Analysis
- max time kernel
146s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/06/2026, 16:56
Behavioral task
behavioral1
Sample
CheatEngine76.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CheatEngine76.exe
Resource
win11-20260513-en
General
- Target CheatEngine76.exe
- Size 39.0MB
- Sample260603-vfykaacs21
- SHA256 daf19c4f6d6826a29fd210c4e0dca87d6d44292caf299ac71f283a543e713b55
- MD5 4ed92996330283298db740614d8d89df
- SHA1 335a59cc1df74409de2251a0ae59bef07b3abb36
- SHA512 6de1f7132191397d1b8a89cae187430b552e4475a261b2f228de92eb8c4c7ccc40672a974b13385e4bb47c7849ae6072e1b9092b5229868469c6ff8caf036cac
- SSDEEP 786432:UTsqYKMpLq5byGASe/JkNAfK47tPuYkLqxtH+hC8d6qwm7Vnr48lrrLF+orVSM:UYlKMpe5byGAS4i4NuYQusCfqH5nE8vf
- TLSH T19697333FF28BA07DD06A26353972A154593BBB21150A8C869AFCF44CCF655B05E3F683
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 37 4996 ts360Setup.exe - Executes dropped EXE 21 IoCs
pid Process 3740 CheatEngine76.tmp 3816 WZSetup.exe 4964 OperaGXSetup.exe 4996 ts360Setup.exe 2788 setup.exe 1680 CheatEngine77.exe 3004 setup.exe 4344 setup.exe 4112 setup.exe 1276 CheatEngine77.tmp 2796 setup.exe 2724 _setup64.tmp 3320 WeatherZeroService.exe 4576 WeatherZeroService.exe 3848 WeatherZeroService.exe 2008 Kernelmoduleunloader.exe 2372 windowsrepair.exe 5408 Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe 1688 assistant_installer.exe 2440 assistant_installer.exe 5900 360TS_Setup.exe - Loads dropped DLL 28 IoCs
pid Process 3740 CheatEngine76.tmp 3816 WZSetup.exe 2788 setup.exe 3004 setup.exe 3816 WZSetup.exe 4344 setup.exe 4996 ts360Setup.exe 3816 WZSetup.exe 4112 setup.exe 3816 WZSetup.exe 3816 WZSetup.exe 2796 setup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 3816 WZSetup.exe 1688 assistant_installer.exe 1688 assistant_installer.exe 2440 assistant_installer.exe 2440 assistant_installer.exe - Modifies file permissions 1 TTPs 2 IoCs
pid Process 3876 icacls.exe 1132 icacls.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Stops running service(s) 4 TTPs
- Unexpected DNS network traffic destination 4 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 54.194.213.124 Destination IP 54.194.213.124 Destination IP 54.194.213.124 Destination IP 54.194.213.124 - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 4 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: setup.exe File opened (read-only) \??\D: setup.exe File opened (read-only) \??\F: setup.exe File opened (read-only) \??\D: setup.exe - Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 5 ip-api.com - Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 ts360Setup.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Cheat Engine\include\sec_api\is-HMOH7.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\languages\is-BC5HE.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-PS51F.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-O59AI.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-JTKUG.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-CVBO3.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-4B0HN.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\ceshare\is-8D9CV.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\lua\is-BRQT4.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\lua\is-3ARI4.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\dlls\src\Java\CEJVMTI\CEJVMTI\is-RHPSD.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\plugins\is-O7BS6.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-D5VFH.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-NODSH.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\tableobfuscator\is-ODAQB.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-9Q8VT.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-MBL44.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\plugins\is-E5DQ2.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-Q6H56.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\winapi\is-UMLC8.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\badassets\is-1H5DU.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-IG5U1.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\Extensions\AITools\is-9SHL6.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\is-E3VKU.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\dlls\src\Mono\is-50BCS.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\win32\dbghelp.dll CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\win32\symsrv.dll CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-IE51Q.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-4RVBC.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\win32\is-UMRAJ.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-23ICB.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-GKMN4.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\windowsrepair.exe CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\win64\dbghelp.dll CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-L9T2Q.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-HS08Q.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-5U6RQ.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\is-NNP8L.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\is-B10B8.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\plugins\example-c\is-IOK0C.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\ced3d11hook.dll CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-5VEVD.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-5VU3P.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sys\is-5Q4L9.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\lua\is-HV92M.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-6LMJK.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\custom\is-DJ0EB.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\dlls\src\Mono\MonoDataCollector\is-FI6NL.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\CheatEngine.chm CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-5VEA8.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-T2JVT.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\Extensions\UETools\is-1UG0I.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary .NET 8\bin\Release\net8.0-windows\is-RQJ7L.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\autorun\dlls\DotNetInterface.dll CheatEngine77.tmp File created C:\Program Files\Cheat Engine\plugins\c# template\CEPluginLibrary\SDK\is-DKVCU.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\badassets\is-PEPDI.tmp CheatEngine77.tmp File opened for modification C:\Program Files\Cheat Engine\autorun\dlls\32\CEJVMTI.dll CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-24S50.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-OP4V8.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sec_api\is-A072P.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\autorun\java\is-CRQ9I.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\is-515KV.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\include\sys\is-BRL2T.tmp CheatEngine77.tmp File created C:\Program Files\Cheat Engine\is-H0BNF.tmp CheatEngine77.tmp - Launches sc.exe 3 IoCs
Sc.exe is a Windows utlilty to control services on the system.
pid Process 5068 sc.exe 3488 sc.exe 764 sc.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Program crash 2 IoCs
pid pid_target Process procid_target 1444 3740 WerFault.exe 83 2940 3740 WerFault.exe 83 - System Location Discovery: System Language Discovery 1 TTPs 15 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WeatherZeroService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WeatherZeroService.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine76.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WZSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine77.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Kernelmoduleunloader.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 360TS_Setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaGXSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ts360Setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CheatEngine77.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WeatherZeroService.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2360 opera.exe - Inno Setup is an open-source installation builder for Windows applications. 7 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/4404-1-0x0000000000C60000-0x0000000000D49000-memory.dmp innosetup behavioral2/memory/4404-13-0x0000000000C60000-0x0000000000D49000-memory.dmp innosetup behavioral2/files/0x001900000002b40f-166.dat innosetup behavioral2/memory/1680-164-0x00000000008D0000-0x00000000009B4000-memory.dmp innosetup behavioral2/memory/1680-278-0x00000000008D0000-0x00000000009B4000-memory.dmp innosetup behavioral2/memory/1680-1417-0x00000000008D0000-0x00000000009B4000-memory.dmp innosetup behavioral2/memory/4404-5580-0x0000000000C60000-0x0000000000D49000-memory.dmp innosetup - NSIS installer 2 IoCs
resource yara_rule behavioral2/files/0x001900000002b414-76.dat nsis_installer_1 behavioral2/files/0x001900000002b414-76.dat nsis_installer_2 - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 CheatEngine76.tmp Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ CheatEngine76.tmp - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe - Modifies registry class 14 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine\shell\open\command CheatEngine77.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine CheatEngine77.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open CheatEngine77.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command\ = "\"C:\\Program Files\\Cheat Engine\\Cheat Engine.exe\" \"%1\"" CheatEngine77.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.CT\ = "CheatEngine" CheatEngine77.tmp Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine CheatEngine77.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\ = "Cheat Engine" CheatEngine77.tmp Key created \REGISTRY\MACHINE\Software\Classes\CheatEngine\DefaultIcon CheatEngine77.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\DefaultIcon\ = "C:\\Program Files\\Cheat Engine\\Cheat Engine.exe,0" CheatEngine77.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell CheatEngine77.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CheatEngine\shell\open\command CheatEngine77.tmp Key created \REGISTRY\MACHINE\Software\Classes\.CETRAINER CheatEngine77.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.CETRAINER\ = "CheatEngine" CheatEngine77.tmp Key created \REGISTRY\MACHINE\Software\Classes\.CT CheatEngine77.tmp - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 setup.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 setup.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 04000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e19962000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e setup.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 setup.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 setup.exe - Runs net.exe
- Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 3740 CheatEngine76.tmp 3740 CheatEngine76.tmp 3740 CheatEngine76.tmp 3740 CheatEngine76.tmp 3740 CheatEngine76.tmp 3740 CheatEngine76.tmp 4996 ts360Setup.exe 4996 ts360Setup.exe 4996 ts360Setup.exe 4996 ts360Setup.exe 1276 CheatEngine77.tmp 1276 CheatEngine77.tmp - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeManageVolumePrivilege 4996 ts360Setup.exe Token: SeTcbPrivilege 3848 WeatherZeroService.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3740 CheatEngine76.tmp 1276 CheatEngine77.tmp 4996 ts360Setup.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4996 ts360Setup.exe - Suspicious use of WriteProcessMemory 31 IoCs
description pid Process procid_target PID 4404 wrote to memory of 3740 4404 CheatEngine76.exe 83 PID 3740 wrote to memory of 3816 3740 CheatEngine76.tmp 85 PID 3740 wrote to memory of 4964 3740 CheatEngine76.tmp 86 PID 3740 wrote to memory of 4996 3740 CheatEngine76.tmp 87 PID 4964 wrote to memory of 2788 4964 OperaGXSetup.exe 88 PID 3740 wrote to memory of 1680 3740 CheatEngine76.tmp 90 PID 2788 wrote to memory of 3004 2788 setup.exe 89 PID 2788 wrote to memory of 4344 2788 setup.exe 91 PID 2788 wrote to memory of 4112 2788 setup.exe 92 PID 1680 wrote to memory of 1276 1680 CheatEngine77.exe 93 PID 4112 wrote to memory of 2796 4112 setup.exe 94 PID 1276 wrote to memory of 4868 1276 CheatEngine77.tmp 95 PID 4868 wrote to memory of 1516 4868 net.exe 97 PID 1276 wrote to memory of 1968 1276 CheatEngine77.tmp 98 PID 1968 wrote to memory of 996 1968 net.exe 100 PID 1276 wrote to memory of 764 1276 CheatEngine77.tmp 101 PID 1276 wrote to memory of 3488 1276 CheatEngine77.tmp 103 PID 1276 wrote to memory of 1464 1276 CheatEngine77.tmp 105 PID 1464 wrote to memory of 2988 1464 net.exe 107 PID 1276 wrote to memory of 5068 1276 CheatEngine77.tmp 108 PID 1276 wrote to memory of 2724 1276 CheatEngine77.tmp 110 PID 1276 wrote to memory of 3876 1276 CheatEngine77.tmp 112 PID 3816 wrote to memory of 3320 3816 WZSetup.exe 114 PID 3816 wrote to memory of 4576 3816 WZSetup.exe 116 PID 1276 wrote to memory of 2008 1276 CheatEngine77.tmp 119 PID 1276 wrote to memory of 2372 1276 CheatEngine77.tmp 121 PID 1276 wrote to memory of 1132 1276 CheatEngine77.tmp 145 PID 2788 wrote to memory of 5408 2788 setup.exe 124 PID 2788 wrote to memory of 1688 2788 setup.exe 125 PID 1688 wrote to memory of 2440 1688 assistant_installer.exe 126 PID 4996 wrote to memory of 5900 4996 ts360Setup.exe 127
Processes
-
C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4404 -
C:\Users\Admin\AppData\Local\Temp\is-FCHZ4SP5PR.tmp\CheatEngine76.tmp"C:\Users\Admin\AppData\Local\Temp\is-FCHZ4SP5PR.tmp\CheatEngine76.tmp" /SL5="$90050,39622579,893952,C:\Users\Admin\AppData\Local\Temp\CheatEngine76.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3740 -
C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod0_extract\WZSetup.exe"C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod0_extract\WZSetup.exe" /S /tpchannelid=1571 /distid=App1233⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3816 -
C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe"C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe" install4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3320
-
-
C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe"C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe" start silent4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4576
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod1_extract\OperaGXSetup.exe"C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod1_extract\OperaGXSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wRZKPN8ZRaj3KY4CR1JxDwa2h9I8NVwqcGr8iloDxv397sSEIfq1dtDStJ2xx5v3xlAlQUfgWB3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4964 -
C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exeC:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wRZKPN8ZRaj3KY4CR1JxDwa2h9I8NVwqcGr8iloDxv397sSEIfq1dtDStJ2xx5v3xlAlQUfgWB --server-tracking-blob=ZTlkNzM2OWE0ZmQ4NmRjMzMxY2ZkYzc3NDNiOGNjOWVlYzY4NTQ1ZWE3ZGI3MGQ3M2VjZjg1N2MzNmRmNjI5ZDp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwidGltZXN0YW1wIjoiMTc1Nzg0NzYzNS4zNjE1IiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6e30sInV1aWQiOiIyYjBlYWY3NC00NGQ4LTQ2NjktYWNiZC1lYzUzNmZmMzhhYzYifQ==4⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:2788 -
C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exeC:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ffd09238ef0,0x7ffd09238efc,0x7ffd09238f085⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3004
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\setup.exe" --version5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4344
-
-
C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe"C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2788 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_20260603175729" --session-guid=3d36bbdb-808a-4bcb-9b61-cb89b209cb1d --server-tracking-blob="ZTNiNDdlODgwYThmMzQzYTlhZjcxZjIxYjU5YzVmNTRkZTk3ZDBhZTRmMTFhZDMyZjk0YWUyN2M1ZThjZmI1Mjp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzU3ODQ3NjM1LjM2MTUiLCJ1c2VyYWdlbnQiOiJweXRob24tcmVxdWVzdHMvMi4zMi4zIiwidXRtIjp7ImNhbXBhaWduIjoib3BlcmFneCIsImlkIjoiQmpZVjd3UlpLUE44WlJhajNLWTRDUjFKeER3YTJoOUk4TlZ3cWNHcjhpbG9EeHYzOTdzU0VJZnExZHREU3RKMnh4NXYzeGxBbFFVZmdXQiIsIm1lZGl1bSI6ImFwYiIsInNvdXJjZSI6ImFpcyJ9LCJ1dWlkIjoiMmIwZWFmNzQtNDRkOC00NjY5LWFjYmQtZWM1MzZmZjM4YWM2In0= " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=24080000000000005⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Suspicious use of WriteProcessMemory
PID:4112 -
C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exeC:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x288,0x28c,0x290,0x258,0x294,0x7ffd082d8ef0,0x7ffd082d8efc,0x7ffd082d8f086⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2796
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\installer.exe" --backend --initial-pid=2788 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291" --session-guid=3d36bbdb-808a-4bcb-9b61-cb89b209cb1d --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=131.0.5877.1116⤵PID:5960
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff77b269ed8,0x7ff77b269ee4,0x7ff77b269ef07⤵PID:5980
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=07⤵PID:2980
-
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x591b80,0x591b8c,0x591b988⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=08⤵PID:3308
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x811b80,0x811b8c,0x811b989⤵PID:4716
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"9⤵PID:1344
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream10⤵PID:484
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f011⤵PID:432
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream10⤵PID:1972
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0xd8,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f011⤵PID:3132
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x11d4370,0x11d437c,0x11d438810⤵PID:1148
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵PID:232
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f012⤵PID:3448
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵PID:5272
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f012⤵PID:5664
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵PID:4308
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f012⤵PID:5788
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized7⤵PID:6428
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f08⤵PID:6588
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1564,i,18371470253648260717,12633687949118301248,262144 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1792 /prefetch:28⤵PID:1820
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1896,i,5543043006534313168,1896616764985918504,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1992 /prefetch:118⤵
- System Time Discovery
PID:2360
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2172,i,5841675197345646031,3687655675134361847,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2820 /prefetch:138⤵PID:3136
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3196,i,6769227848554476027,1969357742425548800,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3248 /prefetch:148⤵PID:700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3180,i,3701088004717863290,16030758160471058906,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3292 /prefetch:148⤵PID:6052
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3232,i,301702235982072340,6012586201385986694,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3332 /prefetch:148⤵PID:6060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3168,i,17395789044923314455,12812329512707551104,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3312 /prefetch:148⤵PID:6124
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3208,i,1246912791974940270,5461629852083213898,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3256 /prefetch:148⤵PID:2900
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3224,i,345793566058091367,14234322221163027129,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3124 /prefetch:148⤵PID:5192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3560,i,10517719902006647535,15509538384817291133,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3572 /prefetch:18⤵PID:3444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB1478⤵PID:5088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4532,i,11385928310972613624,9635079530775546861,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4540 /prefetch:18⤵PID:5184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4748,i,13147609496977596650,6350814820166680055,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4792 /prefetch:98⤵PID:6192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4840,i,13852130197305964509,14039880101335396392,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4928 /prefetch:18⤵PID:3944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5180,i,14790132364931517935,14427307627497304524,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5184 /prefetch:18⤵PID:6464
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5308,i,10741569458385615945,56990526146221285,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5200 /prefetch:148⤵PID:6164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5312,i,2435782637117050282,9233974190272125741,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5208 /prefetch:148⤵PID:1120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5316,i,15545922231978862885,4588504333644809350,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5324 /prefetch:148⤵PID:6568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5320,i,8320270227753988750,12038820935656777558,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5336 /prefetch:148⤵PID:6864
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5940,i,8003003915922814401,9723097870938740712,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6228 /prefetch:98⤵PID:6448
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6688,i,12727720648175476825,4472362308434704144,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6664 /prefetch:98⤵PID:7064
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6772,i,13400820122894175809,14457015963744698004,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6968 /prefetch:98⤵PID:7136
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6620,i,3738299222826058600,12748975407501407179,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7136 /prefetch:18⤵PID:5392
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5376,i,4892101672485856966,15713648745459975567,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6716 /prefetch:148⤵PID:6248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7328,i,5396669049030320164,7463921977083062218,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7340 /prefetch:148⤵PID:5756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7468,i,5452658469965673826,15641375876968420678,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7500 /prefetch:128⤵PID:568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7688,i,17156587971872186375,1674826132925780488,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7700 /prefetch:148⤵PID:5196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7704,i,16597176106303094643,14982169626452424846,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7824 /prefetch:148⤵PID:5088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8008,i,15882261513961918758,10958135429034245439,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8020 /prefetch:148⤵PID:6760
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8040,i,13759369338964816057,6877417684987337019,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8052 /prefetch:148⤵PID:6888
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8284,i,15963622421243417497,16579959564728051000,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8288 /prefetch:148⤵PID:5744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8476,i,3779045963730176737,1139053069906656583,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8488 /prefetch:148⤵PID:2016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8528,i,6014913521223925706,6052427172532312750,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8600 /prefetch:148⤵PID:6116
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8496,i,11970273791361851057,13701845339605985530,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8500 /prefetch:148⤵PID:6824
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8492,i,9456269388159650219,15031782737769865827,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8560 /prefetch:148⤵PID:5604
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8520,i,11689720471250899271,4960971449459228681,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8580 /prefetch:148⤵PID:6732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8584,i,3165008775235172130,10225838190893287407,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9240 /prefetch:148⤵PID:6936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8876,i,8217415174354387726,5212151133707363048,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9260 /prefetch:148⤵PID:2220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9244,i,9172380424312100545,11236054776723166361,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9532 /prefetch:148⤵PID:4600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9644,i,10423056891451647654,15171168459909013829,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9688 /prefetch:148⤵PID:5856
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9896,i,12385267039184498078,13692104965334886810,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9932 /prefetch:148⤵PID:7312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10020,i,8212114174903692862,17043010713764464666,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10036 /prefetch:148⤵PID:7324
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10188,i,17073214007636736141,15051426170586565489,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10216 /prefetch:98⤵PID:7372
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10584,i,15524288401080829878,10961205803505576672,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10620 /prefetch:148⤵PID:7772
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11076,i,13732343758636278036,4751313138246244920,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11040 /prefetch:148⤵PID:7948
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B548⤵PID:1452
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff6cf788eb8,0x7ff6cf788ec4,0x7ff6cf788ed09⤵PID:7196
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11084,i,4209779332984270916,9707758101230765149,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11272 /prefetch:18⤵PID:6472
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11448,i,6404464949290075433,4560674481211794593,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11400 /prefetch:148⤵PID:5208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5852,i,8927390573393085646,11676783968863302021,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=5144 /prefetch:148⤵PID:1460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11068,i,15165292458135863709,5484023748356810031,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11168 /prefetch:148⤵PID:6944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7692,i,10253317553863423114,18438545063413273627,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=5660 /prefetch:148⤵PID:5944
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8988,i,18079422995995864524,6273490473304094886,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9520 /prefetch:148⤵PID:7356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11704,i,8029881352450158143,2859511085362819837,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11720 /prefetch:148⤵PID:7316
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11948,i,10798685276857008299,17255509548907438549,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11960 /prefetch:148⤵PID:8092
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11692,i,11490405618061196643,16189832001496904385,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11860 /prefetch:98⤵PID:7920
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=12044,i,10588301578110046475,11325528505828365650,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11632 /prefetch:148⤵PID:2604
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11792,i,13465478544508954674,3039908226766267602,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11612 /prefetch:148⤵PID:7528
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5624,i,13655112917118526914,62336087370845850,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8732 /prefetch:148⤵PID:3648
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7784,i,7032401889341047527,8742022499387705255,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11512 /prefetch:148⤵PID:3712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11908,i,630431066390871550,18136551263561841889,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=7876 /prefetch:98⤵PID:7488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=7256,i,8260540674681842867,15421310253797857683,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7664 /prefetch:98⤵PID:8008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11956,i,14534069298834168950,16152337887844328563,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=11980 /prefetch:148⤵PID:636
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6688,i,1995946487946234572,8379019912278351825,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11848 /prefetch:148⤵PID:6172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4128,i,7500350160658546510,2573335668365519235,524288 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11536 /prefetch:148⤵PID:3480
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gx-post-mortem=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=4112,i,8416267080416371019,1414729351935847066,2097152 --field-trial-handle=1796,i,8159943018601637552,711517705614808159,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,15379339187873517831,4458200508289067145,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=11540 /prefetch:98⤵PID:7876
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5408
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe" --version5⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x591b80,0x591b8c,0x591b986⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2440
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2_extract\ts360Setup.exe"C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2_extract\ts360Setup.exe" /s3⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4996 -
C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2_extract\360TS_Setup.exe"C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2_extract\360TS_Setup.exe" /c:WW.NewDon.CPI20230201 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo=4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5900 -
C:\Program Files (x86)\1780505903_0\360TS_Setup.exe"C:\Program Files (x86)\1780505903_0\360TS_Setup.exe" /c:WW.NewDon.CPI20230201 /pmode:2 /s /promo:eyJib290dGltZSI6IjciLCJtZWRhbCI6IjciLCJuZXdzIjoiMCIsIm9wZXJhIjoiNyIsIm9wZXJhX2lucyI6IjAiLCJwb3B1cCI6IjciLCJyZW1pbmRlciI6IjciLCJ1cGdyYWRlX25vdyI6IjAifQo= /TSinstall5⤵PID:4784
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\CheatEngine77.exe"C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1680 -
C:\Users\Admin\AppData\Local\Temp\is-M5VVS.tmp\CheatEngine77.tmp"C:\Users\Admin\AppData\Local\Temp\is-M5VVS.tmp\CheatEngine77.tmp" /SL5="$30256,32429103,869888,C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\CheatEngine77.exe" /VERYSILENT /ZBDIST4⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1276 -
C:\Windows\SYSTEM32\net.exe"net" stop BadlionAntic5⤵
- Suspicious use of WriteProcessMemory
PID:4868 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop BadlionAntic6⤵PID:1516
-
-
-
C:\Windows\SYSTEM32\net.exe"net" stop BadlionAnticheat5⤵
- Suspicious use of WriteProcessMemory
PID:1968 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop BadlionAnticheat6⤵PID:996
-
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete BadlionAntic5⤵
- Launches sc.exe
PID:764
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete BadlionAnticheat5⤵
- Launches sc.exe
PID:3488
-
-
C:\Windows\SYSTEM32\net.exe"net" stop vgk5⤵
- Suspicious use of WriteProcessMemory
PID:1464 -
C:\Windows\system32\net1.exeC:\Windows\system32\net1 stop vgk6⤵PID:2988
-
-
-
C:\Windows\SYSTEM32\sc.exe"sc" delete vgk5⤵
- Launches sc.exe
PID:5068
-
-
C:\Users\Admin\AppData\Local\Temp\is-2QBPU.tmp\_isetup\_setup64.tmphelper 105 0x3985⤵
- Executes dropped EXE
PID:2724
-
-
C:\Windows\system32\icacls.exe"icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)5⤵
- Modifies file permissions
PID:3876
-
-
C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe"C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe" /SETUP5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2008
-
-
C:\Program Files\Cheat Engine\windowsrepair.exe"C:\Program Files\Cheat Engine\windowsrepair.exe" /s5⤵
- Executes dropped EXE
PID:2372
-
-
C:\Windows\system32\icacls.exe"icacls" "C:\Program Files\Cheat Engine" /grant *S-1-15-2-1:(OI)(CI)(RX)5⤵
- Modifies file permissions
PID:1132
-
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 24883⤵
- Program crash
PID:1444
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 24883⤵
- Program crash
PID:2940
-
-
-
C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe"C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:3848 -
C:\Program Files (x86)\WeatherZero\WeatherZero.exe"C:\Program Files (x86)\WeatherZero\WeatherZero.exe" /q=645B0485E0B1F61988A728076B04BC832⤵PID:5104
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe"C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\hybxs8pd.cmdline"3⤵PID:5920
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESED55.tmp" "c:\Users\Admin\AppData\Local\Temp\CSCED54.tmp"4⤵PID:6832
-
-
-
-
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exeC:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe1⤵PID:1132
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:1048
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵PID:5936
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffcf25c16d0,0x7ffcf25c16e0,0x7ffcf25c16f02⤵PID:2244
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵PID:6520
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff6cf788eb8,0x7ff6cf788ec4,0x7ff6cf788ed02⤵PID:8048
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version2⤵PID:7392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3740 -ip 37401⤵PID:7852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3740 -ip 37401⤵PID:2444
-
C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"1⤵PID:18024
-
C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe"C:\Program Files (x86)\360\Total Security\safemon\PopWndLog.exe" /ExShowTrayIcon1⤵PID:8808
Network
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Pre-OS Boot
1Bootkit
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\360\Total Security\config.ini
- Size 182B
- SHA256 7f6d06e636552bfe5071d6ad7a382fca91dfa7e5bdf3f45503669398bab1adf4
- MD5 b4092b97c8c900b786237d840fe0170f
- SHA1 b331f5fd314d32e788aa598c7e8458be3b5e5661
- SHA512 0661bf7a6214f3f82c04fe66e32e398293cbc96e0592795c57a9cb9991215ceb537c3302e72ec1ed29a474bd75e8628a24a2421b29cd2c690a131aaa1edec179
- TLSH T1B8C0021A56E8024AAAB38745E9F404265B257E16586DE64D15C2034D95E2A806922AB3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\360\Total Security\i18n\i18n.ini
- Size 246B
- SHA256 f421332fd132d8405cad34871425c9922e4a1b172d74f86b9e4e7ee750205919
- MD5 dfc82f7a034959dac18c530c1200b62c
- SHA1 9dd98389b8fd252124d7eaba9909652a1c164302
- SHA512 0acb2a043303ab1c033313d62b9b4dad8ca240e345195c87776f99f129a93946036835872b336a8efd996657c37acf56da7c01d68add340408e8fce72fc66fe5
- TLSH T12AD0C9AF21DC106C99B3EB63EA7040B42732BCA6B80DD85DD1E1540D48E3C40AA034EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\360\Total Security\updatecfg.ini
- Size 132KB
- SHA256 f270410be6e230f117127f67e27c7e84009b74acd26576626374918c4533ecad
- MD5 731a0d006851d43dacd03e29a0f8c752
- SHA1 4767bcaae11dcdecf819156230292473e7198b29
- SHA512 723ebeb03ce45f6a17cb5043d740f8a25a8af74afbef47ecc0e435fbd27680d23be541e8324650f92b5f0396a5e8d6c490a1f597a987243a5be943656f2a51c9
- SSDEEP 768:2kDqSxecHVySN3/r2skAVxXK7QnDzitwkA:20qO3VySN3/r2skAVxXK8nDz5
- TLSH T190D30B42401DD0EA7863A780E6B4DDF85B548BEDBF75451366EC2B27AC80FFBA4D4068
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\WeatherZero\WeatherZeroService.exe
- Size 3.2MB
- SHA256 95f0e021c978ddd88e2218a7467579255a5ae9552af2508c4243a4adec52d2b8
- MD5 2b149ba4c21c66d34f19214d5a8d3067
- SHA1 8e02148b86e4b0999e090667ef9b926a19b5ca7d
- SHA512 c626f89bc01fdb659f4ee2cf86ba978f04e4bf0dec2624170c83c21d5ad29e20335566b1f7545d9badc4e47ca2ea90535c4cb08b4afa3457b72a5801053706d8
- SSDEEP 98304:EuOjRHrd1zBPC474Iz8pEeVJmUXyevkUL38/cSUJ9yElx7W91a8G8C:91VzF38/LUJ9yE37KGH
- TLSH T179F59BC1B329F945E36901701A3532F4866A29303755E9B9FE8F36D2186C2D6ADE0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\Cheat Engine.exe
- Size 397KB
- SHA256 5313618d93640bb29b66baadf2339de85e593a51715290dadece6d58e039a75e
- MD5 0c84c800533ae5dee5923d5351da9923
- SHA1 b454dec7e2091712fa9ca8909dbc176d1f104c17
- SHA512 93974a559392c1ac37095d0b60239e16c2caefeb893c10ee726060a8f6a42c41fb7b72ee032e01c0d47ab350072e80d4bd1f9c892112418e2992f32154a6c4d9
- SSDEEP 12288:h010wHrzPcHFQjL2CVpGzJ+44EZ8B+gugEnoSE5f6:TwLTclQjL2CVpGzJvZ8B+gugEnoSE5f6
- TLSH T1E3846C21FA01D237C0627DBC4FA995E52A60F9202CA594CB73E71F4F1A79AE03D79709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\Kernelmoduleunloader.exe
- Size 236KB
- SHA256 65fa2ccb3ac5400dd92dda5f640445a6e195da7c827107260f67624d3eb95e7d
- MD5 9af96706762298cf72df2a74213494c9
- SHA1 4b5fd2f168380919524ecce77aa1be330fdef57a
- SHA512 29a0619093c4c0ecf602c861ec819ef16550c0607df93067eaef4259a84fd7d40eb88cd5548c0b3b265f3ce5237b585f508fdd543fa281737be17c0551163bd4
- SSDEEP 3072:Bj9mOBuELLZXBJPCR6ygny56rs+iO2AwCNCtALb44TPk3Ap1rleY/DptNH/P0uHV:fn7LhBJ9W56A+iOlfN/LbZnbptN0uZH
- TLSH T174346C6ABA818277C1633DFD4ED6C4E66F60FA202C6580DA33D60B4F9A35BD03E65345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\allochook-i386.dll
- Size 328KB
- SHA256 b96469b310ba59d1db320a337b3a8104db232a4344a47a8e5ae72f16cc7b1ff4
- MD5 19d52868c3e0b609dbeb68ef81f381a9
- SHA1 ce365bd4cf627a3849d7277bafbf2f5f56f496dc
- SHA512 5fbd53d761695de1dd6f0afd0964b33863764c89692345cab013c0b1b6332c24dcf766028f305cc87d864d17229d7a52bf19a299ca136a799053c368f21c8926
- SSDEEP 3072:6LYEDJlXw5pAnHp2ukwTX6N8B4A84zMtEl1knxgaPZ3nbanlYZn2l1S2CAYOpIOs:6LYEDJAAnHp2uk2KNO0tEQV+b3n6
- TLSH T1AD643C52AE419333C6AE273402C3839CF534DB14676B97D6B8D96EBE2EE17D06E31112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\allochook-x86_64.dll
- Size 468KB
- SHA256 8422be70e0ec59c962b35acf8ad80671bcc8330c9256e6e1ec5c07691388cd66
- MD5 daa81711ad1f1b1f8d96dc926d502484
- SHA1 7130b241e23bede2b1f812d95fdb4ed5eecadbfd
- SHA512 9eaa8e04ad7359a30d5e2f9256f94c1643d4c3f3c0dff24d6cd9e31a6f88cb3b470dd98f01f8b0f57bb947adc3d45c35749ed4877c7cbbbcc181145f0c361065
- SSDEEP 6144:Tch6UtcJYg8yRAkB+vsoqOvfkv+y3ilZkaCeMG:e6Utc6gdcfkv+KIR
- TLSH T131A4F7B679918A67C1DFCB3500C386A8F234FE1413AF579584D523BA2EE67C0BE7501A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\badassets\scoreboard.png
- Size 5KB
- SHA256 a8d8227b8e97a713e0f1f5db5286b3db786b7148c1c8eb3d4bbfe683dc940db9
- MD5 5cff22e5655d267b559261c37a423871
- SHA1 b60ae22dfd7843dd1522663a3f46b3e505744b0f
- SHA512 e00f5b4a7fa1989382df800d168871530917fcd99efcfe4418ef1b7e8473caea015f0b252cac6a982be93b5d873f4e9acdb460c8e03ae1c6eea9c37f84105e50
- SSDEEP 96:9fJTvp2iAJf329FCfsjYsvEG56SyjfEa186J70Lhvxg+NVE:9dvpPA129FC0WSyj06t0LNx3NVE
- TLSH T1F8C18DFD0E4B3E1A968C45F3BB4F4D654C05F382A1129B8BAC2D81E098AD19CCD91C3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\_mingw.h
- Size 3KB
- SHA256 478ca3b81e7442b00b29ad67ed6ff30656aaf1e83402f5d47c803b6641a88a81
- MD5 f972824227a6f696024e54fe892f66cf
- SHA1 51a33727b6732ba8435f2bd732fdf2302387458d
- SHA512 43c2e22dec75e66a209907c67797d26436c2bd9b10788009626ed8952bd89436f7d32fa7c5a1f24d1b249449388c1fe15fda97d1c6b3135d30950c639100dc8c
- TLSH T10B81BD305CC8F2E254369821A14D45BE455EEEFB2A92A4ECF0626D3D5D6367081F8ECD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\assert.h
- Size 1KB
- SHA256 3ab7edec5e55840c35be252bad52236955c3b4f9143810cdb1f09c34510eb8c4
- MD5 9c022d741996db6d32411bfef4eadb41
- SHA1 4ba93d77927eb8cfdcfe07f56d6edade180af1dd
- SHA512 e448608bfecb770a087cb19934a1b45a5c564ea10bdf5a40bbb250f472830ecee4990c669e90e495ecb5d4e48c3871cc2a33ce84f2d38524449fc9f5fd501da0
- TLSH T1CF215731C1CD2AB28110A177F62C4366505EFBD27760C530DD8FB66A5B73C6067B7A60
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\celib.h
- Size 264B
- SHA256 0d37951ce5445917bdb6fe062cf18bafe458a9f361abf8ec11382ef7f6653e1f
- MD5 266012020647e22d8feadb675115c202
- SHA1 761c2554f1c3be29f1578e171eb1abab5e8bef90
- SHA512 bfc02150272256e3e23e5c57301e88358ba9ccf07c9efaed2c3de9820a5f61602c9cf4755c576763b2ac23e0b2e9fd236cb935f04ebae6aa4ab876c52b0b0c39
- TLSH T11ED02B5368F959E1C9B0E2A4E97EB0C00001B4808362558CFD17D2370F08C04C23E64F
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\celog.h
- Size 1KB
- SHA256 47f6516f571bd975e03a6c29dc26debbe89939b1408366fe85f6f9885c954934
- MD5 66ff7510e551639fbc7dce262cb3c8e5
- SHA1 a1d237e17c8e7ddfe5692dde2010f8c25923bff4
- SHA512 c7ae1c3f8291a17495f58bdb0f5186dc42f47b8e0330a214e99588fecb4903546cd408a377812d9da2280876198c47c84d9b705f2b7eb459ea2c27d3d81b491d
- TLSH T12D31FE24E50F789604B536A3D6460368DB1BDC1332FA77E8B94E34885727C8190F6B9D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\cepipelib.c
- Size 15KB
- SHA256 df0bfb469789451e1c2f9fba9d0860607c68402515a2f33e3519c8a2ba6f202a
- MD5 4c971fe512e4a001b429691da03dec19
- SHA1 e45d2ffb3b68fffc7a273fba8cc9711db913a1af
- SHA512 c8acf258684238db8ef1bb6622f6546933dff21a265afeeff5318db0e427d9f33bb6b0087f0102f691fecb416dba0d8e2dab72832c716b67705d018992c0d203
- SSDEEP 192:YLnYl7CvFh3cYmwYR0iZFU/cuMREFLpUA3ssZ5:1qTmHRNu7FLpUYx5
- TLSH T1CD622A99075E34527773D7B28B464428D375A89B1AB36F00B1CD8AA16F30274E2B5FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\cesocket.h
- Size 1KB
- SHA256 2e48566d07f6c6cfb4ac5a813d099d6c6f270ca825805c9dad43f599c660da3e
- MD5 27e0f5daa63f75c5c0fb7a232f40a3a7
- SHA1 66863df8d991af103d71cfc0da71fed5a6fdfb45
- SHA512 0ea543c7a61574bcebe39169af7c98bcc1d472d191fb52c4298d561d88f6ccb95f4747ca6ca0c4b9dec5e71605a68424aa5ec65ac68f8aa7cca3c705b7fe0039
- TLSH T124218BD5ADB66056E0700F22926E4F15921AEA4333D530BAB80CE9F85F925D0B3F6698
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\conio.h
- Size 10KB
- SHA256 de7161f85835d98b38fe6a19ef8973dcaf58ec237b1c91cf05ac535b2ff3845f
- MD5 6a61e54ad2614ba528414c7b69147caf
- SHA1 242479133484e15a2af816d95ddb053835bf4c64
- SHA512 468702a606e20ffa893054f676c56dfe6eb3d28a002bae143298422ab388a2f2f78e318714f5274bc9ebd243863f5228d5ebead5f31d892e96d8742c8e6846a1
- SSDEEP 192:R9IFnJJzpoJItwJ+Y31t1d1uF8sFX9B17lHLQWq4QcHyQA3sG1:XI4IJ2WzPw
- TLSH T14032348AF45CC462A27745A36A134699514BE89330CCECA5B81F096C5F03D4AF7FCAE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\ctype.h
- Size 9KB
- SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
- MD5 22e5a00491e32d15b40b196397ad01c1
- SHA1 b0db6fcbf4abd2f4fdea2771399c1e502d9f8106
- SHA512 28839104776441738233334a20de6ce3ada51179fb50366c27ab60432949fc78e1ccf735d2e80216f8779d84328634005c322d0010875e8fe0ff33d699ecc114
- SSDEEP 192:aK0sBzLLoy8q3JHZDrs+UAt0g7WnBeaIlzjD:EALLb8ars+Flzf
- TLSH T15F12AC255ADAD1D220790991B103024175C3CDFE6ACAEAAAB8E7DE388F5356CD1FC58C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\dir.h
- Size 952B
- SHA256 84064b17e501d691c43d47e45b112c2884db467417910b5fa1482b72342badfb
- MD5 ef5c7267df270272bfa8f8ebd1b516f2
- SHA1 1e3f8a9afd814efa8cf7c88dc480e9914a5bc570
- SHA512 8ca2b0e08b66eaa843fc7ad0f8f4063450a469914819a637aa3f8cac39dd38e32cc0403f2b04f767ae486934026585b56f93544c8a1f5d92cce32ce84a4506f4
- TLSH T1F611ED64C6C1C7F2181246F2AE84DBCA5309749F7363B645341EA2686F0AFE4832AD40
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\direct.h
- Size 1KB
- SHA256 179c3204312d7cf8032102773629bcb3e5fff792d1d808931cb6619a431d2435
- MD5 83679da78aaf8f8352acb1883b9ef868
- SHA1 fd89079636571a93755120120ab4f03b91076478
- SHA512 13af1f2c118e898e6055ca61286c9766df75366ff4f30708f613193cd8f89afc4a4cc2fd31fc3ac6dce5d577ee83e203f79aca3b739d9d9e9e60b42cd9c7036e
- TLSH T1364167295988EAA281331743F34313B52086D66B36D4F465A51F2B38AF67908F3E6D54
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\dirent.h
- Size 3KB
- SHA256 88c1f767fdcd6d51b991ee3234792da48c8576f5f8816f17a42344f9c8bbb1c1
- MD5 afbe32ee6ded8cbad33d6fe3fbbf077d
- SHA1 a7f0d3edee5f49e127575eb25e64e2747108e7c3
- SHA512 f655a40f8c87a0cb43a34ae47612d5cef2cf7814fd2ae9ce1c8566f97f45e91470364bd87e8c12861cce44fb8cca54717546baacc6ccbdace51d0d15206304dd
- TLSH T18C613F42A9F996F340A10632F7067AAAD60BF14F33946114BD8E13782F52F1E62699DC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\dos.h
- Size 1KB
- SHA256 3afea4ae85c68987fe59f40592ac5ea3ef1049b4fb72612bb185358d628e2dec
- MD5 3b6fbc94238df0fd001b04d55bc899db
- SHA1 231e18ce6a5488b2353fb9ef052fd6677c2cf555
- SHA512 28ba3ed6cc9511f17798822fa81a2d16da17ca4af9da64f3edc9170fbb883801bf07390214c54b58a32251e6a1c3bb359cb76e892ddb77fbf8c1bf3985e13e5e
- TLSH T12411F03D4ECCD6F082365903A30857E90049E5AF7A64E4B8F407693DAE17924B3E9ADD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\errno.h
- Size 1KB
- SHA256 7c8494fe57d944773861c4c1cc1f2b46b3111144a24bf505b3d47b32f0ac1e8a
- MD5 b81e5a965abd076fb52de6dfa22a78c4
- SHA1 dc11acf6a38871e60d79108dad6c3156715f05e7
- SHA512 8f3057882753150fefa734897ecfd8dc4082580e856947910fcd891d744651706338a7df78c1dcf1c7e54ee79ea2a6e8d2646be9dac92ef301d7347801f04273
- TLSH T13F21ABA26DC88370C2320102637C85E011A5EDBB9974A5DE74593EFD9E6D32212F99CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\excpt.h
- Size 3KB
- SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
- MD5 d236372cba09e14c37b4e48f81baef83
- SHA1 11a3bffaacedfa1caa4b4bb836cd95297a4ecc6d
- SHA512 d7c22525fbb97bf8950db69645511420f1198abe33f5d0fe07a5ee8dd6b5cda07038b6db71a2995c6f5ec1b85d8b98e4370330193132e95f2a65e3a847f04408
- TLSH T107711E50BFBCD6E1E6A1149191180A9AC1EB9D2B11FCC8929486C77C1F8722C91F66FB
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\fcntl.h
- Size 1KB
- SHA256 fbd94f945a57165ac897bdbacd2a861b1351e7850fa76752703c0a622e0646fa
- MD5 478add63d2c741d03a60a11bdc4fc0d3
- SHA1 e9e0c857d2c409f23c346d81b77c5634f1c395ab
- SHA512 bccc563718b1a03e93e5bf8cf0d79bb3128a3fc1fdd6fbc17792cbaf3c5de70de06ec2f88d8eed7105ff62056e32e9a79570f5890e75f4443033421d283b2fec
- TLSH T18421DE227EC1C26398B20384301D66647109FCFB629916EDB014BC4EFE8727411F99DE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\fenv.h
- Size 3KB
- SHA256 67a827acf4e09653afb5d18f2ecaa5fcdfb7471d8a5b8197c2f33d06e8462f84
- MD5 deec7c35f77ec8e22074667641ca8851
- SHA1 8cce6b663a9a04b3c13aa6621b0798e487a8a88e
- SHA512 8de2b82b0579e6c37546a26bc1ab5d7603090e815d8ce728474b1405339ab4ef4f0794df19ff4cc3780aa7259288d4d93fd50b0e9c63d413ff22ad5e72bfcbe5
- TLSH T19B51661939D8E2B7157B5023E3252039D206FE7730C0E9AAA48C9E2D1D83D66B3E51DF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\float.h
- Size 1KB
- SHA256 7b8c84c49d28439ed7415e88c5131551b3c3f68305c51d3d81b8ec42e6b25013
- MD5 f1b2dad415f00af7a859d6933c4123fb
- SHA1 94e99217a1d7ed2925af7f9090a8c779d9dddf0b
- SHA512 a59382a2588117bc1329bf60aa65a9130f59ad1bec0b5e8b630b91569705f5b3d647b13f1d5053c8ad2c3a2b3542f9ff70ee26013a8da736a9882171d4a3b382
- TLSH T18441A0C85EC524B2C072B1255A1F8E29B52CEC73B11918ED7152AC7C7D4E2905DF46FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\inttypes.h
- Size 5KB
- SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
- MD5 6bb72461c8c72cc3b96f78c73fa803ba
- SHA1 4506fb8bfa1622d4533db176b3dcfab0ae021672
- SHA512 5f6d95651183fbce7490a619d37672f2d3bac516319d0edcd4e782a77632b457632eb83ab54b67132752649fbbfbd1d4eb2b4aba2622bdf729f0c4bd7509db2b
- SSDEEP 96:a0GgtlRUn9ZpD5AgcpqdvDp/pwZzSAGkKTskBkbBpbwlHrhchgM2bRBhuYBbV3VU:a0GgJUn9ZpD+gcpqdvDp/pwZzP1iskSX
- TLSH T110C166038FDC60A82132BA97A66D52580063FDBB5384A0EC3679DD3D9EA149181F6CDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\io.h
- Size 12KB
- SHA256 5da97c850e8e2ab608c42947a33411f556f6d75b8264e1e5cf29ca7ba7b96256
- MD5 4ac0744ef16453febed8de4242997946
- SHA1 b092c9006de0a8dbe7f0ff568b6caafb00b4c90a
- SHA512 1ec9947c6fe0160954f3922d6990863865d274874c31355f0838ccbb1bbf6650a9a3f0d3590537a189afbf80e33cde5393260fdd5f3ea5a736a066cdcc5ff815
- SSDEEP 384:Y8Bx8BjP8BJPKf37Rw8z/hI9B3mpv6O3O8iONUO5OG0xLIJ8SNgVSAMczPO8cONU:r02oxz7vX+8fNxIG0S8SNgVxz28ZNU
- TLSH T170421255789D895260B61367B64B0275324BCD7B31C1E8E2AB6BAB316F03241F3F66CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\jni.h
- Size 52KB
- SHA256 bbfdf8435eb3bf257808755066eb267f77f2677af1333c32d8d42476f3cde845
- MD5 45146adf8e7b855a3a71d4e89139bd1c
- SHA1 a8a5aab92ad76174793afeb96f40c29b83c8ca51
- SHA512 f2fca690c025f69bf1914861d6f3edab2a3ed9f14e6d4158f77a9b77f9b4cc7a156f397d3f551dd397a1bf8075152b945790d9087278c73dc471173443f42c1a
- SSDEEP 1536:3XgZkPGo+QWLK+rxnPkpzWRT3Cn5ldQoIiRdx5BRhJRNZRFr73ueUAq2YhpaQeo+:3Xg+PuT3Cn5ldQoI0XWcDtX
- TLSH T19D3310815AC3F3E56C73A75DC947944DCA90F003342EEA90BEFC9D954F398058866EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\limits.h
- Size 2KB
- SHA256 39c0761f0e43d7b936b9b81c85673dd82896ebfa66e9f1b9a19b45f34e4cd52a
- MD5 21ce377183014c3535643c9050306a33
- SHA1 41b25206edd6309884312fd70026096c35a6dbeb
- SHA512 3b0fa5d6ebb7ac47694c7d04b4835af6c089344f7f8337db74b34e3b46a1792295224dc232fac1fd0db482fc32c8a6a4bfcaf4f39c35dccd98600181c314b43d
- TLSH T181518BAB9EE87091B1316015AE2FCB51001BDDB7B665B2DDB002DEBC2E9615040F9AEC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\linux-x86_64-ExceptionHandler.c
- Size 6KB
- SHA256 6ee47c69e8af14257387e4ea025b5c8df832ee751745ea21e91e90c79e4352a6
- MD5 323b7ac872ff1eab2b0f1166e394e55f
- SHA1 e11e451f5ae40c416d496904fe53a15ab77e68e4
- SHA512 9ab29ad69bf264cb39d081cb3256cb8a46d94b4fe7e385eeccb692fae816cc21a8db4e5a2f29a0e06f444519a8c39a1c29bab1450b1350255933b7b1353fe80c
- SSDEEP 96:T1WYLfTkh729N8VtjJ3t0N6SLXdzC4dzz4h6gH+hzmFSVAPW3DMfzwGp:T1WWfgumbjJ3YLkkgHKzmFPWTMfzwGp
- TLSH T142E1549D2A3E61E173F2316147A21E06D72281531289FED2702FC36C5FB646097E6F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\locale.h
- Size 2KB
- SHA256 882626fa25dbc1b5903e6fd98cc8516f1e54c4e06945026653f05b38125dff2c
- MD5 5f6a3e42f8eb297b888b498d93437c3c
- SHA1 09729d7892a1ed36afaddec40674aceb62b5fa88
- SHA512 587bb7be57dda7db0bf8c454a78dd67d850342d97bc7c99a9804d53fa7929eb42c1194e13456170c0902ca7a15c028a6c635879889f0af6a9ed833c2e046b9ec
- TLSH T1E741CE200EAF91E391311B826A3B614A5187CA6F3115C6ECB583FE284F0369CA1F9DDC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\lua\lauxlib.h
- Size 8KB
- SHA256 1a47911ab8c28536b35b83e9887729b06b00e10ded9c1bdb417ece7657a6c73a
- MD5 414752bf38e58bd6c662587ca7b4291a
- SHA1 5a82403a8d90d09e9b487af738ecbcbc0feee297
- SHA512 1dc2a3c45c7fc8f8a1c5a59d6907bb03cce53ea1e24225118190873ae8c3d28a7c4e287505d6beec9bb5ac28077576ceaef04a1e2c48a0e6cbad8ddfe8fc71d2
- SSDEEP 192:AG3SKmwE5ZD7lq4TJpTPx9W1HPHthPRHroDAtZdJ3/L:AnfEvGAr
- TLSH T1D102624EA8663442DB30634440090A4499EBECABB6E4E6DD365F6817E7513ADC1FF6CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\lua\lua.h
- Size 14KB
- SHA256 8aef3fa9669bdc5e7659389e276f31ec779ca4bdf96e2c9ada07dd9458a47416
- MD5 555a7140bbd46a1b5bfd5bac4a9a9f10
- SHA1 457cee5851a018909d1bc96824e99c0c775166ee
- SHA512 34b85999aa982de19630dfa2100c60618758a4247fe5cdb3320e04904415619aa437a72e97b5e67ad287e47c66e73c7fd04da6786dc1fcfa981207541043f3fb
- SSDEEP 192:e0NdvtffvT5GDazPCagC/3hJiOY4k1gN3glwkp7MYTG26nRRT46lQHTa:lf4Dg6agC/3h8OBk7wkJMYTG1Rxqa
- TLSH T1B062DD5DE5823480D9317310462D4AC499F6E96B31D4A1E8365EFC188B95BBF42FEECC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\lua\lua.hpp
- Size 200B
- SHA256 a7a47ce4cd19f703b8025696f0631c09a664d54cfa831be4538d10441aebb48d
- MD5 5d2dd4ff9f4c38d14220bb0e425b796c
- SHA1 2fd297c467ffcd72cf9cd21450e5bead0ae23962
- SHA512 c84ec5c6f867df99c9c8c4f57af4795e2faca7d81f111f7aecc568cd5a28de3971a1bfcfef9950181ff2fa67b82542840488de718d95f87877f51b0709ce10d6
- TLSH T148D0222EC41E8052685372F0A7818873C49CB5A85FC8749702112DCE60C31CC9FEB273
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\lua\luaconf.h
- Size 20KB
- SHA256 0c5d09a7908f99b80377b3157a0bd37c6322cdc0af437e99501ae746037408ec
- MD5 fe4f0ba514434b7f01983b97f6e517e0
- SHA1 7057fb0bcc204ac4e65aaddbda350bf8f7488a3e
- SHA512 bebb3a5c5384d0a08955a95970a40509d2ece40feefb0a7c80bbfd4f9cf02e88aed69b5bf05ba6fffabdd88d364bbb717ad4f59e3a1b6999bcd1cdebdd410d53
- SSDEEP 384:AmA+N/G+woUL8m7ETjv68AaMNZjXrQvLXF2ZsgcoGkR3lY6TKhaokMC5:++zbTr68AaMNZjXrQvLXF2ZsgcoGkR3T
- TLSH T11192534DAE9222A202722311520C0A4ED27DFEF7476266FD781DCC5C2916B6742FBEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\lua\lualib.h
- Size 1KB
- SHA256 3890f6ce73f70f6eb67ec42a74f7c8cef40fa184659934906648c8acadb53fbf
- MD5 d763a23012a8dafd2d76ce4a0609cc17
- SHA1 b7c2040f6ef844048a1b17e204658ad0f5c6957e
- SHA512 9ac100782422e02809f5a63a42b9787f97c9ff292cc3ebb7e2dc39b5e40e671c566a74dec8d1a748b7d4e8666499f045fdee6ed4ddb0207ff7856145cbfd294e
- TLSH T17921F3ACE443384AD722F542400C263429EFE93B644691D5335C6E4CC5D05AE44FE6ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\luaclient.c
- Size 6KB
- SHA256 a18a985a32b8627847278c41012d200c0db1b4368e6204fd6157f6e29281d9e3
- MD5 fa29c1499bd4e51eadcb7c3462188430
- SHA1 62708f95554b438320eb558267da8efc66593686
- SHA512 988eadeb061b30c67a4427532f4f7c095a675d708615960af36a7ca5c3d69339db534e6fd5c109402ab201bf9c8e96a858961b813e029dcf2fd7c267f1f445f7
- SSDEEP 96:ZRUrVghQMcaVetgHaQjZGmXVv1JBcZHSdP2LYehVqjcdtHEOYL:QrVg5aVs9dP2LYefftjk
- TLSH T180D1651C018E30B61230D734C3934143F6B6986376C7BE48B65EE5942F73462EAE9EE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\macspeedhack.c
- Size 5KB
- SHA256 3385883dfeeda6d10867ad5e942a90e3a86e1a51ae4621ac19d14f8ef92dc000
- MD5 af4c02a56cf272a13bf45c40545b575c
- SHA1 67b6772487a2eef1177179b09b2e951703fd9a92
- SHA512 246293147867b6d5cd4b4d7bef13722a3a020afed34831b4cf7136f74277d2ec7f8ca200e5613eebd61502a839be90e2ccbb0fcaef0edc7a6881991491ad4c15
- SSDEEP 96:fFtVKSWx2Mgi5OvfQFF8FWscDuL3dSZBKGQkVuDy5AGaPFi9bPeASF7V:a8m5Ovysck3dWLtez
- TLSH T11CC1FB86304F44B39A35B4638B3720E9D74B480356A56660BAEFC78E2F39411E4A7FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\malloc.h
- Size 5KB
- SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
- MD5 537bc027e86f7252d88b6bf2fe5b2f35
- SHA1 7f3361d220f96ad1b93669254937929f267cc333
- SHA512 3d7693f46fe1272decba8efb6a01853786419055cf338cc900c9fe3ec1b795ba25e16878a5d53261bf3bc3bab7525110b6f1844501d5fb6be45c57b5d277f625
- SSDEEP 96:y4bSZjA6r8VdQINtNy6XVqB4/mLErYQ015U/dIuvwQRbZBq35jU:9urrSXIzGdIuvwQR9YJo
- TLSH T153B1002218AD936164739196F99F0360308BE67B7BA0DF64F9F76AE82F0311403F465D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\math.h
- Size 22KB
- SHA256 0bc33882bd2af1e7d33c38c0160e2a0ae737836815360765750cdc7e98e5dfc5
- MD5 631f16c4a65cf2f47fa49c9220d9c500
- SHA1 330eadf08fdcb31747bf7c84182f2a5eecfa3fab
- SHA512 92eb690ca7d563269ceaeffac1f0ffba6d010568431843f2dd82dca7a1aca0e6634c3335202ed5559fe631b0ed7c585dc1c3f5bb248fe3d571ba754b22b6ad5a
- SSDEEP 384:lpwI012C9/SKSP4qROW8JuWucZBFRzWhHONMLPik9OeY:lpq2C9/FA4OOJr
- TLSH T101A21F1C3598BE839D7630B0B587868DD2C559D2134CD8EDF45E83660F23C2AA5B9CEB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\mem.h
- Size 345B
- SHA256 43956946aefee50e01fdd4d54a6c597418abcb02251f9d7695ed7039fd7a5ff6
- MD5 534517144e5b9ed662526771bb5d7e13
- SHA1 2d1801e4179e2a6e5914764d944a9c472bf65e99
- SHA512 533f30d3288c2b827d29210c6890d600678db4f67b9ffab27046e5ca3931bc119de4af93ffa63929dcd9d7c0babd69a25e7f52e697272f3226ed198c93a9a8cd
- TLSH T121E02064CBC843F341151A439309D3D2411CA0EFF2F35256381705997F09D700326DCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\memory.h
- Size 1KB
- SHA256 b4341e188913a819fa3bf101078a95ca077780219373f424c39ad86c94e04b6f
- MD5 29f62b1add26dc1aed3faad03fac030d
- SHA1 6f605b9a153a987f2939ae6500d6391fdc107332
- SHA512 3d98e9f039dda694a660ba7d2f7906fcd60016dc6a8fed78ceb7b191618318a68d34169b9480ba5727730f6bd6357a13fd02e0cdca5439a45e06d2f0d61dabe0
- TLSH T12A219A378348D6609073C9C2F6101281603AA24D7440FB56FADBC5763E93420A5E9BAA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\process.h
- Size 8KB
- SHA256 6947c954f2af676e66cc38d64b1a165428734000e2e272f883c2d74a85b82020
- MD5 f06edaf6ab750607c33c37bfe50b2eb2
- SHA1 ca3afc7781760d84432b06567afbda24587757dd
- SHA512 9926b19fbd4b30ecf6682ae5945401e4387d2b5ce02d7643b51c660462b761b08f52a99f2b7da73b574c7bc6388cd23ca3ed8451a3cf2b3501ad217925a503eb
- SSDEEP 192:kVIYQ03tIPjxoNimr4mJ6hIO0XtcsQQ05vQTcsBOdFS3b6dyntql+:kVIYQ03tIPjxoNimr4mJ6hIOmcsQQ05E
- TLSH T1B0121C09629C4556D27313E6FA8712086083B63275A5ECF5DE6F7B788F238C2B7A1D4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\conio_s.h
- Size 1KB
- SHA256 f7375e816739491fbab39531c1d60a77b78ff9a162aba17f817c773bf75f6508
- MD5 5bc78aa26af6ce836f322cd5a432e368
- SHA1 1e99298161f0adb4f7244eb5a067364dc5b47e91
- SHA512 f1bfd5ef34a97e72ec474b2a2fecf4ac5fa1931e08845489623a7c699954b549fede1e4f93c815c0a9944a7d79601a9ed1342d47694528dab54adeaa5bbab443
- TLSH T18C317A16290CCA9295651782F30603D1D94791BE34F2F912AD2F7F202F63E00A3D5A4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\crtdbg_s.h
- Size 461B
- SHA256 03630ee83e7c921446a0790853fcadeb5a308553dd3c4ecddd568cda3167c0f1
- MD5 f0c359a5aa08a907a23d2c0c5aa68e5c
- SHA1 b487788ec6aa32458df18f6d10f67573de8fa16e
- SHA512 71bd41e6bd84bffe34beb8ef1b49c63358cb5d8e520972d57046d58e9d9fb6deae512e4cf5554337da2510d6f3afcd6c6d58124a30c4003f9e3a8f60c2ffa896
- TLSH T1CDF02711DBD6C7B2A0680611431CB3E20118AAAFA561A25CB98156C9AE0393047B7DDD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\io_s.h
- Size 881B
- SHA256 6e02f4ae50d30629af7df34785b6c32642b12d94addd56606f6fc4ab668250ff
- MD5 aaf6330564dc2b4b413908ef435956af
- SHA1 ea59272194493914f4b0cd1375210053a34cfdc2
- SHA512 3fd60615b2dfc257a0cacf1f985af5aa765583db7de6b8e474de52369219da5d2276362add9875a820f0a424a259fe976ebfa1e18fcd7b70008ab8ff70eba03f
- TLSH T1D911E331BA4CC3B190312312F30943D1404ED6FFBDE0D864D9666B6B6F3790073A6AA9
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\mbstring_s.h
- Size 3KB
- SHA256 d962ab8070958953f48b24c9ea068b345b158237826fb71b9a76d36cf2e8a32b
- MD5 ededeec78fa33c84025495013a88bf1a
- SHA1 7cb95b9b6df8927222625ea101a72389b8a5318f
- SHA512 b32e7891109560b4df8bbbd1b3bb6d2acec9158c35743eb97a88f3b1237114979057b00acd2cbb594cb1db555e5af5ddcaa610fe13c141a20494ca47319f65b0
- TLSH T1FF719C632899CB22687FA75679070284094F539F39D0EF324FDB222D3D7355897CAA2D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\search_s.h
- Size 796B
- SHA256 96174e09f1c573c7faea85a6d568225a1b946e133c6c04a7bd6aa865c58896a2
- MD5 e0c3256d4be1ad2a506755eb847c2d39
- SHA1 236108eeed6afc8156950dae94a055b90f8d169e
- SHA512 501e4c147aba8cc08d3195bba9328d3ed6186e8bfe60ef4de65f09441f708abdaac9d7ed4c84ccd4ce21075f45d0c8b60b2bf8a927ad8a449c11ef6b2711032a
- TLSH T15701B131238C427011B742E3E32463C6703DF1ADB150F66156DB938F3E53E50126A7AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\stdio_s.h
- Size 11KB
- SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
- MD5 3c28755c2186dabae016938e1308b77f
- SHA1 9437b43cd64ed70638df695b1b9eab34c1b04f57
- SHA512 9d89fe5e5b8396998a552e443970f45c8e9f2f04f180d14f1cbbdc56a1fd5ae0f2c9f81b8e25d0dcb20fb1437d9bd178a6dad68a323aa0e9eaef31b6b6d40f33
- SSDEEP 192:nzXsE4vla8LmEtTcbA4MfaEU0zwyp0WEP9fF2V:8
- TLSH T1DF32D905690DC94299B71B86F34307C1A843957E34E2FA625D7F6E202F73E59E3C4E4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\stdlib_s.h
- Size 4KB
- SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
- MD5 ae13bd6218c4840eacac71f31c45b2bc
- SHA1 e05d796ce8f5aeaa629ca9f1e3f6d4ac154148a2
- SHA512 689808a64c20260f3091e94dce6eaabf8662ba627b4de4c43ed685390565186e69ff229cb4755e9d3bd12b5c46e16ccfd848652703572e790df7bbab3824ff9a
- SSDEEP 96:1ICzd9hzhSzms1NOsG1/zl1EzQm2pppJptakhplumHNNmeN4mfNaAqk58ikTNBkm:tp9hFS6s1gsiB3fnjhTVS24Y4LN
- TLSH T198815911A5085F52A5333393B303028184DF437B35A4DB71CE9E6E297E33985F6C6DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\stralign_s.h
- Size 824B
- SHA256 b23f0cf79d5455e232d92792e2b2be38125a02808bc005049367bab68da1300b
- MD5 c46db571cfdb29ea8f977222b4bda152
- SHA1 727f853fe74015580ae152b7da8e1958b19fe22b
- SHA512 747fefa9b6dc0b5b1de13acffbeccdbd7542a1241dee3299f584fd08d65eae8d1814305c44fc5ad580d865cf73ae9a8072f5ad7fd5e8439de034ee82fd789ca7
- TLSH T13701C27579DD4271961B0073861C93865018D5FFBB219538F0E2E8FF7F51920236E5BA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\string_s.h
- Size 1KB
- SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
- MD5 544899f39ca616ae07d97a2fee8de3d4
- SHA1 2f95831d27cc918e633e8d711087ccf7c3da918b
- SHA512 20dbf6c25ff2270402bb4eb99430b83128f66d577b7c9277cacbf8cdb5438ec58b6b1ea468499d1f48338cf4f2433a1a0e59e242f812b419c6afc637340c86ab
- TLSH T179314A22760C9B5328B22396F307428108DF576F7461EB21DD8B9A123F33904A6D5F59
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\sys\timeb_s.h
- Size 653B
- SHA256 d153417ec64eb7b1504749bca6477efd51b4b22de670518f4fdc2701080145c0
- MD5 001fd701688e91d3781d43714b993275
- SHA1 a1825995271fe96dc766421cedc606384cd92201
- SHA512 f4f4a8d796e74cb0ad2a06dd153ebaf4cd16c431fdc67b7c2fbbdc4466147593421ae0f60a620503b21dc3c05c6480ca483bd077afb10daca46529996b4391b6
- TLSH T142F09E3179CD53F320510563920843D1665DE6EFFEA08015A52177EA2F12E2002EBCDD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\tchar_s.h
- Size 8KB
- SHA256 a5318cceb241962769169c32a3ce5bfb9a075a52edbac31aad33b0d7b897b544
- MD5 1c3243d5951ccf4c4007e89fd366631d
- SHA1 48fe81cea21230097c39ffc92c9b5bcab3b4d0b1
- SHA512 f6d25b5532745933f4320280ac21dd02cd12872639333b3ad04f4efbbb42cfe51f5ad828f6cb2134968f5503979029ac38ad208572ad3fd298bdcc97677ecedd
- SSDEEP 96:bQGkyRvKPf4e80QgHRySdrCcNNXe1FcNNFe1d6O1yv61ycNNue1ccNNYe1e1O1e3:c11WgJ17OBBapWcEqJ
- TLSH T1480206202DDCCC22653A0674920DD290A95B8E73E4D4B2BAF95AAD0C1D235F187F1DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\time_s.h
- Size 2KB
- SHA256 9ae9cb7a3164ad0093e3887b0ca09bb67498da51bb44e9be500b60e72a385dc0
- MD5 edc9cc4a2a0b921d3167f19d2d162f0b
- SHA1 424e2246a5b852cc80ac043f681a12f4ed95882b
- SHA512 3c81d4917e9a47307393ea6af3c6e945f6f6acc1baefa764e500054f84bbaedda83b7ccdbac3a1ec526e389ec7a095b0a6676ae09ceea63ef1e95b5de004b018
- TLSH T18141C021B5587B7111B11B5A720302F1A69F76AB3DA4D650DBCA2F326E33A01C1CBD67
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sec_api\wchar_s.h
- Size 7KB
- SHA256 5a470ac358b2d951202182f9ec1f945331c23a8d79629ad4edb08b7d73cfaee4
- MD5 37c52897cbb44a15bd22203cf8882566
- SHA1 27a8f810adb10bcfd84db971163c98ed81c3bdf9
- SHA512 5217c9246a458eab5657b219d136cec221ef0539cb5c5d02bf9e1fe88159a758b247e2d925312636aa8be4665b9d52641a9d3f2613256c3ff88985ed1d50ca05
- SSDEEP 96:2s3ligWmjN2JcabAOrco1/x+pxJrx8NxDhW21TUSBL/jCh3HzTxpppJptakhplFY:lUEU0zwyx3fnjhTtj7P9AJbfYFa
- TLSH T1B2F14812B60C9B4129B23797F343028188CB566F34A5EB61D9AE6E103F77D04F3C6E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\setjmp.h
- Size 3KB
- SHA256 b6164eb7fae4a12163251492f7f4e56cc50d146ec7a2f5640d86eca4d095046f
- MD5 8bf97dc43b347cbcf622768ef43090ef
- SHA1 e6be2c1b1fe50c19bcd2814e3827c7d94680e51b
- SHA512 f2f1a16a1d719b10a20b8be8b5046e151c50792d8d07a2e7f6bc8eb0d53ffce7e66e53934e688fd1c3fdfe00545bf203267fb59cbd289ad92f3786e473f8198f
- TLSH T1A681BCD9429E92E270A5808A473C079A872ED1BB3982FCA33913055D5F03D9AD3E5CE6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\share.h
- Size 639B
- SHA256 6de922c1bd7eedc33308304785c212945064d763eedfb373c09cbbb5cb933dde
- MD5 540ef403878ddbe2d4682540da20095f
- SHA1 4e3230df4b7a906cdc3b6e3e1a5cc768cc79c327
- SHA512 7c27842cb6f3d2b9707a5df55b45bcc5dd613cda8c550f0232f0cb9df8b59013f428ec3fc07fb002dff80d26bb9941ce76caadd22bd4b539c9f11ea13fe12ef5
- TLSH T10EF0F4A3CEC5C2B4783405194508A280611AE9BB75B6539DF40C2D9EAE56DB851F7CCD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\signal.h
- Size 1KB
- SHA256 045a031b376733ed7a685bc01709f5281403729ff7c601b913b2aca2fe1493bb
- MD5 a106c85866bf88a68510029349149b52
- SHA1 989f8bf922cac5beb03905a0e35c3c7b4b125c85
- SHA512 205611a36897d5a87eb54da5c2c193680dad95dda01a55dcef61665ed09efd322a20f276d9419a64144941cf0b59339ff9d15c1a7a9c86da60f140364eacff73
- TLSH T11D311C209F9856FAC3363181986C4A69C567FC3FE85081EE79596E4DAE065A003F36CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\stdalign.h
- Size 354B
- SHA256 7612d46571099ccaa7616a510f78f180cb1e91671e6e5e9223a2e297b84b789d
- MD5 aac7eff03c8fe0affdc4de59add194ea
- SHA1 f8914611b61057134e280c21efc90da9d00f4443
- SHA512 579d6b523237e71d2d35acda01fae823a2bb087cac2e513a9b83ca35995098813a93c1e510418d8deb73d1b1c8da406ffb245933abcf60324e08a086dd4bd787
- TLSH T1D7E0922219D58995C22A4052940F35A15595DDF736E220E7F0035C2C0E0B0B06AE45AE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\stdarg.h
- Size 335B
- SHA256 a38f8d34f5e09658cc3a8892b3a7e80ff566eaeedc194e5a85ece0b675993137
- MD5 7b52fb5e54fdff4c741f5180844cb24a
- SHA1 b2d080a82d0d365cf563c685da15f6094e004054
- SHA512 db442c6d0778e97fd00ca42804bd668dcb00db10418af54106c7302a140cd47973ab3859d119ae8e2413fbba0ea233c60d05d786a84f27e539247f98e16dcfc6
- TLSH T130E04F159DC2F0A9A1243873E1AD1379E0BDCCBF2A45199CFF541C5D685345424E49ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\stdatomic.h
- Size 7KB
- SHA256 5bc89ea6aff1edabaf7f5830ad589cf8d9d8245211ac4f9e1440cf53c0eb8d18
- MD5 b40534e5988a8d694a9e6584abd364e7
- SHA1 d400751f924d005d89959e05e33b0a048ea5c796
- SHA512 fa8d6c1e9b0c1fc7846f84f14f27ef63f948e76c717096de0b6c049a9bdc3096d0a96e6beb7d6857520e719980ead501093cceae988aca6fe429dda0d97a9ffe
- SSDEEP 96:GoyQEOuZs5HxDqft+GLtWMYZKmu22DMTzx4FT6wGVO:GwqJYZKmhRHx4FGO
- TLSH T13AF1E0802E44F11111AFC575D66CA4BBC4D682FB0942ABB771ACD8DC8F1716E09DC9EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\stdbool.h
- Size 176B
- SHA256 5252824225ddc486b0460677f765e4157af5d3ed7acd65b310a4045eafb56af7
- MD5 7d294f4ec2c9640974803a61153ef3dd
- SHA1 3bc244518f863b754a97ca1b756580974c0d4356
- SHA512 ff09177dcd695a185d66afa8405eb7bf0883d4c1e6507f00a12cd958562e2f0444867f6dabdee6e50cd5977897e4d878f31cb51888ba6878829c96cbf80fb283
- TLSH T129C08C236EE2A979C0346743A88C18B0000CEDBBEA1508EFF2103CAC2C0F2B819F04CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\stddef.h
- Size 1KB
- SHA256 a2eeaa997ab8f1d3b3ff35612aa61f8d53e61bdabffcd5bbd21c68bc41ab0db5
- MD5 9046abc90d479e324b95e99f8c871cdf
- SHA1 b74d7a314dae76b3304f2d57fd052fa351add75c
- SHA512 6dd7827908eb176ca4b0bc666a000c207e9aaa0a51478376e9705195e72b8ebcf52668162019696b42427bb8a1cb454982623ca6317da0a13ddf4b76ce2bfad4
- TLSH T18C21FE278E893690B8125472920B14AE114FC27377D2EAE11546F46C2C2393464EDED7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\stdint.h
- Size 6KB
- SHA256 33c6c8da7d564b5702af8c6ff45c00a16842ba3ffe3f95f7f6232752f63c5afd
- MD5 90c1945afa014fc0f8d17078c51502ca
- SHA1 f3a15dc3e32ed97b8cc34c1afa2c66ecba3b3be4
- SHA512 be8557bda158662acc18cbd4445d4d2e6787fb5c78a67f0d0e4a62ffc9d2b1173c30c66ca5c6a247da8fe7c38b7c57aff050bd4a35b0120bd95400cfb4c2c2b6
- SSDEEP 96:Od4Q69/YQhMgPRVQzD+5VO7wRUNsNwxzMD2eT:Ou/f3Riz65VO7wRUNsNwxG
- TLSH T133D1A7042EC471E112762223888DCB2D821FDC7BBAD6A5F931558C7D1D29E4952FAFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\stdio.h
- Size 14KB
- SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
- MD5 f4948adea7d9f60748de8b427ab85684
- SHA1 101ad5424e182236eb7f537f17ce846c917ced27
- SHA512 49847ca1a78bc100739b3afc8a0d607ac37e340cebbb0c04b2c067cdbdd6ed33ac5557214282699a89e39f4b8bb3a8b6383fc0a25c19265089e09b08765ea693
- SSDEEP 192:VgGovkt8YzcfdLDQgPVj85xhpp0DghdWRUeuzIDcDW40aMsGQLZX9QLbiR:KGr8ocfdL0w5shpwf40lsGQ6biR
- TLSH T1A562BB257A9C8941A1731386F347126105CBD9B331A0ECE4AAAF6A345F33C15B2F5E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\stdlib.h
- Size 19KB
- SHA256 5bba095a2d22a6bc0670f73bfebba63cfec65f8b7c248e84e36b3d7ede0a4f3c
- MD5 53d74bf044942015fec4afd293d2f9a8
- SHA1 010ab014e3b81b3a7e2d1d87ff0281a8736a4abc
- SHA512 64b66f0d610d37e6f55702130fad39f39d30f44d33221c6a985cd03948968d4c4cafb7676402a9a4a029c8539efbfa5801c0d1bcbf667b876f3e7bb08f9bf89f
- SSDEEP 384:X5I7a44IVaadf7trkr6vrRcbCGX8XnaTjWb5:Uvf7trkr6vrRHaTjWb5
- TLSH T161922F245118DAA3B0735392F707425641DB825736D0EEB0AE9F7B281F63884F3F9E89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\stdnoreturn.h
- Size 125B
- SHA256 ec64d8fbf7fb2e800df9784b2efca0a99fc25a3eb5e8da56e4df098937f787f2
- MD5 4163443c81ed0b6beed89487a9471f03
- SHA1 48c03d1418cdfefa18d8b14f6740c95db322e0b8
- SHA512 7471d9381df0ccbff3fc01c4a27fd5512c2da7a5b6c0d04c52e47417559509610f313b3711a5955ffcf137338dc5992fd2da183c456bfa22b87ecc58e007e505
- TLSH T1ACB0929AF8F290C2C334052588880076E00C4FB319A8A389F8022C2C683307C88F4ECD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\string.h
- Size 8KB
- SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
- MD5 7e3ac3220bf883da2db8cdc7b8100d0b
- SHA1 666e6f91306ef6412ae912fa386b3decc6332ad5
- SHA512 1e27e9e73c5d3fbec7ce41cb3b5fd6615bacc416991321bce22b599150902352cf60078cd447bbbbd49f3106254c5e88e3fb01ca7de62da9a4dedb6fd60f9b7a
- SSDEEP 192:9SahrQ/tJUaRaV/f7WtxfeiZDHy6U4diocGLIvHKLhfyW7Ja0+8:9sJlS6H
- TLSH T19F023813A3299953A4735BE6F303824244D76B673054DAA1AEDF7E301E63485F9E8F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sys\fcntl.h
- Size 359B
- SHA256 2b4f660ffd8994afa0387407051e3ca7ecc8fe44beb2add2d431cd52ce8ad9c4
- MD5 26dac89b148799164d02ac701aa67e91
- SHA1 018db361295e5c140de8131bb148a09aba0e3532
- SHA512 94bcf1a20d11adf422b9a83521a5d6950eca35144cdd719c9cbb483bfb9fc0e57d1ba02d29347a9006b25b1dac746fdee952bfded1e55139586bb9d50386b8b3
- TLSH T1F8E09A649AC8C3B341121A539308E3D28219B4EEB2A3621A380212B96F09DB0031AFCC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\file.h
- Size 367B
- SHA256 b6e779c53140c117bc36bd335c64bfcb13ae4c2c486b94783b32149a6eb2d320
- MD5 da489932c3143982e94284f464f835cd
- SHA1 78fc0cce2b7b047712b753af6df40258623d2620
- SHA512 02ece23c55d9c425f2b53c4d3aafb7ce12b15995ab276cefa9254c37499b0735faf43ee32b67bf6a542eec5147294bd5c16dfe51caefec6c5b1c7807a4fd5858
- TLSH T15AE0DF64DBC8C3F341121A539308E3D38219B4EEF2B3621A380212B97F09DB0035AECD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\locking.h
- Size 648B
- SHA256 29786145e9af34a1f96e7368855b19e8879fc80d35a172d9ba97d3c7fc2f6311
- MD5 28bd6385b1c6af18f7b2b2fa7f66827a
- SHA1 ad01251c9d742578f2962d71a17969da842c5a2a
- SHA512 04df92a3257b4a87fc1a00c65f700c6a9f4897ff3e258fbd27a3b3ad5426a35faa7371735f829f4da40e622e75a8259d4022f0f54bf8f52ca5acfd234ed75cbe
- TLSH T128F0D3614EDFCAB250210C12355D62855204ECB76A21D4DE7D50DD5F7E1157C40E5ADE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\stat.h
- Size 6KB
- SHA256 4dc126ab4b3177da85e40ed56a7d4516105e436a4624272992816b23e03915b5
- MD5 c03d618d6697b5e3992feea86a9c4cb8
- SHA1 4536ccd81aaef11cf7480649b8b99836c8b32291
- SHA512 236235aa9b16b4ceb82c05bf526eca702cb7d8c542f88d0bdb2416ac3be8214688e6ba47bd253aaa877e173197035fd1ea7bf88aae6c72c907e898182a5593c0
- SSDEEP 192:1Roa8xTSS9V89V0B9V69VP9VCJQI99wMupDGi+dpq+p:UdTSE44GPkfyDGi+Lq+p
- TLSH T17FE121157DEFD944FC606862E24911B40BCB88BB29D6C95AF60D2E7CCF6322161EC5CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\sys\time.h
- Size 1KB
- SHA256 518741f286545434df676572e53bf8553b0496a7138942dc6b20ff252b4293e4
- MD5 d8bdddb8a0b2e59371ce79ef056873c5
- SHA1 25f481b63f4343dcd56d2f15fe205f16bf008cb1
- SHA512 4e009938eb6499f59022d1c2227a7e10fde44c1cc4a38de415b9e2c4e932e302c25845d68c6b2107cc037ab8053fe43350b2312a70130880004881e53edb8f16
- TLSH T1F231E3355C7C82A144620C63D61935E4A7A888AF7F4594D83855EEFA5F0373082F72CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\timeb.h
- Size 2KB
- SHA256 ef43f9f51660ab8282707f7169cc3d977878e623743d23ec565663fe2b4e9782
- MD5 19e8a20458a7627517ad83c0be798773
- SHA1 fb12989d8b6b899f89f10e39559a46d79addec65
- SHA512 4c21638910d0c87097e2ffc7b28b1011601e7b187297f9b9c2c3db52596f84a0cfe089ef172a0dcda0dcbe0b5b5dc94f36401a233cf7b903520c98b826a769dd
- TLSH T13251D1367CFDF1F114800C23A3042BF06B5EA29B6F59C470A912A7B9AF5372140EE98D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\types.h
- Size 2KB
- SHA256 f1c3f9e5c811a63bebae5229042c09cb5e057f4117fd31b45aacbb4c3a626df8
- MD5 c8f3b2f1fcf386398b5f130f0599a72e
- SHA1 242163a76e04f20ce4b3d5d0a959d66b978f43ad
- SHA512 3239360e2f810ebbb853581e01657a69ba9a56f6bbb29288011d6f842ce2c405d27a7d818c5e4809ae053481723dfa7dc37e4778edfe6b6392884eb32804aa03
- TLSH T1154155395C9CF0F041555D23E2082AF44D8FD6EF2FA6E4B49805B539ADE622181ADBE8
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\unistd.h
- Size 351B
- SHA256 1f595a85caeeef7385a0bda94af51896b214ee26056484af50353e9393de1929
- MD5 244c135562d0b700d037299e0052a855
- SHA1 59f8a3b33c5cc8bbf95e4b57300628e7599df682
- SHA512 1f5def177331b0e4dd86b5fc38fc9cf4f679bca644c26c993d2a911dcf39db452d084bf29d76430f5704e218cbccd86d68f11d38c07b93a818ee446ba249eb53
- TLSH T1DDE02669DBC983F381120A539314D3D65228E0EEF6B3921A381312A97F85EB0031AECD
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\sys\utime.h
- Size 3KB
- SHA256 524312e3e8a325f7d5afc21ddb8fcbceb85d451175e07ef1beadb7f82fa368b3
- MD5 0fd455848e3b07648883ff0c890ba3b6
- SHA1 22430c3ca7a2fabf95297ba72ca5fb175e37e996
- SHA512 53adbb9316b7ad49bef5018e3c32c10272a2d4a5ccf9a91d818d48c94c4dc4650acc2ad462c2154e010e666b762b0b7f57bad1a471830a0c5bb7422afc62f840
- TLSH T14861862534ECE5B392901D22B20117E42BCED5A23F99DC509979B7709F93E20D2F9B8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\tcc\tcc_libm.h
- Size 5KB
- SHA256 758e0585edfbce44bf27e0bb44d9b22af53b86c9c265e4303df9b270194ed4ff
- MD5 7166d4b47303e4dc38ebeae8b204075f
- SHA1 fa0341b00479d682c8a398e8ec1c6d4d7fc2d05a
- SHA512 4a4df260266b6f17da29e71254969dbe377cc11bade3513bab1f3b767ce049c9bbe1b0656263763bfb5d10c9d325b425364f000baa4342572556716b857e796d
- SSDEEP 96:jlnbfJdTPPut0CQHXOiNZIZvYx6G5Pcz3mZqZ9VZ59uxS34n3C3:NfJdSbQHXVNiVYx6G5Y3UO9VFuxS34A
- TLSH T1E4C1DC4C7CD57E076645E0B1298AD4CAF05E468205DDAE8CF42EB3201B2E873A1BDDE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\tccdefs.h
- Size 12KB
- SHA256 0d59ca4ed0be71f3b2d494612ca26fa7e901af30b2b37f0b4c5adf33df8f19cd
- MD5 237a68741ad0bc974cc53b8278839e54
- SHA1 96b212050be6063233c33c89ce83ce409fc58035
- SHA512 a81da5f88d1833f25d5874caf7f50c1cd0c4c862e5d3c9e1d1ba7f02e56bfdff01713ad5103ea5e614b572dc5fd326705bcae3fda4621942673b4a7613aaff5b
- SSDEEP 192:cw4bLJIanJMSEI8ejpTGOLui4NIhIbIXP3qt:cw4bGaGSzNj9G24NIhIbIf3e
- TLSH T148420D214CC4F08854326262A52A0A19D718ECB773E235ECF85EE9AC9F37021E1FD9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\tchar.h
- Size 30KB
- SHA256 7fe5fde028ff8f69d2bda910664e2c169e7b92c6e7f2cf7915eb72054a9746ff
- MD5 e237270733edc1cb97b10870a3d50a69
- SHA1 c2406d465b5e8d94e1cb61c6c3f312bdb018ac80
- SHA512 8df9add42ad3c8c378e93af4bec69489d59b8088974a40ec04fb91749dc050e3000674c9388fae9937f87d6abb60199b13d179bf0a8654370a66db64cdd2e1b1
- SSDEEP 768:ngntwzzdfQQbqvoRFCM/CVwLn4wyQoPUQ:PzdfQQbqvo1UwNoPUQ
- TLSH T1D2E299216CD8C46244B652A6E50E8681E007CE7379D0F6FEFA5A6D2C4D630B6D3F09ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\tgmath.h
- Size 3KB
- SHA256 e60c66ff9017f13ab18ee38824792ca771b9235bcb4df57688fec582739524a5
- MD5 2c46f8198e41891c15c0f55b09097737
- SHA1 7cee399ff86fdf638d230a1ced76d9e22f3068b2
- SHA512 c7c8745a00743b28d10242be553d39c6bbf7a1e4e4d8ae86717d446d935e86d1b1b8812e757fa380aa972c67d9c3c44bd6aeb1aa27c61c3a324805e764dd1d25
- TLSH T1548160102C95D005182672A0975DEB1A6B01A9779B581CFD305CDE8DFBCB466AEFC8FC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\time.h
- Size 8KB
- SHA256 453793a2d6c6fc772d1cdd60e701fb3d393d752937c1d6b2ca64d5f1cec9fd36
- MD5 698ea0c0196ba07e9b949406dbb9ffd7
- SHA1 7296cfe82fab54f08d44ce9cbab92bef7d96c96e
- SHA512 49984ddd4866060d8e310ca6a2bd53dea87aba70778202c5efed126c35b244df90c42d61477775f327b30597138a73fb2b2ee2e1050dc6732faeb766e870c146
- SSDEEP 192:0ih8Bf8Bx8B6qwyKg758H898Bc8BQGDL2XMR6fm4RFeU6sxhE2JFE:0G8Bf8Bx8Bxwyz58O8Bc8Bv208m4RFeD
- TLSH T1EA0224313C2CB1A110A019A6F30645F4EB8BAA473F84D8D47597AB767F23114D2E6F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\vadefs.h
- Size 304B
- SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
- MD5 dda4463da15121ed7ad4f091fbf61dff
- SHA1 84b4c4973306ef725c3f61446ab891cac6aa66a4
- SHA512 d3417cf7702a17f0f327cbaf8d167d7830a2955c19d553893329696cdf2312707595cf0f6ddaa36ea18d0cea41f24e6fa9c15ac14d5bc567bc25a1cc81b733fe
- TLSH T139E0CD508FC5C7B2541219028305E7D6520990EDE9639145381345957F659740669ECE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\values.h
- Size 126B
- SHA256 fa3758847b33f59abe99b023be00d8a027c391ecd0580a1fe755497c11e0c723
- MD5 621045ae9ca57fe30c8a99dd52ac5703
- SHA1 39b1e30a678eac4df1b78c0ef9d315a18df4f156
- SHA512 aade260048487d82f129a9a51fbdea949793465c33dc147b31943d22523fb1a63c48f80fca370d5929bcca76b89cd15d9786c439a65c396bb4a5416d387e3f3a
- TLSH T12BB02B19563D51067004001117F322C8760E36DD20408851000C000C5C04799C11CC7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\varargs.h
- Size 355B
- SHA256 07858857f4eed0a61df94beb1a9d678b53fc3d67a0b0e8936155f85ddbcd1dcc
- MD5 8c659fcb5ba111c2a40716a84a2540d8
- SHA1 20069af3a3805cf4cb05339f7a7a860f04a1e4b9
- SHA512 d1b19dec523c79320bb3380f29981a49efb178f06c0538bce0a5b36afeabec9be0f2a9d02436edf2ac0970cb14b175b3387bbb14a1e5f62eec9971c0c7648a99
- TLSH T1F0E02632DED283F200060A029719E3D64209E1DFE6B7150E3C16226D7F55AB14669DAE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\wchar.h
- Size 33KB
- SHA256 c9bf12e02a2ab0783ed1c66dfe43de43c402b33906cada9b1157502a82c7c3e4
- MD5 d6b25f8e3068967751493431b36c4248
- SHA1 3145ed71f286525d1ff492ae920b30694123259e
- SHA512 02a480389cecc909978130585609f57d03728726e72e5fee89874acca4122d971d74fc615949f8675513edcfe3198201ad0118f795b147c6fca10d28e8856645
- SSDEEP 384:2186Orc7LIJ8SNgVx6eG17k8MGOHlE4eGP0+aILsGQ86jWIwF2iiEYbS:2IcE8SNgVx61JC6jry2E
- TLSH T135E2CC16A76DD99210B327D3F303025155C38A6B3495E9A5BDAF6E300F63914F3E8E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\wctype.h
- Size 4KB
- SHA256 e12d9c5bcbe4dfb96ea6c75410ea287917b3c24bff9cd2e716d35e00c1d4906c
- MD5 c238cfa11a44926becd364ab35bfc821
- SHA1 54d68b8ef71d277bd5173e0aac794d6ebdb00360
- SHA512 c64f6a3b18d84c8498a2270e7152c4001d6d7ee1acd04169f616a7808a05a02f34e2876ba0cb8d979ae75752109b50a65a66207c86fe936402bda39ac93833c0
- SSDEEP 96:4+KnaNsLsNwnSTOXNXgXXXVX+1XPXmXIX6QXJX9XZXdwUSv:4+KA6O6XNXgXXXVXkXPXmXIXfXJX9XZK
- TLSH T1E1A17C667BE9D5E0923410F1B2055845748ACDEF2BC0E8ACF291DA78DF97994C1F838E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\basetsd.h
- Size 5KB
- SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
- MD5 4bf8483ca6a55237b88b3fb04917c9b4
- SHA1 1d5a57a8af15ff88521335970f6c547eb2bda403
- SHA512 7c4e012ef32a9529a0fa648320796d2abb287c3c37f22d2cfefe62fd0851cf68b5d373316ad70b51d09f0d0f1f48843a5d6e430c12367b5363648eeff1160466
- SSDEEP 96:xOYJhN+GRWlYdGmc0/5ZLURGFVwae+NmZLaVkGMGMRRMhHmdd7sAKGU1LRlw+4i7:xO8hIGRWl6Gmc0hw8Vre+NmcVk5rSHIQ
- TLSH T1CBC1F4861E84E2D5D871E033DCA80192811FED673AE4FDAA949755BC0D32047B2FD6ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\basetyps.h
- Size 2KB
- SHA256 34842ee3389cb13a72a2b87ec930aadbffce8906eb31480180cff541c7f44134
- MD5 09dfc50c697476fdc240969717c514ce
- SHA1 c9d444c897a96a4b475379c7c6b826fdf2dff2e5
- SHA512 de3e258d4df8e046a131110fadac12572ca14a7359f1c44c41debc7e8f1424a93bec6300e3ca21beeb55ff4b3ab572f0b3059d9399c89cff27d154dcc90238f7
- TLSH T1CE41ED2D9DDAF9BF11745A5A59DCD9868047EC3339225AED78464FFCBC0810A00F22CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\guiddef.h
- Size 4KB
- SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
- MD5 d65fffb282c1f60ccbfc4dcf1410be1f
- SHA1 2be8badb6c6fb0db0b023bfbc7b6842e0ab73a8f
- SHA512 e7f9554980671dcb14c62ff462ae34961c01e0dd1afa9f8e010370b0941e22ba619abea98dce090762888a1e485586baaa0917167ff6373c8309374ebce8054f
- SSDEEP 96:lVeZAP1SQySDz25/rPjEgE+2VPYFjrQUnL:lVe01S9kNcH
- TLSH T1FA81E0360EC9E1F124258173780C9B15A88DC9EBFBB0E1FC70466679DC5721A96FA6CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\poppack.h
- Size 282B
- SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
- MD5 584ebd620b89c671805eb5917278c46f
- SHA1 645dca8a4775e323eed290eb1262a898e3bd8df3
- SHA512 f80c37df443967189b8b3e246e860e854a65283b9e7dbbfd87fe30e6e8285c785df2d6f74ac9d7d59cdf655e543b830042a51574fedcf5611714946da2d1d542
- TLSH T12CD02B65EFC543F2829206028318C3DA520CD0FFB5F15159781105EE7F01A300656D89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\pshpack1.h
- Size 285B
- SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
- MD5 f7ce406b57af97c8ba95eeb9d7840c1d
- SHA1 ed211a37e0efca13a0146f9fe775875d32db3496
- SHA512 b7ee10fbfe60f4f6e998d48d88c36095dfa70524b9e24a6e3bdd6c0a62fbfcd66725e28f227da1469448c909d08dc57add7484d7feeca35b2ff3a4f526756256
- TLSH T1C7D02B51EFC543F2429206028714D3DB520CD0FFA5F15159791206EE7F01A300256D89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\pshpack2.h
- Size 285B
- SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
- MD5 5f9ba2a3122f6963219bdd95eff0d63b
- SHA1 fc7ef1dbf2d51d9e38e79bc4d2dfe7f89107263e
- SHA512 4339e932da337fc33cb8544fad3065f82f689e17ae9cfd6a3035a0a1c62271ed0efc44553a75c29207e97555e55ff8f76d42fbef57b46b0e117b087a367a5d1f
- TLSH T125D02B51EFC543F2429246028314D3DB520CD0FFA5F15159B81105EE7F01A300256D89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\pshpack4.h
- Size 285B
- SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
- MD5 9e2e16a461b193bae9e69c59c9a3e040
- SHA1 17aaa9161d3f9d7270edb80bc850b3ad1cd9151a
- SHA512 37c580b406eb30fc66b0135d91d8dc743a9f2abbf830a58272ecf910e4f4bde10ed9a1cf07a8c0f24bfa2d8e86883af76c5a7805fc70a2ae69f1a9d8225774df
- TLSH T1AFD02B51EFC543F2829206028314D3DB520CD0FFA5F151597C1105EE7F01B300356D89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\pshpack8.h
- Size 285B
- SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
- MD5 4fa6301a9105c4442fcd8181b17bf100
- SHA1 cd49157fa734af5ecb57bde0e7c57b9bc425ce98
- SHA512 ec6c5d061c788463d3e262e69ed74f5a21022007f4e3bc5dcdaa64ed641d0c4953a60a465e7972756e427e3b9ac71103aa36ef298f8e5d8fc946210152612599
- TLSH T104D02B61EFC543F2429206028314D3DB520CD4FFA5F16159781105EE7F01A300356D89
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winbase.h
- Size 155KB
- SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
- MD5 18908ace3445091e5966cc99f9d4b5b9
- SHA1 130d1cfa2d8a8a17fa2afa4ddf4fe3dfba4542d5
- SHA512 0e63d752b56051057c4e553307a708c2359eac58ea96ea0077931642482eb8b6e0b28984a278663d85c6b1739564cab6ffed3d9582306473841a355bd0cbee61
- SSDEEP 3072:p8iWoUKAVEvTQ/BUNRB+NNKjxyfmTcFqTPj:p8iWoUKAVEvTQmcFqTPj
- TLSH T18FF38316AA9A10E8E53B8E9104DF54C91DC6C6730739C7C97BB44ACA2E2D54321F1FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\wincon.h
- Size 14KB
- SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
- MD5 a7eac92053e54e029dc3b8356a49df4a
- SHA1 475df5425a60973ca79c1b0d5fa05dfd59e99e6a
- SHA512 1a1f5032e2ba7a837fb043fc7b3dc15796b27fa481b2d8593f8012d503d1aab5c82ab54404898fed81418ffc3b64712476dbc89acaf92aacac051ff40dd3f7cd
- SSDEEP 192:T3LK2osQDITqQWDVvRwPhOotRrwAIPmNLd1mBTVuRthEVPQKyybPki7wanag+4+M:lcio4tzIuhEVPQKyybrwan1+4+M
- TLSH T11852EC238EDA11F095266E501CCF48D85D89ED73825EB68937388CCE6E2D64211F2FED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\windef.h
- Size 5KB
- SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
- MD5 4149cf07a0fcb5fafab7f58bcc951d8c
- SHA1 dbf6f1002b67da30ce63be5d41e0eaa76263ac9f
- SHA512 1bc969d3700c3beb6416eed13942142315efee5f929c55f539e11fb9196c8865ca05be0a39094c6e7457b671ba33299d3861aec6161dd0429e8a375f378659a9
- SSDEEP 96:l4nmx67GjIz13BkHelji9aF7e4KmCtnLK0kO5Ol60V:4mxbjYkHi+IM4OAO5gv
- TLSH T138C1CA686DCCE0E44237AA33929F1A8470DFCEA35F95ECEC381165B90D9919041FDACC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\windows.h
- Size 2KB
- SHA256 3b0d80e4b27e099c8af543d6d9cca295c68e115a0fba7cd79cc0e76d1c3a5c11
- MD5 437b745f448ba343620fef2015b72e78
- SHA1 6e95b00a515154faedb95606f9aa429afe40807e
- SHA512 43ee580b0d94f5556a6d4227b103c52678ceece4566a7ce3a9a494e8f19bcf3b33a3e765e10d62c53cc54552532c3b0b2828241354c4c14df13cc7f90d6ed8ae
- TLSH T1DA412778DDBC10B2C13318A2621E9527114DEABF5B52C5BC620979ECFC5419C25EFACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winerror.h
- Size 146KB
- SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
- MD5 8a51f06df0cb380eb7e944203bfede79
- SHA1 92b3f5d7ebbaa0f35f30f5fa68698d93a708b0b5
- SHA512 e50c7d2391c84b3f975f5e6e732691102595bbb857987ad0577b370c34d9c9c32de3fea64dc8dd45608320eb0e7455ee306ca50b1f19d4b209bfe1618ef9b22a
- SSDEEP 1536:fAOSurpB+BkRymeRfJOj/7AL1YxEilv+y2aUs/gtvyEmZ1m6tDLiSgF:RHu7LSqiQakytxtDa
- TLSH T1B4E323515FD867A561B1684670AC30620D34EE3B764CB6EC70AEAFAC1E1DE0119F8ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\wingdi.h
- Size 118KB
- SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
- MD5 fd80383f6f92379e074379ba54d68bdc
- SHA1 0a4d4926df853e126fcc52150c84822af1ef8035
- SHA512 4ed6c5508c77a8a3272835c6ae1323514e42d015f3cb53168382ffd78fb1a73d806af5421378d1430ed344ba1200e3006d5aaf4150e925c1f2267a8d637a50a4
- SSDEEP 768:mmN0oz+ODr15Ye92/rvZVXkRs4pItxtv7OosWBkEwJaYygZtk+tUtwtmtDlwsigp:nuPn7z57mW7T1QFYLCOdKSbuo8Sl
- TLSH T196C395054DC7A1E8E4B65D11266F31842886FDB309D8E9CE37762DAE0F5D14D28F0AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winnt.h
- Size 189KB
- SHA256 f43cca894862a7311f5f4fd4789efdecd86563113b374e4f04f23ceb524472a3
- MD5 280a1360d58d4c3e56418e807fdc9622
- SHA1 3b1ddc5e74e3977d7d88ce80345b4ebbe785d6f9
- SHA512 6c4b76ebb45168789d166e133fadb08a653c9139deec602f8589f83c2fcfb54bc6e461c448a6adff32f439a89dca1dcb25ea1fe2c46b605a36534e2cfa6b82b0
- SSDEEP 1536:mgqyl7JPZPZWFLvC3b+tc55bLqkI66qJ+bOaCIzxlWLp9EhxSKAMimiAg9+38w8q:FvTTAw+39O8+NQkK9t/k7In
- TLSH T1181471462DEB60D4E176102973ACF0011846FE7709D8CACD389E2EAD8F9916449F6BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winreg.h
- Size 13KB
- SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
- MD5 0f0e5cb60e379839ac67467a6fd5280f
- SHA1 0783bec9c6f621aedd45d2f1010740d9a6152b0a
- SHA512 06c87ae227bf6d9c00e8404c728cc77de9840237647605aabf197a85131e4835ff6ee96d7bee24fd7b423c86f64d673669d2d2e8061f03473b2b0a1e10dd8bca
- SSDEEP 384:CVb+C+ikI8n1W8l12X3ufMfkebe+XxeceAUgnhicr7Df0ff8uc/1uA1uFZNz6deF:q+C3kI8n1W8l14VzPBAf
- TLSH T11E522E11DEC251FAD57A8A105A9ED1891AC2DDAF2A42CD843B603DC6AE5C90F33F4DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winuser.h
- Size 175KB
- SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
- MD5 3243b7c1189cc2c02075c2b175592ea9
- SHA1 b520f45e195a50ab00acc161efec7e6620e652af
- SHA512 cdaa9d91f80127028dc877924d2e41b4ef55714485536c4b64955195c94e8ebfbecf9a0d7545df535cbf4c1977ca53c14379b96abcebf7aec461bcbb87ef040e
- SSDEEP 3072:jgie2EUSlwrMbtENbSJGDN4tSUez2pUQkR:jgie7wrMSSJGDfUe++
- TLSH T1090483419EC650A8F43E1D1425AE34802816FD3352E8D4EE36642EDEDE7D19325F8BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\winapi\winver.h
- Size 5KB
- SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
- MD5 f0ef1b8ee3a22c3fa3ca4dd26012e309
- SHA1 4d78773275154677a5bb66d6393636ca2418ee69
- SHA512 7b230b6be986e12c639dee195198ee87ff1e9e0895fe3c101a3e8553d272986b9800c3c74b53a89128821d2d8d439a4968e48c29b2eda43096e48f51b871b18c
- SSDEEP 96:EtGsCwPV1Ihot5C5snyv5vdQSZWVvc22c26T9Dd1s4S/BwS9BYwJw3+wIwV4mDVC:oC4V1Ihot5CFQjs4S/BwS9BmwJp9q1PK
- TLSH T184B144005FC804A4E66E261420EC38586951FBBB56C494DF72664DAEEE1E52239F0DCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\include\windowslite.h
- Size 2KB
- SHA256 4510fe31e609755c5e27a0e04474f1a6a0fed6bf1ee5aeb227b7d7c2f422368d
- MD5 0b2420ded126fe6ce8c9d03e5e0fba6a
- SHA1 fc55276a325d1b6e077f873e436acc1dacf4d939
- SHA512 0c78ebe87b7bbc596dae65b89736be67f49ee47cdd817a7479d4450fc2de85e10a6f375f661ef727198a363467cf545c877766b8e2bef0872719a6d37a89b200
- TLSH T1F941332BA9A21CE9F531B2B8154A31D9845F746749D0AE1174DF6A182F690C090F3FDF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\is-07IOK.tmp
- Size 13.9MB
- SHA256 6f358134649591da066dc6f313d688b641ed845f6b6e0d74b9552e0739180ef7
- MD5 401c95d41ffca89d8ff730b40d827c5c
- SHA1 9b05ce13cfa1d922cfab5fb554ab9ed4a0aecee2
- SHA512 692074af6ed4558675da7e9ffbe33b251951a5e94f5a28f39c3640fe85bfd2658885b2c047c1119596f206f53464b36fb61f62740da169550cdc6ce12b7b97a2
- SSDEEP 393216:vK+ua7xTD620mXNmHoMmQxH8nJ7sBr6U4Ur6/YtuUFP9e8T:vJ6LjZ4U4PYnFleC
- TLSH T1A8E68E12F722C22BD46336F48E9786D85E70B7242931999733E72F4E6B75AC07D26306
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\libipt-32.dll
- Size 157KB
- SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
- MD5 df443813546abcef7f33dd9fc0c6070a
- SHA1 635d2d453d48382824e44dd1e59d5c54d735ee2c
- SHA512 9f9bea9112d9db9bcecfc8e4800b7e8032efb240cbbddaf26c133b4ce12d27b47dc4e90bc339c561714bc972f6e809b2ec9c9e1facc6c223fbac66b089a14c25
- SSDEEP 1536:K3uc99F6AOdjfTOZztxlGWGXLQbcpNk6FowD6QcEY7Xjl5hf8keDQa/c7usWjcd6:K3ukXTNGp7+6zaEY7Zf/a0ye3ZoOvKOS
- TLSH T118F38D12FAD1C131EA9A067991FC9A138F7D7951CFB888D7B794055CC8203D26F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\libipt-64.dll
- Size 182KB
- SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
- MD5 4a3b7c52ef32d936e3167efc1e920ae6
- SHA1 d5d8daa7a272547419132ddb6e666f7559dbac04
- SHA512 36d7f8a0a749de049a830cc8c8f0d3962d8dce57b445f5f3c771a86dd11aaa10da5f36f95e55d3dc90900e4dbddd0dcc21052c53aa11f939db691362c42e5312
- SSDEEP 3072:XMTS4QqrM7BqUHEwXDVT6B8AF6aBBcFkLODeYJObCkEjOUkOG:XIQqrc7V5Trw6aBBcFk6CtbID4
- TLSH T1BE046B8BF2A400BAEA53DA38C8D74506EB727452C7A49BCF4254027ADF573D25E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\lua\files here are in the lua searchpath.txt
- Size 142B
- SHA256 3a21d77f86dc718e449c9690035362ea971d55e6ce1bb31f5ec032cb42d02940
- MD5 53ff72c3b19d1c9416567aa03721c7d9
- SHA1 78a04c4c6bc4a7c5ca094667b38f9d36198b00e9
- SHA512 2a2f6ff1a3c912c3d78f4afe297dab3da29670446cc1d547f6455eb1254e3c4846cc0a295c9e534714161ba103e7ca84f7b49c6a5ccc81bcee31195f4123409f
- TLSH T1D3C02BD938C3B32031C1E3D220402904D3C7D8591300A112F480B06ED0D16D69A3E0F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\lua\forEachForm.lua
- Size 364B
- SHA256 218b459887d23819336482890c2b6a0ad3f2f4ad3359423297f5e46c18ffe071
- MD5 9642579175a8378a876dc7223d22b6e4
- SHA1 808c8543f2d75b37fcf93059f2cb578e1c6115e7
- SHA512 efe9702a3c40371859b5c16f4f574d938bafe8fc3476632b3fad1118f998005ff9598230e35c3e61fde0c49fa0b317ea8ed0fa689bbd8f9936f411ee8473b9d1
- TLSH T193E020397E4252F59CF3F2ADDC5F1405E21301235DA5242176EC30C11F3155C966277D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Cheat Engine\lua\json.lua
- Size 10KB
- SHA256 d937f80c47d79b1a4eccca3bdd8b260ce56bd42dee592e69771fd2c078b19d8b
- MD5 73968620592450f5b8632196bf52a948
- SHA1 e2c1609e176a3832e9a438411e743216c558f276
- SHA512 e3ff2f936a064266f6ce6dd5e0cb475dfffbedb2fac067d524a9c9f314eccc32b724e9e4a4fc488f83616e8fb21263abf0ab54622883c2df737b69100386e9ea
- SSDEEP 192:QsQHCs3xNCcX7RgH+OKeMV81OGQuTS6Nmx/6OEHN6q4n/uGsOdGChHihZ72X42gx:Qs1sBNCcXdgHIevOG7S60x/6cXuGDdGR
- TLSH T1DA221106AD9381B11AF3C362DC9B1616F37921422324146B78ED11A46F35AAC96FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\luaclient-i386.dll
- Size 197KB
- SHA256 dd07117ed80546f23d37f8023e992de560a1f55a76d1eb6dfd9d55baa5e3dad6
- MD5 9f50134c8be9af59f371f607a6daa0b6
- SHA1 6584b98172cbc4916a7e5ca8d5788493f85f24a7
- SHA512 5ccafa2b0e2d20034168ee9a79e8efff64f12f5247f6772815ef4cb9ee56f245a06b088247222c5a3789ae2dcefadbc2c15df4ff5196028857f92b9992b094e0
- SSDEEP 3072:fr03mcDwt5b2+z615yQ7SLVTnyJYpgerOEmgsRBZnwO4oO8:fg3mrHb2+z615yQ7GnyOpFOEFKD2G
- TLSH T1F6145B57B5019277C7472EB8464A4A956A74E62038F2E0E77ECB0E4F9A74FA06F34307
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\luaclient-x86_64.dll
- Size 260KB
- SHA256 253d18d0d835f482e6abbaf716855580eb8fe789292c937301e4d60ead29531d
- MD5 dd71848b5bbd150e22e84238cf985af0
- SHA1 35c7aa128d47710cfdb15bb6809a20dbd0f916d8
- SHA512 0cbf35c9d7b09fb57d8a9079eab726a3891393f12aee8b43e01d1d979509e755b74c0fb677f8f2dfab6b2e34a141f65d0cfbfe57bda0bf7482841ad31ace7790
- SSDEEP 3072:KK2iOI60nWU4NJ4twEywGLOJQbcOL9z32fY8iV1OQfkz5w4Q7hk1D2oOyPOP:KKu0WU4J0w6xJkBAY8i7fkaThkA4g
- TLSH T1D3441B6B7612CEBDC0CFCB75448A86E2D230FE500DF5974622C12B1B9E76A906FAC54D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\vehdebug-i386.dll
- Size 326KB
- SHA256 eac47ed2c50ca8109a088e2119b2436aae30e4db00a14fd889d5811f7c13cfd7
- MD5 011d1c9d043c8c867eecd28052c9c628
- SHA1 80245d6570178b94173c26800b209d98d8a49aff
- SHA512 19a3cad8c0fecac5163d5115e5847deadce5b6435810c93f9e1bbf89b4bc59c8320ace5aa121856203b3a12baf1e45223a06042e77f77db7a478007fa1c609f3
- SSDEEP 6144:4okW02RSGoHM/InmmpoT8TyvThOb8kFUH3HW6zO:lkW02RsHjnmbT8WEb8kFUXa
- TLSH T1BF645B63F9028237C46A3DBC5A4B55D95DA4F92038D1D1C6BFEF0F8B5A31A913E6430A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\vehdebug-x86_64.dll
- Size 415KB
- SHA256 fbd3daa49e17dcf9f0463ae35cee5db7108aa2a780bda7b6c3d480981fbded55
- MD5 d68452f3e8a79f960ba5321f472bbfd2
- SHA1 c8c76cd77f540738366e43244524b415c15b0b0c
- SHA512 d9648c107370f4bc14b0f1cc3ed37e5c5a05cebcb4831549a0e613ba21e995ebde489013a681a34e8e1a7bc1d1544de0301015313c150fafaa2f152f4fb7c2db
- SSDEEP 6144:KLJXTQOzIJO0kVOvwvIu7asVf0BZAMMnkel467ERh/:GZIJO3Vww/GsVf0BCMehlJm
- TLSH T1D9944B2BF622CA7CC0CFC778449287A29730FE5019F1A78773C5671B5DB1AA06EA854D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\windowsrepair.exe
- Size 262KB
- SHA256 2f3214f799b0f0a2f3955dbdc64c7e7c0e216f1a09d2c1ad5d0a99921782e363
- MD5 9a4d1b5154194ea0c42efebeb73f318f
- SHA1 220f8af8b91d3c7b64140cbb5d9337d7ed277edb
- SHA512 6eef3254fc24079751fc8c38dda9a8e44840e5a4df1ff5adf076e4be87127075a7fea59ba7ef9b901aaf10eb64f881fc8fb306c2625140169665dd3991e5c25b
- SSDEEP 6144:0drkqKo/nt7PrwnoK0M6EZgugEkkoSE5O7Z3LLr:6rkm9mP6EZgugEnoSE5OB
- TLSH T167446D56AA13C37BC5837EF84BC486F157B1EA142D3590DB32C60B2E6A75FE02F25219
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\winhook-i386.dll
- Size 201KB
- SHA256 3cdb85ee83ef12802efdfc9314e863d4696be70530b31e7958c185fc4d6a9b38
- MD5 de625af5cf4822db08035cc897f0b9f2
- SHA1 4440b060c1fa070eb5d61ea9aadda11e4120d325
- SHA512 19b22f43441e8bc72507be850a8154321c20b7351669d15af726145c0d34805c7df58f9dc64a29272a4811268308e503e9840f06e51ccdcb33afd61258339099
- SSDEEP 6144:ZyuXZus0fJ34+UZQ5IvR2diworEdVpRmY:nXZgV4dkIJfrEdVt
- TLSH T179145C86E602C333EA5F2EBD464C45A16574E7202CE2C0DF7ECA4E5E5BB4FA05F64246
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Cheat Engine\winhook-x86_64.dll
- Size 264KB
- SHA256 e08b035d0a894d8bea64e67b1ed0bce27567d417eaaa133e8b231f8a939e581d
- MD5 f9c562b838a3c0620fb6ee46b20b554c
- SHA1 5095f54be57622730698b5c92c61b124dfb3b944
- SHA512 a20bc9a442c698c264fef82aa743d9f3873227d7d55cb908e282fa1f5dcff6b40c5b9ca7802576ef2f5a753fd1c534e9be69464b29af8efec8b019814b875296
- SSDEEP 6144:XcxPVJy83/NkY56owwouBQGsyTfkaiX6P0a:XkPV483FB56wsyTfkOJ
- TLSH T19E440ABB7612CEB9C4CFCB3549C687E29670FE5009F1A74611D0271BDEB6A906E6C10E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 4KB
- SHA256 0300e9ddb527990e8b59d06e9ccf3ec2bd92d3bbd0ef4fba69d6336e4195e82d
- MD5 5f036f91e86e30f749961506951d51eb
- SHA1 acb87b59117c6e2db86f98c4c8bac52eade97cd4
- SHA512 341f250cf3764207b5328a12b31016c0750daddcd16722b4bcef502bcbef7ef379abb601649ee6c3fdf121f3d3cd6890c8a80e5dae3169fe56ef82af20631944
- SSDEEP 96:Dbonzjs6o1BXl7EV4/sClywa3UHimRkISatmQFjm:Dbsns6KXxUrClywawinLatvFjm
- TLSH T100A19E44A75AEB61C331EBB6829B7B51033B6D20178468FAEFDAA1E1695B44C143C3C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
- MD5 2595e903fcb3b99996adb2cc2bf504c8
- SHA1 89954e0577e83e0008d58a2dc6cd0aaad2972a62
- SHA512 71a76aa25ce3ea545922ad9cee54cd3fff4c971ee4e5ddf6aa4832743db48da795ae8e76883cf5e5acab6818e8aba44515c72848579c476c54bda2e43e0cac35
- TLSH T1CA31CE4EA2113027D686BF72D8CEBE93CDB033476BCAD05B18455E8229AAFD11FC81C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 528B
- SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
- MD5 047f3e9d21d6b325d592b1959e4362e6
- SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
- SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
- TLSH T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
- Size 342B
- SHA256 4bad3c5619473c1d427cf1479334e674182a1b8d71b3f0a8f847e3536015086e
- MD5 095f962682d8be5ff5f7a28fbcbcd242
- SHA1 13a8c7221fc1bcd05f9929de25d2a146f1c3eac3
- SHA512 472b93686bdd10c9cbd8542384dfa66c11df22a08996854666a733827452e6472df61e5834fd4c5e395bb90e795affff394705c719b1559bf40d8e77817d5e01
- TLSH T1ECE05E116FE80204F9770A3CA8736545A977B76B6A51CADD0275008D1C21F62C93272D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 99403a83724e2397dddef0f3735813fe2078d57ac2a54ec27625d8ae4ee4c0b6
- MD5 fcf470d0b3132b487e6ff498caf18bc4
- SHA1 6eba81b0b9de890ed617c96452ed2533f3112714
- SHA512 37eee16bbe1c1fe87afdbb853c2f4d6021fd79c40ad07ad0fa21f14e6bccddba87d854fb53ae47dcc7e3ac612a93cd89bee8395c80bcd7b25fad1f4da8de58ee
- TLSH T160C09B1177315776F51009BF15965A510FF5D7438FE2874C0F70311C54179858CF0D05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 374cdcf71aceae1b3a24a18c71d047a53cfc51442020f2729b7ca6e5d760939c
- MD5 fbc43785635cd74a2443bc570a28a0f5
- SHA1 6d017a4c84b6303a506782aa0aad93e93ab82032
- SHA512 1ff445eeee19be37e007d65c0b1188aba64a34f0d2e102809ae75a334ddd7b1c6d45f51d0264069f53f2c909688586eed220b4aff10449c8f0b100fb874f8e72
- TLSH T12AC09B1477654755F11D117D7AF6160517B54105B9D6C30447741134C914B440871D05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.111\resources\custom_partner_content.json
- Size 245KB
- SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
- MD5 f68d0557a8931cf979a21c59c1bae019
- SHA1 e0bfe0f9a947916ebc1fffa52d7dff524e76c2ff
- SHA512 2f0ef8e3e11daf0ad266c4fdc35d1e6e2215556115054f635ef9199b03a6924b1aa989f052461d59b9cdf57ec5eafa918e806fbf2d242f63699a8a65b0328ecc
- SSDEEP 3072:iwK+GwaiHEaacjK+eMuhKS1d/ttUYD6W6Z2NrwYrVZCs0iUCabiKfAu/wX2OCy:XGuE/c9L+1btUYOnkrPVZCCUCabNU
- TLSH T1BA349D7BD4090CE327A561E68879611EEC21D26B0CE97C257B4C254C0F9ED6F25BC2BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 e47c83fe3e201c5d2e39f068a59b75dc4c640bb2d77e330b00f2f7de47c5a264
- MD5 2f51a473c8d09f39a6f9a20c894991da
- SHA1 044fd0456905ec20c72bf3ab45f79bc9bc5d08c2
- SHA512 f3d8da4fbd4267b12b36e8b60c8048e61da430c3e835ac2718ae0111bc987937e196c965579093dc46ec1569e17d76f1bee6d3b18f452fca55c0e78a32a8f15e
- SSDEEP 49152:eXs7q0IcIhUsjOn0+SJZK/NuwsbbM0zHaKMcLL3GOf7lo8:x7q0IcIhUsjOpoCNuw8gmaKMq3GOX
- TLSH T197C58D01A8E054B0DC973132361CE73AAE345E2157254DDB9BE4BDC56FB8AD2243B26F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
- Size 5.2MB
- SHA256 4a44c678398145b0582ef30d245fc6f23f5492fad30fd9483fde5a7dddb9741a
- MD5 738fef5bba563d0e75107dbde3318cdf
- SHA1 bc6106cd68d1d58ac5c92320a23c5667c2e7e309
- SHA512 98bae5eaf37fb5292c35097e1127c72d796a6f1acd1c129de10feceb81a694998a5806695557825220ca5f4b58f509e28c439cc96bed80149112024cd626e32e
- SSDEEP 98304:k6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwA:vcxUvxVvQmo7ebEJTQ4RUdLgXsJqSCs9
- TLSH T17F46BF62E2D16074C8DA6671283CAB7B4D281D53972187DF8AFC3CA01B749C2267D76F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
- Size 1KB
- SHA256 8a888a17eadaa69c0e5d9f07599eb7c987d1e736fe17153e768946ea0dd1bd30
- MD5 bb33767ccc8a497d7494589e3708c71c
- SHA1 347789c14351e3e3f8b6b03c8861a52d4c6da816
- SHA512 02d837663d4eb6388ebedf53edee654c4305c461ff947f2159b88513895c6616ada1d5d9ea175cbfb23ad3f9c8bba8e31cce41e2d6abc87564c8653fa3c96ed9
- TLSH T12121B615410B00377F2193EFCA931E1536131802B42462C0EEEF5A1838EBCCB07BB60B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 2.6MB
- SHA256 1a5bac69b6ea5f2cf3ee0f53c2c88e297f9b0fc4fb7074c93945c5bf8dabfcec
- MD5 1f25aa1100540bc35112a973bf45529f
- SHA1 0e3ca2c28cd7245c5f2b15e7047cddffe96aa744
- SHA512 b6f1da56cfcb5a3f8c35d72813b6142aeca61358c4df0403af2c5b668253a56c68642138553a3530f575d0cbf153df6356a2dd88671d3a28414bd41a2d0678df
- SSDEEP 49152:UedcvIG1xTyHD7R4CEajAwxAU/bE82EqmkmpWcuj3g1ACSN:KV1cjeCAw2m9xON
- TLSH T141D57C13F2D910D8D01DD1798B9A9633EA62BC450B3576DF0A90B7562F7AEE06B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\[email protected]
- Size 655B
- SHA256 e62eee89ae4527c3964dd8f1d3b4c083afd03e29f92015ac2df1e44b11755313
- MD5 ef9ec99ddd0a602fb9bde59af2527fe0
- SHA1 d5f69cefcdae9cbe4d377149171f0ebc06f6eccd
- SHA512 860284a28fd8d191e01710cd8411b0926bf280d66d98743171aa27ca5c06d17619740aeb9ab671394072e33626639fc91d33d547233fd7aca4c14a26762c2ab1
- TLSH T1E6F06847CCE2CAECC89C4EFA9444DB740A67512A036150F925D62E1C8470C968F4B5EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\[email protected]\setup.ini
- Size 830B
- SHA256 a176bfdf922a3b61078db54219bb04f6812bd0e769e6a2b081b8f1e748b55cf8
- MD5 6e3d849b9d77c6f2417bbd15717c582b
- SHA1 5b05f004c169a8c03538ff82370ffd31c7bc6f8b
- SHA512 97b23d1ed801f6b8e5f77f5ffbdc55fb080ff78ad98f9a6350176e6dec3d7c660ff64a3cff299aa8d5ee0f3dd5079073666e887c41fd4606c53f8c3143f94aae
- TLSH T11501125458392431E5414246812236EC9B361B732AD39A18B099649DBB01FBFCA6519F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\Opera GX Browser.lnk
- Size 1KB
- SHA256 2d8f8888a66325038aa7e9bbfa04f836fbd200a568887a176f4a4a9cacfb623b
- MD5 f71c1d3fd1b7f13c454a3675d83bbe7a
- SHA1 82c03ff2e8b4b7c5d639ff74b572b58bf0e374f4
- SHA512 811bee6b68c21acd2e6342abe110e36e5f04c22d6e5b22930c68c0e1ae5596eb9fcc944f528a908052e69a7a57f462bc4049fcf2f25d50d2543d3785d5deebf6
- TLSH T1842102252BCA3B21F2FF953500767F36913EF801AB555E4D504042485DB5602A59DF6E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
- Size 2.8MB
- SHA256 aea99ad410a597e74390c1a4c41fd8b9a0847c555e62538f20690bc4f5081073
- MD5 1948536db3faccb7e5595773ee92f2ce
- SHA1 105b7919aa0443bb2db97f45c14cbab3da936c69
- SHA512 e9e14b59861519460ab6c06d0bdee9ad82026f23887a4c63ab0558aa80ddea1b5ce5fd7843f96b6f3acddfc1355cbdceff1f73e3dd4a492c10b35323630559ca
- SSDEEP 49152:jkinowz/orNMNO+9HYTFv+n3r45uxOYongWHO7Ixnoc5:jkio2yNY19H2SrbUY5WHmIxo4
- TLSH T1E4D52331F691C8B2D632153248ECE7DD52FE73515FAB6AAB37C80B1FEF615822A15009
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\installer_prefs_include.json
- Size 273B
- SHA256 7b826bc752ff04d35c18eda363734b4ec74b79b922f1ee97e676d761d32164f0
- MD5 d6da5aee5e065c67df117f6e6600d4c4
- SHA1 119ad7392cd4ef137394b5aff8e00879eb68463f
- SHA512 9f03067af4d382f8b9090f074a638af0b3479e635be8f867d0380be8dfe42fc462318ef89cc8ab8461b29ec9f57cf3cf254e87bf31ac1a6a86de342043e40009
- TLSH T1FAD0E7026106C0920F7147473C33234D529325014E52794AE7C35220C42DDD315D7D49
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\installer_prefs_include.json
- Size 794B
- SHA256 c0d49bb14be0f0c367f19ceee7b31f16bf62e218567c3906d27d6cbcf53292d4
- MD5 405910db87d0e685d15d4299344762ee
- SHA1 9a0409a0fa4e99452d3eb0961a3291e94eb0e6da
- SHA512 81d05a41b72a3df632fb231f7cd2566f1bfc51e73546b7c95603ed2d916598637942413c54a0505b60dce63e15c97b754269b040d257904b4044fd54a7939cd5
- TLSH T13F01C52A1406A012BB35C6EFDD270E05AA0319036520A6C6F9C7482864FFCC20BF3707
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\a2428394-c36c-455c-9cb4-e6d050b92515 Opera GX Installer Temp\opera_package_202606031757291\installer_prefs_include.json.backup
- Size 258B
- SHA256 ee18962a55d68237832d64f802130eda240df4335da99387a28cd000c2748ef9
- MD5 146de105410c3e7c54769e53bec3e8bb
- SHA1 43f784e970ec484a69c433c8b99936bc503583cd
- SHA512 5bfe25e47907576af9ac97429b81c9909b51705b9b1c0fcb1353182299c68f4bb0fd873f11620f81189b174804324115ef51ee73a4179a38334217d6a1c7aa68
- TLSH T121D02B42610AD0920AA246873C37224D62A325125E52B94AEB865220C42DED326D7E4A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\1780505903_00000000_base\360base.dll
- Size 1.0MB
- SHA256 58f13d919f44d194827b609b6b267246abc47134bb202472c0dfe033b9d7ed73
- MD5 b192f34d99421dc3207f2328ffe62bd0
- SHA1 e4bbbba20d05515678922371ea787b39f064cd2c
- SHA512 00d4c7a0a0097eb4b31a71a0eaf6ff0d44619f77a335c75688565e34e6d7f4fb6c258917457d560c6b0a5077603845ce012e01d9862e87fb5327d7f8da970f95
- SSDEEP 24576:g2mj42MEVQPGEorkSYPuX/7DkbSrh/qtoT/cgB8SnLF:2jnMEVQuFkS/vkurNqtoTkgCSnJ
- TLSH T1FA35AE117A86C433EAAE0170557CEBBB047D76320B2184CBEBD87EAEA8305E25735757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\360Base64.dll
- Size 1.2MB
- SHA256 80765adb886050b0f87e30fa62336985db67c09b25f4d1760194a28ff78899d7
- MD5 115ba98b5abe21c4a9124dda8995d834
- SHA1 5dd5cae213a9dbe5ea7729c1d2acd080f75cfa39
- SHA512 1c415c07dd59ef00c7bdcef35ac8fdeea88b6f482d266cc12bab3d4d3005a76eebbe97d06e5282e1dbe940ab2971ffdcbd0db2cd1d700c33805cf1831efe1a3d
- SSDEEP 24576:kGtlqC59JiWdmE6r7DzyIzcRIfBFEUT62a3muq9Y+Hk3BRyTTAg521LSYyk9z:kGtlqs9JiWdtwBFjT62aSdHk3STTYv
- TLSH T1B3559D15ABA441B4D97FD038C9B7852ADBB2B4550B60DBDB2390872D2F23BE15B3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\CrashReport64.dll
- Size 199KB
- SHA256 09eafeda04f79fd1faf273efe104e877b719fb31689838aa12a3e6d3384a3da4
- MD5 f0ec259bc74b69cac5789922187418b5
- SHA1 99e738a12db4a60ee76316ad0a56604a5f426221
- SHA512 630cf0a30961af6d41d24f2d2fc81e0c10c99e19241aff7e14aa38317eebbe01e5d85c1cb5848ecfd7b75e2fe762cf4a07fee781d052b48f0a3c15a37505dac4
- SSDEEP 3072:vdgwkyK6saI/qiU8zpBoE0wIdFlPwhJHocy0jgD8dXPNwpaojmF55S9heMA:vdgLyK6vilMbdFlPwhJIA8YF1Am09s
- TLSH T142145B86F36904B6D81B8138C9935616F7B27C45172583CF1660BBBA6F337E1AA3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\MenuEx64.dll
- Size 388KB
- SHA256 11294e063fe9a5d5b6019a39b48bebb75f536e27ff92008c85e9357c95805b80
- MD5 d569954dc1054b6e7d3b495782634034
- SHA1 dfaf57da05704261aa54afaa658d4e61a64fa7f2
- SHA512 b12e2a6cfe849b5df21295f4a538db0381f2fb8c63b8b4dfca9778af16c68d23336140874a64deb324e39da0ac52b1f2292812fd02967d415319ade1ee965b6e
- SSDEEP 6144:W0T3+GaWPxAe7HonHuu0LLt3i7cOTz85gW5+mQMc9fg:W0T3+G7PemHonHELWcYz8jT7c9o
- TLSH T159847C0AF79408A6E17B913D86A78B06E6B27C994B60D7CB13A4537E3F337D0567A310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\Sites64.dll
- Size 1.7MB
- SHA256 c52f854aad665b79beea935af85335a3a2af912b3a4aa0c73fa9af8c8c35ea16
- MD5 42949842004538b0055c94bede7930ea
- SHA1 635496bbd2e83a0b0bb34dea17b7b8b0a592dc4c
- SHA512 b652ee851669891feb659c3212013262c5be9fdd7531d927ade32b54c9032ad0fa8237a18e9481671dae348fd0e8b68bab3d8c456293fd1a82d8d4bcc33db9a1
- SSDEEP 24576:kqwHank+XPKcrp7QVlqZ7lRdJ+rRrVEQUUGQ/Xm2IP6/5MzWEcGb:uHannZl8PeAV06/GzWEdb
- TLSH T12D856B46F37940B5D0A7D17ECA57E65BE3B174464B30978F02628B1B2F237A1CA39322
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\config\lang\de\SysSweeper.ui.dat
- Size 102KB
- SHA256 794331c530f22c2390dd44d18e449c39bb7246868b07bdf4ff0be65732718b13
- MD5 98a38dfe627050095890b8ed217aa0c5
- SHA1 3da96a104940d0ef2862b38e65c64a739327e8f8
- SHA512 fb417aa5de938aaf01bb9a07a3cd42c338292438f5a6b17ef1b8d800a5605c72df81d3bae582e17162f6b1c5008fd63035fa7a637e07e2697cb1b34f9197a0cd
- SSDEEP 3072:gx0yYtEZcQdagD9jvoXKG1GSzJ2Nids/FVt3Sjw3gomvov:y01ECQTjvJYwTlu4aq
- TLSH T1E9A3E1A7330588D77499E82E4FE1B9DCF48C7922129DEF48C80DEE991ECF1673A41615
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\config\newui\themes\default\DesktopPlus\DesktopPlus_theme.ui
- Size 1.3MB
- SHA256 f5dc9219dce246b7d389a528ac1d68a1203fa57aa560d77c334e3d5ad119789d
- MD5 02c20942f13cba083c4eb52e1abd430c
- SHA1 bfb147b01f096e2eb321b7beb39754e7f7ccf890
- SHA512 98852ee405d519b0083abd224e63c3ace6366df443fa2891e70af82cb69e799f362e7560ab41eb5a21d46461233c52cc6bd1bc63a555650ceebe015376c110d9
- SSDEEP 24576:wbyAo4U33H3VcX/V8X8E/WxsR359b3HB+nI7yA3:wb/ocvV89OxsR3Xb3HUnCR
- TLSH T14455E1ABD35069A3E514DB362229C23718B16FA66538DE0842C73CEE5F77BD41F72A40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\deepscan\CheckSM.dll
- Size 284KB
- SHA256 c9badc3ebfd485c87cd34144faa72b5893fa541808a94491e714d616cac238b5
- MD5 2e7d37f34c3877417788a8b080398bd9
- SHA1 1d0a2e606dda2479f9c6da57d99f56df814cc902
- SHA512 8525acce821e29f3f001d4fff1126ad73388a64b69f42f647c3e5612d0d10cab4dc0d9a5cbd688af766dc99a386f26925ad1d43f106447d167c5fc18fd354f93
- SSDEEP 6144:kToNyL35aczZrfAcIBP1hFLsvLzWw79MzQ+fsF0J2Q96fDo/ga3FR3:k8Ny1aUZrM3uz/+fTpSyR3
- TLSH T131541302525526A0D1A205BCE87BB71FB8FEA31067B91F13D39C62C40B36F551A6DE1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\en\AntiAdwa.dll.locale
- Size 126KB
- SHA256 309d475fcbe0c3c24bfe3d22b4b3c41b1022ddb4eb8fe6e1ea38671f83573e70
- MD5 1cea331f8db33799c0db1228bc0c4b0d
- SHA1 44d98f8a3260dbf91f52ba61d519d2a63bb99302
- SHA512 8f19436b697351278a91347695129d1fad0195ceb540a4f8acfdffc1d26589837c5fcbad9edbef43a7762782a0032badf0b0328359e229eba4e862210e666e33
- SSDEEP 1536:umvblAch7hCRo8OK5v33b3vjXbtKvgVOga6CBPHKFXw2/md:ueCRooagVOga6cKe2/+
- TLSH T1C3C3955063F98229F6FB7F70AAB956644E7ABC92AD79C24C2241105E4E71F90DCB0733
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\en\ipc\appd.dll.locale
- Size 19KB
- SHA256 cde2a0834cb8b6e4fabda07f611567a392b2e4dc23f2fc7921f8b13e774da940
- MD5 f584efd5356e4a1be69209a6a90f8dca
- SHA1 6af86c8fa9c4ea0f28eca735acad675cb32b7ec5
- SHA512 97c02d900a05dbb2f5ba7cd33f53d4b5c67655d0dd11d6b1c374867570dd7cd5114deb138db277480fb45e608cccf7542d76c4cce7fb5c98356a5105b309beba
- SSDEEP 384:7dIRqwp/JNxmSRxyE5nIUb6ki2cP0iwfLBKyS+ShjmM6IGBkSEOV:e7yE5922cPfwnS+ST6nk3a
- TLSH T1D892C4925BFD0202F2F76FB4E9FA55424DB9BC53ADB9C50E9110410E2C70B80ADA0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\en\ipc\filemgr.dll.locale
- Size 18KB
- SHA256 3ebfed2b2a10b33af330aff197905437ef3970e8c944b7970c097ac0cbb99671
- MD5 507a7b4e028d292be4ededb6b3667e68
- SHA1 752121fc2f4c4814a4c50bd6964c6237fbc69cd9
- SHA512 0b1fb10521512426c448a85976afe9e2e9c356768a5d2e941de022c2194a487055c3c724c08dd4abf1d115f24f80248ccd90a3655544dc17491f0373c603cfb1
- SSDEEP 384:78I3ZhT+9lexj6sLU6ki2cP0iwfLaAS+ShjmM6IGBkSN:w7Gxj6af2cPfwJS+ST6nki
- TLSH T1C792D3428BFD0206F6F31F39EAF654421DB8BC93ADB9C50FA201451E3D60B519EA4B36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\en\ipc\yhregd.dll.locale
- Size 16KB
- SHA256 285b8717038589756ed43bbefec8d010fdfda1b9726606332c1e3601cf6e43ff
- MD5 4f7febe3f590f61fba281d6d48063aec
- SHA1 2a978cf218ee950728452e62a7e274f0f7b0f346
- SHA512 55193636f87924a75e2eeecbce50b19e7d1320698cdc58fef62dce807c0d462429d6a3034c2eb9e297012e67adfb236db91d05edc4e3514a33017cd379ac3e15
- SSDEEP 384:7p82Phneq2+m06ki2cP0iwfL46SIS+ShjmM6IGBkSvA:c+m/2cPfwHXS+ST6nkz
- TLSH T1EC7207424BFD0207F7F25E75E9F654861CB8BD436CF9D00EA201821D2DB0785AEA5B36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\en\safemon\wd.ini
- Size 8KB
- SHA256 b0a2dd51d75609b452a16fb26138fb95545212eb6efa274f2751eb74ccc5633f
- MD5 47383c910beff66e8aef8a596359e068
- SHA1 8ee1d273eca30e3fa84b8a39837e3a396d1b8289
- SHA512 3d307569452ec6d80056a3a2e0225d559606deab9a6c3913c1fef7ed6aca476d7a00190b1bbfa3d032411c2f52427f3096fce7b7952479ad9b75aa3cef59d7b0
- SSDEEP 96:ra9kZ7sqnvJDgTBiYK/y2lVl5ENqWIajuwapG4i8nc6WSbJ1J9Wd6AFWbmc:29+DgRgizMG4i8nxWHFWT
- TLSH T192022DAF2AE94125F6F39B45FEB508F55B3A7C42692CCC9C11C216494CF2A00A517BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\deepscan\dsurls.dat
- Size 1KB
- SHA256 b0355da8317155646eba806991c248185cb830fe5817562c50af71d297f269ee
- MD5 69d457234e76bc479f8cc854ccadc21e
- SHA1 7f129438445bb1bde6b5489ec518cc8f6c80281b
- SHA512 200de0ffce7294266491811c6c29c870a5bc21cdf29aa626fc7a41d24faf1bfe054920bd8862784feaba75ba866b8ab5fd65df4df1e3968f78795ab1f4ad0d23
- TLSH T11311A54BB7C61217DB23C835F5E00882FE2BC2623A7CC51E9C61D2068DB553718BB29A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\ipc\360ipc.dat
- Size 1KB
- SHA256 0ba4355035fb69665598886cb35359ab4b07260032ba6651a9c1fcea2285726d
- MD5 ea5fdb65ac0c5623205da135de97bc2a
- SHA1 9ca553ad347c29b6bf909256046dd7ee0ecdfe37
- SHA512 bb9123069670ac10d478ba3aed6b6587af0f077d38ca1e2f341742eaf642a6605862d3d4dbf687eb7cb261643cf8c95be3fba1bfa0ee691e8e1ed17cc487b11e
- TLSH T13441094DDE90EB20E7167FB1B3D0672799FC0190F01ABD19010368FA78A731BA023D68
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\ipc\360netd.dat
- Size 43KB
- SHA256 3b5837689b4339077ed90cfeb937d3765dda9bc8a6371d25c640dfcee296090a
- MD5 d89ff5c92b29c77500f96b9490ea8367
- SHA1 08dd1a3231f2d6396ba73c2c4438390d748ac098
- SHA512 88206a195cd3098b46eec2c8368ddc1f90c86998d7f6a8d8ec1e57ae201bc5939b6fe6551b205647e20e9a2d144abd68f64b75edd721342861acb3e12450060d
- SSDEEP 768:xW0IjxiegKAqfTtW7mYcQhirhlimzWk+MUKfiZw+5xpVRTtST1vUX:kDjsyt6mY5hirhlbzWk+JVZXxvR5SVa
- TLSH T13A13F1983607E5B4C5472B3896069F3853CAD5EBEA57A3D271023D59BCCB303D42D8B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\ipc\360netr.dat
- Size 1KB
- SHA256 912102c07fcabe6d8a018de20b2ad97ea5f775dcb383cd3376168b7ebf8f9238
- MD5 db5227079d3ca5b34f11649805faae4f
- SHA1 de042c40919e4ae3ac905db6f105e1c3f352fb92
- SHA512 519ab81d0c3391f88050e5d7a2e839913c45c68f26dabad34c06c461ddb84c781bf7224e4d093462c475700e706eef562d1210cee3dba00a985d8dadbf165c5c
- TLSH T18B21D8D2C30145CF64FCF89DFE3CE750C8C149BC598C8B3C5741AA8702A87041AC820E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\libdefa.dat
- Size 319KB
- SHA256 19fa3cbec353223c9e376b7e06f050cc27b3c12d255fdcb5c36342fa3febbec4
- MD5 aeb5fab98799915b7e8a7ff244545ac9
- SHA1 49df429015a7086b3fb6bb4a16c72531b13db45f
- SHA512 2d98ed2e9c26a61eb2f1a7beb8bd005eb4d3d0dac297c93faaf61928a05fb1c6343bb7a6b2c073c6520c81befdb51c87383eab8e7ca49bb060b344f2cf08f4d9
- SSDEEP 6144:A0YRCPOEtLsgNI9vVtZeIJNb4Zj9+kbdhPW:BYRC7p9NYvVbNb4ZJ++dhPW
- TLSH T1CA649E23C6A564B0C31D095D42C578628BBDF8D2D38B4D9D037392247BEFB1B059AA7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\es\safemon\drvmon.dat
- Size 5KB
- SHA256 5ee31b5ada283f63ac19f79b3c3efc9f9e351182fcabf47ffccdd96060bfa2cf
- MD5 c2a0ebc24b6df35aed305f680e48021f
- SHA1 7542a9d0d47908636d893788f1e592e23bb23f47
- SHA512 ea83e770ad03b8f9925654770c5fd7baf2592d6d0dd5b22970f38b0a690dfd7cb135988548547e62cca5f09cb737224bbb8f2c15fe3b9b02b996c319f6e271ed
- SSDEEP 96:FDUwO22iZ3EYFzdsmNmW6kTSUhdNGfU5wpWuCZb9ncY+2qdS+DQg3XwS2ULWPSL5:F4wO6NdMfBUyuCdCZmRU+DQGXUgUGAro
- TLSH T10AB15C0DD99C8EF6E5AC133BEFB01FA7E0A37506D1950812682229654CFC94348AB869
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\fr\deepscan\art.dat
- Size 38KB
- SHA256 81adb709eec2dfb3e7b261e3e279adf33de00e4d9729f217662142f591657374
- MD5 0297d7f82403de0bb5cef53c35a1eba1
- SHA1 e94e31dcd5c4b1ff78df86dbef7cd4e992b5d8a8
- SHA512 ce8983e3af798f336e34343168a14dc04e4be933542254ce14ff755d5eb2bcb6e745eda488bc24be2b323119006cf0bdb392c7b48558ca30f7f2e170a061a75e
- SSDEEP 384:tXHhC/cKbA0HGMxVBZU/xly+amHdoPEbR9jB:tAkKxmkDq
- TLSH T109031E81F373615B056BF061DD429A2D8CB7C6FB67EACBCC9494163F38CA2A245D1938
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\fr\deepscan\cloudsec3.dll.locale
- Size 62KB
- SHA256 69c9afed429233571166b89a4a55973f68310b368602e69e6d305014dfdd00c4
- MD5 75924a26582cd5ca763c8742e971bba3
- SHA1 b84130902fae31a5e5f252baa11bea352b577316
- SHA512 af97f299aeea3e9cf12342971789e2fd4aee4e2fd3b4fbe092cd9eb8e59f2c75f32b77abe3abe2c22bb3cc8900ab60854db3057d07818821bb214175b0502479
- SSDEEP 768:XfdNma9UuMCMqKG+x/Hrx8y79hobSbF3IARQ7uOPpy2DC9K0MeKgFHDGaFoW:XFY0KDhX33pQ7nDC9wef
- TLSH T1D6531F21A7E95614FBF77F70B8B815521E7B7D96ADB8C15D0222908E18B1F90C8B8733
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\fr\deepscan\dsr.dat
- Size 58KB
- SHA256 4649eedc3bafd98c562d4d1710f44de19e8e93e3638bc1566e1da63d90cb04ad
- MD5 504461531300efd4f029c41a83f8df1d
- SHA1 2466e76730121d154c913f76941b7f42ee73c7ae
- SHA512 f7dd16173120dbfe2dabeab0c171d7d5868fd3107f13c2967183582fd23fd96c7eeca8107463a4084ad9f8560cd6447c35dc18b331fd3f748521518ac8e46632
- SSDEEP 768:vAiFDMIhnjuOE2vN0ni6fifgNPb1IWXusCxAOxUMGRzxreHRHodyb45U7fLZjyAA:JM4A6UAHRHF4aImg
- TLSH T136432254303DE29F1FCAE5A29D4889FA9D67CF6A5F4460A8D198877CBDCC376122C0B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\hi\safemon\wdk.ini
- Size 2KB
- SHA256 bb0d11a1fc1911a8289258324b0d21e32fa8189d3978540a4324376b52aca7ab
- MD5 37ee17a2196510e7174bf1603bd82a2d
- SHA1 017ae4073a164e23e3195275dcca5d8c8064397f
- SHA512 a21c3da1947c8dc4ec87397e5102ea9e2fabf0044f8af71452a206934485e0a1d98d5a5bf20e67df73e0970cc04fa1d5db5a5db0609d8c38b608087b06cae5b7
- TLSH T1CE5163C377E5A104FA770B59BAF424F64F7E7DC63818CD5C01D2068999F1A408A722AB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\it\safemon\bp.dat
- Size 2KB
- SHA256 d81e7765dacef70a07c2d77e3ab1c953abd4c8b0c74f53df04c3ee4adf192106
- MD5 1b5647c53eadf0a73580d8a74d2c0cb7
- SHA1 92fb45ae87f0c0965125bf124a5564e3c54e7adb
- SHA512 439738f2cdd0024e4d4f0da9668714fd369fb939424e865a29fc78725459b98c3f8ac746c65e7d338073374ab695c58d52b86aea72865496cd4b20fcd1aa9295
- TLSH T198414B16BEA4C3DACF251D3AA063BC2E4418B9F084E4B4C24C5206837E8DB151E834C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\deepscan\DsRes64.dll
- Size 66KB
- SHA256 41fc1d658e3d6795b701495d45e8d7bef7d8ce770138044b34fbacad08a617be
- MD5 b101afdb6a10a8408347207a95ea827a
- SHA1 bf9cdb457e2c3e6604c35bd93c6d819ac8034d55
- SHA512 ce24418045352557b5d0ed9ec71db00d016938cd0fc2308e3ba0a61cd40ec0df3a9b620e55d28724b509bab3f801b7a88548b0b08b7d868a6046f85a49aae910
- SSDEEP 768:2E4ul5xBj/wWfZb/XFeoy5yFYECG51gATSQPA3MQIGduv+Pocc3Q73whrm:tBbwYh3X27dI+wJQ7gha
- TLSH T126632F81A3FD5619F6F77F70A9B556600EBABCA6AC79C64C1200508E19B1F90DDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\ipc\NetDefender.dll.locale
- Size 24KB
- SHA256 4d1a978e09c6dafdcf8d1d315191a9fb8c0d2695e75c7b8650817d027008d1c1
- MD5 cd37f1dbeef509b8b716794a8381b4f3
- SHA1 3c343b99ec5af396f3127d1c9d55fd5cfa099dcf
- SHA512 178b73ed00bfd8241cc9191dbdd631ae28b5c7e76661863b326efde2dc2cb438716c0b70896ee313436ccd90f61db5226a3484169176f5a4b79ead1fb4451419
- SSDEEP 384:7syVo1VK5ysI76eR3KJ1M81rDGPhCMov05MQ3d:nVAK5yTb9KvMcrDGroY
- TLSH T163B2C55287FC0512FAF36F34B9F995225E7ABD826EB8C05E0101409E6E61F919DB433B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\ipc\Sxin.dll.locale
- Size 48KB
- SHA256 7e885136a20c3ab48cdead810381dccb10761336a62908ce78fe7f7d397cde0e
- MD5 3e88c42c6e9fa317102c1f875f73d549
- SHA1 156820d9f3bf6b24c7d24330eb6ef73fe33c7f72
- SHA512 58341734fb0cf666dfe9032a52674a645306a93430ebb2c6e5ad987e66ce19c8a91f3feebf9bba54b981d62127613dec3c939ef4168054d124b855a511b6d59c
- SSDEEP 768:5y2lF/WFLLpAEl6Zh7laV5tX01StY+6JWgdvmBV2M3:A2kLlARh7vPJWgdvmBV2m
- TLSH T1EB236D517A00D073C5465978A0AAC6618EBE7E112BF560477FFA076E9F623D0A73E30B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\ipc\Sxin64.dll.locale
- Size 46KB
- SHA256 ee05002e64e561777ea43ac5b9857141dabb7c9eed007a0d57c30924f61af91e
- MD5 dc4a1c5b62580028a908f63d712c4a99
- SHA1 5856c971ad3febe92df52db7aadaad1438994671
- SHA512 45da43ac5b0321ddc5ec599818287bd87b7b6822c8dd6d790b5bbf1232000092afa695774cd3d9c787919ad02ca9846f7200970e273a99bfbe2aa6bebfe7e8ed
- SSDEEP 768:VXHGdBPASgYoH6dzSnq5TmtzG3TpMtaTV2J8lAovrtd1tnQr:0ASgRcSqNmtzG39Mk5NAOrtLtna
- TLSH T103235B86676000B5C8538775C9F79E52EA72F4162BF1538F1638C2AE6F233D0AA3E315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\360SPTool.exe.locale
- Size 31KB
- SHA256 15164d3600abd6b8f36ac9f686e965cfb2868025a01cded4f7707b1ae5008964
- MD5 9259b466481a1ad9feed18f6564a210b
- SHA1 ceaaa84daeab6b488aad65112e0c07b58ab21c4c
- SHA512 b7b06367ba9aa0c52ac5cfc49d66e220232d5482b085287c43de2ef8131f5ee703ffeb4d7bef0e5d9a430c0146bb2ab69c36174982184a0c06e6beda14e808b5
- SSDEEP 384:7baacsultAgwBAP3Excizfb5pei1QcMCPHz7eMKw8n:at4B23ESYf1Mi1+Hn
- TLSH T1ADE20942DBB81081E5F25F39D6B386664D77BC279E71C24B82907E4E3D60F926A61333
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\360procmon.dll.locale
- Size 106KB
- SHA256 51475f2fa4cf26dfc0b6b27a42b324a109f95f33156618172544db97cbf4dddd
- MD5 7bdac7623fb140e69d7a572859a06457
- SHA1 e094b2fe3418d43179a475e948a4712b63dec75b
- SHA512 fbed994a360ecff425728b1a465c14ffe056c9b227c2eb33f221e0614984fd21670eddb3681c20e31234a57bfe26bcf02c6a3b5e335d18610d09b4ed14aa5fb2
- SSDEEP 1536:PORhlQF+MAfKrUB0FHg/S9VCJg/KJm4F9bfKJuw8AHu4+jSUMk8mA4Y8YE8RlE3e:POBrUC4jyUJGKzgSg+Yco46Fe
- TLSH T184B34A47AB61C986DA705F309863D4513E35FEB6FCB8D44F2085328F58B2B1192E6B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\Safemon64.dll.locale
- Size 52KB
- SHA256 129a7ba4915d44a475ed953d62627726b9aa4048ffcc316c47f7f533b68af58b
- MD5 a891bba335ebd828ff40942007fef970
- SHA1 39350b39b74e3884f5d1a64f1c747936ad053d57
- SHA512 91d1b04d550eda698b92d64f222ec59c29b5842115b3c3f1159313b620975bc8475b27151c23f21a78f60abd6c7fa9ce5cb1ea45f9349942338f9bf0c8cfc99f
- SSDEEP 768:O3v+tnPKY4PWWYzpnD9UT1tFGHXjpjqdV9/rfroLoZeNMXN+6Ampc:9KJSpD9+1tFGHXt+PtrgINVni
- TLSH T11933294563E50079E5A34B35C9F39E52EA76F8072BB5938F0624C19E2F337909A39336
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\SelfProtectAPI2.dll.locale
- Size 21KB
- SHA256 a71e57cafb118f29740cd80527b094813798e880de682eca33bfe97aaa20b509
- MD5 9d8db959ff46a655a3cd9ccada611926
- SHA1 99324fdc3e26e58e4f89c1c517bf3c3d3ec308e9
- SHA512 9a2f2d88968470b49d9d13569263050b463570c3cce1b9821909e910a8a358e64ad428b86095a18f596d2b3ed77e0e21d40f9c24543e4a0872e6b35c5103bede
- SSDEEP 192:7PEyLnAYEFPrQP8tVku+pdhh2eryHU8/7X8r9ZCspE+TM4rSEZsBHUckAwmTcViv:7iYsPVI70HVJeM3Hl7VLQKvrfpMQ3vmc
- TLSH T1CBA2B4468BBD0002FBF29F38E6F5D5675EB6BD827DB8C58F1111818D1D10BA02EA472B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\safemon.dll.locale
- Size 53KB
- SHA256 110914328d4bf85058efa99db13bfec2c73e3b175b91dfd6b41c6fa72ebaa103
- MD5 770107232cb5200df2cf58cf278aa424
- SHA1 2340135eef24d2d1c88f8ac2d9a2c2f5519fcb86
- SHA512 0f8b98ded900d9421eb90cffd527d8218b14354d90b172d592c4945c482191d5e512f2678217c6214addb38da0b9bb9287f84963a50447cf232962bd99b0c3e8
- SSDEEP 768:fCG11xWF7Lp/El6Eh7lKlI019+6JWaeNMXXbBA0bg:KGa7l/8h7I7JWpIXbBA0bg
- TLSH T15C333A4076D08033E1A75A38A5B5C6608E7E7D122FF4905E3FB5426E5E717E0AB3932B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\spsafe.dll.locale
- Size 9KB
- SHA256 61c130d1436efba0a4975bc3f1c5f9fdf094a097d8182119193b44150344940e
- MD5 22a6711f3196ae889c93bd3ba9ad25a9
- SHA1 90c701d24f9426f551fd3e93988c4a55a1af92c4
- SHA512 33db4f9474df53ce434f6e22f6883da100473d1b819984171356eeef523ba534c4abaf2536596b8758358e755e5d9f3793d85be12d2d8d5284fc7d13f6c005cd
- SSDEEP 192:7LyM4ZuyMrj1grjzR+vnr9ZCspE+TMAr3o7hu:7eVzM8z7eM97hu
- TLSH T10412E9834B555042F9910F70D2F3C2529EB8BA533EF6A1AF9B61809E3EC1B102B5577B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\spsafe64.dll.locale
- Size 9KB
- SHA256 9327e539134100aa8f61947da7415750f131c4e03bbb7edb61b0fab53ea34075
- MD5 5823e8466b97939f4e883a1c6bc7153a
- SHA1 eb39e7c0134d4e58a3c5b437f493c70eae5ec284
- SHA512 e4ea824314151115592b3b2ad8cd423dc2a7183292aa165f74f8e35da4f142d84d296d34506f503d448c7bd423be6bf04da2412b7daf474fbf4ef6a2af142bfc
- SSDEEP 192:7VCMqB8x3yMrj1grjzR+vnr9ZCspE+TMAruNNNQkG:7cXyCM8z7eMlVG
- TLSH T1D912EA834B550043F9910F70D3F3C3529EB8BA537EB6A16F9A6080593EC5B502B5967B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pl\safemon\webprotection_firefox\plugins\nptswp.dll.locale
- Size 10KB
- SHA256 09d58a2f0656a777a66288ac4068aa94a2d58d0534328862b8371709eab2003b
- MD5 5efd82b0e517230c5fcbbb4f02936ed0
- SHA1 9f3ea7c0778fedf87a6ed5345e6f45fb1bd173fb
- SHA512 12775c718f24daa20ec8e4f3bdede4199c478900b12addcb068ae7b20806850fdc903e01c82e6b54e94363725dcff343aeac39c3512f5ea58d1ba8d46712ad33
- SSDEEP 192:7jp0kvNyMrj6Pu7CrjzR+vnr9ZCspE+TMorCxu:7jpJMMCPHz7eMtu
- TLSH T1EA22F7834B985012F9D10F70E2F6C1539DB4BA537EF9A49F997080DE3E86B601B1672B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pt\ipc\appmon.dat
- Size 30KB
- SHA256 c308ee41e48cc498c396a2ccbc57b7d29d058dd145f9867887544cb74112d63f
- MD5 ddda5be2e45d1c5229cd561a03825908
- SHA1 d9207564dc229c9a05d9a7baf8c7e2d17c62072b
- SHA512 b16a67086a9d435ca17e35c7effdb639cf934a8671cf9f99f4e8f6846ad7e71be71aed3bde77a63f3189c155391efe5287589cf6332dc8be02e52c90c924efb3
- SSDEEP 768:drQ8ffdzS2KN1gQxCFeWTuIoR7HBssluEqd8Knq:e24N6QckWT1O4q
- TLSH T1C3E2E10A2CFAFA4ED8772276EA968FC0DF74775E2900C5748086654E847C39DDB8DE21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pt\ipc\filemon.dat
- Size 17KB
- SHA256 a3cfc3c8f95f0ed56306d28ac87408f10875c43bca7778c6e1cc18c7a3441183
- MD5 bd29091ba65b3fc08c79654997b4c82b
- SHA1 3b353ec41dcc96d898715f6474656f13931c1b61
- SHA512 ae64dae0e4025968bfb14e57c2faab0c9da39943dae9c884cbbd940433b29613c090b98899db847c94b265f969a6ed3cfebff35af284ca9619e6e25937067650
- SSDEEP 384:5vHP8qNfXOKM5VHblx1qhvmVqC7exscB3neUvESwTPprqWPQTUDnwENL1c:hHP8KX5M5VHRivmsCescReUsZPqid8
- TLSH T14F82D15BC80A1FECCCE34B71357ADA5D89AAA09197978351487C18733ECD4930D95DA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\i18n\pt\ipc\regmon.dat
- Size 32KB
- SHA256 dab50e3c2787808beeb0b377ad7c3de2c518578b9f7a4ec4ac29063d59c00b3d
- MD5 f507c8db8f8ec9361f36608408c9939e
- SHA1 f3915edb67fc281dde5657b383e3a5aedfe96bb8
- SHA512 cb09e4f033b873211bfa8b8b82fa207ea5c176d8d686487c2253214f5f965734d2a16a04ae41b849ffa20b3b03814714274b749f07dbc28a0a5676a86630feef
- SSDEEP 768:mqPy0zBxmlBLCxBIZuPVOWdT0bQUu9d2+8Pc1fCrGrP:m90nmlBLSBjt/T0MUu2ofCrY
- TLSH T129E2F1618D06806EC782A3B4D74162F8FFFC6AFE4A68C5EE445E064AC85573ED0C0E52
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\safemon\webprotection_firefox.xpi
- Size 158KB
- SHA256 23207486c3d15f633d5f4c0bc1a978c951df54e443361d2c64f8c17d0c0e3b22
- MD5 26d6897d58c576139af20031f43016a5
- SHA1 69a5c32703d07d184d85538ebb38604ef25ff5dc
- SHA512 5e5961aa7d1f03e0ecf56a00a674edb24fa4c0cfe5d9a277be247c6eb58629436d1a6ff2ec2f03a0653380937e0622a2da7d7356a6e5eb13b863651bf5f61821
- SSDEEP 3072:pdEg5HZmJfhoza+aILetM7SO2bdNggr/eRJ7/vSef/xKAHjhsH9i9EkAW:v5HKuza+3F2TggjeRHvHjc+R
- TLSH T107F31229A15A08F9C5CDFE75384A63C6DA0C350ABE1BF00D3E882DA5701EAF54D563DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\safemon\zerop\200185_shconfig_1.dat
- Size 1KB
- SHA256 4c3066c14e9e2af33e1ecb62fa330ad87c42a4919c54e56efc46356c6a65bbc6
- MD5 45d923fb3e1d22e5a55d8d67f641a0e6
- SHA1 c00f289f0b04db83349d3bb2edea6aa7ca871e00
- SHA512 57e3fd3d4986fdb74805e8e1ed161316c7f124194cd3661eafa852f05ab5db0ce2cb1e5973a6d205fca0f86aed18148a093700243963e98df4a3a6de769f140d
- TLSH T1243119805AB7AF09D54C17C97505989234B134845DC33E80A35D42B98FD5E5C6AF29F0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\safemon\zerop\200357_shconfig_2.dat
- Size 5KB
- SHA256 950885472d0e4b24d3e24775b5c990b0cc02c64ebf32165b7af9c023967f0347
- MD5 e1107ab617160ffa9cd325c821f107d8
- SHA1 aae3e7f2efcda49d3c8a1e0d95ba8512ea2af608
- SHA512 7076ab2461fc9abd37989a93213d6928373308f56a07c09c434a193156364c3158d9f70d2108edea5f064710f184b941344b9a38759455c8b0818593e94933a4
- SSDEEP 96:z/diTXnwxCAk3JrbLK9I8y8KzJVEq61EWIv+mlRJl5Giewj6mPJu8K:z8TXnLbLK9I8PkbGwv195G2jdK
- TLSH T147B19EE9A584C46E55983A7CA17722E93B8333658D7EC78C9110DD080A0B3CB6E4F44D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\safemon\zerop\200681_shconfig_1.dat
- Size 2KB
- SHA256 dde6cd2b3df411ef822f3b4d0d1d2443af69cd41b7ce11311edfda679ba918b8
- MD5 b676376d96b4256369af68f998acb667
- SHA1 98ed79f08865cd5c329cbc3f41fc83e4930d9be5
- SHA512 bb4c7193fcec95f7bea862353fb122039d78c085df107a6b6bf9490ec995ca71cdc63ad15efc381cb02e7d77f45e3fb483770fa7d74192d65131ae05490a171f
- TLSH T152515AB676EA1DF3B1EBC98F286380F9DCCC1C6591D40430F0A895D586A74597CA26F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\360_install_20260603175827_240768937\temp_files\sweeper\SysSweeper.dat
- Size 1.1MB
- SHA256 ddc33b146ae71974f7deecf18ab2d71bbd57d3b1b7bd99e7948ccbd2831a179c
- MD5 8a273b1fb7fee2498470772bd097a34b
- SHA1 3adbde1691d704564f8e6f11e1a9bf1c3366c596
- SHA512 88ea24e893d1c58e2262634915b806ec458c93e965ecabb037bde93e25eae82db4b77633acfa3d3ddc0426c46840fb877ce55c613da3130dc795ae53fedaff53
- SSDEEP 12288:xozbDZaUSq/KSMhSE10MK0uolty7eh20iIfVCcLbD5mJ/0B2ELH1Ohx8Np9bd3uL:syfZmDepYwtL1gUb1PGLbb3ZZbF9/
- TLSH T1D535F14C9B201D2B1A5D810FFD8EFC69CD97652CA9E67F81B385C96663E66423303C1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS463756D8\setup.exe
- Size 8.1MB
- SHA256 8be09d18795860b08ce3ee4f21c05b3205fba0541ac174cfae1a66d19b21b8ea
- MD5 d63c07838f3e41bdc17e273487509c77
- SHA1 e4e6908c4a4842bce89344df18edaebefb231fc5
- SHA512 e70390900ac7cf9a875811d36a0e4d22b8ddefe229a60879919c9b76640b775742ef014a90292da336691358bdadc45a01a6ad72c7c5251aa546f3a6b29ddcf8
- SSDEEP 98304:Xpp/1c07niyCsCZbVz7ZTlS25vSOdFBI3++wteEmn:3177W77ZT35KB3+Bqn
- TLSH T161869E43F3E901A8E0AFE9749B3A5222D5757C864B34A2DF06D43A251E72FD45B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Opera_installer_2606031657289882788.dll
- Size 7.5MB
- SHA256 7cac08fa3fc954671ddbeeae0a9c6c44b31b1e47ee8cf0591f6ce4f012fc0b02
- MD5 69e432e06ab253be69c119ade50d2935
- SHA1 b0f34191da482d1dd62f0356d63032a68e4ea687
- SHA512 2856bb9c16099bc3a23a67d69c647decdcbe36552bd281dc63e1bbdaed0f6680652c10698af1234a78f25db4ed671b0bcf6577add4fdc89a6e9c22f8f5859265
- SSDEEP 98304:M/1c07niyCsCZbVz7ZTlS25vSOdFBI3++wteEmL:K177W77ZT35KB3+BqL
- TLSH T182869E43F3E900A8E0AFED749B3A562295757C864B34A2DF06D43A251E72FD4973CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-2QBPU.tmp\_isetup\_setup64.tmp
- Size 6KB
- SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
- MD5 e4211d6d009757c078a9fac7ff4f03d4
- SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
- SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
- SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
- TLSH T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-FCHZ4SP5PR.tmp\CheatEngine76.tmp
- Size 4.2MB
- SHA256 07eea42af4d565d09ce6c8723211e96a835400060dc90e53a6bac21b2fd3da42
- MD5 af498a69fb53fc1ad081c0c884e4822a
- SHA1 b35902fd0a6b1acb19bfb3002f4c0c44a44bdbaa
- SHA512 7523307016fd0b58208cf4bb3aba539866bf59d3f154a95084384ad78512fd76380187ad1fbe1ca86043fe0e7384c858174417e2e5d90c57e11921b5e36b7de5
- SSDEEP 98304:5YU5hnuOajWwMPdCpepI3GrwrA+Js333PZ:7xuHjWfZIzeZ
- TLSH T177268F03F388753EE4571A3A583FA280983F7A213915CD4B6BFC295C8F396416D2A797
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-M5VVS.tmp\CheatEngine77.tmp
- Size 3.5MB
- SHA256 aeed4909d10b9d033ab46e12602389858c45d975ad10fbb5e754d3480722ff67
- MD5 d1bf02f12074841ff24798d20b88c36b
- SHA1 d2cd330c8a34973d4b9dd82871bdb626c94b294a
- SHA512 bb16446bf264eca45d20949f83a8793d9187b7532f987a217f41a90b0189b755d68d619eb5b44a18ce319f3999def2796c0030e5314700e4c337a7256f9cdf2c
- SSDEEP 49152:q1PRegPynt6Si8zZebYZOHiGXs2krmh52guo/333TNF:ipeHl8YQfsGduw333Tn
- TLSH T152064B13F345653FD06B2B3A8D279384953BB66029139C177BEC3A8C8F395812E2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\CheatEngine77.exe
- Size 33.1MB
- SHA256 78e04f73eb7eba0663bda0448d0a2fabadb303fce9f47061351515b3d4a116de
- MD5 ad7bac4718deea82aec409c62beb2949
- SHA1 a917a081eb5a7ba0810eeffbc6f742c217189603
- SHA512 3ab0d3ebbc7da29eb962318d73d1bb44a50547e9c974c0fba885690d57a32dcd6dd18d8aa8791c7774e06646bd2ad70454d3fdbeaa9b2fd48f89e175f9dbf0f7
- SSDEEP 786432:PzZeifJeT9Yw7c1YF43/VSmTRNKh6+SdfTfzVncmlZQzPU2LTIf:PzZeifCw1F3/04A65fjxncmu82LT4
- TLSH T11F773313F2CB903FE0AA5A362977D051593BBA2425068CA79BFC389CCE256D45E3F543
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\OperaGX.png
- Size 152KB
- SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
- MD5 4e2421d76f1b0c5627f732d4e945a023
- SHA1 89e3de5bcbfe50c18f17b5ee731dd24213f1812d
- SHA512 13c97b5ec52344b605d1b9658dbe15ca05841fdb786f2e06ab52a4f80ca6398adfa7c0dda304ec343ab733df85d9a9da29012ac21d96e680a19ecbbfeb0b9001
- SSDEEP 3072:zkL8PqE1l4NJoxLiog7R+1tNx+ZEaLbplAfkFO/lb95N:zFowWo7tv8bpyp9j
- TLSH T138E3121A702324BAB44EF4D6F1DB65C2EC22AAFD214D10A7D79A5C7428C0B66FC5D2C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\TotalSecurity_AV.png
- Size 83KB
- SHA256 9c9066105cc128beeab9e885e4da8a43f8e997d4366e2963efcad5e43e494a6b
- MD5 3a8132b7d9677cfff86c57282f4ee91c
- SHA1 d24363b2bdf2ba0a5f601cf2c3515134a5e8e76e
- SHA512 d91fa0c3476d959ec29596b60182475a22e5811884eaefaa23886c873fc350190cccec3971446ee130d7491add22ebc4fc6b788fe30b690957074ced56842cc2
- SSDEEP 1536:xwywj2dWfDPrQj9BfOkEym54lj5Y9//lFO0Ok3XkJmW:epLrejNQ4lj5WDOgXu
- TLSH T1D78302269510ED57914D67B7E98AC224DEBCB4A3AEC2F2017A7138DB4C73047C5EB86C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\WeatherZero.png
- Size 29KB
- SHA256 ab99cdb7d798cb7b7d8517584d546aa4ed54eca1b808de6d076710c8a400c8c4
- MD5 9ac6287111cb2b272561781786c46cdd
- SHA1 6b02f2307ec17d9325523af1d27a6cb386c8f543
- SHA512 f998a4e0ce14b3898a72e0b8a3f7154fc87d2070badcfa98582e3b570ca83a562d5a0c95f999a4b396619db42ab6269a2bac47702597c5a2c37177441723d837
- SSDEEP 768:Fk7fJC9WjOI1DaGmnitN039DODp56Ys+9S/IUM+:FktpB4FiQ3qd9S/BN
- TLSH T188D2D0381BFEE4C6EC67B874148F1F234A2B94BAC0D4E215F801969D1549E5EB58CDA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\finish.png
- Size 248KB
- SHA256 41031efc4f7e322dc5ffacc94b9296fb28b9b922b1ce3b3da13bf659a5fd2985
- MD5 b24e872bd8f92295273197602aac8352
- SHA1 2a9b0ebe62e21e9993aa5bfaaade14d2dda3b291
- SHA512 f08ac681abc4e0f6d7a1d1f2303169004e67c880f9353c0ed11dfab3eb511ddf841fa056f4090da8201c822c66ae55419c48cd87f11b9866feb46a3fe2c2af99
- SSDEEP 6144:1QdvglrmnluatdNn508GtXT3YoTkT1ZLw9p2Hpsx/F:2dvglo/nX67HW1ZL8EJ2/F
- TLSH T104442222E202F589DB5295234F58BB64BF7E17B3F4850A2931F8541B07815BE4CF9ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\logo.png
- Size 248KB
- SHA256 8c5c80bbc6b0fdb367eab1253517d8b156c85545a2d37d1ee4b78f3041d9b5db
- MD5 9cc8a637a7de5c9c101a3047c7fbbb33
- SHA1 5e7b92e7ed3ca15d31a48ebe0297539368fff15c
- SHA512 cf60556817dba2d7a39b72018f619b0dbea36fb227526943046b67d1ae501a96c838d6d5e3da64618592ac1e2fa14d4440baa91618aa66256f99ea2100a427b4
- SSDEEP 3072:d9rAhuSnngAZK0u2vGWTbQ8VreGWVQx1RiiHs0dfo5yk5BRFOYfKa5ubF3/hlKHV:U/HJGWPQ2wV01RPQ5FoBJc+uHtjdhd3
- TLSH T13444122A9260C885D35201230725B4787F78264B7A1CACE6F5F77C1B4A0A67E2D86FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod0.zip
- Size 5.9MB
- SHA256 200e9bc4fcf2c6682ddc8c7f172a0d02befecd25ca882f66c6abc868a54b8975
- MD5 7cc0288a2a8bbe014f9e344f3068c8f1
- SHA1 eb47d401ae30a308dd66bdcafde06cdd35e25c94
- SHA512 869f0a01ef0bcbbfc501c1786e14bffeaa2daaa00210c312874fc67a724c77ef61394bb5854b9a02af654cd045c4d39ae30d73f1b4ec8aa9e531dfeea1714476
- SSDEEP 98304:ppxj2IwVGwxnd+P0fY8eHeM1euEuR+HW84l7mKN2Yjwov3I7qs4zLGGlFtSNNkoo:ppxZ7k00fxeHejFHW3l113I7d4zLGGTL
- TLSH T10A56335E3333C060535EAF822771BD151138AA7D6EDD78C48A39A37625F629E0FA470E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod0_extract\WZSetup.exe
- Size 6.0MB
- SHA256 fa352552306b80f3f897f8f21d8579ae642c97d12298e113ae1adc03902c69b8
- MD5 3c17f28cc001f6652377d3b5deec10f0
- SHA1 eeb13cf47836ff0a0d5cc380618f33e7818f9d75
- SHA512 240b31f29d439c09a56d3bf8d4a3ea14f75c2286e209e7df3f4ff301bfa3ad8228d7bebe01acea6f2f702a0ba7ecdb5583b97372725c77ef497e749740f644b3
- SSDEEP 98304:O/KXgWUBu+NlRk9OfK2GTyYX+eyaB135PSuXTm0LuM74eL3o1+ykb5io5dtWx9eJ:O/KXNs6OfxGTyHwnXZB3o1jkb5ioPtE2
- TLSH T15B56335A3322C055E75B5EB236B5BE291274AF6CBC9C24824F3AD17225F73450FAC70A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod1.zip
- Size 3.6MB
- SHA256 52ea32c4123bc367fc61f6624d0ac7a3d677a7eb169687c3daa3d975fbea4a5b
- MD5 dc29d3a3d119cde5912aa66d95f26062
- SHA1 2aaa52b1a53867706888eb2f3bf530454c2a690f
- SHA512 25d975174a9d3d5417eb025083c8ea33b46d7e2b53f0574a9f4d2c950885b8e7ca1bd115a30bc0022ce870063a0adb76477064bfeffb81b1b3421dbc48d33c2c
- SSDEEP 49152:NVAbwQwEiXhnkSxkrFHQ1YUyWuT+SNBRk2ZatSkJsfofgWJZ9C3c1yUH5MQdds3L:rA/iXtsWiUyjHNBRkhQkn4WjV9b00AW8
- TLSH T165062331BBC1E472E7A321324F78F3599A7EF6940E550A977B480A5D8F70282A635F07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod1_extract\OperaGXSetup.exe
- Size 3.6MB
- SHA256 47e56b4975eeb5ed4c5f492046c069e735173c3d1b6f10a8f2dbeac5210a20a3
- MD5 9fd9ddb996e1e4327d2dc25034d2280d
- SHA1 2094bac602b2e0c62a854e09b2fdf77871cc6eab
- SHA512 5c7f788f41eeb63580d3e52a46a45497648eca3c5b34687585f9f178329792a6cc2619d85ea7e2bf9e24ebfab22dababfcfa91248759ecc34198fac384926d0c
- SSDEEP 49152:MVAbwQwEiXhnkSxkrFHQ1YUyWuT+SNBRk2ZatSkJsfofgWJZ9C3c1yUH5MQdds3U:AA/iXtsWiUyjHNBRkhQkn4WjV9b00AWb
- TLSH T1D4062331BBC1E472E7A321324F78F3599A7EF6940E550A977B480A5D8F70282A635F07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2.zip
- Size 774KB
- SHA256 723fbecce13e52f4d4053b954747f4f1131624537e292e303e27fed938538db3
- MD5 cfd1e488ed32b24ce845b6d78a7814f5
- SHA1 9c1781fa07ebee8f158578155ecda829a52d79a9
- SHA512 7ca67833e11dfe05fcceea51085b3f956ba5b4535b4f725d73f702e24945ac7962c282f32c81bde59200cb5aa5bf3f2df1fd9ef0027958f48ba540c0ddaf7f1b
- SSDEEP 12288:35BO2fnFvAdA1nn+2SjleEpdwNjVKpF+Xc6zXXvQ+uUOs:3y2PFvAdARn9SjlecdYkF+XT7vQ+Ys
- TLSH T149F423D3853BA693CA771CEA35561931670DB08DC2961DCDDBE2C2E48F40AB090E97DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\prod2_extract\ts360Setup.exe
- Size 1.5MB
- SHA256 fb53f5f44e74826095605610fcbdb0fc00337ae58af61c7f18b5e8eadab2241a
- MD5 16caf58d0ee0491c6a1d8434c5477ac0
- SHA1 834b7d0defdddaa3184511b5de2f5d0e8744792e
- SHA512 eb884add04d22de652e869de35a9e325e44d8d0ca0681f0570ab625346a9243f3634059d934f6d5d8f32200d3f5815f26e03761ee4ae1d62e5fa2e6d664143ea
- SSDEEP 24576:JD1YS7FpyUxT3DC2a1zj1SqdAGFQZIxHC45UJoeXq:EQ5xT3DDCzjYq+ZIFL5UJoe6
- TLSH T1C765AE0E77AA923AD9B36534CB7582256E6BBD400B1587D3E3D03A494F34DE17D322A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-OBITZZAE19.tmp\zbShieldUtils.dll
- Size 2.0MB
- SHA256 976d070339c1ecd80d0d2ded8f2c3fd1c6ec03f408053470f696066c2bb2b738
- MD5 ea1aa2927ea58dfb8f57ae5f7dae0c74
- SHA1 f1c1eca6070f82cd7c7918eeda144a207a53bb09
- SHA512 20b10a4289bfaea9fe25bdeee636a07303799a78f0a732b65a182728bca9f48cf9802f32c833315e7d71a4816fcb9b7b09370c62867421824d554a87b6ea1559
- SSDEEP 49152:y4yxp/wFOn9xRo3HVCEi2ynjsPAXkp4K0x8BFuchAFotKLIk:yJTwo93o3UEi2ynjs4Up4KI8BFucOE
- TLSH T103959E613556446FF21B12355A38B729F2BEA3700BF547C73ED4AA1C39334428E266AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxF086.tmp\INetC.dll
- Size 21KB
- SHA256 2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f
- MD5 2b342079303895c50af8040a91f30f71
- SHA1 b11335e1cb8356d9c337cb89fe81d669a69de17e
- SHA512 550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47
- SSDEEP 384:KOoVVefeWsI7rsIquPLNN546o0Ac9khYLMkIX0+Gzyekv:4VVaeE7wIqyJN5i
- TLSH T158A22B5353A01FFEF3E7153878B27B3745A99A6450938A9F07B32D8D2566282BD32342
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsxF086.tmp\WeatherZeroNSISPlugin.dll
- Size 695KB
- SHA256 070190292df544da87f84dc8cf8ecc0a0337085a3fe744fa60ce00a6879b6146
- MD5 2eaf88651d6de968bf14ec9db52fd3b5
- SHA1 1c37626526572fdb6378aa4bedbf7b941886a9a1
- SHA512 15754a8f097f9c8d7bda65fb881720af5e4c4db1e35f555563b9bafe6426a6a0e50953a47f628fe3dc0f461e48abbf77db7c997902ff483cf33396d0d8e2cd17
- SSDEEP 12288:1WNrNNNifmpPFyCrHQnfYWiWJHA7LeLJRHRNJOYHQ93AjN:1WNrNNNifmpPFyCrHQnfYWiWJHcLeLJ3
- TLSH T1F1E41AC0B325F858EB990671083572F446A625313761D8BABE8F7AC1596C2D6EDE0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_1864316966\a44da279-00cf-4f37-a5a3-fb070df4b502.tmp
- Size 472KB
- SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
- MD5 a5c805a3fd291996bf5394cfe97c872d
- SHA1 c2a9ffe8edbb59024902d235e267096846acd8c8
- SHA512 c4b0f3f60e8f67ab640ebc6411cba992b2c4e796f7168edc5aeefa4b3ddbc1dd91539dfd1dbc29b6ef0e6413eafd6224a2e01cef0a8706d775da345ab1463839
- SSDEEP 12288:rK5FbrrK9ssxYE6yvpQSbNcwTVq/8m4pqLmyJd+:rK8xJRpLbSY40ym
- TLSH T17EA423DDC8E80B44C906F53310A53F92EC0F1D07806AA3679E7A633A97796CE6F112B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_1873779524\7d77cc07-f2d7-425f-b3d3-541b478df31a.tmp
- Size 2.6MB
- SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
- MD5 cc79434c290887ea9f9eb97967e3ecf6
- SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
- SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
- SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
- TLSH T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_1873779524\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_2140855729\7ad9ec08-224d-42e7-8a9d-f064a9b7b295.tmp
- Size 14KB
- SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
- MD5 d61c15540ad56517f18a8666367e995c
- SHA1 bd7eace09923c12d5a6e227f5b05b8337f252598
- SHA512 4b78189fa6d247ebc4b527423ea453771315381e5eaa10b244e778fc11de06e0778c3e62477e2ef35031b686168bb949719149d4618506d0c7b3d7bf666f1262
- SSDEEP 192:FJ5RJtwABiXu1ZpNtvFAKqks4awuxf6W4ZfG05Ogl88+42v/eFZYdxh0vJa8MS/7:5DOAZj1yz4q6BO05k42v/ZcJa8MCt13
- TLSH T13162BF3905292B34D458A37CC4EB4A557040F69CC3B3A4732D4AE69C6C91543BD7ABEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_57519354\6411d2dd-12a9-40e6-8bdd-148d6ad09812.tmp
- Size 4.2MB
- SHA256 1ff1095b38c924b21a79dde9a181df04766233dbca27e75352afb986428dcdcc
- MD5 4e529d543238e6c6fd985980d205cc7e
- SHA1 966821b0aca22403739420fdb10f6c1fb1c4b460
- SHA512 b8780d6ea5781805b4fa26fc8bc5e4c8226cde77eeaf85900a337f01e65274c9ce6b65a43029f0c757087cd8b979db8ac4e314ebfde3bd0b674dd63482ff03eb
- SSDEEP 98304:1PtnPLDxVmnGP0UXYO3C96HSVAYwlXTYYocKQUCIgdGS0YTqE:1PpDxVmGP0PO3C9IYWYYo6Agd10YOE
- TLSH T16E16337267D97710DEE3C83250F3DB85699847938989BB3FD42282457AC32C06F99C6E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6428_57519354\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\{FE9A834E-CB54-4214-AF34-FCACFD12B70C}.tmp\360P2SP.dll
- Size 824KB
- SHA256 bf1b96f5b56be51e24d6314bc7ec25f1bdba2435f4dfc5be87de164fe5de9e60
- MD5 fc1796add9491ee757e74e65cedd6ae7
- SHA1 603e87ab8cb45f62ecc7a9ef52d5dedd261ea812
- SHA512 8fa2e4ff5cbc05034051261c778fec1f998ceb2d5e8dea16b26b91056a989fdc58f33767687b393f32a5aff7c2b8d6df300b386f608abd0ad193068aa9251e0d
- SSDEEP 12288:HZcohgVGBmUpL8XOgh6LaISFP5FF6snXcscXt5KmR+M6Pt2H6qXco9TGUc:BYJUpL8sFXGmU7t2aq59Ts
- TLSH T1AA059E41E7CD8171E6AB26B5447AA31A9639BB55073087C7D380AE2ABC303D1DD3A35F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
- Size 2KB
- SHA256 64b3642af9a0fa87dfefacdf3d34a2af4965544fec3716725c4a5faeb43e3392
- MD5 3058aeee88d553f3b9447eaea10912bb
- SHA1 cf45f400ea80418eff705cdc2c2c4e14747cd191
- SHA512 d62fb84643809ad0f910fa3ffe8cdd9715b5c03f7795d6b0a49a08d0ac2bbe0c10e4d2ee88b7ae2e4030bbc601523956d2666828f17a5e7c3544f2f93a5d9ec3
- TLSH T11141E0A437ED3B11F3FFA63505763E71823EFC10AB669E4D004181485DB6A10A49AF6F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BW2MCNJ6IWXWMKB5XE7E.temp
- Size 22KB
- SHA256 87e60edee7696f5e60792c95f921e3cd9853437cc9f19532d3397b6b7e33d771
- MD5 f665e2d4a9ea140c81753f62a5fe5535
- SHA1 0ee9d6a8b8c32d4395bb3ba3b13ef942bd3246f6
- SHA512 da2a294b96ce8b70744e9f8d10495204d6daadd91e42b5d1c47b99f3c868bda4429b49ea432439da22489ba8d2f1f651725222087f3475269f1c6abd3afc085d
- SSDEEP 384:kTfu44TYryTqTJ9ADIvTqOTABlTNT8ToT5:kF4jW3S4OOShAUd
- TLSH T1F5B272603ADE2412F2FF927142BA6B95E53DFC526B01AD4D6041820D6C73F42AC5EB3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\bab1b259767840bc.customDestinations-ms~RFe5a3f7b.TMP
- Size 22KB
- SHA256 1f0425b5bde3c3be1062825e109a17866a72861f764381787db0e1bdfe801a38
- MD5 73ab149d618aaa5b4758c32e75117bf5
- SHA1 2658fa0f8845abd346d3569e6903049b528dbce6
- SHA512 126f67a227fcf39e5d3b6701ae7099a49b408eb365d9f7d8cd0585317fb6606a8437c013ebd811bcca9a953fc8cfadf3b77fdf8d26db2ca68eeeb88f37b34e6c
- SSDEEP 384:k0fu44TYryTqTJ9ADIvTqhTjt5bTDT8ToT5:kY4jW3S4OhnDbvAUd
- TLSH T172B272603ADE3412F2FF937182BA6B95E53DFC526B01AD4D604182095C73F42AC5AB7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 823dda126896f6eccb53286360d5e757efb994d2eadd5161f27d97240629a425
- MD5 b8b7cf669c636e3dc40bf160e3248660
- SHA1 b66ab00167b6a4c09044f8d66857c0e9cdf732b3
- SHA512 6033a1259f9ae7327eb9f40c1a7dff825b2b1b626c1b77d2e255bda933bf971c5e2584c8e2c45164df5e7d107ef72ba55e8eebe19e6fd4b0a39c29332187976f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\6bcd1ae5-7709-41c2-8a14-6a6379d28b32.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
- Size 2KB
- SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
- MD5 f7b9c08913fbb4ee164db4de91a1cfa8
- SHA1 ee748920b53e30beab4925c3d4aa30bd7f667904
- SHA512 d39802a782fa37146bf509131d98d8e2ff121bffe7d5b37e6300b60c0acd6dfd80d2154825753395ca231493162b5668f2c752d125e4fc810cbb3d5d77331260
- TLSH T19C517F1AC850AD2B41F742697CA4A216F37443BF6104D45B7EBD918C8FB2AB3D4E7B08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
- Size 17KB
- SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
- MD5 d35d682b17b1efc0528e351d5da2a63d
- SHA1 3e0723bd0389fe65d68555ab6c1c7e23cc945132
- SHA512 b0192b5a9faa3ce9e50b5d3aef967b2f0975e7e62c48b4cd0c7902d7bc833001fc50678affb28294436cdbd6d4193f3eb0a2cfec08a40e29b4a498d59bda7128
- SSDEEP 384:+EVS0GCdigHBVrF67GAoDyD9X8zLAFfIEsqqUAmHS:+EVndRzF67GAL9X8zsIsHS
- TLSH T1778233291AFB142559A7603D1F8F92027224901F381EDE1D7EBDC6E45F8127849F9BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
- Size 370B
- SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
- MD5 b40522160b071581a7bc72884ade2d4b
- SHA1 ab23615bcaaa870b78e54e4d1061612282aec406
- SHA512 6a58400e6aa7eea02477f00de667515f3d8001d628dd8be1c4b5971a087386f5ed328e87a0639add1c3482cefa637a2d1d7196c42b55e8aab4b6173df979f011
- TLSH T12BE0605B9797E8BDC352C0B302B388502919FB09AF6302220D68796E083BC4822A30BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
- Size 921B
- SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
- MD5 3c287b3c8c01ed2888aece71cb04bdba
- SHA1 3ef53a36e4746521a4fdf845c54d05a4ea2ff0ee
- SHA512 984232ec2fa22271fff7aa0de4228a049d7a267239be1cb153a254261ee27bb0c4857e7c0cd8b14723aca5907d50faf36b0e42a8a04e1d4b7fa31f7888aff4a6
- TLSH T1EB11B31349144EBBC22C1CB6D907C10785F5A8C4E6009A3138F99B3D66935EE603833E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\common.js
- Size 640KB
- SHA256 16921ab0c5498e46a36ba82bde60a320476bb0855396347a44064c8a94f04c53
- MD5 bc1286ccf6cf986f7d33913817335386
- SHA1 fba55c858a1c3a3d3b0b525dacb158989bfc8811
- SHA512 32308c004d854349f92e33d809c5dcea25ae13dd941056e7a6f7932fdb48ff3f12b19ae2ead9a8501cdfe6f8e9eb41b5a32c9d16f53486f9d1bb4242178506e7
- SSDEEP 6144:xka6cka682dWd21MLZxzhuLvN22XUdUjg5WfHQTNYnGfrnXerdbBSnt8n0beOnDA:lgWdSq4LvN2Mz9UtnXKmqAe5MrA3Io
- TLSH T1DAD4E68D75DBF66A4393A466900F3042F26D1D46215E4912F73ACED3B824849E3BBBF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\service_worker.js
- Size 65KB
- SHA256 e34a0af204d3160d57a1291935210225e2998d21cc13af921a07d9ff1e35a7c8
- MD5 3179073e132a8b55a1e9da9cdff99146
- SHA1 39e6bf02ff571877be3a977338a29fdf42d5e31e
- SHA512 1a04af90f368a4fc0a2bf4c54a495885329015257610d0aac341fbfa2fdacd6be0ff547f7bb6d6fa2068a46f34c865cb31ed421a284f6ea244bc2d7ced360031
- SSDEEP 1536:6ka6ika6gmgm5CyjUXTosLq887TgCxy31e0zWAsQgR0:6ka6ika6N57jCTNmxfpxce0pO0
- TLSH T16E632A9C79C7B4B59363B4A8802F2142F13D2E41149D58A0B736C9E6B868D4DE33BBF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\vendors.js
- Size 640KB
- SHA256 2596f98838163638954421399ef345234818226dca526d5bdcedb40da75d0c84
- MD5 de9579db220df95793520905bc2619ec
- SHA1 e6f3130672cebee917bda9032c023821b3836bd3
- SHA512 4cd5298ff4a485238e929be3228221ab630c71599e6662cfa7ae8790136c0cbed49c974c148047c21a3fd14bae14cc4bc241eb27699bf1ae4fca1da6ac39a763
- SSDEEP 6144:xka6Ika6Z6W2xjKYRysyfFz/WlVwSG68tv6bQxWquUBIipNkiIa924VBN7J0vf00:physQSVwOc0UNKDV32FrnmIV/Hi
- TLSH T141D429C97296F06297B361B2507F200BF33E791A184D4820F254E9E9B8B885DA177F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\webpage_content_reporter.js
- Size 113KB
- SHA256 e256bb52553fa2ecec9d2cb24bc088c6d8ad004a0961b12a9aaf046ba9a0d911
- MD5 cc0a7186d671e98f1915248f9f1a8734
- SHA1 f1f851a9b83994d79649520fde9f6ea34ec67889
- SHA512 0c2a058c2291290fe995e29cf2ced620cc8b86cb91ebb8e413d621250ac017b94d5a04ff562c6c7c0d1f863a524ab8ad05bc031f6e76a7585c3c7d887a93527a
- SSDEEP 3072:zka6Cka6XpU2d5Y8QvNHR9egIVo8PHXK8bdM:zka6Cka6XpzdOlHRQg8o4bi
- TLSH T104B3DA89B392719A924320E506FF0047E3355D561C1A6038F669E4DFBC24E6A62FBF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1a57a413-2418-4718-82ee-557896aff236.tmp
- Size 27KB
- SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
- MD5 fafd40f7fceb49324821acd292290bc7
- SHA1 0c3a32c4edc6f4f4b6b4e0ba371cab917751885a
- SHA512 1a18133b6b2371fad37f53e5a23439124403a49282ea0df14af982c32beebe49ec5ddca1a32c7854d2001b2d1ddfee45dc180c1f92fb7ce55cc0ea76417c8008
- SSDEEP 384:Ogao5jgnaTCrfbwkIjxgrVybIfLEpH+tjG:xDe3rfbwkOxwVybIqa
- TLSH T174C2FA84D9F22938C37648BF51FB5908BF3F5E625C9B0462CD3A5E91787280F066F892
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\58fb62a2-dfbd-49a8-8d18-b27fcce42400.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\9152c553-0443-42c2-9f64-f485fc221f37.tmp
- Size 27KB
- SHA256 f7654bd59a0eca449dce5ce6140898342904778a307f45461436ad5a24ee913e
- MD5 e439dfc7c79dffb94110d995f1d9907a
- SHA1 8f3071ce6dd5e3cd59282affdb7aecf026372e11
- SHA512 de2ca7715e4390e888c2949b4b971ba8a9c99a6b63532dc60d69d6071796586bb8435e2ed6d22a5ff455aa9f76ed1339709467d58e31e445633fb9216415026f
- SSDEEP 768:TVVlXD7naQq1iZ8AAcG3NBpiPvQmKP8OQOT:BUG8LV3NBpYKP8cT
- TLSH T1E0C2B6F22C88DDCED9151B39D5A8E67A93DC5B67FFC68704E058ADB032B2940741EC58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\9eda1e3d-0e6b-4ccc-98a3-c1387fb82362.tmp
- Size 27KB
- SHA256 1cf990618d717d9febe7f274ca61fa0f03d3ff5265fca7080f51999e3dd38ea9
- MD5 550e01cb403c32932a4a921162f6a76d
- SHA1 742233dd564bce17b05883ed256a637f5eaad87e
- SHA512 adb56848a5c6eb4faf685d0c1d5a3dc02e544b9179c588401ec352d36185f43de3a6202ff9a460b2ad3b1633685683f2f7c5941063c0a56d88bf5d193f11bd00
- SSDEEP 384:Ot5CzAgqra8mQszUIIU5srLndrWl/SMayRj:w5Lgqra8mjnIw4jdrw/SMJ
- TLSH T1C0C24A0BF7D59EA7C504977489EBCB987338E8866713DB03B601AD791D233E91C8A4D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ce1fd5ef-3737-4bbd-a3af-57efb9f22dee.tmp
- Size 27KB
- SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
- MD5 020c1aeb8d8e137a03d5244491a1da9f
- SHA1 fbce07337cb53a16c340251c7cf146720c0bb408
- SHA512 ccfa08ed2426517eb85969d9bb482602c0402973aed5f46fbcf9fbd66647f9a65f60fcb037f0328ff04644f44d69a0b03cb6d79227d9b08ae27103ae58adabb9
- SSDEEP 384:OEUBizljf867VPsLWqJAtyF+G64zJCNz8gWaoSwFSk+M9Ol:uB6jJqGUE+zJCForQk+M9s
- TLSH T1C1C26FCA1F3806B9CD6416B4CE9BDF5A0A740DB2BCD97746CB6038920933EE515B249F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e12da722-24a8-4a9a-a988-80bed9437eb4.tmp
- Size 27KB
- SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
- MD5 6665dc24ad2b19c1d07f1d1b17721b90
- SHA1 53651b10630b369b1d6bea708c85ab3c5e70dbc1
- SHA512 f3bebf8932f55eb3aaead22bb7096cb957c41e60d56e5049e7f33e664223a2074d587f5bbe7b0836f9d36d21ee342fa1f2b09fb6f4323fc49728615107094791
- SSDEEP 768:SnaH+O01PsM/oDlzcC25Ex2O+04h4FWPeD:vH+O0pQJcC25EU04GFWPeD
- TLSH T13AC283A294C446A4ED986F341632DD3D027BAFADBDB8F10D5DD8B8A37B732C31026502
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
- Size 12KB
- SHA256 154f0be56901316d589f34bbf7caff3e05496174ac8528eb13ffd562b2da0892
- MD5 78aeb4660f13572721215b808c60adb1
- SHA1 1a6c732729d74cf7308e31c091a7413ee949e089
- SHA512 d931bba7b0c90536f481af94b994c56b033d160738235fe3a497289b595eadf186336063b33052a083f0182e498e50b0a0231025cdc917247639dae6c974eadc
- SSDEEP 192:lunFA5lECMpsaGqsEflRdXMbcsArzwoyDS8uINZwYu02+389Tb+WNOBv1s8ye/lV:luTXHEaQgP/AAi
- TLSH T12D4211875CA46DFF19C29637B650B66BF3EC00609761BD98B7F98A1C00C76CD7422E92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5a3bd2.TMP
- Size 12KB
- SHA256 0753322c655293a4c76d9f46906da9788e269af8cae02dfe03b0b3899286936c
- MD5 f706f21d2f69a197764a980ac196d0e0
- SHA1 28b73a086069d4612e3080d087387f3ea09fe1e2
- SHA512 e9c48f30bee88839e004fcaaacc9c7df29d063eb6b23977e44d04373d5d7c1e5f44e8712ebdc0cad0eb398da1b8bb36ccfdbce229a41828eefc0dd70cc7218f7
- SSDEEP 192:lunFr5lECMpsaGqsEflRdXMbcsArzwoyDS8uINZwYu02+389Tb+WNOBv1s8ye/lV:luIXHEaQgP/AAi
- TLSH T17D4211879CA45DFF19C29637B650B66BF3EC00609761BD98B7F98A1C00C76CD7422E92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\58091d1c-6ec8-42db-89b6-f51c350ac1f1\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\58091d1c-6ec8-42db-89b6-f51c350ac1f1\index-dir\the-real-index
- Size 168B
- SHA256 5139b758169f2bb2a1d24432fd2f2779eb1f1c4e943fb6fbe986c37a6f7897ce
- MD5 39aa3e14750384eb3cc50accacc36b68
- SHA1 a8c5f299515de0434a7037198e21852ca6946e09
- SHA512 d8084e693682e4b80b33c688a515213f1f7d0537ba8a3dda5a44e9f47ad050a341eb8e4e2660a3e129138461b9e4b299fe32891011a2a1725f6a5ee025b78f65
- TLSH T1A2C09268C5B04008EA2542F450AB54F2148148780A2066E60C80428A733A8B9DB95385
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\58091d1c-6ec8-42db-89b6-f51c350ac1f1\index-dir\the-real-index~RFe5a4315.TMP
- Size 48B
- SHA256 a50125cae28caad0ef64f95b60bd818f9b9d65570eac8cdb5bc0455be91ca0aa
- MD5 5c405fea110ec7370ca67b2c4e9fbda8
- SHA1 8bb8284c472ebae93a2e26b7d5374b547791cd2e
- SHA512 77b2fe35f3f56e7cfeb9f7b796c64bd7fe1da963e2c19fdad3554fdcf8f3d8c94361e3cc0289eec07a18884c2401f0e44bf563a3ce52aa8838e335cea6954c37
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\947d5365-a627-4555-8980-2e4ac03cb442\index-dir\the-real-index
- Size 96B
- SHA256 c59177151edc6da952999adc43524773e4251199a20df89738719d3fd53a63fc
- MD5 2fcd61833d23bdd68bc36b013548d427
- SHA1 b835a13419f4d12d3e22317aaaa4546139754e72
- SHA512 37018207f5c498ced9e92f02413fa9e44a415725801cfe09c8ab1819385db61fea63637e38643d17914aad67da2915f46ab655232fdec0a8ed3dc2a188adce87
- TLSH T142B00224E5515AA3E0AD1BB03D6140C433668DE2D691833741F89CE7B8223AC598946C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\947d5365-a627-4555-8980-2e4ac03cb442\index-dir\the-real-index~RFe5a4315.TMP
- Size 48B
- SHA256 b9446f9d1950f246c84f165597f8bf2ab8c151daf21895015a7c0012eb7e0109
- MD5 4dff100ef19d845e40c8a7a93e5b577c
- SHA1 35df88178dd1e71a71f507ce5b6d491d3ff9a4be
- SHA512 a0c24af2c8f10d20e4e10734f7e6e9a7f39612727f27675f4f5375da6a0f9f5c09e355be05c6cf999be1eef2b7bb57c245da157dbe1c70d1025ec71dd54f5815
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
- Size 208B
- SHA256 c48dd1434e04eb3de594bad309d3248e20d4905e7278210371ccb44629b5c1c5
- MD5 3a1e1135f94c745543d5be43caaebd17
- SHA1 5b3dc257d13b410580c07c49636ea39d41ce9468
- SHA512 4496d99cd55545242115779d115ba534f582bbdb7ebaebca9ecc491beaa777bfcc9d93c17273d1ad5f1ae43bc334f54c39b06a2cb64a55d4f977354cf91e8b39
- TLSH T168D0235B0990052113797345933C2D8851375C410DDCDD4E4910F45590F3F5205D8F93
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
- Size 203B
- SHA256 a4d1215387169dfcc2915f5069c5d14f3a727688d5a47979a92ab916d7d1f0ae
- MD5 dc788a34a595e0636fc7df0eb84ee5e6
- SHA1 75c088bfbe23c804c2bac105ebf1c7dfe3ec2125
- SHA512 154e93c9d4d01301d6b25b0a7021ded0f4a4b39c2bdfa9262fe12de500b2e5e280f28a51e0cbb11259ba7e0db1f02acb0c0ae4da888dbfcebbef5b1d81882b78
- TLSH T161D023470D50091113B5A344A3382D5851375C410DEC5D4FC510D45580D2F5505D4F87
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt~RFe5a3c3f.TMP
- Size 141B
- SHA256 ad12a968277660d0662263b7321d1e58cbfa2d068a112ae0264e379e060082ac
- MD5 30c01885928488efe048dcbaa8fa3933
- SHA1 f1eb311275eb7d269632699ea6d8f5a2bb85b073
- SHA512 c3881b0b471c87d002f425247d4ed5c9ba90ca236a2c0e8b6638bcf999e9bc3561f9057e6071601246a72ac33768fc3e5310b23c01de21be538146cd837e6db9
- TLSH T15BC04C9B0590542117B26B8092246D99466A5C854D848D8A8210B98C61F2F6619D5F96
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 3a8b7bd1bc10258626fd8ab3de1a2142bbd9eb1411361eda382557c0bf799048
- MD5 4d02cfbff5934befc48977d1cc08fec1
- SHA1 0d3f0b0a0da1fef2f2d6653ca3fbcd149f688411
- SHA512 ab02227dab9fa32c925e0fb113076b7e6c1495882da37465f08a4f932b2ffe2d4e353356722ec086bea926af7ecee3168bbf3d91e567423fe2fc1e63b9c37779
- SSDEEP 192:qTlEb1MpkJVVAuykvIVCtAdWef1rtxz6PSUQEo3qmA6LjAfNWXaggkQzjXK/FfrM:qQ1MyGuybCtEWyttGSTymAmAfYX5CTKO
- TLSH T11332B0F3D1280252179C3E0ADA4B6C698C753DF8F97443DB5119C91D96DC462EBB8017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 11KB
- SHA256 73c8423fcc13c9417e2b5682a274e0c2594bc457c0ec622f4bd64e0389947829
- MD5 001e461bf5f45f1edc4655963951986c
- SHA1 c1a487c91efcbe726908680e5e24481eae1961e1
- SHA512 07ea3c3ae69065fad7bcc25c874c31214a1922c43b93c430c4719876d4ebe8d9c19dff7a7fe2778c5c3f340e3df7882f24c716988c9054b92caa1843c39eee90
- SSDEEP 192:vW6taXascDIyE9ccRU5Glfk3Xrf61ZXd6WMHTzBRK2s3yYZC4Wm:vW6tQ89EqcG5mQqNjMHrKZxZTWm
- TLSH T16F32C0D8EBB93B3C0983D9D2EBE3D51B6261C15233429B49B7AE367954FD14C84820D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 573B
- SHA256 26e5bd1cd1b81cf569df00ab9478d910cd0e290f9f89bd203ea68f952eb08289
- MD5 971fa6a57d209fc837b36598289dc431
- SHA1 b533434c5f70b0b5c24b764611fe8b869bfe4ad0
- SHA512 41585a0b2beb6fc2719dd8120049e41f3bbbbc41e3f62a78f6399886ebb17d315c540dd08cc677741699672127f01235762c011813aeed72d9e0699d5513b680
- TLSH T10BF09671CE4F204B962F5B401D9CCCCCAD53AC89E18F1502EF048B36140552C521217B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 685B
- SHA256 fd815c46a2561ebf2bb42f11f8bfbaa1ce8d7237e4ebfad257dd935d0e979067
- MD5 4c69fdafef2724c738261dab1b7e1cdb
- SHA1 d735d44642f36c31b80242d0e294a7b572b4a7b2
- SHA512 3ad2d5386aca2b808d1f13155c954aff8573759877fc8dcafc21bae640a63c1def1bfcbdfa69a4a87f93f6aff3ac697c3ed1d16894c70c4096da74e007c16aa9
- TLSH T1FE01441A79072145494768A279CB2F570CF84B3685C5DADD0DD9B8C127125640E17814
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 52293ecafaf37d46b04d806af0e9cede346fe20301dd35f43bf840b74e341c57
- MD5 d33a6f21bf4cc68da816d7d31b8c5cb3
- SHA1 b1b0a2a8a12bfe9a688dea2464b6df6310c48268
- SHA512 3e77008f0f2ec15d197bd1bb906d764c57aca0fd53535e5c67d9d2515a6b7d35935aca81507ea9dd20fcc4584957ac2e88b1b1f4a590051907242216777f8bf2
- SSDEEP 192:NRCkseCd8N8Uh0RVmJ+dUFqDycwQLxkcazAoT27nuZG3qqaM/4:OmCd8Nf0QNyOcak227nlF/4
- TLSH T1BB029EC82D652745EE79ACA2B6A2DC1335CC50FD2728312595CCCA7508B532CA5EE18D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 7dd39152800016495b683e3117f75a009a4fcec9e473e6cd838ef347658cea30
- MD5 e1e414ca7c10d9fdca9cfd857c3d9863
- SHA1 abedc90040748ca55fd43d80bf2259d0da0764d6
- SHA512 d7c96891da3599cc13494726fd6b1c07029f2441c139afc959c481304ebe7a629d68ab77bdd25fa07187fad231ae6248a8492584f08bc843c87e264e4050336f
- SSDEEP 192:XSRoqOQ2HdLxyVfF6P3uixCEoTgZNyji1IowYoKWnkBK8GpRuq:XSRqyVfF++i4jT2N3ITk88GPb
- TLSH T1F912CFC77A431CDD087B0694D08E15E4DA993841D3F343EC52D2629F9C66F89CCBE691
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 2fbe045a722cea291a598b19a037887eff20eed99b5d885581af1fc8be8e5299
- MD5 ab3c5fa8d087ada30e507b3cd22f4966
- SHA1 3bf41d834e2549c63751ddd53191ce2291965522
- SHA512 b2ac7530933d3205b49591ef288863112fd7a9fdb2bb2ac54e4d1290c9b1778f92141b4a539a776480175e703aa15b4ce33f00bddcd78f866051da466e12409e
- SSDEEP 192:A0jOFEdwJBWz6MvIAzoRO7ucF8qCaatZOtPOYAEtg:RwJBTMeROiY8x5bWPVfg
- TLSH T12C22C0AF1E23D2371AE139893CAC545B97E6020A23D264D2C57CE8668FD9D3706741D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 b3c83456cfb492ed73efb6fb45a8b42e2daf3042d4c4417cf3528b7b59d75419
- MD5 1b28801f2fce0fd3d3f41b48609df2b6
- SHA1 50399c628831e7d3bf0b1053dcc36f613d3a41b4
- SHA512 0eeac5e73aeb8d64c64d87830834b53f6ba01faa3d6c9cbe5232f8959c3eaf5896c31eb614980247afe77935f66deda62e9cdcabe481ceaa17abb3c45d6dc3da
- SSDEEP 192:BkucirUGkF9KDxIxrPpmfpsf6KY1zedbrUSA9WC2yIP5IvuxiIHrhQMP7q:B7cPGjxIxrHKedbrUSA9WXPnhN17q
- TLSH T12722BFAF2F87B52CE4B07DDC47BB2622F8E7AB3C54592778B01C4B961A41642141B291
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 3156652e0eeb88235baa42005b8ff52391844c49618ae6a5c61559811e80d23b
- MD5 2f027bafcf808c780df274e256dcace7
- SHA1 643ff04b81fa3d6e8077e9bbb2fd5eaa87fec244
- SHA512 a46a139448816ae0e84d5d97ea879537c19f3c1ed066b90346710b6f9c1ced67577b40e96d719add32ccd415bc5eebc2362ebd3cdd3e9cef65e793b1879741c4
- SSDEEP 192:8fZYuvRr59Dsc1ItzZFonIhMH9tIJrHV7+QvcejE6uSeV++WfL3PduycIzBgbkE/:YZ1vszZFonI23aV7+ms6uSeV++WfL3lY
- TLSH T17C22AF058D71AFC4753160954868025AEACE8F1DFFADB12A1276938AF28706F14D3BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 f79f666fe75e2b095f15e8271e12ea6ed33562f95048e06594a23e010bc1a2b4
- MD5 efab936b22c0b2585185b88717676c72
- SHA1 49653c41cc85a04f0e5660335ec9c750dfd10a96
- SHA512 3423f3f2d01530377dc2f0a57d2bb2584fea8618b3815863a2f7acfaf0da509f1f646dc8a437c9e72833863c076eab9a6fef489a77b57aea830b33af4d19a158
- SSDEEP 192:j/JU2jisTyhn2upNyBUqvYECBtA1+9AwCpjJY60nytvEmAGn:ja2jijV9AYEOC1QAwCRJY64W
- TLSH T1E532CFF819FA7F238337975461DC42BB8584650462F660F70ADEA990CEF8377C1E6225
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 813B
- SHA256 2dc57bb400a73aadb6fdc00743a03bf1d71f6b853d0dd58bb8888f4c6c7745d3
- MD5 5dcca92116934f2daa831306d9ff7d00
- SHA1 73289f13798df8032a0fc75ca8e8b5226d14a6e1
- SHA512 41a6464d2de343c324aaf159d6c92768ea38c7419724980203daebf39f21b573aaa6b44660303bc62e620b0b05ff8d40c11fc9132c75c5d5ed844b282867a0ab
- TLSH T1B701869DBD19260C4848487F217E482F83C52B1650D9C29333A150BE3E2112ECF6662E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 7df0ad33c2c2bf23bb17c74cced108ea91505deecd6129c5c0318c61a8738407
- MD5 35325594ffc3dc9f94bec71ff731fc3e
- SHA1 ddb05214597999e384050556ac609c91f1e632ff
- SHA512 82e6a5af2059aeb47526c787d3c05a1956b15f57de40e063d172b0a42e4c0eec21349c982859f4cec07d9b3867092c960e094e7c9fdb3d4fc71154d8c55a935d
- TLSH T1E421F9A463EC1BBD9E78D23093F5CC52677BF51061453CAB0BE657DA326B7009DB500A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 60980bad69e9bbbf9d8b460b4dea1b0003884e9db8a6e14ac55f615a24fded48
- MD5 8cf8fcd1c181066e80fef3984972fa31
- SHA1 a5006151dac7f3629afd830ce09903511edea2bd
- SHA512 ede6ff252ab8eb7600c74e4f03d9fd39a8b0f01e71c609141fc06d8ce00f085baec90d8c389ef0fe5645c2afced2615c9dfa32897a17ef671a39627a1c654933
- TLSH T10521FBEDD23C109504D15BD0C021C58F42041566E79D5F91102B522E39BE71FFA8EA6F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 be535496c8c5dc159384f2c6f3fb180ad325f1f6bca50a9950d8c14bda5bd59e
- MD5 e3a5dd0b15eaedb28b56165a3af525a5
- SHA1 6b43b3796352fda61a392edecdc91d518476b8e5
- SHA512 5660e11257943c9c0098b91c1a48a572072479ea661b675a0b933beaaced1a05210ec38ea82dbb4f2ff627cc7b5781de732bdee551f039cc6e79c0c922dc9add
- TLSH T11B31C915122964E0E9E3F55F7ED4E5902864A002E6B94B0BA02E11B1D73423467B7298
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 fcad47796145c6a30fb940e604c5c8250a0e8844d4ae284e3b03709f928af656
- MD5 e7de3e05c379e72069aa0055869dcdfa
- SHA1 cf3b6fb540d8486e4e215a7de4c56a4c415b2877
- SHA512 d26b5e67cfd67001da321534fe16a31ad0b5f4a248cfd4ddd7db704919abaa385f73ed3dd7f2a587580ab872c0b1742c0ffc0b85985aabbd7141c778af2601f7
- TLSH T15831F890C801FA3B5FF618959EAC6A06532E0F4A2BEAF49238BA20A6194814644875A3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 7d0bc160df12bd538bae0d4a18d428cdb19299ee449b44c04934e62e5477e177
- MD5 2252189e12f248fe23c4ad4df635a769
- SHA1 25a9529c090df41efda8bbf465338ef4b9dc8610
- SHA512 dbdf190f3f77c8426b8929c96afaf518e633de55674741d5918d0b3a6a749e75ab6249386aa78dc5dcc11603e4613e4ea9b85cee981994a5a6c4393ca3cec1ff
- TLSH T1DB31FAA34219436261B95350F3DBA2C176C90F0468F4B20F0DEC9A19AC428D678EF40C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 56facfda4b4132d8bc807cd43aa806d52e703464fb8b7d953025fa76852a2e83
- MD5 5374454a059aff1201af6719dad2fbbf
- SHA1 b34e5d68308fa86c066d26d406e03962d31e89a3
- SHA512 3cde8cde5cd0917457af1d5afd39fefcf257fc929f52adbc6ee7f8f1620d3de9ab5ff5d3154f0f802878eb8b0c7a40a8ab995e8ae52930150fbb281ffda3b3a6
- TLSH T1D3312B6C0608CA94BDC831CE804202E0BE70D904763E24FBF91EC6AD240A6A64DA696E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 a465e3c43c59691d07511af1d063fad82dd7b75200379478d4079b4b20368773
- MD5 0e96335ecbd54dc7edd8b831f4f02a63
- SHA1 0e9f48568c6fc4458d5b0dd4852f0af03d2c05a7
- SHA512 64f606d5e11f7adf22a69e7784cd2754f5e7978926e63b696fd146671fdbe8478db155a6340381e84dca43b487296cbded70f48ce4a1528163820cb10f343690
- TLSH T1DE31194E672A992758529A312C0B780BE930CB52893BEB85D4548D2F5B49EE35350CCD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 0f6c4460cae0178d08257877c565367493c2e37416108b88e7307836baa5636d
- MD5 3c2bfb7f58edda9edb6ce2015f804d6f
- SHA1 ffab464eb5fe566341e8769e95dc82211e4ac862
- SHA512 7554df813705eef431349dc84cadadb49af3ce7ffe1d8f57dfa1e23528c4002279ce3067af44a75b59d202bdaa7fa8daa38acdd3985286a1aa9d347cd0e79922
- TLSH T1B8411B2B94B2BA7194427091CDB5B901DF9DC5C41DCDDC236728E995DF24A39023651B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 1KB
- SHA256 dabddfcf2aff2271b6e3448c0a2c70d4d8ea81634fbb35666c6236294b446548
- MD5 c52fc1a8db8792b0865907733541cfb6
- SHA1 c2d31c7b3f1af1ee90b1431f96f53c28ae9975d2
- SHA512 52ff2a90376fcc84ca48381b7cf8ee12bb53f0dfddab1714369d242215d78c6abdd63851c93aa1d6e281dccc13189d3b0a8f19e8116ef46463f5c13d02b678ce
- TLSH T1264118C41CE5945FCE285DBC3F5844648CD227F04863CDD25FEE664598F686965D0C24
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 15456573aa392ddeb78e78f450219f5a0ea1f6517a38201a754d54423cb1968d
- MD5 a7bd0e001dd46eef5e2cf59d69f2f919
- SHA1 c670965f801405a2a3ab04c5fcc91d51214ed222
- SHA512 b19c225573326d1d994dfaec8b3813b7526251f102d10981a8c49db6627a129369a6a3b0c8f93020ef7e5e744506f4d7745bdc9f27e0b27a6ee178db4f458e18
- TLSH T175413C7FD33FD9BBF5EB6242B6A705C31D011E8029B6288664CCA21BDE26870506212C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 f5cdac2014f60da8d5f527fc47136d60f7df5177cd75d1ef7aa46143cc2cef70
- MD5 d910e4ce62e658336c0bb3a39f824f4b
- SHA1 bf1d96ee82811eab86458d487daed7f70300fe27
- SHA512 d3c0a67ef39a62ae47670f224f8b5408b1ec4d48d4fe21981de49cf1985fa08798d0e526479bc12cdb6460206df72b378bafc7ef77ed5b4cb141a7088f74bc72
- TLSH T119411BAD80272523D7F4BFDA509F86444599E4FA34C809923094E8198F05B3A6DCBCD2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 384c94893f2ebe0a0771a6daeecfb024d2793cb3ca8db14763649b92ca4ba45b
- MD5 6af6cc9f0b17325e68fb9cb21e8c7b2d
- SHA1 ee7f728f1e765780c00b5e2f2feaf3bbb063b6c6
- SHA512 a61a5e2503829b2a92f04e5c6486f9f8fd84f209033dfa0c18d05a7e47668a025cd84994b3ecf21e3005ff974f74a50b51314e12a146d85b9554fa60c4ea1958
- TLSH T1C5413D05338707718D6DDDF1627E7C8D16614242F62F65A280D77BC93960678C0121F7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 0e4f8be648c582c8093c4aa1a52da06e7275353123179dd000138bdd1e7256c1
- MD5 7fd317e5f264065c76d7200884db15ea
- SHA1 37f2b242652ff9922298bdd9f55a94657f2c69af
- SHA512 918ac5da982b63ed8708673fc909f2c68c8f8b8b97812bcba34ee48181395670de99a07bbe763e5d022998f27aea3fc7c54df94a59c1b99734c117c27b6ff782
- TLSH T190413A5918457BBD62926E9A4A2E633CC652BB25B4E353D3603CC584A22878D10CEA11
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 a602623cfeef76ab02240807f53cf1d265f9de10459867c5df94beeb8af74527
- MD5 f5a5516526b7d25fdb5ab3023d44f8f9
- SHA1 1b28aad47c30abd3c1f41be884f81aae573748f3
- SHA512 e4f149496b4d136a22654d5476b359dcbe4fa469d3a4f86bc16791e20a0905e65458f89d0cc54bcba9d23454ec56fea07b589f8f6e657d15aea4085e56652488
- TLSH T1B5512AE69D66110AA813116360B7071A15A2EFE970B0CE4D72F0DB724376F46C07FBA8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 00aec6ee316e3286b9c8297077faaad07caa1b57e0a01b1c88a0b1b2f965a476
- MD5 b115c1092c3a4aee034e5acf75fb0322
- SHA1 a95f31da0df1785cf4a16ea78d95f5b6caeff07c
- SHA512 b6ff82f8897a05453687416884d21f3cc92dee26f7c6f17aba96f37f5db3ad584b76150f2330e23629de5e153543b907d8c9ed57f173699b183ad4cc0d864e6c
- TLSH T1C8517FB094E1AD851973445583559C2C1775BE51FCC601D28ADA36F854349ED4EC0101
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 ce04f0306412f08712ce38f8b2a48345bfa8ee25f3fc250eadb841afe1e63a6d
- MD5 a1b8818f29395d6bf9b7460e3d61251b
- SHA1 4ec13b86a2b19f459e9da0cd2674c02c648f2039
- SHA512 5710755199b4047e02c68d484433f7b0e60871fed63b73a60878edca9b86745fc85911e67dad2b139aeecd51d1d80d5c8ef6cb1f96a813c046d87a141104ad1a
- TLSH T177512964B825E0C7974429CCB8B55BC2DE53B8CF1FB2E1FDB0B0D26061A2581A4A242E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 2KB
- SHA256 c80d283c9b0ad095b074eeaacd5e658a5465e8aadbdcbb8a0bec466cd2a5f2ed
- MD5 ed8a9c81bf8191c3c8b2a5068325311b
- SHA1 5d882ddbbd0a0aa39844bdd6423a56e957c0ba9f
- SHA512 55bfe819d2f650c39dec3cb9eac179b14360b65a6841ba0f7e553dd8378d2f695f9b3213ef895d4f72d3fb3c7e209729846a2c786d4e235493c1574861a751a6
- TLSH T18D515ECD815E90E3822578DC86AB3DF19ACD334CCDF961186EB19F8C48D506876975D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 7KB
- SHA256 a2c51fb50b609f246995587d4bdd4eff6c6b855b5cca41dd6c0fdc830075f231
- MD5 5947f09aac1973e4ad79155392d96510
- SHA1 8d360e565e7a94050852e1ba1ebaaa2c2d151bb7
- SHA512 5fc8243bf216025cd05dad4d09636b98dd6fdd8c076a550725ff9d33b16445c0e27286ecc356f7905e0396331ee6de0863c65868caa0a2c717922d69a000a816
- SSDEEP 192:pu3U9Eh/3PVZxr+brwntDjPsJ/7M543OAtJSKXX27v:s0SvPVPoq9jUo437qKnk
- TLSH T140F1AF45598E40654EE8304EF8726ED7EB334A45F783B73A4232D6C2DABD592C123822
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 b925196b94596c3f3c71d3e6f3ff5d07ace043325050e46d2e932fedfd45655c
- MD5 58cad537ae3f657c4ebc5432b297a68c
- SHA1 22a36a176659110f43f1effec867509e7ea1d456
- SHA512 7397c58656bce8bff4e47c22425727f9913cdb668575e5347ddb40722cc2753365f981f839a057c0bd300126e7d370bf7b9e78a99baf1f59e7018d937776f633
- SSDEEP 192:rN5p5bv4xHJapdz8tW5w3r9RbpJq5tZvDQKIjteKb4iqhB7VBAmy+q:r77kxpaHzyW5w3r9Rbp+9Ijr4iqhptfq
- TLSH T12D02AF123692EDF40516E7C778B0984137AD0C195FEDD734A9A79192A8C3CC8E9CA732
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 ee7e07c6c4b150e052e4f35e16327950b8c4f72ec3a1b9c0fae75f0071a15e13
- MD5 8e5420bb02b4f63d20c7af781080fa82
- SHA1 4dbf73d0a5cc47d5ca74b986e48fc23ef44fe06e
- SHA512 d5b727d1462cf17ee232edac495efb6f575fdaf897295b0518f9a8717dd099bf690877fdd2f3a0a8513af298070d71df0fe50424419732f1292c01e545a5a330
- SSDEEP 192:WZ9qmAbnMfR1vaZNgCHIdsTzswzRuh8AYDt1Zw5lbQKfLz/xEKryo:WZ04frMIdsTYwNdnF0Lbryo
- TLSH T18202AF302AAD63B7944CC840AE8B76AB7445DBE0879F6D7923DC3CADB1137D6C8C1590
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 9e77b3f39bd295050366c3862566d3d6f1171e633423dcfa82eab9dc02f02e72
- MD5 bb4414ad894e79d46b820702905c0b9f
- SHA1 7aba191987dfd004adfdeac80377ab6e0f27caf4
- SHA512 728c48fd5c436da6325531e83a13c43a14a57305e37b48205cdf1416e6eb4fd6e2efb99e948b4b621037f72c798dbdde102f68291b4ad379cb39f484e441f8f1
- SSDEEP 192:KMzxy1yfdaIwFkFcT7oR32hZcMFVRTViq6MpqKoa+fCUUmYfoNgaqtsFz6Bzy:Koxy1Odh5FMoITXFZitMpqKoNfCUUCoG
- TLSH T19322BFFC060A37619E17E30FCE07EE2B01179F27A5CE4D6514E7A27675368AA18C700A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 11KB
- SHA256 370350fd0698148e761d260745691b75fe3a858f8bed10959e3968bc43df1a86
- MD5 0777a5433ee91b1231a36434354799f1
- SHA1 42b4c0151636b4fa5a46da0b1ed907d5fa22fe9b
- SHA512 8c048859f8cc9ac08c9d4a8d6d6a169d4cf6cd4577b7402405bb3f54a0dc6bffa59c144896bcce94438e7bdd6dff8dbe6089ae12e2353358c1b53b2c8163f5f5
- SSDEEP 192:PBr5MZr7HNSgYuStBvpt1P0z2YnKwOpSLoTQc4dNo59fYuh5BABYGbX74CoaQC:pF6NpY7ptWz2tJTL4ds99vABYGbX7loY
- TLSH T1F932B0DD7C29E247D99D26F4E6055C9FC34711D0A9EA9E230DA8B90EC1927CDCD123A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 989B
- SHA256 1edb0b5e366159e30edd994b0b5fa755f7c2183383fa11bebb8db234245d986f
- MD5 79b1a117793846430d6748d8f9377763
- SHA1 08dfb7a6438369e63ec2fb4ec540c2ba6d6d0754
- SHA512 43f24f2b6fc7062e76751b65571c27fce6fa3ddb8abf92204319e225f31705faa8d5283e9ebd5704fb618871f5c1dc64edb1e7f8fd90a09c24d9991757850c34
- TLSH T1091108B484A2410049EA98A0A13A090E00F70F0BD5BBDB3F1402674A9D311E9C4AC847
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 33364377fe553d974b0433fcf18beec3e83c3288f0e6e0e43f5a53da3e1b005b
- MD5 02858c111244f146af21a1dc83d7e5ff
- SHA1 cbcd19c914f966ad777490af9b3c39de969447eb
- SHA512 31465b2790093337ac6a6b6cf2e48411e13472b750dfca3d7f7d1f76c9d0c5acf1f281613d6160325cddfe3208fffa3c0969b1101ac50ee117799bf8075395f4
- SSDEEP 192:udZNKvVCRcXeasjoY1XBaPErfp3vyZwei9ftne5AMm:7MKeaah7XrBfyZwR9VnTd
- TLSH T17802BF8243B11DD4273129B57A7AB18AFDD152033A6C43A7F8DAB8DC86F41E5174B374
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 e65ab9c6206e7a836cb6f77013cad4de0f291d51a1f9ed1f67e0dd7137c3b732
- MD5 5b99a7604a476988e3e0f746d007e7bc
- SHA1 1a95ef1a35b7dd76a48f3b2931dab341288ef003
- SHA512 9d4f90468ea7341a7870d5cb9512c93b1bf67454e0d305b2a3216e7299898889d317ba856f6be88295e97aeff3e7328f2c7d433693c8bc725620b1f15613fc6d
- SSDEEP 192:AkXujzQ+Dehsj3ETR0ztzcYAHO+a9pkfwp1UzI4ETVY:AH1e2EStwlHi2KUs4WVY
- TLSH T14902BFB1815E9BC680F0F92525F63715C6562937D924AE2734E294327FD421072E97B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 11KB
- SHA256 a282b067ba146da803901d1855fc7facca76e0746cfb9c8d0dbcabe8eb3d4b58
- MD5 a9df04df7a40de0afb94dc98e818d553
- SHA1 f9544db71f8a8166988ea26d3f960dba0a40eaa3
- SHA512 03f33a15cdb4ec3e15a7815306b3678010efcd219ba53e4cad7f52832fb2af3dd18532ebd30835cec94e8dd287a3c43c0237bf8af988525e7fea9006dd068ac6
- SSDEEP 192:nE/1/0NnT0G1LWhRhS24qc5n/iwf6KAHr0mZLv49jWcEfil5Y/pXV7VYFGYflFa3:E/1/0lAGmsNqw7ccYt85aNVeauO
- TLSH T18932CF238FB49B981B178DD5D615F1A7D9B2EDB4349CF34EFA01B40E83A1956258A804
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 11KB
- SHA256 7b2e88b76fca6647b6c6019a4f450974580aed9cdfaf7bb43f3a4a6010555d3f
- MD5 28aee4339c07438557c10b99a7a6c53e
- SHA1 f7ad72b2da32d42e56357b5e06e3c4692544e190
- SHA512 9497d58e195476239b313ddc8212aaabc4f56f6bd3512b869952113eab74e84e84c092ddb05ad1dfac9eaa7639cde4c682d23c2a1f3086f944e20f3236cb426e
- SSDEEP 192:jV9HwKHEZ5XN9Sx7XSWlj/QFfxH1llQglCsuFgficGMJwGmy2VwZXvoIPxcjQcZ7:vHwKcXmxLlDQLVXXCs5DKLy3voocZ7
- TLSH T17332C0746DA13DB6C4348421EC112D40AEA5D1F82CDB6464D1E4F634A7E64F6BD8B0DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 535dcea567ac06fa04f98aac2d586fa05238cd6d8f847862832a06bdd5c40aff
- MD5 da2d8d87e0ed9d37d62f0d40ce056c98
- SHA1 134b9c34e0eeef74384138e5bdf8fa19ec5e8033
- SHA512 7b48dfce751dafddc79ad689201d92a016096c854cbccb86b8393ad3ef0e26376799c10308a9135cc6bf7b92193acf39216ea50ba0c5eb9978fff7ac3ec60234
- SSDEEP 192:dVA/3TNcacPPqLVJDtpyfN5nVNC1cxCEr1xNkwCSqPRE:jAfTaoZyRNfsEr1x6lSERE
- TLSH T1EB029DDAE916E17F08B02BECBE1B64C8D05154DA5329EAF603C71A59105D19842B7A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 8KB
- SHA256 f5c39c96852a3cbeb9490678b830afe79dbadcc22505d2505c85774b39950111
- MD5 1b37a5e25c3caec7e0fbdb505fa4be51
- SHA1 88a9545c55780a1bddf93c66127e44f5804cf260
- SHA512 5ab39b27c2642301e2bc639064f452642455a32d6c6a14090265ef6c7e0dcfcd5ee5a112991d6f429057c7f5df9e23784d69edd380400984b30ad1111c54c861
- SSDEEP 192:W1d1BnJD23X6VBCi3hXNqsXUTfr1FCLhbOjhR+Xv:W1dJiH6Vwi3hdqsETxFCL8jhREv
- TLSH T1CA02AE98231AFE426A5C006961BAEA15B3D346F069C1E65DBCFF43F3D07B121293753A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 542bd2cfe1bcc4e07fd3ec239de60a6adae2f2e2cda322b5ef150fc850b24f21
- MD5 9e85a07928f739a39ee99de386962eda
- SHA1 ea418379ef7af4306275b27e2867b34a1fd196b7
- SHA512 ea548410dd528a1b5e2da98ea4e3a3dfa72225a1ae6d7f554466d403434e16b473729cbdb22884158ce20a137631ac13b44fc03ddbc0e732aa84f9236279e866
- SSDEEP 192:OD/8bdKmlVrFdCNGCxrjaSmaeS0bZ8xXKmadN2oNRc6bUo5vlVERaeX97rYQpnV:Oz85K0rFYNvYaeBHmadcQc6bFv8QuFpV
- TLSH T11332C051886A6C07BFB676007AA073413D39CE37A0F646982DFED89CB2D6DC764D42C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 9KB
- SHA256 4dcdbfec7e9ee4892d8b83e1e7dbe78a52f7a838cd4b9ecf8b568d9832f224b3
- MD5 bd0a85b5653c5826adfaa598c699e1c3
- SHA1 1b402d1bbbf761da9857888d91984b14eb6cd627
- SHA512 45e70a6bcb33ea4d5a910cfbd214004f1f9fe89590ec2f7c9e7c58aabaa917ed7f2a880b28cfceb7f478d9a6343274515fc6aaadb848c22477209f93865edb77
- SSDEEP 192:jsVFIe3L1vVaORaCqd5RMXVLWQx5bMjW7opRE7BxRznLv6An6:wfIG5NaY4LRoLN7bv7J/JLv6A6
- TLSH T1F722BF3B4F1D7206422A0454F32B4A9905B3EEB20D227B1B17253642F15BA8D03D81EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw
- Size 10KB
- SHA256 6f763508ac5240caf53f13189c6aeeca9ee079f20f521e18212fd3dcb8f00a60
- MD5 2a1a35860d872e85e6734f7759e5a07a
- SHA1 54ceff0fd9dd05b5d7b1e19cacad47d6a2b8838c
- SHA512 76d6a23426ba2505c0680d73624ab761e8517abb0bbd06461cb56721007d2dcd23aecd63fe7e34928bac3ae0f025af3f7d4b14add0766e981b60f788c2306a5b
- SSDEEP 192:xmJoYwpoBBxBKpy1XxlcwNk7T25N4ZZsI7Yt0oC4JBN:wJvzf+qB6wkT25esI7Po7n
- TLSH T12022AF21758531C5DAB12E41901EB5C8005CCE137979EFDCEEF9DA2F5E1430495BACE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9f32a91-e203-4ee6-9690-c833dd8428cf.raw~RFe59f5d0.TMP
- Size 461B
- SHA256 b9be42ec190eb18cdcb93e86cab567fca1e1e50cd4f96378a78a0f8ff14f214b
- MD5 2332f1c98641179bfff99b15ac2de9c0
- SHA1 6daf08720da44a37c19361103715cd7185fd8075
- SHA512 f33bcf70d9d45a4f5c834b7e1a0130201311a9ca682183da2eebb1f8cd40083cc019089d541b0eb1bd9a26f48532689580aec198723e50b012d99caa668c9f13
- TLSH T102F023FC782CDC6A38605C2B8A520B099A3D6D55FF2BC1006EBF9890647D9F90CFD204
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 418B
- SHA256 8bc86490cdb7f1448c5c5ddbd4835e166808402afaf688a6b14be33194f21098
- MD5 0affc2758937e5113a4b86ce6db69cc6
- SHA1 f602af9f4f28620fd784ad505d333cf78f6c7a86
- SHA512 7f3ca504644688a0ead95bf213c17a1a5f3496f6b255bc275fe5c868cac90a9f97c35fc228041387d3e1cd32177defbef4fda5469a7cdae1443bd94580901585
- TLSH T13CE0AB40F8B9975368B8BBE531A87A51C2AF0854D68017B148ED600D527860D560C211
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 516B
- SHA256 ed05b0c6bddf0fda83913c6048e6eba581f22b0746ecbcf22ad1e2b69bc5ebc1
- MD5 280306c76bb100fc6d73d13e19bc2c92
- SHA1 7e34482047a5ec010e144f3bc7a70dcafb49ee8e
- SHA512 6d4ecf23d0f327f2766544c2fa1b2f99177953374be77d97af41b820e459dca59e5c0f1324f8cfc77b0423ef7b0795f14c42249071321842e31ccc4dc30e66eb
- TLSH T10AF05901B8A6A75664B8EAE9B2A83EA285BE09A1C4811AF544FD601952B921E070D722
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 1KB
- SHA256 a6848f2c706ecb27b111d4441340c4aaea9ecea6dfa888a4e7d8935881353dbc
- MD5 71dddc357efe2d7e55ed0172ec9a487d
- SHA1 ae9fd7933f22bb1641486106eb83dbee4592b65c
- SHA512 d82308c903a320931534443ada02aadd91ca1e2f60cff37ebe13848e045dfdaf516c80abe57ff354633a356dd50355ba3fe2af9fc1d3dfcaab6933f8e3739bbd
- TLSH T14B21E141EC91AA722FF9C7BA72E03A13877FC092A10555F214EF400D17EEAAD450A316
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 1KB
- SHA256 8ac5acc4628f7477e4b636cd574c84c5b36500eda67455d6d16613506399a59e
- MD5 9bd8f7cb8264f16bdbe995701dfbd2d1
- SHA1 e75394c4142389b37cf801c703083dedf0d6d2b1
- SHA512 4f5d1f1036c02a55fdd9536098ebf6420791c039961fa95bbf9bd77962f31e5eb7139789627f00866338bf678c993319e461c5928815e96f87fc3289c755d982
- TLSH T1A8310004DC9299766FB58BBA62B53F135F7EC093B10565E624EF000E1BEE6AA0507207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 6010942998843d16500a992c18e3cd162ae8b63e8bddc69dcb5d3a55f040e900
- MD5 236e5b22baa4ebda4d56bf4ec30ce063
- SHA1 98a81a3ca1cdc3af65419e0e86ce1a2380bba64f
- SHA512 11af535244f183c344decc72d6cfeac2012958da83f45c55f2aabd420b5698b8babecc7eba8736b3f77129ffa731e03ad8eab0d353770cfbce8bd666d8a6d885
- TLSH T112413600E8915A726EA58BAFA3A13F134F7E80D3B10165E624EF400E1BEE5A94607303
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 c2369e931fd0503a21824d6bd0edde3cdd96b85ff5007cbb62efc65dc8bb5053
- MD5 f6332edbc4cbc2e544d851e19ab0b223
- SHA1 0f87f3c8c8ee6a02e7e4bbeb4d13df922d5552aa
- SHA512 bb0ca61bf4081c5e09e079ff36746b8109e3a6e054185d596b9e56d609145f0173b9e2a2e374bbeb3cf8448fc71ad458202909a5b663136d35fdc5c754128b05
- TLSH T184414640EC515B726EA9CBAFA3A13F134B7E8093B10575E220EF410E1BEA5A90607307
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 a03374567801bbdb182d5885b72af3acd6d9e2695702666f0e50d6ea19948405
- MD5 d4221706d6d0f9457d68757296ba5068
- SHA1 e727b1a563eb935350accae0007472307818f7b4
- SHA512 83e74cc063032ff90450bfe5e304420355b726fb79925007a2be049bf2e482946ceaf522f5db2b9f2f5bf01fa26cf8520a6eb9c1d31d3a7761c3cf1a15c592ff
- TLSH T194413540EC516A766EA58BAFE3E23F134B7E8093710565E520EF410E1BEA5EA0607307
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 82b2a1b46a383ef305df5a3c069e63a354c68b877f19df3e0263b90ca2f75ab8
- MD5 5e6859a30b9ced5d6845be0962f2cfa0
- SHA1 3cbc4cc01293b82268834417e5aa0f07589e6278
- SHA512 0b69c402ce1ed0d2229e3c2351bac65133a32d9ec4fb58147023be190f8026399a9cab1a3d364ab5d9432944c49302c7b1d7aae3200b32d84482096caf03dd31
- TLSH T18D412740EC516A766EA9CBAFE3E13F134B7E8093710565E125FF410E17EA5AA0607307
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 6adaf2c64c1c5888b6ae855badc1f15230d78991eb455f6de1f023ecb9dce029
- MD5 c829dbf9ab587555c072279b37235cdd
- SHA1 9aa5ee00a5d3a232e36c132378ebb3bf0e668a7a
- SHA512 26d0c22b6495128770a473ab9ffd5f6d898654794705f726316c318ce03806ce2c2f31eb4511c82b82fc421b752bfbd2cdab9bdf5b9d8e0c227bc8bf72b9841a
- TLSH T174411540EC516A766EB9CBAFE7E13F138B7E8093710565E124FF410E16EE6AA0607207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 a8105731e009a47f56fe84753a83198f1e3f9c94fa7411f0102103dc4656edc9
- MD5 c67cd45335e128b9006252fdb172c911
- SHA1 43d0cdc4daefc2b5961cc2bfbe8901fc3a9b7487
- SHA512 b34cba7357c2aaf25c1e78a9a7750dcc282a9c23e6ff69e251551de26df419d6a11de8e8d67ca7fd688a52992952a46262930a6878dfeba26c7d534d560a1c23
- TLSH T10F411540EC516A736E69C7AFE7E13F128B7E8093711565E114FF410E16EA6AA0607207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 2KB
- SHA256 d73f0c53866c56e4f9a8fd763491659ae7a3a4a3515ac8e3bb2e4320adc42f02
- MD5 133bb20d1855b43fb46692e95052c8ea
- SHA1 38b94895311863caaa3a6481eb98811704efdd24
- SHA512 9b65caf4aba4d4e6eb5ae94a0281c0f8caf01a54e712fb9b5fb9f8549f2d5aea06fa69b12a735f3cc83b4d611ca46fc72acb25513cf2dcdd80d1fccfadbb2a8f
- TLSH T125512640EC556A736EA9CBAFE7E13F128B7E8093711565E120FF410E16EE6AA0607207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440
- Size 579B
- SHA256 0c2a4a0fdc137b1febd42aebb3b91eadf1891c53a32f6ea525ce36775f3f9d75
- MD5 300e6aaa71d3b830f18031a30f3bff1e
- SHA1 e741dfe1922a88aef41c6b29c1825f8ba12e0d4b
- SHA512 140370128f116b422833fadaa3b85ed474d718257de1ea4a4e0862400f02b9d9059fe9246b3fe3fe2f39ce4369e4292420703ab872f3a283bd36dbc85377b35b
- TLSH T10DF08142B855D752B5F4A7F972A87E97827F4565C5811AB144FD201D41BD21D070D212
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.0.65003440~RFe5a01c6.TMP
- Size 357B
- SHA256 a7e1d6d8158fa8bcfe339feb272e7211124bc3ee94bfac0c894fe8494b35f111
- MD5 c9dfdda50fc218bca9ac72360897f65a
- SHA1 bc604d89e5c3f3e5757f16107911593069d6b071
- SHA512 306660ce06ca7cb64c0165e3dd61bcb25b9d08874ad8ea51db98f05594933bce22ff1bdb26408221107da2bc466d2760f43fa850117a1f53b601f8187a7ffb27
- TLSH T1C6E0C082FC148115E8886FF232F9F551C3DE45C0D54416B10CDD604F829420D490C320
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.1.536574415
- Size 224B
- SHA256 37b6abd69dc7a178dc68748caa87a0edbdbb83fccdcf465bf9f566addb815295
- MD5 ba2daf899b6d6b25da14fc8b7ea38013
- SHA1 d52ca1464f0b1fffdab1a4c9e53be1552de212fb
- SHA512 b53d04a809e53add89db085f13aa3b7072dbceda7a386a7cc3a7b046caf305318b61268989426700646fc77275ba635b9f8d4fbc64d8ca9b54c5ad5a5ad08298
- TLSH T10ED0237576C41545DCC515BDF554BF137CE65C505C53927600FD26DC01164687735F30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.1.536574415
- Size 224B
- SHA256 e416be31b4cf741e846fb7f3c88235ce1e24da4414ed4b7fb3652073f130a447
- MD5 4cb6db255febcd26c516671ad92364af
- SHA1 c6b190134a13774594e40dd4f0f452e17eb1ed25
- SHA512 eaeb8d09cde23122d4bc7407cea37e68cb5dbfec33cce5a86f482a978ef61f6a32f505bfc11f82959362a140acce45f54d0288e651e59835fb05552fa93d8f46
- TLSH T123D0233975C115455C4D7D3BF4546B332CDB50145C1773B600FD3DDC111756D6565930
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.1.536574415
- Size 200B
- SHA256 5b93093688e9659608d01b01aef927ac8f998990a0b834d87330406701a803ad
- MD5 84cef658648cd7fa5b4bc96ad92aea37
- SHA1 3607fbcf43ec32f7bbab66730289d6e21b55828d
- SHA512 f5f16a768cd3b45526d2cf051d216c15e115431e3858eb14d9ffaca6cea9df9750368609d6d6d4ec05d0c88cecde808cfd3491ef98dbf1db8aa05ef274f27e49
- TLSH T17AD022BAB2C034A48E81197EF004EB31388A44A09C4623A202B806BD41AA0E5AA1AA20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.1.536574415
- Size 224B
- SHA256 ea85e4260a5723fd8a8bd930f148942dbfbf709e1b1d58ed6310e8016a0bdfbc
- MD5 25af3407274a6c141466be066a06cc2f
- SHA1 fba7a6bb4c37a9478503951ed11a969180b3138d
- SHA512 2aabd3623e515a3c579ae1f51615fc933daa8f7ccabb8a0e13ffff0b826d335276f4e53a08fdc437f6d1826a347a0fcb6d8b3feb71df6c986c5d675c04941f52
- TLSH T177D0236572C015599D8579FBF159B7236CF754902C42136100FC17EC51278696575E30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6428.1.536574415~RFe5a02c0.TMP
- Size 171B
- SHA256 35e99a4128a1dce9d3082b150fd39fc58d10a5e88a2deb87bf843e0f3cc41a1a
- MD5 8f16c555cf074b33c15e2ba410c616a3
- SHA1 4ea3f70e11df564f3dd996a52fe3e1e9a08269a4
- SHA512 f64232674f0eecdaa7fa0a16be29c6407ceb67f87fb59952b25d2bd4b18b0464d29e70216da0988a947e34630f419539e4504df90116e6209ecd94cf65bbd239
- TLSH T12EC0805975D065550C45757EF0547D7335AB10101883914104750EDD111597C6535730
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP