- MD5 5f1a333671bf167730ed5f70c2c18008
- SHA1 c8233bbc6178ba646252c6566789b82a3296cab5
- SHA512 6986d93e680b3776eb5700143fc35d60ca9dbbdf83498f8731c673f9fd77c8699a24a4849db2a273aa991b8289e4d6c3142bbde77e11f2faf603df43e8fea105
- SSDEEP 1536:yq8Iw0TnMfrUEuKo+w/lT35oBqhSw3kmuqW3Crf0d3N1NsCeOEy6jCMpOEsC:yq8IdTMTyXUR2JJry3NreOnMpOu
- TLSH T131C39E123224C073CA8A597D80D5E7766F7EA6A18BE848C7F77907795F203D07B3921A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\ced3d9hook64.dll
- Size 136KB
- SHA256 8783f06f7b123e16042bb0af91ff196b698d3cd2aa930e3ea97cfc553d9fc0f4
- MD5 61ba5199c4e601fa6340e46bef0dff2d
- SHA1 7c1a51d6d75b001ba1acde2acb0919b939b392c3
- SHA512 8ce180a622a5788bb66c5f3a4abfde62c858e86962f29091e9c157753088ddc826c67c51ff26567bfe2b75737897f14e6bb17ec89f52b525f6577097f1647d31
- SSDEEP 3072:6UoPePVhoZB34/UWFdQomnRepTPFn35eoONSO2:j8ZBvWrnmnR2Un+
- TLSH T13DD37B5B777900B7C94AC67DC9D39687EBB0B0424BB5938F4326865A2F133E06E3A315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-i386.exe
- Size 12.5MB
- SHA256 a3da8849690d5551cbbcfdae6aab05848e1b85e8cd0c06520e7452831e4a378e
- MD5 a04ed96b4732aa8da46f7a9aaa8edc61
- SHA1 a3e961e8ee33d2079992ff396a35b55c683ce14a
- SHA512 79d95219e669f2421ab70731369ba130144b4a7a9a71ac926a280e8928604f32f0c5f9173adfe8f1e9ad8fc847e8597e64d5bd9bc7e134687646dbeed76a2816
- SSDEEP 393216:IatdxcMydnitC7x6azHVuJLJnHUNiGWSgA/pOFw8B:IbwpeWspowA
- TLSH T19CD67D12B722C22BD47376B48E9785C41E71B7242A32989733EB2F4D6B75B807E16707
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-i386.exe.sig
- Size 132B
- SHA256 bdc107b7008baf277bba20ed766d8db0110709d8fc1f95052391bee61b95f0f3
- MD5 8b8613cc9258b9ff1d4390c2fad013e7
- SHA1 fa844ee69d67bfcc898b59f3517d5820594fc1a9
- SHA512 8ca7470d51e5733fa37a1ac59dfa96a0d2fc47e05628c8fe6a0e4c5d628778e3136b178255b76b0a190223f0516ce2a991e22faf4e7b8e48d1b911e8070ae861
- TLSH T1DCC02B62455004845884AE8188F115DC307084AB40E46D354C3211522C806404769F2D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe
- Size 16.4MB
- SHA256 d5c07b37edbb3491b69fcb6bb4c050f52252cf85c4666c4cef50210c54f660d4
- MD5 a9cecd21c113cd5216ca300d1b947768
- SHA1 1668415586864e3cc42fb0293ffcc39656989619
- SHA512 13be4b905f310d72b78271ffd7094b059bcaa50b15d17e6c100783da529faab2810f630ea65829f38c1b5b4e5a6b344122dc18813ada8ce1a54d662a2e616a02
- SSDEEP 393216:hu1NJf/dhzMYmcDbqCwxtRLQ1DLYTJw8R:hyhbqCLmw4
- TLSH T1A6075CBB76619A98C0CAC1B15597CBE22F31BD2408B5134723D9331E9FF68805E5AD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-x86_64-SSE4-AVX2.exe.sig
- Size 132B
- SHA256 035d7c9c0463096a1ddda370139655e17ba29299b7d100d1948e675f5b8ab838
- MD5 54978b1e97ec79cc8084b2b5ef14bcf4
- SHA1 b5773072d7b0d7eba8da0d557abff100e3544a93
- SHA512 949df6c6c60fccb164f139262e0d5bba07c5aac68eaf454ddb1618355af40580fa40a05bd721b96f41cd52038d2ab1d2b27e32d5f2097a08dea7704aca48cfa0
- TLSH T1E5C02B59521878001F240EA80EBA88E74F13030854531004DCC160040DD88E4E381F36
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-x86_64.exe
- Size 16.4MB
- SHA256 49cc24f682ff330631672dc89f2e4d7d277598d0d61541a3fee4dd3cd941583d
- MD5 f0689ba0f1532bf722db3a70fe9f30a8
- SHA1 fe04a2a8489a3dd837953aac3210ffa5a24d511f
- SHA512 49c42da975a9b88d16d0f70fbc65454cdf0007b8d2816a44b2bab160caa0a01fcec0c8fb11b4f5957058091635a14d2172e2c6c97bf23c171a4222412bb20ddb
- SSDEEP 393216:4vQipNHLhmaRmfbqx4XGJxNSQ0DFgGDw88:46bqx4BFvDwJ
- TLSH T14E074CBB76629B98C0CAC17654D79BE25F31BD240875134323D9331E9FB68801E9AD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\cheatengine-x86_64.exe.sig
- Size 132B
- SHA256 610f6b1c6f6f411c299491318ff7a1b19c1f54ac35cfc72bd42f0a7b44f88b05
- MD5 d382ce1c830c32c2d150fcf9260a340d
- SHA1 b2e7243bf72acd88b845afebec3ae806d9533253
- SHA512 d2d61124de081397e48ffa2da08915153003b81d1f0b843f420798defb4e110c54970e8e0ec08baf860e731585f5d4de6e3d14f9b33980ec835df3a5d8ab3eba
- TLSH T1D4C09BD05B851B35A3192C53D6CE046E1354C0D62115CC529B73974123E909E14B5465
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\d3dhook.dll
- Size 119KB
- SHA256 e2a7df4c380667431f4443d5e5fc43964b76c8fcb9cf4c7db921c4140b225b42
- MD5 2a2ebe526ace7eea5d58e416783d9087
- SHA1 5dabe0f7586f351addc8afc5585ee9f70c99e6c4
- SHA512 94ed0038068abddd108f880df23422e21f9808ce04a0d14299aacc5d573521f52626c0c2752b314cda976f64de52c4d5bcac0158b37d43afb9bc345f31fdbbc0
- SSDEEP 1536:QyfNvGKKZVGcuasOKQBBTff07PSZHCSVKOCDCA32XQaOCKnOEPChMOE6:lNvG7vGcIiBTMS18RD7325YO/hMOr
- TLSH T127C39F123FA0C073DA8A5D3D8096C7627E7EB1719FD948C7B62907A95F103C06B7A25E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\d3dhook64.dll
- Size 131KB
- SHA256 7d82694094c1bbc586e554fa87a4b1ed6ebc9eb14902fd429824dcd501339722
- MD5 2af7afe35ab4825e58f43434f5ae9a0f
- SHA1 b67c51cad09b236ae859a77d0807669283d6342f
- SHA512 23b7c6db0cb9c918ad9f28fa0e4e683c7e2495e89a136b75b7e1be6380591da61b6fb4f7248191f28fd3d80c4a391744a96434b4ab96b9531b5ebb0ec970b9d0
- SSDEEP 3072:ZGrrgbU27p/nFdpF/vwFLUjh2v5VjObfSVMPFtE8PdYO3kOc:crk3ZFdpRYUjh2verh6
- TLSH T197D36B5B772900B7D94A867CC9C29687EBB1B0468BB553CF1225875A1F133E07E3E325
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\is-JBHBK.tmp
- Size 466KB
- SHA256 00d934336950636e528690c3ac69bd512896513456ad1c7cbf52ad6b4c424da5
- MD5 6d459031335dd83f08c21beb9c59659c
- SHA1 5714d02427a8330df90e2d05b3035c97cec5e658
- SHA512 0e1a070a93498c0708fb43d5d9b15a483bfa1941d184c9af66f2996de9fa4d1c1590ee9ba70db29ee93f770fb37dc64d3e84f6ac7e608fb6f07623bcfafff622
- SSDEEP 12288:89NALRL+WywJLfaCCBlO9kw+sfalcEc5jD/ayaamvvA:8bALdToO9kw+sfalcEc5jD/ayaamvv
- TLSH T1D8A4F737A7639178D117E2781BCBC691E5B078B80734A8CF73E60A726B226944F2D3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\libipt-32.dll
- Size 157KB
- SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
- MD5 df443813546abcef7f33dd9fc0c6070a
- SHA1 635d2d453d48382824e44dd1e59d5c54d735ee2c
- SHA512 9f9bea9112d9db9bcecfc8e4800b7e8032efb240cbbddaf26c133b4ce12d27b47dc4e90bc339c561714bc972f6e809b2ec9c9e1facc6c223fbac66b089a14c25
- SSDEEP 1536:K3uc99F6AOdjfTOZztxlGWGXLQbcpNk6FowD6QcEY7Xjl5hf8keDQa/c7usWjcd6:K3ukXTNGp7+6zaEY7Zf/a0ye3ZoOvKOS
- TLSH T118F38D12FAD1C131EA9A067991FC9A138F7D7951CFB888D7B794055CC8203D26F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\libipt-64.dll
- Size 182KB
- SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
- MD5 4a3b7c52ef32d936e3167efc1e920ae6
- SHA1 d5d8daa7a272547419132ddb6e666f7559dbac04
- SHA512 36d7f8a0a749de049a830cc8c8f0d3962d8dce57b445f5f3c771a86dd11aaa10da5f36f95e55d3dc90900e4dbddd0dcc21052c53aa11f939db691362c42e5312
- SSDEEP 3072:XMTS4QqrM7BqUHEwXDVT6B8AF6aBBcFkLODeYJObCkEjOUkOG:XIQqrc7V5Trw6aBBcFk6CtbID4
- TLSH T1BE046B8BF2A400BAEA53DA38C8D74506EB727452C7A49BCF4254027ADF573D25E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\luaclient-i386.dll
- Size 197KB
- SHA256 dd07117ed80546f23d37f8023e992de560a1f55a76d1eb6dfd9d55baa5e3dad6
- MD5 9f50134c8be9af59f371f607a6daa0b6
- SHA1 6584b98172cbc4916a7e5ca8d5788493f85f24a7
- SHA512 5ccafa2b0e2d20034168ee9a79e8efff64f12f5247f6772815ef4cb9ee56f245a06b088247222c5a3789ae2dcefadbc2c15df4ff5196028857f92b9992b094e0
- SSDEEP 3072:fr03mcDwt5b2+z615yQ7SLVTnyJYpgerOEmgsRBZnwO4oO8:fg3mrHb2+z615yQ7GnyOpFOEFKD2G
- TLSH T1F6145B57B5019277C7472EB8464A4A956A74E62038F2E0E77ECB0E4F9A74FA06F34307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\luaclient-x86_64.dll
- Size 260KB
- SHA256 253d18d0d835f482e6abbaf716855580eb8fe789292c937301e4d60ead29531d
- MD5 dd71848b5bbd150e22e84238cf985af0
- SHA1 35c7aa128d47710cfdb15bb6809a20dbd0f916d8
- SHA512 0cbf35c9d7b09fb57d8a9079eab726a3891393f12aee8b43e01d1d979509e755b74c0fb677f8f2dfab6b2e34a141f65d0cfbfe57bda0bf7482841ad31ace7790
- SSDEEP 3072:KK2iOI60nWU4NJ4twEywGLOJQbcOL9z32fY8iV1OQfkz5w4Q7hk1D2oOyPOP:KKu0WU4J0w6xJkBAY8i7fkaThkA4g
- TLSH T1D3441B6B7612CEBDC0CFCB75448A86E2D230FE500DF5974622C12B1B9E76A906FAC54D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\vehdebug-i386.dll
- Size 324KB
- SHA256 3eb9cd27035d4193e32e271778643f3acb2ba73341d87fd8bb18d99af3dffdea
- MD5 e9b5905d495a88adbc12c811785e72ec
- SHA1 ca0546646986aab770c7cf2e723c736777802880
- SHA512 4124180b118149c25f8ea8dbbb2912b4bd56b43f695bf0ff9c6ccc95ade388f1be7d440a791d49e4d5c9c350ea113cf65f839a3c47d705533716acc53dd038f8
- SSDEEP 6144:UokW02RSGoOZQcW2jS95cM0EsZjv8trtH3Vizwy:ZkW02RsOKcWnDdMv8trtX0
- TLSH T1A5645C52F9028237C46A3DBC5A5B55D95DA4F92038E1D1C6BFEF0F8F5A31A903E6430A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\vehdebug-x86_64.dll
- Size 413KB
- SHA256 f50baf9dc3cd6b925758077ec85708db2712999b9027cc632f57d1e6c588df21
- MD5 8d487547f1664995e8c47ec2ca6d71fe
- SHA1 d29255653ae831f298a54c6fa142fb64e984e802
- SHA512 79c230cfe8907df9da92607a2c1ace0523a36c3a13296cb0265329208edc453e293d7fbedbd5410decf81d20a7fe361fdebddadbc1dc63c96130b0bedf5b1d8a
- SSDEEP 6144:gLJXTQOQV/MzZTixW5GmL7HOf0ADMTE21gFOpJz:Q+V/M9WWnL7HOf0ADMIuR
- TLSH T109944A1BF622CA7CC0CFC778448287A29730FE5019F5678773C5671B5DB1AA06EA894D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win32\dbghelp.dll
- Size 1.7MB
- SHA256 74ccb6f5334248ba7020b9cddc7d581fc6a3ac5a034489324a1fc134cf21de6c
- MD5 238c1c3286a94184fae2c47cb7fb9db8
- SHA1 ec4c96dbb342617afcb728c4d58bde4edc0939dc
- SHA512 0042efb8df5dd2d6cde098dfd1a15217c55e8b68776856e354ced3b943c646c77a8a0132eb2a6332d76704f71a475e29f7330177cbfb4c2c4a26ffc4ba004d0e
- SSDEEP 24576:/ETCUSw5C7fKrz3PRAarqzUH3Wj7Bnn6KB2m4JMfGPYTuLycEaU2vWUonrMLIAXg:MTj15CD0RHep6KJ4KqzEl2vWrYIA/W
- TLSH T199856C31A5C0C179FCE251F2A67DF6BD816CB525133990EF52948A6A38326D32E387C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win32\dbgshim.dll
- Size 118KB
- SHA256 86be9aa2fef4f92a02a1349373dcce77d97b49b8a22949cef9388cd96c5a973d
- MD5 52cc34d62c6dbb0f069ec7c673a240bb
- SHA1 db802f7ef021bc9e61c196d4ae87cd0705565f57
- SHA512 f4d9a2777b209501594bd0cce35bb66ef96bee87997f3175af655dfba5a466730f5277e3d03265537dced4b62edb9e9b7da0d2ad680592e4e334e905dad8e8b0
- SSDEEP 3072:fWwU7404m3ZXwMVAL5OMlemsFUdxxS3KuGq:uk0niMVALwrU5S6E
- TLSH T19AC37C10B663C073D18D11388669A65793BFA52ACFE009C37BB8AF9D2E742C35E34597
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win32\sqlite3.dll
- Size 556KB
- SHA256 f3e9e0df553d9df6650981a0758ede142a33a889786bbeb586fe7edc7f9e27eb
- MD5 aef51484c41c348e6eca26eaf36b5e00
- SHA1 01a37c222bc8eafdf250953bfd5d0593ceb7ab5a
- SHA512 e7b29e38f516d934617e0c46bc0db33390e28890867427ada0989cbb1f1debaae962b3b39d0749bc5273eff6545b967346d5f72a460d1c07b0fd451afd58ab65
- SSDEEP 12288:09zpo7FKqmQEPmmo6G1SbhXIBQ22wnEKNy6ZfpTh2jK23L:eUANZPmjR1SbhYBT2wEKN3pmb
- TLSH T143C44C88EBC730F1D66316368667F23B5671A7058025FEF9EB4D2F5AFC33622651A201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win32\symsrv.dll
- Size 262KB
- SHA256 254609ec81013a878306c710acfd258907e338c32eeb5fdddb561116dfa65d40
- MD5 b3ea90ea6e9c99965389662f8db9dc8e
- SHA1 412685767347f0cb4360787214b28038b1f38278
- SHA512 b963d9dfe09db9c8e10ca91cf9504238f478f83bba5b9b5bc4910725fbf917a1af791e5fa8407d07e55589c8388c73cd0377405d03c88eeb5ba94a90dc5df827
- SSDEEP 3072:mK+Zk16lasjUumChoTtckp/Ec3SYiAdCksr5CsHLz0hQTplZBXo8PrF5T681kO2y:Rbrdr3S/AdCkA57ghmlZ68rj6euk+hU
- TLSH T1FC441821B6E88138E5FA3AB429FDE235857EBCA05B75C1CB1250929F68657C09F30377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win64\dbghelp.dll
- Size 2.0MB
- SHA256 009681092f6a13c5c28bb3b08ea14bb03ba959f9ce1a53730d069550da376c48
- MD5 7a7a9cd081ab016f84249ef4f06493ad
- SHA1 8dc1bebfae34c118fe3810dc9131cbf8ccbd9edc
- SHA512 d2b3f302f653741298fb62d237bfc61e1555792aad73c14395b4dd4b97fe37f745e916b9f586945042b1eded19c2bc0e9efd4be57e44610d465296bd0c544e84
- SSDEEP 49152:21CydAIdaqDwWXf6J6eFyIfbIwDLk2A/R1UTwyIuZ:21fd7dxinRDLkF/R1zuZ
- TLSH T1B5A58D4793EC00A8ED7AD23DC69A424BD7F27811132097CF12A0876E6F63BE65A3D355
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win64\dbgshim.dll
- Size 132KB
- SHA256 5470dd45e82ae05c9ea30be1b1aaae6b7200f6d954b71c1a9e4692bd9839b9fb
- MD5 84e5c273f00b8e0bc1cfcaffde1919bc
- SHA1 8044d18825ca2fa12bebf6dd38953efa13d25b7a
- SHA512 274109117b0774d59233fb5572a3aa2d08ba34a40891ca30529ff8e3102dc2bab82e03e6699155199372c38482e49c6e49fbb9e59ad6c0d14b8f2c4defaf0dd7
- SSDEEP 3072:OXlRa1Joixe4DMkNOuFu4FGU7w6Mx0WdE:OVRqJoixeXk3GU7w6XR
- TLSH T16FD35C5577A890B7E05AE07AC9D28A87F7B1B0282F6193CF12A6835D1E337D09D3D352
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win64\sqlite3.dll
- Size 1.3MB
- SHA256 60c16c2fab14b344b8343778dcd6bbfdee3dfe5f83d1ac8d2e50c6877419eee4
- MD5 c11138204609ea63a3e88b4c8c09b035
- SHA1 b0829124f7e275b0f341c6af0fdd3dd5f65667a4
- SHA512 28d9e92498433c1f6ec41893fc17db76d6cb7a1c565461eb6e67eebc2b924dd4aa65486c29874caa9ac5c78f804a8799c7ce1c641dd9f080bf1bf94b58ca208c
- SSDEEP 12288:aHnKY5WcmiyfogSknJbjhrbXBbrxaLsBDJbVQAjXwcasznMbDz43X6dmM:aqY5Wcmi4FJbXdsLsBNRQAjgH
- TLSH T1A2557D47B3B941B8D4AB927DCA534B4BE7B175451320ABDF469887A52F03FE21A7E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\win64\symsrv.dll
- Size 336KB
- SHA256 f118fd9d6ba4c36db3556d1035efe90e99c00bf879a22abebe1dadfdbb3074d7
- MD5 1473a9ccb67526d4010f1b0f9e6b2977
- SHA1 7fe8c168e976200cf1562b8e8991245226b16b9a
- SHA512 3f459a8c9536b615bbd3b8bfec9970f432cc72bd3287937f9f915fcbe9b2a13fcb4c45946a1722018f89db505b418957bd513bd32a64580484d4ac7d3896a551
- SSDEEP 6144:yT/zGgy2HzkCwmkfCl00EiwtHgadXIezwnzx7I91DR9J2:y3GL2HzkCwmkfClHbghpINzZmBRa
- TLSH T1CD74F719B7E81069F1B2B5388AA7C115E7B274A45B35C3DF0090853F6E67BD4AF34B22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\windowsrepair.exe
- Size 262KB
- SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
- MD5 9a4d1b5154194ea0c42efebeb73f318f
- SHA1 220f8af8b91d3c7b64140cbb5d9337d7ed277edb
- SHA512 6eef3254fc24079751fc8c38dda9a8e44840e5a4df1ff5adf076e4be87127075a7fea59ba7ef9b901aaf10eb64f881fc8fb306c2625140169665dd3991e5c25b
- SSDEEP 6144:0drkqKo/nt7PrwnoK0M6EZgugEkkoSE5O7Z3LLr:6rkm9mP6EZgugEnoSE5OB
- TLSH T167446D56AA13C37BC5837EF84BC486F157B1EA142D3590DB32C60B2E6A75FE02F25219
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\winhook-i386.dll
- Size 201KB
- SHA256 3cdb85ee83ef12802efdfc9314e863d4696be70530b31e7958c185fc4d6a9b38
- MD5 de625af5cf4822db08035cc897f0b9f2
- SHA1 4440b060c1fa070eb5d61ea9aadda11e4120d325
- SHA512 19b22f43441e8bc72507be850a8154321c20b7351669d15af726145c0d34805c7df58f9dc64a29272a4811268308e503e9840f06e51ccdcb33afd61258339099
- SSDEEP 6144:ZyuXZus0fJ34+UZQ5IvR2diworEdVpRmY:nXZgV4dkIJfrEdVt
- TLSH T179145C86E602C333EA5F2EBD464C45A16574E7202CE2C0DF7ECA4E5E5BB4FA05F64246
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\winhook-x86_64.dll
- Size 264KB
- SHA256 e08b035d0a894d8bea64e67b1ed0bce27567d417eaaa133e8b231f8a939e581d
- MD5 f9c562b838a3c0620fb6ee46b20b554c
- SHA1 5095f54be57622730698b5c92c61b124dfb3b944
- SHA512 a20bc9a442c698c264fef82aa743d9f3873227d7d55cb908e282fa1f5dcff6b40c5b9ca7802576ef2f5a753fd1c534e9be69464b29af8efec8b019814b875296
- SSDEEP 6144:XcxPVJy83/NkY56owwouBQGsyTfkaiX6P0a:XkPV483FB56wsyTfkOJ
- TLSH T19E440ABB7612CEB9C4CFCB3549C687E29670FE5009F1A74611D0271BDEB6A906E6C10E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
- Size 8KB
- SHA256 c50a70c0e8d3007a067581e1df679a272a552741637e833b6f198c16df390fd5
- MD5 bfe375e83d3172c312853f16ace0ef6d
- SHA1 7cc1e793c909784e30caaa00030dd0a7f722d027
- SHA512 ba304061f15f9b3d33c5a66586f9a3cca54df885c03eaf07603c22cf14d0af1ddebd47bb903058a08314178a4c9596fda7a35eeacfb0478ce7d0af6432abfbee
- SSDEEP 96:SxCKs0R++W15m0A4rQP98verW1Djnx6yH5HHuH5HmX6Csa4eXgj4dXWGZBYsMrU:jKD4S4Vei1DkiKCsahXgj4dXWrsMA
- TLSH T13A12531D593E70BB32215B51FA6B3B9C2A28B31B65EC1450308D379CBF62D22E50BD38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
- Size 616B
- SHA256 ec272455ab2359b4ba8533b05008a4df59279ed74ffb4c135528a221b6a67b7e
- MD5 b8d24096242c114feff39db089ad33df
- SHA1 3c28e58c4ec68f3148b8d93411f87d82289f7e55
- SHA512 72cb0b35ecc4e8852613fba23f626c74be86d551592138b686eed77e3acb00027bd5bb56a6800ad22ad7aea670aedf88fe47a9df823416b83490b0c14eaed827
- TLSH T18CF04494F925C7924035C77982240AF1768D3002AD2622C233CFBA3CB1C6A093A1C06D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 162KB
- SHA256 b3160c6f40b1289a8219fe6625cf30a8598cc762461116ae621cef7b1288335e
- MD5 a3b31ae778104b5f413b499cf6b5b3b1
- SHA1 89b5f7983706792d74b2fad8e01be421c1cb8039
- SHA512 c735b2db538af7088dd2b3e401c7f573ae17394011b552812630316db111a80c59659469486f4c19b356a7b853eb06d9f87eb3be67dfae53701f1ff254c261d8
- SSDEEP 3072:tyvt3SxfrH/wbUeQWP6M92E8yF6hzkqSkfFqNs2fPMHVpf:QvujYUnAnl6zkqNqNs2M
- TLSH T1F5F323A1430FC4F8C61B751C9684CB1A912D5E1F70BAA82CDB60CA8F4754F7E65D32AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
- Size 5.3MB
- SHA256 fdd6f367514a8c44bedd7d8cae73120bcab054975df41be2a38f082b9521746a
- MD5 120b5539ce7123698f17dfe49977f6e0
- SHA1 20fcf9b525b48ccecc40fb6e82aa99d086fe63ca
- SHA512 171c79b08816ddc655ea65866f467e26c1628051f973144ff80d705f97201ed071b8e19b22ace834a8f1e44c823ff1d1d8e282ea7a6a7c8b88ec8622a48e2c30
- SSDEEP 98304:P6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwS:baFDasWTMzz4/qyOwHqBt8Zh9RQl
- TLSH T1ED46AF62F6116074C81EA471383D7B7F68296D23D72187DB8DD83CA06F746C2263EB96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
- Size 2.7MB
- SHA256 14730b65b2d7075f8ab942d7899815a12c35f502f203558a2ec3c9aea0c8d983
- MD5 f26ce0b2a2b51ffa7fecfbc1ab53b2c6
- SHA1 5763003856e18d4d5e2a528e7b3255c0c4cee502
- SHA512 d1ccdb0cffb9470641c5c99a1be635a8c3ac1d6e18ca95016b5772859d470bc8bdbb3068f2c1276a9ee35e6d3ecfebb5cc5781a02babad20562688dd35120512
- SSDEEP 49152:gN3mz61b1ZGfZRj5yw0euSKcxCOK2fZTAZBwClDjWD+C66ZyjvV:2VR4Z/9YdOK5vwlv49
- TLSH T1E1D57C53F2D910D8D01DD1798B9A9632FA72BC450B3576DF0A90B6162F7AEE06B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\Opera Browser.lnk
- Size 1KB
- SHA256 66b03f1005879efba8c4ecc253aa4d224f374f577bc1247e39cac742a4076638
- MD5 afddf730e91aec896837334742e123e4
- SHA1 5388f0ac88898b76fbcdf019f159362d72a4717b
- SHA512 2869770b6f4c56927b287dadc78753692ff0c72c30e0ba5fef2613482591f0458cd6f5078b5b034f1ef48919ae9bc459953b377bd99a287053ea067d5c222b98
- TLSH T1B12121566FCA6B22F2BBD03444BB3AAC5575B448FB078A1D004143441D76541584CF6F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\installer_prefs_include.json
- Size 258B
- SHA256 2e942f0f77d13fd5d4f13bb7a4fcd5aa85dcd9b36539335840d61c34ff0e41cf
- MD5 2426e9ce7b178fe9d37cbe3223731c3d
- SHA1 6f636a8bdbdcaefb7bd7521b3247972b03fe0b62
- SHA512 826eff3ee8c3b393ba6ebc1fb8242af980b5286c3b42faaee95f46797f0a9e85503bd5c9a84f7ac88241e5a76397794c03900300fbb733bfde7ecae814e581af
- TLSH T151D02B4B8236C2A107B0828F345A338851AB2A21D558B44AD2C59565446846225D2D6A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\installer_prefs_include.json
- Size 1KB
- SHA256 ab7b18d8b85e8c76e103e5ffa55eb3bad04ab06eaf3152f44642615ecd9f9a14
- MD5 04d5a6db3d16d09dceccbd60a561747f
- SHA1 940d7634268460406b2b997a254e4eca5f585c3a
- SHA512 9061b83283f06e272f381fbb9376e651165bf4608951422ee8536885c995c4da27505c9e770c389632c5d7d63e7a143d8e060caaa4c1580c7e61bdf48129a09e
- TLSH T1B7112C884845B0221B73D24FC84B3F866D0B5503D81C34C791C74C6E44EFD610F9151D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\4ace5280-0ea8-4d8f-a26d-35af9612a814 Opera Installer Temp\opera_package_202605192129261\installer_prefs_include.json.backup
- Size 243B
- SHA256 bfd18346d15975baf073e2cfe7bde5350eba0d0b6bf3195ca1d396400298b07c
- MD5 cf62e725318eac567aa3c18d59fb9cb5
- SHA1 f6db00293a02095a16f088b728773713a37ef53e
- SHA512 fedc1d3665eecea04ce568ad081f270086f8d372faca8392af8d69b2ef9cdae6e3aab96149a427586f2f9bfedcf4d4e5cacb890abd5f765ff0207925d44abb30
- TLSH T1A0D0954B8337C19107B082CF345B3388516B3631D558B44DC3C58161446842325D3D7A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS4DBAE4B9\installer.exe
- Size 8.2MB
- SHA256 7e161f66cf9645a478bc9b4caef407fb40d02f33a295dc95c1295459563cf0b4
- MD5 af1b2236714a5716ecc1837f5ec862d5
- SHA1 e550ed522ec3af7d31c5eb710f6208357c804f1a
- SHA512 46adac71a762a37dccb27bbd6c9e5e01dda0bfe83d7401467ef9bb2172ad84a3551241e196aaed561939fef6ccd7779710d03845dd5de117e0e0e8e432e60ac8
- SSDEEP 98304:oBbNLLOs4U0rTVixfYxnGnajTpdrT6W999YNY8AFe:mNLC1HKYv399XFe
- TLSH T1C3967C43F3A601E8D06FCA748B7A5622A9757C564B30A3DF0AA436251E75FD46F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\Avast_One.png
- Size 42KB
- SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
- MD5 faff96fb8080a98bd1def3c4f9cce9c1
- SHA1 466c66dfaed49d93dd7d8a1e42919a4f03613efa
- SHA512 ad87ccc0bcb0115d5e7255935c5bd2b5eeb85b75f46206987d85f0f5e04afce054b0b3cee3d7577039db6ddbff1f0fdfdca657b7877376e4f97c80c5ed7514b7
- SSDEEP 768:53E5YnNz2SLHvDYgWfGHV8L77Yy/oksC+x8+RfWpzrdYnsi2anUpMQb3HGJ2:536Ynl2SLrYHAWHDgEqCSskn0nqA
- TLSH T11613F1B8B8DE416DDDDED6B8FCE66FF564816437CC84D1EA800CB028518E784366636B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\CheatEngine76.exe
- Size 29.5MB
- SHA256 4b9130295aa7686619dbe8f163b880b2c418b56c4596b5119b67718161ab2d57
- MD5 707c3a94a3b3ecf9f83707cf51706d55
- SHA1 ccd590614030db7612695b3a013c215c7db92fa8
- SHA512 b9adebb0c1d9fa7f3341af2ce26223bb994d3312978263528165e953f277631a6ad471c7ffaeb027f2b5a846a8ef7759dda4519eb17d9fd325576f28cae72306
- SSDEEP 786432:J2LZQlIGIBRHqlYsWxZRuh6+WX8PfTfzVnOmlZZK5zxOoUEL:Juxz7HxZe6R6fjxnOms5zx+EL
- TLSH T103673323F3CBA53BE07A4A3746B3D212983BAB2165064C9697EC786CCE255D41D3F247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\Opera_new.png
- Size 51KB
- SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
- MD5 958233a25ac0c23fae9451963eca0de5
- SHA1 8801e6dca9e4e4ad1f5b49caa097733877cf2e2e
- SHA512 996177a1a878ca82c1ce02f8937f51285aa9b7c92471fe9c19b41892739e82aaaa7ebcb7f396d6d777da822578b1db1fea893ed55708521e4b8e31a81cacda0b
- SSDEEP 1536:l7LeXprR91MWpD5Ko2ORwQWwyJUcbWb7H:ApzWTo2ORohKPH
- TLSH T1E33302A0B153C51FBA8B5211D2043975776E92F6F860FF4873CA016CAEE5D415B173CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\WeatherZero.png
- Size 29KB
- SHA256 ab99cdb7d798cb7b7d8517584d546aa4ed54eca1b808de6d076710c8a400c8c4
- MD5 9ac6287111cb2b272561781786c46cdd
- SHA1 6b02f2307ec17d9325523af1d27a6cb386c8f543
- SHA512 f998a4e0ce14b3898a72e0b8a3f7154fc87d2070badcfa98582e3b570ca83a562d5a0c95f999a4b396619db42ab6269a2bac47702597c5a2c37177441723d837
- SSDEEP 768:Fk7fJC9WjOI1DaGmnitN039DODp56Ys+9S/IUM+:FktpB4FiQ3qd9S/BN
- TLSH T188D2D0381BFEE4C6EC67B874148F1F234A2B94BAC0D4E215F801969D1549E5EB58CDA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\logo.png
- Size 248KB
- SHA256 8c5c80bbc6b0fdb367eab1253517d8b156c85545a2d37d1ee4b78f3041d9b5db
- MD5 9cc8a637a7de5c9c101a3047c7fbbb33
- SHA1 5e7b92e7ed3ca15d31a48ebe0297539368fff15c
- SHA512 cf60556817dba2d7a39b72018f619b0dbea36fb227526943046b67d1ae501a96c838d6d5e3da64618592ac1e2fa14d4440baa91618aa66256f99ea2100a427b4
- SSDEEP 3072:d9rAhuSnngAZK0u2vGWTbQ8VreGWVQx1RiiHs0dfo5yk5BRFOYfKa5ubF3/hlKHV:U/HJGWPQ2wV01RPQ5FoBJc+uHtjdhd3
- TLSH T13444122A9260C885D35201230725B4787F78264B7A1CACE6F5F77C1B4A0A67E2D86FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod0.zip
- Size 5.9MB
- SHA256 200e9bc4fcf2c6682ddc8c7f172a0d02befecd25ca882f66c6abc868a54b8975
- MD5 7cc0288a2a8bbe014f9e344f3068c8f1
- SHA1 eb47d401ae30a308dd66bdcafde06cdd35e25c94
- SHA512 869f0a01ef0bcbbfc501c1786e14bffeaa2daaa00210c312874fc67a724c77ef61394bb5854b9a02af654cd045c4d39ae30d73f1b4ec8aa9e531dfeea1714476
- SSDEEP 98304:ppxj2IwVGwxnd+P0fY8eHeM1euEuR+HW84l7mKN2Yjwov3I7qs4zLGGlFtSNNkoo:ppxZ7k00fxeHejFHW3l113I7d4zLGGTL
- TLSH T10A56335E3333C060535EAF822771BD151138AA7D6EDD78C48A39A37625F629E0FA470E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod0_extract\WZSetup.exe
- Size 6.0MB
- SHA256 fa352552306b80f3f897f8f21d8579ae642c97d12298e113ae1adc03902c69b8
- MD5 3c17f28cc001f6652377d3b5deec10f0
- SHA1 eeb13cf47836ff0a0d5cc380618f33e7818f9d75
- SHA512 240b31f29d439c09a56d3bf8d4a3ea14f75c2286e209e7df3f4ff301bfa3ad8228d7bebe01acea6f2f702a0ba7ecdb5583b97372725c77ef497e749740f644b3
- SSDEEP 98304:O/KXgWUBu+NlRk9OfK2GTyYX+eyaB135PSuXTm0LuM74eL3o1+ykb5io5dtWx9eJ:O/KXNs6OfxGTyHwnXZB3o1jkb5ioPtE2
- TLSH T15B56335A3322C055E75B5EB236B5BE291274AF6CBC9C24824F3AD17225F73450FAC70A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod1.zip
- Size 782KB
- SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
- MD5 2c7be73f369c90ce32bbf5b6edcd9cd4
- SHA1 aabd8f656ea80ea72dd17f2819fbee64e6f4b560
- SHA512 312502f64439a7debfee5b47197e481eab490604803bd07eda5fa3d1a1e8e7de3e6e687693932ee5aee85e56ee059b790a7f47a3754f6818e14fa1cf6a0a7815
- SSDEEP 12288:YV/ZeZ0C6U6lQzc2+KcqaYTmydhmdfLNz+g5WOcmpMi2VWmSKAf+4l:g/MZ0RTv2hnKydhEz0OcoMiCWNfj
- TLSH T1FA053380AE40F676EB81CA213FA7E5DF35538D923BC1797D61548088322DB6EF5CB258
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod1_extract\cookie_mmm_irs_ppi_008_585.exe
- Size 1.7MB
- SHA256 2ab4329fb77df9f5b70ac45d9fc005f019c8ef930eabf82e6a10052f9cbeec2d
- MD5 11a225495371d91ef254a5c69c967ea6
- SHA1 ab136cbac42cc54a6aa15f7eb43eec1c6647dc74
- SHA512 5012d9fbc9401b5c5a377f100560c637adc98d319749bb599a0a0487417915f647032430ef027c69cf1a8fecc2d63a741f1aaec71611dcf292db109a35c45023
- SSDEEP 24576:tuRu5fl3AFG8CWgd3jEDigqqP9WhavTXeS0h0lhSMXlOncOy9x6mWFI/RV:bJlQU8CJjqF0wuS5icLxxWe
- TLSH T198859E207B42C07AD49A01B1992CBBAAC16DAE744F6550DB73F03F2D6D711C22B35BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod2.zip
- Size 3.1MB
- SHA256 0303b83169b022f74bd1f90293f670c98ce510ee8ab5e899bb2ecb29058ede71
- MD5 72fe330966fdfe62b12c706c24c99554
- SHA1 89fa4e102ab5b396b2c3c42d8b251446a964347b
- SHA512 f731f2e3a03601a38066c9155cb048bf54832843ec70f75cfcdff67f01b15ff6c3a488384b293d6317f2833238b21f0524fd2e02aba3c146e5dc311aedfa4891
- SSDEEP 98304:6AsRmK5APhxYQosT6WusUwTS45kGOoyeM+7hqX5AT:IQK8x6EckVPOoyu7hqpo
- TLSH T1B0E5235177C0C432C63322324F4BF688A6BEB5625F64899B37D42B5F9EB1581A634F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\prod2_extract\OperaSetup.exe
- Size 3.1MB
- SHA256 179c84597d84a807794e1023054ecd537c6380aa13977c65583929b7bbe05d8b
- MD5 d079a414e8b6deeae90ea29f25fbf6fa
- SHA1 493d7d8ce863e5dfb6122b397024a851879fe04f
- SHA512 16b48c25bd5cb709bb60ced1dc301245c3ecb065ad9b3c7749dd946f62d205277068fcfefbd447a55595ee5cfc50ddbde4df2550370c72b605e9d6550e262356
- SSDEEP 98304:MAsRmK5APhxYQosT6WusUwTS45kGOoyeM+7hqX5At:WQK8x6EckVPOoyu7hqpS
- TLSH T173E5235177C0C432C63322324F4BF688A6BEB5625F64899B37D42B5F9EB1581A634F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-4HK5I.tmp\zbShieldUtils.dll
- Size 2.0MB
- SHA256 976d070339c1ecd80d0d2ded8f2c3fd1c6ec03f408053470f696066c2bb2b738
- MD5 ea1aa2927ea58dfb8f57ae5f7dae0c74
- SHA1 f1c1eca6070f82cd7c7918eeda144a207a53bb09
- SHA512 20b10a4289bfaea9fe25bdeee636a07303799a78f0a732b65a182728bca9f48cf9802f32c833315e7d71a4816fcb9b7b09370c62867421824d554a87b6ea1559
- SSDEEP 49152:y4yxp/wFOn9xRo3HVCEi2ynjsPAXkp4K0x8BFuchAFotKLIk:yJTwo93o3UEi2ynjs4Up4KI8BFucOE
- TLSH T103959E613556446FF21B12355A38B729F2BEA3700BF547C73ED4AA1C39334428E266AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-7GIQ9.tmp\_isetup\_setup64.tmp
- Size 6KB
- SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
- MD5 e4211d6d009757c078a9fac7ff4f03d4
- SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
- SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
- SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
- TLSH T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-G3399.tmp\CheatEngine76.tmp
- Size 3.5MB
- SHA256 dc533e0ef05d4c140e03f50ddcc43bd882953edf9247d79bac5a30fe2f78ea70
- MD5 2dd329d3ba2220f137afb66ecc98585c
- SHA1 267c69e3a52a193bcd3108ad3be92d924c5d3438
- SHA512 9aa4ac18fb33e1138cbc84f1f65f343af3e87e54d37d4ef4a573159b022e4f208f43a45bb7831189aa7459358b07bd2b8bbb63802cb7cf945daddca37662e6fb
- SSDEEP 49152:l1PRegPynt6Si8zZebYZOHiGXs2krmh52guo/333TNS:PpeHl8YQfsGduw333Tk
- TLSH T1A6064B13F345653FD06B2B3A8D279384953BB66029139C177BEC3A8C8F395812E2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-KVC3R.tmp\CheatEngine76.tmp
- Size 3.0MB
- SHA256 445617702735fc5480f06ac72261bf85eda6a2a83f5cb3fb46bb104faab567aa
- MD5 e4a61dce6e1f6fa81efa27b517d0de86
- SHA1 4eda95807df3d95829708dbac1d83eacca97578e
- SHA512 dcc44ffbb8b425841d5edeca55d16016e1424a2ff46cc544343f77501a8acddab38cf4bf6f9c1d225c3dee2e9258aef197f5c2b978fd304b16801f659a300bee
- SSDEEP 49152:6dJYVM+9JtzZWnoS2VC23aun8+f5KuGp+VYLC3Ntll6333T/F:MJYVM+LtVt3P/KuGp+VYLC9V6333Td
- TLSH T13AE55C17F389613ED05B2A352927C1515937BE707A2A8C575BEC3E4C8F361886E3B34A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsaB5F9.tmp\INetC.dll
- Size 21KB
- SHA256 2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f
- MD5 2b342079303895c50af8040a91f30f71
- SHA1 b11335e1cb8356d9c337cb89fe81d669a69de17e
- SHA512 550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47
- SSDEEP 384:KOoVVefeWsI7rsIquPLNN546o0Ac9khYLMkIX0+Gzyekv:4VVaeE7wIqyJN5i
- TLSH T158A22B5353A01FFEF3E7153878B27B3745A99A6450938A9F07B32D8D2566282BD32342
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsaB5F9.tmp\WeatherZeroNSISPlugin.dll
- Size 695KB
- SHA256 070190292df544da87f84dc8cf8ecc0a0337085a3fe744fa60ce00a6879b6146
- MD5 2eaf88651d6de968bf14ec9db52fd3b5
- SHA1 1c37626526572fdb6378aa4bedbf7b941886a9a1
- SHA512 15754a8f097f9c8d7bda65fb881720af5e4c4db1e35f555563b9bafe6426a6a0e50953a47f628fe3dc0f461e48abbf77db7c997902ff483cf33396d0d8e2cd17
- SSDEEP 12288:1WNrNNNifmpPFyCrHQnfYWiWJHA7LeLJRHRNJOYHQ93AjN:1WNrNNNifmpPFyCrHQnfYWiWJHcLeLJ3
- TLSH T1F1E41AC0B325F858EB990671083572F446A625313761D8BABE8F7AC1596C2D6EDE0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir824_1126450252\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir824_1126450252\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 4.1MB
- SHA256 40f9e8081dc6cdf8dfbd563f63fbbc3799aea3b14fa13d44f1dc37b7e8293048
- MD5 d2feadf19056c36fc97851a6f8887d9d
- SHA1 1840fd9a09cd0248ee51909c134faa55f893d0f4
- SHA512 ac6fdbee221f6623592e52b5c97ad6f57d298fcfb7d898fdb0abf8fac20b34ee4a8a15c02798d479a126abac0a2c014ac261b6472b811394b564292902e4a5c5
- SSDEEP 98304:Q48y5fcZ9wfNLuyBGP0v2rOwY/BGbcvwarCpJ4tKXuEoIg34Pz1q4tWd:QuWvbP0iOwY/BXgpJ4+Ng3Iz1q7
- TLSH T13B163322B19F6211EA13F277D123C7E228A980227C4BB53C9837525D7BD37D41BE6639
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 bc8fbe8be972db7a75db304cbbd84e9f243bead66d8e4887f5bba24f7f42566d
- MD5 cee8832420648c3b0e7fbaa1921e30c2
- SHA1 3ec7e9a4a494353525da78b906b39ace4a7820e3
- SHA512 97295aeaf0a5373f84173ac0a8b557a4833d537b490cffdfd0569cea7d5b32dac3f9df6f76669b7432685a1e68583d41693b4b9d0570369e8b1cb88077d5ff8f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\7112d5e4-2514-45c6-abd1-92c7a4cb602f.tmp
- Size 10KB
- SHA256 3205fb22226c908d3eb4be0185e48e4ff6917ceace56d589f4630a9a2b6222bc
- MD5 8dc59de5dfe240ef6584f3857b9be6ff
- SHA1 a584c9a9b0a6be5713e5a52c3933fcb67749a7c2
- SHA512 8182751392b6ec77423e2b783ceb33773f6cf1959310bc1a8df1b961bb08d8325581fe00feec10ac16a117c6970a08da4510eae8266117b77aa51bd5e9fdfc1e
- SSDEEP 192:PYP1kp4E8uKpT3XXMyfywy4yUy3ynyMy0yGy/y+ywyqy0yByNwycyKyoySyCyTya:PYPuCXpaNFBCyphT6bNXh8H531P/e1sL
- TLSH T155223147AA218DBB0CE66625F654F627F3E50010E6517D99EBF8CA2C14CB2CD21329DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 c5d4103a136fbc7bbb4e5468a97acc7521dce20e70727c5331ffbe58f129e8d9
- MD5 eb159bfa4ae2cfa238de27a092b8e511
- SHA1 03758da8217699de0bbca126b9185fd1401ba8e5
- SHA512 1c91d5c7254d6e491b99aa97b08a60542dd68fe3937ae41864290f8eafb99b9fcbb554579b0fa2e760bc3ee5b8c3cd2a748a25913dae6071301f40e1686e4946
- TLSH T1E6D012A731EB3902CFD7013451224D54129B2811D0319B072485D36D06F7DC9DDA5141
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index~RFe5a9c60.TMP
- Size 48B
- SHA256 592f024cdde2f4e5236f91902d6c90bf6008be2c7629f4de96c7434c4cea58d5
- MD5 51524665af71935f61467729592fbe0b
- SHA1 936a3ad697c2844aa82ed4cf6d93dc989dd83c16
- SHA512 1df65b14696f6b67c2f4191d530c35be6aa0367735da764765733a062469e95c08375653d2c6ce41c824ec576aab28667e8c2cfff3d7548d88b9fc7f7ea39744
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\webpage_content_reporter.js
- Size 113KB
- SHA256 037a9f1fc827596e3065cb719cf21d57c744d9a44feb8afbaab9f2790205c3c6
- MD5 e9e121353c22b1b4791679092fef44f8
- SHA1 2ee9d5fbd865ec6ef44ee1d24d7d82f67b74c317
- SHA512 a04c94a21082d3d8903c34fe856ec9696c8b2e4be0d78d468f6c4e50ee3ae5966b6cbdd3f77fe485833fe7902ccc997e4baddc9574f9f3cb979a023f8b0269ff
- SSDEEP 3072:zka6Cka6Zp+4naaHV/VDU79eTFNoLPHXK8bdM:zka6Cka6ZpHnPH7U7QTfoRbi
- TLSH T1F7B3C989B3927199928320E506FF0047E3355D561C1A6038F769E4DFBC24A6A62FBF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\index
- Size 256KB
- SHA256 b343acf63d3b6a300a76ff98734f1c42e94428bbb8066ecbb4fcb88b0e7f3f5d
- MD5 581276175b2c7c7c9e36b9bc696e10e5
- SHA1 851881a23ec7f4d368e8094187c26639e66ad456
- SHA512 065ac90b359909cfab60a768c8809fa1e0197f0a86976780b28fab29cde98ec1b9c80b32bc68a77722266cae8ae33554650a1278a38df51eb68cebb7f19e547c
- SSDEEP 3:LstlNllkll/lit:LsX3lEt2
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 741fd1542b356ee609be7e0477df1a548c7fddcd92f31bd3ddcdc1176a032dd1
- MD5 276d907004bd808ac05108650216dd4d
- SHA1 3c49029bb5d5f077bd13154e19f2854749a8f0b7
- SHA512 6e0f8450aa094caf460494656c40042f2586586439da914dc7f1bf4c3b7c7f8086f4d59d5f9086a49bb88e6770f02aec4eac774b2f3854d308d5fc02df555545
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9bc4.TMP
- Size 72B
- SHA256 2e9dbe43657936c03d82a7c05b9657867e87737a66753cf3d63d1ea97c665017
- MD5 d4bc8a24b7482921b4b1e0e863cf8705
- SHA1 273044d443addb4e441f8d38cc6c6e8aeb5b1938
- SHA512 0cbf8a8e0dd990122eadc726d24edb1ef99a1ab34dd965fb8aafafab258ffd3a04cddf1273268836f86406ab653049a307d6cf04ae3d4f766b1b530d64b0050e
- TLSH T13FA0021106509510D64112B02D55C7891200BD35C005021376D1039ACCB08508925685
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 557B
- SHA256 7686fd43cc96e4b184cb24ae77b91393ec1c0f76bca5d9830127690b12a4e437
- MD5 7d1c63fa900c10d307b9959bacbaa4b5
- SHA1 b24d4ae00fedd6a97c93b666d893fd3d176f4083
- SHA512 d20b92291b34c223aa3f70f3fdaa230b2e4bea5a40f7f2c0f0ce2cd738f9e0f8903e21e0aca59a67fc13221a0661b0d8da979172e4fce58ef6574c287f52afa0
- TLSH T1ECF02662423A55D5A24183008332791979D556E159B50A5141AF6F032B88E3B1E65079
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 829B
- SHA256 fc307fcd7b0ca684609a8799702723677e18c8ca8677f1897902eacd6df77052
- MD5 d5190469e0420740c49d560ac9ee22aa
- SHA1 ff338fb809f6688e79aa28e39485829fb6a8b63b
- SHA512 a6c084b2b0689df64920405b009888c1a4545901de42ebc136aa87e8c734b6aef451a3be1b686511924f29aec6f7f84f3c72ee59a3c4068470bc443b729a0db3
- TLSH T13201CAD202B86F57E5DE1C8410C38746464780D2B832BC332D860E1D80016F308FCD2E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 845B
- SHA256 d54dd8fd0452110f41e54f0541a4379f17bb18bf100207e31f332bc1196163ef
- MD5 204781e78ffe330185f4219a26950b4e
- SHA1 c5ac6ded31cc4cbca0ec97091d1806397833bfd6
- SHA512 06b78da5a6657793383bc65ded677e90b4dd377c082f74cd331b06ac171252d3c991e71f64c856135ed58a4a8af769e6dbeab3835de47686ca2d49b6c14e6685
- TLSH T13F0196315A862C06F191CD580A7C99C872D6E1CBB2474CCD121B7838B0D887D59AC85B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 845B
- SHA256 6392cb6224d213292dce4692e604ec38a2984c45a8b53604c0f4139478882c4a
- MD5 d5e068c7e37d098808f0c24657281866
- SHA1 1dbe4b679709916656b5e10104a888f42f457377
- SHA512 46296adfb0736fbfa0e98be46eaa04e190edb7841bcfc6d67baf015b269e28776417c00154e27cfac2b335531f5282dc5c12032acf945602a744a633b46bd79c
- TLSH T1C30152F1595D3FBB0D4302A55F97A38590AA284BC33C0D5528F9598148A382DB5611B3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 1KB
- SHA256 26b01a5d3ca2839ea9bfff28ab4c1fad3e52e9fd27f6930f12daefb611887e49
- MD5 a477dd021c752a4b9133ae9656dfdc4b
- SHA1 b89030f32fc3270fd0dedb50e4465e1c9cd21ac4
- SHA512 2745f6239e15b69daaf800bd6de369d0ddc80f8e0e8e88343b93b7e819bae2785ce6f0f6246fc6cae0f1a781931801eff2ab726a9291bf752dc6ec262f84e0ee
- TLSH T15B21F97C9EDA88C58088619D61E8FF458572A7CEC8ADF5518D8809600CB10FF081B597
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 1KB
- SHA256 25f6b0f78f45c3c4c997e4d8b44edb2bae797dafc48f869c8649a7f6a0b04e9e
- MD5 b32bc62a4e3802c5150d04ab9b9d5ac6
- SHA1 dc119ac07f23a977e21cf7933ada219afd33242d
- SHA512 f101d91b2ac1b7935c0db2b94a00973e3b60e1899f11d477ed1c893dbf9d9fd4bfc2513a1329bca9c9baf1e1cdcd680a65dc46bdd8b3190709fa37063b5656bd
- TLSH T1412163A5F27E2952E7C2345D68573E64DCC02114642D79701905A3592C4F4F1A6D33FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 1KB
- SHA256 6ed94c6069e5c5278d16115c006a49caee1613513ab4067bd457913617b3e266
- MD5 79689cc77b4f4cbad87e1c57415836c4
- SHA1 ea5b55d5a24aae984af113e8eb3b99a39f776097
- SHA512 8615ec2473da37e5cc0c2e37996aafa43302bb11b07dc1f9f7ee819d51ef26588dd44c2a0de654fc41167a54b68ecfa0fd83006142e048b318e4e5b259f0a9ef
- TLSH T14C21F80C5EB46B1182E70E8D2B709E1A735A7C6E1592B2DC26073ABC681A7F0527C847
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 1KB
- SHA256 997278f9c74f41cbdcb535ecd2ba5a26688c94443158845a2992f7397d3278e2
- MD5 c8f41527ec474f17f3d4ed42f02aed56
- SHA1 dc5ce574177b5ec5417923e3bc6654df6f64f4c2
- SHA512 6cc689ec8eb2ec2523f271343ac574a1980bf727b8b96b5dc85d701797da047220adc57a2a8ccbc139817bf566a2fdae37f16552d80c98b727d8389d71e5bf70
- TLSH T122210B930DC02596BA5688093C57F0B391976265B6447F8AE7EBB5F01044B4C64A9C11
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 669B
- SHA256 829b6766e597543d6e3863b30c87b4f2ef47caa1d65d7a9581b8d127504a3d0d
- MD5 5269830ec535460bb4dc9516227eade1
- SHA1 3c5c935d91122ece816234db9f0b508bb987e8da
- SHA512 91f9ab63ea8a10f893bfeba36d1141c225df373ad9b1444470f79909fc77a810c0bd2aa364c7d4704685e54801500628a38b5b21ccd8b9aa41c4065c0b387275
- TLSH T1640183E1E514121188A881DD224DEFCFD4B36390FAC8FB10B0233805C254FACCF94E82
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw
- Size 1021B
- SHA256 d1dc014165a5ff53f249617d77fd94b6fd7810e8dad7acccd479b61f5d13d8e3
- MD5 212196dbb32b874e17566c5fe279f3b6
- SHA1 98ff71921b24c33ca134fbf94045a1d3a2dd0726
- SHA512 39583810b775841911b572885374cb345fb4e0358e8aac3e8a6b2e41ae2111ecf77f850bd6e89aa68969cbe2e102eeb8427f054efd11f35299acc71a80535fca
- TLSH T12811D8BD29BE0F297F00A94A0497105F64A344291D80B4F8021FA86B3A64A81A400B6D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_340aa389-dc9f-4ccc-84ad-0a56e2bac23c.raw~RFe5a9656.TMP
- Size 445B
- SHA256 450efedfc78938b53ecfef6c2ce84f0b039eb41798d064a55061267528b01703
- MD5 d3bd3b1781ae83e972a3a8169697dcad
- SHA1 9ccc1fcc9ccb64b6698adb149d7b86e803d836af
- SHA512 979a1eaae2ac05a51c9c0a0f91065a72d320714e2b60be8ca78df00a08e9a5b8b2f87095ade0efd7df012e3d555e277a61087c3253176c439625b894b8b15155
- TLSH T194F0233744E0C803A72EC44DA2AF8FC414A75E30240013123E907D1E8366E40E82E227
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 557B
- SHA256 25563650260fa55ea01219f086764122b740cdee415470dc95c531733d3db903
- MD5 d2560784673ba3f7645df90864b43f5c
- SHA1 68ac4fa503af110ff0eb0c63aadd294d0605cd51
- SHA512 16bad1bfbd8963145cff50047c73a78ff9d95b118a41cda04d0ca37466e94374a4f0117e541c081c4303e785057df6d074c9e05c40e750f727121033b99221bb
- TLSH T12EF096A589C0C34F00C919023C559077EA6F25B97C9CB1D403075611036C7521EE0284
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 490bad738fdb59fc608b9fb076c39dd7d111a1c22a34780614756e931a16cefd
- MD5 f1f524838f011d03fac9d7667bdaca27
- SHA1 b1f13fc319b5138917776c01b5af9dcc664d090f
- SHA512 7e369a440b8974f0d43e7b2b0dfd48c96665f679153269459cd1091e02296a24a9b16b79d0536a4b8ed921ae32fe27083cf2cd4a4daae5f98e9003b1a228793d
- TLSH T18F312BF4EAA5FE037D8562081968D847AB6259A18127F0776BB13CD7E0B80F0F3684DD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 dd9121c24a7cb8bca075fae1821bae4b56a0c5e09ac61f5ad9cc0c5e9391ae17
- MD5 0ecaff4ceb65fe9c84b75fd1ecdca3be
- SHA1 6dbb5053d70c5336df4c2cf01a367887f7ecf2dd
- SHA512 969e9ccc99753958d0cd695f3c9618ef452eae8ffa730718995bd45e4d21e2f0148515a8f77a110ec015f9c833f4a0524f07242e4e17eb81f184ecf47bb3b203
- TLSH T19331292DFCCA86D71102EA645C5C01CE7BD319BCD472BC182A99225162C91432B9BA3D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 82cc71ffb1ffffbf0edea6655664efb1efb332b47ea1f396f2b144f962763bd9
- MD5 26b3a2ae24ba3e1cd2a2ac7351214b6d
- SHA1 484142da91dfc1b04429ca98dd4e9f98eb7b7d19
- SHA512 4316aedc502328fb696d789b735fe7cbdb8abb1427607236b332a972b3c35427c319676cc719f74b3ca9c845ec15cf199a860d3df8ea90ec3e6d2518346ccd2d
- TLSH T1B9412AA7C00A9CE9D1D59D881D2BBB4163DDB4441569E01EE8CE5293B82CBE19E8012D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 2KB
- SHA256 dc8dec81caea7be5588023aa64ca2cba899ed094f8d580b1881da76e80650899
- MD5 49a54054c8d74d63d5fdc86cba610997
- SHA1 01c9710487ac863d84b256206208a77330b58777
- SHA512 f5ca2a53a0d3338e5741cd6937c96822cb51b654a39d1d4b325f0136b4acbfe3a442616c4a0707148d9039e142e37e0abf2af8ad670e303463b63d86ae426d04
- TLSH T155413CDE210C038020AB89C588B9E99CC21C595FA587203B092FDEFF631B7871D75361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 685B
- SHA256 6e8b594642d6eec5d8194893c6d18de73e10541fbbfb6076725357c5e55c2bc0
- MD5 c83cda1d288827ef01bd924621cf649d
- SHA1 96f39cc05c2fc0092f97c00a4553f7d9daebe285
- SHA512 06cb2e7179cce7ca1c093f52ebf6a2ebe5ec10442102192d2479774a8af5127c9ce82d099e3f3d11fbc22cdcef3f32324da06f522a01a8cdc8808070b945fbc6
- TLSH T1F4014446E0BEE310C3E7B31D74E03D925B82F5099265929DB0803123629959EAA25726
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 813B
- SHA256 475f1d39cfba1ad0003e491bc901afff6b36c29f809dcfe31d36aa9e518d630e
- MD5 ba8fd9422c79a254ed4ccd4febe9f6e5
- SHA1 f484a62601d56c5b2a7739690461ac25a178cffd
- SHA512 b84dfa29ad5b0c69e3240bb1b6c6c8b15c5c2a54f233a7a14130a6c065e034997549a8776c8c01bd6811dac51602ca45cd402aad0aa13d60deb0030878fd9fef
- TLSH T1030181844DA99CA6E35F23F8250E0B00260EB310302817BF9CF6ADE060CC8894493A62
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 973B
- SHA256 245b5ceea32432df6a491e6f955ccb96654e75aa98d14e030c0b506ccbb9fd57
- MD5 c90d64dbc2804229867cc5be00a4c94d
- SHA1 7a7835160e4b61fbd2bd4719b7ad4b82b606c070
- SHA512 1182ac79c65bfa572232e292d1edc92f60cda8ed1971177fd0ffffbb25ced2eff63f0a0f66aa607faf17ff240101c4ef4cb6cf3b09ce1299fa0aa721bb97832c
- TLSH T1A2110C98D80402432A0C79D0B3C79B1556FDCD43675899A035C24CCF671C2C8F30716E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1021B
- SHA256 c4cbb4ef2e390b6d596752de232d91d04baa04da233c1be3f3a4b0e78b1d8110
- MD5 b98b52b92aafd7d54fcea19cb4ea0756
- SHA1 9cebc6e9b59465012274050a5e6c3246b3ed49fe
- SHA512 6bde9941ce96d8f7038c0738d75e0c4bb90d675bb144d5ef2b7d3dbbee9ceafccdb9516a1120ae8847f768dc6babc2a821024ef50b8edf76672a94cc9b6ffdcd
- TLSH T1B511A8E7D67A7379605DF89E72D25A27E500CF80497471323D4E23940871DA8AB58C0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 6a1c135d98685dd0c7076e47bc5f7d4bcf54304959c1c1ca17fcf98c312675f0
- MD5 41f1d7d28600ea5b601d675089a8898d
- SHA1 b4d4f23f847dfd49d36930579e190a2696ff2bf1
- SHA512 30babb24f8ffbf3e6a23c181930bdfe72828a21df4c6cf1d8e9893f048621109425f5737f2ea5bab08a06f2339039c4c64fee1be2758eee2f0c65cca1428d8ba
- TLSH T1BD210A512C685F9901D844509FC3C010778932010EE2EC8654A7C4B4F12F6F5F136268
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 100477dbf02db631cf2fd30cd556f90632a6e7d4dcf81ebfc93096033891e793
- MD5 cca392c35dec2fa28569a33681f6fe16
- SHA1 bc28a8a054964d0791b4666d361d28a8ce47d019
- SHA512 209f3ec3e51aae20ce6b577bf397b5240d5f40976562d516fe8c3c4f4a38f686819ddc060cc1da94d1d1b5a5e8cd76f5f7a8605428e4b6852b00e7bde43a0499
- TLSH T165210A3079FE3D4C6D50191724D65052609879A189DD6B4383BF39A510FC36D74BC14E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 4c8443df636b368f7921bbab087b009c22fa0190200f814343570eb358f59962
- MD5 fb9c240074603982e7396cb2d8b49c3d
- SHA1 028b4b7032b0718c64f298aa51144f13191ad064
- SHA512 949c2a205a3a8aa1c06d8eb727385ccd5c8335602a5d2a7a3cff7d38fbcce9d50a7bd8c34b6f8a1493f7eb258715ff9ea899910beafb9686a73987390e543031
- TLSH T11F21E7C2A139DB40AC3120A5DA02F504AECE56B80B1E5B288DA911CF4A4D7484C7C380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 9e4af1a5e1a36bc5364d219c825fc37b284b1168e22373a7c0a33670b98b6d81
- MD5 49ae92b950bc131b207b87aae4769484
- SHA1 97eb8b3fa369be57f33fd150f1c509834adbaaea
- SHA512 caaa777902614c9d2f17a56d32a26e5c5776e76d08465459561d6cb94ec43286dc14752ab1858fe9da424ddd4d8763cd8f8b7d0d599aed1b403e9b5f037f35b9
- TLSH T11F21082CA3F5BC19A9D049B1CABD3672FE348C0F278F7721C88F49A15835F888069438
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 e35668e9221a10ec3037f191ac2ff17735ba41c41cfcfe45e678a8b768fcaabc
- MD5 1352594da1c3cc195dda9b0fc4e22b02
- SHA1 9743cf112994865580543beee78f5ca942183e6b
- SHA512 00d3b66193c0587c1d39e237ff2d9eced8f1b3f0a9787fc55ae4d8130db4fa141564b6b89cf5526ca2a325c18141b7f69d498ade0ea89b9f762194b01a558703
- TLSH T13B3119DF84501F0BBD3203645C33A6C4D73D95C468508CBEB0E5293E62D49E20586ED8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 9757f9ffbee46ab95a5bd5d2c4b433b768ae88e12bf19739ff2ac75ce92868cd
- MD5 858319bc7b77b394ce12368a39e2df69
- SHA1 671c2bba13be8c2ea4d0ad6db4386d47b064f239
- SHA512 2573975d8f559c8fcb9973c6c5a50d1ddae05422af6939bc60186f70df1ed9d9fb68382b134c3a9e0bc9ebd0c2479030ec44eba51ea09687d0eabfb4b6c79996
- TLSH T16B311C64D113CC7749F7B133520D38D5BE0687DD7A7E812D745D16880712756CB65A83
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 fc408a1119dce0d833a47de17060cd7b9949ecb5ab685c132d0d023695c7c5a9
- MD5 cbc781fd53b70a9ed7f6d423e2fcde01
- SHA1 ef4418635ac011cf978214c5ab6d838300b3496a
- SHA512 99efe849b8d1f3c0a976b454e4cb60c6d76b3181e46c505e1cdf80681b5522e25c68f6696f6c9b18ae2265d68a7198d6f6f125305a7662ece7eb45c2c6766836
- TLSH T18331E84EA711067DE4918BE10B6A96A1F89D6D58AB115A2E0CD3E634540AED513B0B30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 949c431c18c05b6235e250c23a6e72b24e0bf4f1fed331467596117f0c241b07
- MD5 f4b8d6f1302997061b20594c87853bfc
- SHA1 86236cae5ede0c3345c0786b41919fefcd912eb7
- SHA512 06bd9eeebf11c057f6d7bb7de8925e7a045b85e7f6a60779bf13eafe259c91a8f41a76e5d0058e10792c1821d000eec622d86de25a0f98607ed6a84e1dab3c84
- TLSH T188310A82BE6F174B8EAD508E51A2E500DFA39D50B1221DCB36489C7BBDB8124C0C835F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 1KB
- SHA256 704af759c9a229ae0d65448cb4713cc6be7f965ff228a6377e8be5ca9ba6295b
- MD5 763aa7bc695cc6624ad03e49a295c939
- SHA1 6b97976184796559039b45dc6f9de867a9c373cb
- SHA512 7c6474617c08fd86a34841cb2cd13790848e3c280c5a966c6980a58a4e69e92674284e2a7efc24c4394215b5f6300df192e103f76fc797ac7d2dcd257233dfa4
- TLSH T128315C1233F8CF671B2CCA4F12BA6AB1A8013B2043C0873078433C8534B0415E9D8DAE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 1a5dfde6c9e7c54f29d8b032d222e2db9bb255a241c6ce85ee527794a7452133
- MD5 ab972b4fc8cbf6302cfd3b156635f13e
- SHA1 76a8fc74130b199f16c7a5030afeb950249838d4
- SHA512 dd8ee9bc2621e963fc657fa7386df0231ab66fe6bb6654f9253d8ec76748af93088740f8bb1ad5e62a383f1791b3e0546472c162a81bb2a84d58180b71cf3883
- TLSH T106613B49D5F154A7010F0FB01FA7EC25FCA4F19841373DEB1EA67E0C6666265942B32E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 17a3e212fc9e850b7a1ea7f9555a5db5bdee2a6c3a952fd4c1af03ff5e225ec2
- MD5 77de21d251e0cafba74894e66ff5fa81
- SHA1 ad227b8b7374c483ccf3df859a40ca9a8abd25bb
- SHA512 f807d86c136fbf64e5e157f8dc238f961f051c93461ba8442d32fbde6b7cb771c5aeb35197916b36ad1dbe7b9d0bad4b088cd094ee490bd8202d2fbc821171ec
- TLSH T184616FFD9C94B37D12E41FC0A0F2CA9358B39CCA650322B4B532891EE725DFA1B54162
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 da188646a1bfd723f84c275dd7b0f771c2d2e5a1bb7bb445f8b8a5789e266978
- MD5 f8f7517fe28e166824d4dc3b9f5cea8e
- SHA1 88c92d96d91d0a70f85d85eb658deb2d688cc516
- SHA512 522f2b430fc1954f98d26e7ddedfefd04509bcd103450609650e5de0b64dcfd0ba97b1e5c10f516a0950f79a8b72e735ddd386333555ab8860c4d99943d77834
- TLSH T18F614DC9EE6DC0B4EF0EC71ED6B81774B6702858ED9F35E440733246FE5241562897A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 0aec6c951d1a166cc40fbee48b7750e72f6be1981c03899cd01962d6ba651e34
- MD5 8f8d7c58365ac26e500369800a81e8c4
- SHA1 48531f4d706446427409c996c0aa765a953c6ffc
- SHA512 3584d7bd7ddb4570ab905ec6083d92c27e9d06b6eb06af06e6a800fc2a31d2c136a34fc2970b8868210f6525fecc0faef3aa5c57166e936a3a07f3275d7f4505
- TLSH T143615C2A488FC4AAF58D5665CF623DCD44149EEFB17964FAE459E242963814303C5C16
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 5b7891365aa9ca005ef30c46e7976e7b1eadf0dd4c27219462e68a35a245fe43
- MD5 c75ae2661865c9a35a8f68dd153e2a2b
- SHA1 3e0fb019a5c1267756e232a275a8094a6e8b6f23
- SHA512 55d7a8a9492456243a81c3c39ac7c0e4572b720226ffa49d936a340e45278a9353fe38bb020ad115e8ca88ecf9d696d4c879539be6512be50bbe3a0fedcfa12b
- TLSH T15B618CC41CF22562839CD3406A2F19F29FE435A01FAC0607EDBA500C33374F85B246E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 4ae274134145decfd505ebc1e2d134e5f35cb923d1e830385c6861f3616eadd4
- MD5 85d319dbcd18ae9a8d177b9e615aeaa7
- SHA1 7664d71ef49b67e53e2178e42a9e53be0541f7d1
- SHA512 a041e54759e69093afbd398beb8f04af38f2ddc8d651711c4fd2ef33b3a232af022f6e5a02fc0449d374516ddc3015fb59ce7e3db39dd515e5a9be389f5a4959
- TLSH T1A9617E4010E94E5C9F433A3674AA3BADEDE33E69497809C01C38E139B78C260F805450
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 d8740bb575b9c4df867d6c7e09a748acaada54f99a28385ab385ab007e75c601
- MD5 3fe4e520b39b2ccf8ea18caafe087fd0
- SHA1 7da7d7e2b7190811588859aa1ff85075449e501f
- SHA512 4bf6dff15b9d0156db0f99013c28caac603c9a447122e13cc4f2e2461528721886b616b0d46180a0eff0f799e0c64377802460eb194910d8be6973ba549e790c
- TLSH T1A4717DBC0758312681ECADB020BB1EE54D215A908355F9B1D0DB9C6E2E3DDE5C5ED630
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 b65122819554de629f06c33b2b028094bce0094825c04d76d32aabad6a1b82e6
- MD5 130650e9c0b8039386399146b3ab4ce8
- SHA1 ccdcb47fa2c65752d82e4d302a4987599d764f74
- SHA512 9a90dd6335d1903a3b7a697abe14b3c9b90224f925163cc721f3c4ccbf2b7d2513eb5e059a5b26531d7f3cde24ec21f32e6943e29393689129166bc28dad6eda
- TLSH T195715C2B94370CF1A49E0217E52A66F55A63A40F6C726BB659F93402032EC1A5FD7C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 9c900dd9d9c7ce52de400a9b575c6079fe32155676bd391c30e07eb83653983b
- MD5 3dfa0391b89c7c2c47e62074b2da1386
- SHA1 445ed41460d650decaf93b40a43534ed6ac6abfb
- SHA512 16dd060819c2a2a30a6c3365c9a76531e76cbf37606134c53e3e192f2214a30f9d7aa67f731c8e414486b877077adf5f415a3bf31b24f17df566c5183faceff6
- TLSH T149716CB4C60D07A9A1CD4CBCF19F8792E154DB5B892AC71EDFAE809A22AC00030ED050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 b8d1b5f9064c81a592d4f5fdf4fa05a0364131bc3e182e2e7afc5659766f9de2
- MD5 81bd4b5b73fd445a74d7d66987b7e313
- SHA1 66bb0b9727a33cea6ce0eaf9b0c0489795e581e8
- SHA512 a3ae43a6a5663f32704432a5b7fa4313add6c9fe04ba82834ab0b7cc97096f6e4168cb2d6e7af9cf1bfa83dc2ff2d414b74e45bc23bc6f16ff35226f28df6dc0
- TLSH T139716D7751F8A8B20320A0FDC2E915034646C5176AE67FB8330FC178908FB6A1D61D5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 d738b27266c24192de6a6674150c094e4d0a83ccc969c4a4d8a28674262be8d8
- MD5 9919410cccdf2e7c6c9d75d7a4f5aaad
- SHA1 f4b93c640a60d18d9d9f9d3fe1004a6bbed9bcaf
- SHA512 56d5500b41e94d2bbb0ebc64a670f717d4c850c61ad84981dc4703a2f4370f5fae514eaee4900a413878be02442c386b35f0f694c1fd3160a34d210440ff5be9
- TLSH T129716D573E00EC0A18D5838DF2EE5666C909E500B1E22F6B8CEFD26E1A2966FBD41404
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 b44af3d6c7fd37f7fb1b4a45cda719cae8fdd357929ec38ecef536054628e6cb
- MD5 c555a16bdb6752e08ad75949f5ae7664
- SHA1 5cb3b3796a6afe75f350119171d1676cd50b3535
- SHA512 2beb7b538cd3bf77961d439116bb64fd9532135478d0603cd596e7ac9d63448e372ec9977a5ed27e6573c991f5b818577ab9d7239e6c3588b00ef8176106e34a
- TLSH T1FF718C15E0D0377D2EF00DF9345EE3900FFB731A111B6CA224E0AA20F0B28599CA12D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 c9bf08200fa03c6bbdbeee3a9b6cc62114ff055a25f501129767262a778f6eeb
- MD5 3b7c88603d180c92d6cf554075cd3d09
- SHA1 eb898c4a79f12aa817d341690874b4cea44cbf1e
- SHA512 d68edcf5e87746c18091e5bead42148eff253bee627347c1108d7e2c38c2887469cba30eacd44e0a247f9ed471d2960ab8e38364cb8c69c4b95cdfa183ccf368
- TLSH T1F5715C15B73972993475FB08ABD95448A04CF4DEF988B285DA507F3EBFD220206807C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 1c2c2c47ee38725b307b3fd68f43a1803657ec05f6434bdb674f748cb367822e
- MD5 f2c093be5757391d4bcb1cd447e4e37b
- SHA1 84a75df5970aa2828502cb958475c410e0308780
- SHA512 848cff89c8a8171c0514c1c06626c218f80571354faca084fe67266789be0388f1f7b43f25d46fdf6b9fa4020586de7e15a2c6f6bf130cd3c27652f029c0ad2f
- TLSH T170716BAAEEE041DE7A5A036FE00FFA74E5ACFCE5F7CA56C674A000510781974583B410
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 384a228318f5790e8da90f87ba66877f49caece4de6fe4c390ba3a8af1d114ef
- MD5 539f211a2462ac0a5b46eee08fe1b0f0
- SHA1 627fc38b6e97be28e55bf9ae2af6cb1b9bf96da9
- SHA512 e7ef2ec732e0bc093a3af50b0e96699c8fdc356e4b93e5e691d7b1785be162286632f1597a81fea02143ce7f1f6e2af496a0ad73effdd9212a64a28ac3de1a25
- TLSH T1D5816DA037FA5F1195EF4699B1D78ECFFB211C20806A2303890DAF934FBA3DD1896046
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 fddc8fc4eb71db6da739cb30b08d1947228a6a5ca0b9cc35c474f638f16f367c
- MD5 4a3281252e4df9643ddc85349cb04f26
- SHA1 3924d9a3cfead2761be924e8dcbae9f27594c02c
- SHA512 fbec5f3ac615fb8201dd919905ec16f5ec8a8afa65914d60a606fe0acb64eed9b960fe0505a0bb89cec57ac3f5ae5541dc340a88bff21aed5349040fa026635a
- TLSH T1B1815D87AF4F470FA94EB0F40292816FD43C65A5917A4F8B92FD0C45452F312889955F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 ed91790e8d22312da102a860fa91c662a014a19a7a3f82219d8e8ac1a26c4295
- MD5 bc25fe2bc826c2e021ab95058b809fb1
- SHA1 ab6ec5f6ef37d3f13f1c32173252b830a814be84
- SHA512 4369a9325d6cb8a0cd5ec9d162f22cac698d4603b08f0d2155f3d4c5fb30b1bc35591fddee3e7f467dc5713ad5745499dee0838df68398d0adbb310d24e08e77
- TLSH T174815C05164FA09ADC1B4280D6312C030572FCD7EEAA39989DE3AA5CD751D7C5A41B9E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 98cd0b0b420be2a6e02c058941d0c3822fae96cf108668f5e0314670f238aee3
- MD5 abcbee9cbd9e4523e41a71b39423f09a
- SHA1 9fbc8e57405f85d5c9ce6429fd2b77167f71823a
- SHA512 089054ee472c4a4583c801aab643d3c4b1663041f6404f2a8d537c50f61087f695a09fd136201166d648f2ca282c28cb9260d2e23338fa9ee187c0c6fdd644c2
- TLSH T144817D88C97778F36ED5775C1998D4EBFD00A1805D05012B2D03503F6CEA7E97B67019
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 816825ab911a44de0e2ebae34b3f24ba8b6e8d73eef6faa48beed2140f2bc7f0
- MD5 ca3316c8c2e6f491334d9061349eb21e
- SHA1 1b8a1f8b0a459ba31a32c253bdf14fa50ab6e702
- SHA512 267238862347686703e5132d4fc013cc57fcbd521191c9c06007264c8bcd3f7f9431da7f7eddb11efef1e0b9338dceeb40a702efcb611bf7f40cf6fb976024f9
- TLSH T1E481AE20030269FFAED3DFF6541397B9CF103870856B2CB1616418BB23B0C68990DB8E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 3ba296d90b82f31b8501448a4a8864ed141dec7dcb9ede9b48eda219e8db2676
- MD5 d15b3c5e505261b177961ad9503b7d70
- SHA1 a2e3cc91f28b0319f65282624b71c6fd259d884c
- SHA512 6bd74e888672241021a50a738431e88b45759298c51486f7527e48bd40461cabce62026faf97d2529ad9d89cb866725208ab0d386b921f24062467428bc274f8
- TLSH T1C2817EC73B556E5F58BD24AC0A874BE141CA586CB87A121805FE7381F7BBFA1C1D501D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 c870620fd0e4811f2e6325668d8d65ad62173cca3f575a2e646c4933f9ee4fbe
- MD5 51943d2ef3e826a1d1a6b0ec3ca3eebc
- SHA1 fbee556fd850d27a2f3682a2da702c1729137fd3
- SHA512 648d5294ef1b1c3bfa6ece2383c58151692c52b392a295f0a6aeeb6237035547b3280d0a85ba1a47e78e4849741308340eeaad6aca83a93682704bb9eafde826
- SSDEEP 96:88/palVQpBD6DUga2RrZfDVDAF4LsL5d5vLpEjqwdQcNiVTAVU:P+Qb6A1kZL844tDV1wdQ3T
- TLSH T156818E73EB43AE16E40BE61E2A874545CDF60D4382C385CDA939931793DA808A05DCEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 07ab2c19f8d341b415ec9683b5beeb0e4e419b7f24246772da203bbe4ddf4f06
- MD5 6063bc743dfefb4efeef067a06117f74
- SHA1 d6a2645836541b2925417725f7d8658e6fef8d5d
- SHA512 9fcf0bf93952dbf7cabc02b15c5cf491aeff987c2f6c408c6c84922e88da0757e2df3d3279495b42abc0ec70b081677cf96f4ca60f942909942f28415c28203d
- SSDEEP 96:6yqAkNhHXWpxCmRNMxoykQM6XRnPWJdxw3r7IlNViGfV:6dAkNIpxCmRRyLlXsxWr7IlviS
- TLSH T177816DDB3B1E17F13496E2613E68C8746A5E407A2CF53711D79CA5A485523CF086B60A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 770471ea6a4992b38ae8e99015f7b4ea992dc9676e5c799ac0c08c35ac150da8
- MD5 05a15685c41639d90cea3aaf33efbf2c
- SHA1 e2b3ae726c66f44dfcbda9ddbbfb32c1b304257e
- SHA512 4864a3e8ed29c61278671f981181061e1652a13d93a20a3c44a9070193c8a7e08b83a6ad8addb4c837b2769eddf673affce570794b28cc906cd74f7445038f1f
- SSDEEP 96:Dgr+3uC4Rb+ipS1mx0OrBK6F1epaCYf+3ZebL7Xyp:p3L4Rbbg4x0KTF1eQCYQ8L7Xw
- TLSH T19D918C31E1C9E5DD323C56830328ADF5FFF49ECEF9E87C2A8494A60682C418C41F9121
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 f9717237621c440be2eb6f59742477e1a5baef096df6cb196aeea2253d94b492
- MD5 9a959f3b451d7d1cbcf5cf1bd975d245
- SHA1 79a3d220359295893a47fb38bf030a2141f53c2e
- SHA512 96fc2600506b13297e656b8e81ff0e0020a7b68348c68cb3c025f8bafb60b6e40889d7af32c5eac2595afac3c0fcad4b960bb8efeb5152a387cb4d91a7654c06
- SSDEEP 96:iEHN/2RbD/Vu51v5Kjrmesko3s9Nwl5Ib+NjHqhDF49C:iEHNE//VIv5JesZs9+l8+Rqzz
- TLSH T172916E7F6975B190ADD157F3E233D945009A3D0EBAA0231AF00B03EF823725C485DE15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 a029029cfae3517b56373c3caee61f1bc2351ae5fa96cf6817b34baa4c672dd4
- MD5 3639f54466d7d104c972442131149c02
- SHA1 a178bcd5eb7d99cc45adf282ec4d2d85340508ba
- SHA512 65d9100cf57e09e9baba6b5804fadd535bbd47e4bfb31ad8314af9f16a3dfafd43e3f0e0850e35c131eee4d7336bdc0b971b1c119205d5c3212c5afdc8f91992
- SSDEEP 96:4XIVHtYMYEwz+XsTJoQn8rgS3zlA8CZ3+LlchuxySQv1vbtTrR:rVHmW0S68rl3R6Z3+Lu5xnF
- TLSH T1D7917DA22EC1F3B1CE01485A19CA205F968B2577D94117CB3CE66D52B42807C762F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 5KB
- SHA256 4336c72e28af695cd41815ebd764dc99818af62a8f8d0ded5e7d47b64750fcdd
- MD5 33c1863e03a323d019259727f39a8784
- SHA1 3c8f42a0afb9bfbca66b4d3e2017d229b8d39b83
- SHA512 35a9ce10814c8b121d2b3faabe7efeff9bbb215b040a1fee6e0fbbd73762f53d3f4f0472a6ca2498bf16da164913e5f911619fc764f4ddc1b356110174caace2
- SSDEEP 96:5FFvzOWGrwHrEdX3waORuEUSjXQ5G6uWQk3yCZCnTwETZJxjLNqT:1GO4N/O+/VQk3yPFJRLNqT
- TLSH T1A5B18E7263AEE2D3585073E4E643B07D5EA454DFD9BC92F6405E4C646DF06F0E648123
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 3KB
- SHA256 a9954cc53001d96ee708730ee775324c95e670a11aac2f1502fcdb9b521d247d
- MD5 73c013791b4bf3f984552f567e11f0d2
- SHA1 a69159a8eb513f912565dc3817107dc057f70219
- SHA512 9a8064bdb8b1fd9d67328bed794331c00ffdd2d254337382ae2853b859cb4c8b0b479cb4c7da65d4fbc0f11bfca2dd94e6c3828c8b9adfa1e446c010078036b9
- TLSH T169513BD50CE2E8827E1638708066EAE3FF3A459A6905156F49C9CBC8F48667A5328121
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 5KB
- SHA256 14ea807d00805b041a2d8cbe6c7ec7a95932645937ba7e130273f69cbab6fd65
- MD5 0962241dba1743ee807d0fb628d32648
- SHA1 9c3f7291bcece4bd25d76d6891537e64ba65c3ce
- SHA512 54b94d41ebf15bd7cc58331e4e44e1a070851603d4c640e7f0f4032284a44c1313bca0f8db347e089e33a9dc7b1fc59d6d058dab23c82f7cdd7a3efdb4470d98
- SSDEEP 96:HJnOVK5FQKQPHZ+6wzZyo2GRILMmkdRM7oeEU8Rqiz51ID1UKZCcnO9/5U8v:HBOmpQP51wzZT2GRIoXLM7oW8Qi4D1UP
- TLSH T1F4C18F26CA13DC350E219692C80916DBF184FC827B688BAE1E3C234712F9F7642645AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 2KB
- SHA256 4d5ecf8f3fc7507cc97ea250dd99c6ae9e23ad7e1ca762e8add1ee4dcb652199
- MD5 eadcd4eecd3f882100942339046219f3
- SHA1 4ae6494df9c3fd35f0c64592d36f60f3fb8381a8
- SHA512 14fabac46db58b9705c5ad3a5cb793404fbcb2f851da8292ddb7509c806b83cd37df1232f024e34fdee8503d47aefc44d40ea585fcda76c3189883d4bd6ccc95
- TLSH T116413A1B25DD9834196BB3D0E5C7E172B7F39425F10627E97410411262AE972EFDD13C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 2KB
- SHA256 1eba468564abffcc47f7b78f819e754d38f745b8c851a6643fe0057e0d91efa7
- MD5 d7b5b885f4203d1b4d5eec717f34b0da
- SHA1 f4401cb029a23e73aaad0aacc3fc6251f965a7a7
- SHA512 bec4caf0dd151b2ec9db1578c07844af14abad4804dc5f2c853d9a79ae7893dce4e34826966cf78efe50edfbcf5825aa3bacd78c426250fcbc2c731665065c33
- TLSH T1EC4119134510E7575B0646765C9530EB3890D61A1A2226D784D6B985B3208DDA9DFC72
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 4KB
- SHA256 1f73b04407d52d3eb2236c377244fa0d3c73abca05ee37bf20e14e0b2776a05f
- MD5 fe2ac484231196bd2e148874aec5ade6
- SHA1 fc754656f94a70e0bab5086cf219954cde645bd3
- SHA512 e6a86a3f86a75638328ff24cb423a6531db9dda574a9b418b58adb0caa913abc137f3c217c90ddd6378ecad5ab9a04c8b86d7642eabc5b8b323ef709ec6b904f
- SSDEEP 96:TrkJxYM/ynpSzCM5+9V6OMxjeYop9rFlIhqadR9oan:To8tqC9KZxGp9r7Gn9oan
- TLSH T187918E91342C860FFFD705FCBB0A651150F92A55508696012E3751A22FB0D6898CCDFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 5KB
- SHA256 c0265f2836458a9be84bf3f3981682d6b718fc56614e64b3cd23f218a59db803
- MD5 fcfc68c2df101f0aabd831c1f9afb040
- SHA1 5f4fe3264ca2118c840e9993728064e4e85e67e6
- SHA512 f10345a57b0ba24152ff0e3215156e219b0c469f2045314f2fce5640e2dffb484a2dc75b27d3bd49bde88d85d0894aad8eea14c77c219cfcee2005581d744a9b
- SSDEEP 96:jjaXDxxEwnZyjP1tl9xpzsOpa5zg9aSTDp+RVNIRaRvGS4kWfergMMcFZWOKG:HcdxlQP1tvxpzsOpOzIaEDYR48RvhWfG
- TLSH T10EC19ED5509A5274958CB34FDAC13A4FED1CB1F010B788E8B825986A1C50AF2DAD9303
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 6KB
- SHA256 b9f2b00f64d1097c781159f4b38583699000d2a72ea92c7148b5b48f5342ec2a
- MD5 bdf1f25c3bfe2a4e297d5973195ddbf9
- SHA1 78ccf39d65906d0e9038b81ed29dbf5b4ffff85c
- SHA512 e2f2ead540c946fc8bb3b0414aa02067339f67264d7d5696bfb5ef4d69bce8fe4058c6df1492d60e25cc74f81d916091a215c4bd13fcb0c8c3001416de51188a
- SSDEEP 96:awGviIqPza4933Tnw/e6uw/Z5t9vy8L+CuG/8r8C91EgjwK/I2KoReaOztoV+76N:Svi9ZTnJCPvyWAV91tBw414eAuh
- TLSH T175D18EC3B8259B22B9E3E7652C7D8475C851D163081E272803F91DA68067AB1ECEF4F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 11KB
- SHA256 e8aa58301d17305575bd6b0afec008a3dcd876ce8b1e89d1731bda7ee900899e
- MD5 3a86cea94e392353f0c0af7ce7a5f41b
- SHA1 c801ffeeef3d9b9d4310610fc93ae7995ba56c8e
- SHA512 fe3b8a9327b97094164184f18d616b18d3d1cb1d877a90d745bc8ae1fcd075b250d650f9d06acb3596cb59d7e662c3ec2e4824b44305cfda6b9b5251f4367142
- SSDEEP 192:sljFeKftcsUYe5GQyK795IaYViyANmbFMdhKwh5dNgbCZ7ET0ZAjyXpgnSq:sl3tFtQywYViyANmhsnNatAZAjyK/
- TLSH T11C32B0E74BBFAE144F6D719756195005F9421012C19DA81EFE0C5BE4F0E2C6DAAE123B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw
- Size 5KB
- SHA256 156ac8ef8fd6af67b4172c225b8f259160f57d4485eeda3a0df29ee43fe4024c
- MD5 3627d1ecc3e1f56ac41233ec92e51c53
- SHA1 091ff1b37f6ef0af2d1d650ca7dbd087165eeab0
- SHA512 81aa3098e4dca12bac8e209053683a6e924cc3adbdafa5421779167333501d6b9eff949d5ff1b99f9085b67c85c85478d2e57279248863e64e5dc720b464d8d7
- SSDEEP 96:G7HXt5A/n6jpLt1/OOAjEkdd1sYCN3NbnxdlhWD7JJA+KV5UMSPq/GiatLRedCCy:GLXkf6jh/OOoZ/1sXN9TxdlhWD7Jij6n
- TLSH T18AC18EA47500DD178A6361313DDB5CB781AF48C2AF2BCD74600E76373ABAD92812933A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ff0fe090-87fd-4387-afe3-233cde825a11.raw~RFe5aacdb.TMP
- Size 445B
- SHA256 a04e60c355c71c3c2221889fdf78274d1ab2cac839b9b7d9ed3473e765146889
- MD5 b8597cb0ae289b3abaf0e841e924b149
- SHA1 8eb5c9ebceb89fde880708945961e9f4322e1e17
- SHA512 9857b77fd1bfa46f11bcee78020e0c6e541f850d7c7d25729c02926d585c2b774c455672a932e90ae7f83651aab83248f38f8858ca991219a7fcc92a53eaa83d
- TLSH T1FCF0DCA3AA8BFB01D44889055B6F981900895698F10613B8382B79950B70A0E0F75A0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.0.639895775
- Size 3KB
- SHA256 6d47dd6903001a55cbdc0fdfc3f13189c59335cbd3c7c39c1464dd75fb8cbf36
- MD5 f5a9a18ca106d457b007f74faa41a93c
- SHA1 bd811d2d7ddc39c709c229da22fe1a4b4b3e409f
- SHA512 a1a494450cc2da8e639039d644608d04ac28aca2661d43b78fec85ef8b3bcb809666d67e0dd562dec50726667ed514592f44deb127336e9c9b926585d334c4ac
- TLSH T18F6131409C851D75EE99CBBAB7F23F268FBD84A32115A59931EF000E0AF97A74607217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 418B
- SHA256 64e3b67c58c2aeb31a9fae47261634647aacb694a16aec348c29b507bf5d6514
- MD5 6bf11b809df32fa5f227005b657682e1
- SHA1 31afe5bdc7a63edc74859b8d70b4bd3c258392bd
- SHA512 bb834f97e2dfe53f785f80628c6c1be3ea6c0b146b7f313b30373b98d1f245c3bfd437d897319c7ca30c697ae90de2d94b3939e369cd835928f5b71ccdcbaf22
- TLSH T17EE0ABA2700323241F650BB1BA39E23AC5E78042A88088D65848241D22BA17E86062E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 516B
- SHA256 1d9d87feb2854683b62d35a00fcc548d6e215a207236d1cbccf2a0547b86b532
- MD5 d952b2ac70ed593b13b27b69c2b4bbf4
- SHA1 d847e3375510227c3759c59e72249d86711918e1
- SHA512 a7c88286667813e7e6a9d0a513c1ba8946a2281fba783c7b87effe62cdc1a1c6566e5b857be522d9849a2d0c94436999b1ca7fad97eff1ee900b5386e2ca2cfd
- TLSH T1DDF09EF3B45233240F664FB9BA7DB56FC5B78245BC4146CA4544205F12B62BD9606AE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 606B
- SHA256 f3fd8993b9150035e213562593f17e4123c0dcbe400d185227caadc01a1ec81a
- MD5 4adadbaddba65261cdaa664cf2138ad2
- SHA1 c198ddde12e5d04da3f3c1b6a6ba2291385e0426
- SHA512 0ef6bac27ac30f45b63469cd02f02bf8937f67e0a31315fc5347314be26481fafe0adef4b287f4c88f22b531f8debd7f29864ea00186ec42d3a2e0b1b710c3b1
- TLSH T16BF0E1F3241177244F568FF4BE3DB16EC6BBC195AC4185E68448545D027617F46057E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 693B
- SHA256 b6c0c13703c9d57014848df6e22dceb1e1056e5d0ea2ec99e9154e44ddd9acb9
- MD5 3235366eb8ecb104361b9dbfe40d1271
- SHA1 a1fbae6d701703b9046c4daf4287170a1d036d14
- SHA512 de3f707fc3420b42b5fc18684cb8dd4400a4346c38a9adf1770f23ed61d3508e81c8b4e7514ed92b06c2dbb8385e607e52c4006dcac54b8caba6575b423db58f
- TLSH T1A10123F32402A3200F558B74FA3DB11FC6B7C5C67C4094D6C80C206D026717E8B006D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 787B
- SHA256 8d66c447bf6bf50eae84dfac2d553104c066fc96568daf21e94830afaf82c99e
- MD5 a8b296acf54f3ae2b4aa502f64292533
- SHA1 d41b784bb98b499aebc93c428a85e4965ed33cda
- SHA512 3a18435c088d44a65ecd011df79fdc199eab4edcbcf8b209f4124076200e7357d53128e3417a2fc652745d19363bc2429343592488968a4f92b572052ba89bb2
- TLSH T1920120F3241293204F558B74FF39B21EC6BBC1CA7C9085DAC80C046D116727D86052E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 883B
- SHA256 21134e6cf9c8d9a588c13cb36da7a2aab3b5324cf292afd893e7963aab20e6c3
- MD5 cc5fca39c4082a771f6f5255f273cdae
- SHA1 913aab6be7ced75fcccb057ab5607f26207e3728
- SHA512 c4b0bc2fd86cbd92cf9e2a0f79b3a32de378e1df4689cbe0a4919edb9f04d5376610554e630dc07ee472dfbe48b124bc45a46870accd4717f097ec01fe269248
- TLSH T1991112F3641253200F194BB5FB39765DC7F7C5CA7D50D1D6CC98589D02661BE85016D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 973B
- SHA256 835d5046e2cafd28a6c119b49bb10b4fade75ea7fe38cc3bfc9708009318e912
- MD5 17782bec04575e44e4006ddf03c4a560
- SHA1 11672271cbffd65d63c4c46dfbe0b95e0872dae3
- SHA512 575fe06621f6590f2f8db1fc4a354adff771a8159b4fe62d81f3a8f9f25e6bc8590b7c8ec436ba099f623357ccd93bf82bcb7180e3cf1b5e5cc8b12d0456cf69
- TLSH T1E61110F7601143204F5A4BB1FB3A765ECABBC4CA7C95D5D6C94C586E02AA1BE85013D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 1KB
- SHA256 6bb25389b8b4d49a7f819eec35b827a72b6f47c186e44525fbe33501f34c0616
- MD5 fe0fe8b638abeef591e169e8a8f63d92
- SHA1 037f51d8505bc2e3a018699e580ef60a99335755
- SHA512 439a8332b19ef8b8a9b6fdff3d5124f70e852c0e59c7c66acc3b7f76d319752132d17c1865e4ad75ab6081538740d70c424a834b1997a69ee438fc586e85764d
- TLSH T1F01102F7601143304F498BA1FB3A75ADCBB7C0DB7C9485E6D99C545D02AB2BD89012C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 1KB
- SHA256 d0527957a71e8247ce226842611620ff4e52f37833564e9fbde8f3fa802af7d3
- MD5 dd359273b7ed5e2eab7887c0e3085b01
- SHA1 d991d5c7ecbe6a54d90a30dad7c012cb5353a9d4
- SHA512 5f7b5a66753ae00cedd0a8a8b3209d4a9bf664c61ff52b2f199e18db5f8abbb457462f701aae0c857ea429bd0603646d4b91b62e1e2d1c5113bcdac19092e07d
- TLSH T14421F3F7605143204F198BA2BF3A766DCAF3C4DB7C5085D6CD5C545D02AB2BE89013C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 1KB
- SHA256 8c43dee66e222e390ddab7552f360acf98323edd38b44d649d6f1a410190a6f5
- MD5 ec8424858385ebfdca26385acc82a7e4
- SHA1 1d780109479fe75c2bbb4efdddf8b73ba5f1b23a
- SHA512 d28630b4ce825532fe864fe455eb3e4fb4455b7aa6208fb4a4270b0930158329a42711ad35f47a1210e776d0983ff91bd1a7e675fadb550e946927adaa7b8a75
- TLSH T13D21FEF7605183244F598BA2BF39B66DCAB3C4EA7C9045D6D95CA44D02AB2BE49012C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 1KB
- SHA256 46dff2ead5344f6a993127daa612011207cc7eafb36bbe3b5e85b4fa31664652
- MD5 357d3e251d38cd3d10668b71470f6078
- SHA1 ce5958e3cec563b25757be1d14a383cb2dbb8372
- SHA512 8fc0560aa1a3d2c109295e65b9ae8f68752df37de50b37c8456de8ec9adc1ba9d941f70c99adff0a8edd7576fc4fb5b9088679027141c8b63cb9c3ee8386697d
- TLSH T1C02121F7505143244F198BA2BF3D756DCEF3D4DB7C9085DAD95C944D02AB2BE49052C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 1KB
- SHA256 c368c4f44f2feafab3dd64137c2ff19d02810ebd64bdd2560177e0db05ee68ac
- MD5 5f75b2cc4e7abcac0b25eb5fa7c63598
- SHA1 f72860ae5ddad4d29c5bec729a2f31ed97fd2683
- SHA512 4c92c84de852000f2dd84d33bc50ae442ca34a5c421f2551087183137e53193c47418fe5fb968a9b9d0f3af9eb6b8db6b82eaafc9798aaba00e2a8f2047fc069
- TLSH T1ED210FF7601143244F598BA1BF39B56DCEF3C8DA7C9085D6D95C645D02AB2FF89012C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 200B
- SHA256 57305e96945533f8aa14f23e4cd3d4168d73860790f35daf182e36369247b9f9
- MD5 941a8cd2fb0a151781cf4851b6954f5a
- SHA1 1342fb21468390778177774276cca66a1827cd6f
- SHA512 482acbf98a91d26f76cb345eb973e2ce0ed5edc4902d4fe075578049595f2fe892e2d14287e81ed5fe44c945766a1d531d0d381bf96cc7e10b8a299f9f72a03d
- TLSH T166D022A2B2801434AD261839E02C233A0D0900001D80BAA020D8104C28A693CAA48A10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7016.1.372352952
- Size 325B
- SHA256 337b18be218f6f1eb4d6f3bde4953cdf60944bf54ad1532618a1d6e515e32678
- MD5 bb0105025b497dfd127df0ad24349213
- SHA1 c390c1c21147e149b21742774c1a9bb18ea8de0c
- SHA512 a9fa39527b127009878cff892f0ae662751e66a51a19025748b37f86ead26ae8374c8c3aed2f7e5f04a874edf94c2a97551f49ea9bf23d4c533eec1ce35973eb
- TLSH T133E07DF3751223145E560EBAE125E2378C7B8089AC4099D640C9145E167757DD60B390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp824.0.444470679
- Size 1KB
- SHA256 41a966079e70d18cde585990392621a63c9e6e4a825f9efeadb12a1cbd9d2a81
- MD5 13e78c8623d01496b4b9b4af29284d5d
- SHA1 c7a3dbb42483a3c0ceeed86d620a6c6b0d7f288f
- SHA512 85d55b0503e082a0a118dc6e9979243e466a5debd4aee9ebe426d6b2627275d8974a9eddfe676d38cbb431894721f16c79ed37db2a2d63d43a337621d8ecd19d
- TLSH T1EE2145809CC568796FD5CABA72F03A2B0BBDC883210555A636EE001E0F9D7F4510B61B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp824.0.444470679
- Size 265B
- SHA256 7a127a5f4704d7e5f1a45ae3e6c1994de6d3bfe1a4d53db1d672179a00dc8393
- MD5 66268e6b2427863fd99c6c0a73e1aa27
- SHA1 037a57362f55dd23d69a35087ad75ee776664703
- SHA512 69c9c64edffd9c6e275013228de639bda4d5528e580e60121349d4f8bf0717c1445fff858a8effc4ffc99c1249926fecca86f24aa6edf67a449483f28fec3827
- TLSH T180D02B002441A27862D4AB79C229BEA7597D845216075530109C4A3F41FE1FC0349B17
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp824.0.444470679
- Size 2KB
- SHA256 28ec8303578cfbdd2179d04793ab6d66f4d18364b4d8332eb50edc3c281aedcf
- MD5 7226a8a01b4be49b2952675778098d09
- SHA1 6f5f4987f0f30d19ac9848f09c3032288d60e84f
- SHA512 4c0c8a0ee439480766e8af844b83a59152cbaa10ded906401ecf08b1925454a74b71d6b66a9846e79e2d16ab042c321c25312c108225f44d7169861b0440678f
- TLSH T17D5111808C815879EF95C7BB72F13F160F7DC8A32105A59936EF001E0EBA6B75507207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp824.0.444470679~RFe5a9bd4.TMP
- Size 203B
- SHA256 1041c658259bcdfe225cd714b582045a2bf6c14b87516630991d8c1d44143450
- MD5 cc4bb5e6c15fed8b301ef36eab2e9244
- SHA1 9c8c9f70f26a59f1c01fedc13aa833c0e307593a
- SHA512 4b14978280e1ff6610d49a6eb2bce035d1f90bd84cea87152e57e97d3a9624dae88829b328ffdee9b131b2a7b3f78157401b279e7f5501ebb78acbf718b6c38a
- TLSH T10FD0C0112843613C31ECBDB9C3707F63082C8A210E071A71B16E233B816C2E94306B3B
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-av-vps\bug_report.exe
- Size 6.3MB
- SHA256 89815dcd9b7ab41334a3f65c6afc8d1c81c8e824bfdbe155334a3e87d751cf85
- MD5 603ffc585c2f24377597625b2bcfaef1
- SHA1 2190bff64ce1cd1c1bed40481793bd1823fc9f83
- SHA512 59c247ee2eb80f0b044d8b7ff65f3592dc618e2ee5f11dcf6815bf98e9da5f41176cb0ffecc893a374e5ca82f8777ea93dd4bc312651e36548c6632ccc86eb80
- SSDEEP 98304:5EQhMMmyZx9PWpwMsWPdwbNV7xqfMxR9g:5EQWEbdWIWPdwbNV7xqfM3C
- TLSH T1A4668D1EBA5D00E9C1BFE1788687950BEAB17855033697CB66E18E560F13BF19E3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\dump_process.exe
- Size 3.9MB
- SHA256 7587a665360c2eafd73f37e5c9c258a46b7ddf42572699a0f410f0fcc849d1b4
- MD5 78afaf37ce7e7d023058cad4f16da5e4
- SHA1 e370393d2563f90b7bda18c69445df91ebd493e9
- SHA512 2e91b16512a56237d6ac667199fa3f3de5d4a9ba1a6f5e7f925cf6159a147842557b966c68db44ec3c07cb9497892b024263d07691c5ccfee1746cf5441a6533
- SSDEEP 49152:3/T/XRq3fuqjDmpWq7BmXtku2Js86zrSkLlWLZOtMteAlDtqdJD1GTZyhJaOPtJ:Tn6Du7BmXh8jyL
- TLSH T189166C0EBA1D00E9C1FED17C8A46650BEA717CA5837557DB66E0AE191F23AF05E3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\icarus.exe
- Size 8.4MB
- SHA256 19a6ea8994c515d3427ad437f8ff57686de8a4b1c30e39106dcd1c2be490a6f6
- MD5 a2f11a65094cca1403ed9ade6bff4b18
- SHA1 a1e54446931c729115ce89f92d41a23f9ba42f0f
- SHA512 c5656cfa29760cfa350469e5100830f384414814159e792590972ce42e69325687c954b950db7c058b8da73775862031caa4e3351329820397ccd1354301d4d2
- SSDEEP 49152:V2dFHhl4hbC2WLl+PEPIZZkr/J1YR1bjVAC2n7QJWllFVvWo3s+8kG3b836fbZcq:xP8AAjjpTzDCZfBBaObo4pyxEFT
- TLSH T186966C1E7AAC01E4C1FED0788A47651BEDB17895433996EBA6E08E561F13EF09E3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\icarus_ui.exe
- Size 10.0MB
- SHA256 0aafb0b7e59b8fec792154f0bb17301c9e19ef548f2c7355487381dc99207fe9
- MD5 60b00fa724d49fc111b36dce5f8ba1c4
- SHA1 b715a5622621fb8a54b5a6a62d43b3cc3e7ad71f
- SHA512 ec8d59b8d269a237bfeaa7e261abb1306cb55693f829af215549ae946d5982b5143a119bfaad404f031721a91783217f6482d1173f867ff2b3965f9ae7afe4c9
- SSDEEP 98304:US8GOM8jlLiuCkZAy25mOhWi2PVLv0l7DkhtDE6akz:UvljjlLicZx2UOhWi2PFv0BWos
- TLSH T1FBB66C6AB2A840E4C1FEC079DA5B950BEBB23885133597CF11B15A561F37AF4AD3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\avast-suite\setupui.cont
- Size 619KB
- SHA256 0aad8293a63f16f40524feab817126172363daa3cc93c2109f56bf4f62559620
- MD5 6d3cf0f7d399ee71c26eedee197e799c
- SHA1 8522acf669104f8a90e446088001a4e89e7427e4
- SHA512 3772d7750b2c49d0c7072181a860620536e57946f8030ffe5965478f326f3879b815fa5e043d5757d454bd881f97ad5ddffb62cabec64437ab63725e10e160f7
- SSDEEP 12288:cTom+Pck+/M88Ema6UmTZrX9WQBZ5Z6O0qGO8FpQi//+X9Js7Lu:O+Pck+/MnXvBElqGO8R/M9JULu
- TLSH T149D423A61A837264412EAED835072073083A4DFC2F3156E586BE5AFFBB91D705131F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\icarus.exe
- Size 9.2MB
- SHA256 4f5bfe58f16ce2571f8338dc2e65c06c988cffdc026a18039b8d5eda0c979faf
- MD5 85a4c680f5c1f574055f311af6c53485
- SHA1 c05382cb4a63f5bf708804eb5987cbe1aadf2b3c
- SHA512 6dde19eaa394c34877accfeccb15cc4b760722088c01acaaf7c8f389ff7f2d5018bb566e5255def0748f758ba406c10952fcf9db2aa626fffc0d7ff32bea2722
- SSDEEP 49152:V2dFHhl4hbC2WLl+PEPIZZkr/J1YR1bjVAC2n7QJWllFVvWo3s+8kG3b836fbZcI:xP8AAjjpTzDCZfBBaObo4pyxEFydE
- TLSH T157A66C1EBAAD01E5C1FED1788647651BEE717895033997DB66E08E160F23AF09E3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\icarus_mod.dll
- Size 16KB
- SHA256 95decdcfcc9a780e8577ab4a0eaa706c245d6aa354d1c0dd5690d08465410a0f
- MD5 e51aa2b462baa763c573022d4be1c126
- SHA1 b3f5405998e2c9c8ad84d551dff5983d82873d39
- SHA512 d81d2acefcf28f5469749014e9f8c6e7b3ca87e6d4681804f099cda938741a0504f3cca44b5706118c1630b8a52788deb789e86c88763f21daeaea758d648927
- SSDEEP 384:3DsO1eoK5pwKNsZqnPqnJldei2WSx7bLw:T3ZqnXAmbL
- TLSH T180725A473F246582EFC78E74B0C98BA76D707366AF2544C7593081A8AD917E23E7806F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\product-def.xml
- Size 1.9MB
- SHA256 313701e996cf52d7ceb2bf12e87095b885cfd51fa72986c0a1c89537cb9513ba
- MD5 b3b4b3fbf3579b9ba32e4b954babb841
- SHA1 3fabb32ff872979fdf5a75312f439cd8c8b15f4f
- SHA512 d42e2028deb637748dde7da678e2af8684aab013b559c079aa4c1a24956c87282c9ff511f6554d36903a8fbae354bcedd9b62cab25bb2d84c5421e2f78ae70c2
- SSDEEP 24576:nGXcUhdlcYwrPQNTH2VA0ZrPWneXHwkziPv:nGMUk7kvgxwuiv
- TLSH T118954F75365E7D7B714A40E7F480BC8062DFDD78C9E05893F2B33140A662AB29E71AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\common\product-info.xml
- Size 11KB
- SHA256 3ff72b2144acea02007c5d1ac1ffd7ca68f9ae28b334a9ec4bc76fba362c379f
- MD5 3aa22e222b69929c522f31de57d2f750
- SHA1 4eb7e00e3a328ad32961bc5b71c015dea3cf2ff9
- SHA512 434df2b9f73fe028ecc520f455ac8359d08e989760768cc75b7857992c2584e5b20977e1f0bdcc12eb03784260be81d7f08f961c843c82c5bbde66c70e47630c
- SSDEEP 192:U/X1WtJlAk5mNemtmMvBdDU8wOOpr63XZMTKOnf/FCl9rsZGzWA6uasWcNvGPkt+:Uv1eAGmNnxI89yfWoIWfOCst+
- TLSH T14C325075211CFF2B321F9093E0D5B68132AFFC2D9F981827E1273590A36F578A9499B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\epps.edat
- Size 80B
- SHA256 c6528b50bbe1265eeb1beb88535e7f6257075daaa245ed693e9ac38511b297bf
- MD5 5438e42d44c84deaf1c0d2ff11760e49
- SHA1 87a6d26a9a158a169f2808ea1702daa188865498
- SHA512 ff1f32e2379a4f6d0b642d31baaf558090dbe2ed6031f88f25438d0100f89651cea3af3690dbef151f3c3fce0582d0fbf5b85b7392ad7a885815d957cd8041a5
- TLSH T195A00188D40182F320A0D20073889187301A00C45E49318D79FAF94A2389B8B9AA84E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\giet.edat
- Size 8B
- SHA256 c2cb92b00918d830aa68e4d5496ca412e3bc86f88444cb3de9d52e62a877b93f
- MD5 faeee7fa0a7dd54b32eb730697448ac2
- SHA1 85314fe3f7a2a838afb9b5ae64f00577cdaeb664
- SHA512 1640cb35c92e0214808fe14ca3658549a927817195bb16b82f87bb3cf2e7e6e623bf04f42147ee97c66a52fbb11a55f253688d5a8363f3a836044e65b21d5b3a
- MD5 SHA1 SHA512
- Path C:\Windows\Temp\asw-85649e47-afdb-49c1-a96d-fb8452b051df\icarus-info.xml
- Size 2KB
- SHA256 4699c757580a2ff4c140a33eae64d84ffa98f42f49aca45e159d5bbeb115b02c
- MD5 5ba841d7db60bbf1b5dd9413e369c1c1
- SHA1 09f8f82e8c9909a8d3a36d36002daa5b92256d61
- SHA512 1ceaa54ce20abfd7ba65f9eb51eb17447419b87a6ba65dbcdb7c3d599315f04a78ddce80b93a2e18bdf27943c433dd548619f77cf13e3bb3a965bc508744edec
- TLSH T1AC5160B8A13DDE2B332A99EFB184F8C163EFBD568BA0096341077142DC6A5E03986074
- MD5 SHA1 SHA512 TLSH