bd1f1619f850be8c84ae0acdd0bb7ff3d88b8cb5647877c078d7805d7a55582f

Analysis

max time kernel
63s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 22:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ByteBreaker V1_83236836.exe
Size 756KB
Sample261104-2qfwjsdz2w
SHA256 bd1f1619f850be8c84ae0acdd0bb7ff3d88b8cb5647877c078d7805d7a55582f
MD5 280603b04aeadbb0d42f6043354923cd
SHA1 932e7cce8f6cde321f2288ccaaeb8ae5d84ab26d
SHA512 d533f6e2ab5e344135d300a418aa337a9282c5e59698838a9ce940cea92c76e82b10f238afe9464991923e5ca2fb3117794589c5b42b0ead2f0aeac23cedb16c
SSDEEP 12288:+p0GRlotsaT7ndqumblBUWgWlNMO5+XCTeGYaofXw/H3lkB+r5owVWq3Kgndor4q:6lydJ2J4Y/CVb0n3mmp7w
TLSH
T1A9F48E36B6AC41F9D173E179C9960506F7F27846133196DB43A08AAA5F2B6F41F3F220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence ransomware spyware stealer trojan

Malware Config

Signatures

Downloads MZ/PE file 5 IoCs

flow	pid	Process
30	3584	installer.exe
19	5736	ByteBreaker V1_83236836.exe
32	5736	ByteBreaker V1_83236836.exe
36	5736	ByteBreaker V1_83236836.exe
59	5736	ByteBreaker V1_83236836.exe

Executes dropped EXE 24 IoCs

pid	Process
2532	OperaGX_83236836.exe
3584	installer.exe
2572	installer.exe
5964	installer.exe
3484	installer.exe
6044	installer.exe
5468	GLY93DA.tmp.exe
1688	ADRD2F7.tmp.exe
4868	Glory.exe
2188	Glory.exe
4708	AdReject.exe
5248	AdReject.exe
1052	Glory.exe
5504	AdReject.exe
4128	AdReject.exe
2700	Glory.exe
3480	AdReject.exe
5648	AdReject.exe
204	WinDivert64.sys
3168	AIChat_83236836.exe
4620	Opera_GX_assistant_138.0.6044.65_Setup.exe_sfx.exe
4692	assistant_installer.exe
5388	assistant_installer.exe
1340	aichat.exe

Loads dropped DLL 15 IoCs

pid	Process
2188	Glory.exe
5248	AdReject.exe
4128	AdReject.exe
2700	Glory.exe
5648	AdReject.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe
4692	assistant_installer.exe
4692	assistant_installer.exe
5388	assistant_installer.exe
5388	assistant_installer.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Writes a Windows system DLL name to a user directory 2 TTPs 1 IoCs

A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

defense_evasion

DLL Search Order Hijacking

T1574.001

Match Legitimate Name or Location

T1036.005

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\dbghelp.dll	Opera_GX_assistant_138.0.6044.65_Setup.exe_sfx.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	aichat.exe

Enumerates connected drives 3 TTPs 4 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\E:	installer.exe
File opened (read-only)	\??\F:	installer.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 24 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\AdReject\licenses\miniz-LICENSE.txt.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\WinDivert.dll.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\installed-release.manifest.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\Glory\Glory.exe.setup-new	GLY93DA.tmp.exe
File opened for modification	C:\Program Files\Glory\hgsdk.dll.setup-new	GLY93DA.tmp.exe
File created	C:\Program Files\Glory\hgsdk.dll.setup-new	GLY93DA.tmp.exe
File created	C:\Program Files\AdReject\licenses\WinDivert-LICENSE.txt.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\lists\allowlist.txt.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\WinDivert64.sys.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\installed-release.manifest.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\licenses\miniz-LICENSE.txt.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\licenses\WinDivert-LICENSE.txt.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\lists\allowlist.txt.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\lists\blocklist.txt.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\WinDivert.dll.setup-new	ADRD2F7.tmp.exe
File created	C:\Program Files\AdReject\WinDivert64.sys.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\Glory\sciter.dll.setup-new	GLY93DA.tmp.exe
File created	C:\Program Files\Glory\sciter.dll.setup-new	GLY93DA.tmp.exe
File created	C:\Program Files\Glory\installed-release.manifest.setup-new	GLY93DA.tmp.exe
File opened for modification	C:\Program Files\AdReject\AdReject.exe.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\AdReject\lists\blocklist.txt.setup-new	ADRD2F7.tmp.exe
File opened for modification	C:\Program Files\Glory\Glory.exe.setup-new	GLY93DA.tmp.exe
File opened for modification	C:\Program Files\Glory\installed-release.manifest.setup-new	GLY93DA.tmp.exe
File created	C:\Program Files\AdReject\AdReject.exe.setup-new	ADRD2F7.tmp.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
3948	sc.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3048	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Glory.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	AdReject.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Glory.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Glory.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	AIChat_83236836.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	installer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	GLY93DA.tmp.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ADRD2F7.tmp.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Glory.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	AdReject.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ByteBreaker V1_83236836.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	GLY93DA.tmp.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ByteBreaker V1_83236836.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	installer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	AIChat_83236836.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ADRD2F7.tmp.exe

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaGX_83236836.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AIChat_83236836.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Opera_GX_assistant_138.0.6044.65_Setup.exe_sfx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6968	opera.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\hgsdk\CurrentVersion\B7F0E3FA-E812-4CE3-A5EA-174B209C1C22 = "3943839e3ecc4753a7e0c8a8d4acf0c7"	Glory.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\hgsdk\CurrentVersion\B1B23168-E827-4FBF-B58D-47ECF602EFD6 = "1"	Glory.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\hgsdk\CurrentVersion	Glory.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE	Glory.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\hgsdk	Glory.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\hgsdk\CurrentVersion	Glory.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\OperaGXStable	ByteBreaker V1_83236836.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\OperaStable	ByteBreaker V1_83236836.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\OperaStable	ByteBreaker V1_83236836.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\OperaGXStable	ByteBreaker V1_83236836.exe

Modifies system certificate store 2 TTPs 6 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 19000000010000001000000011a2b3490cb6c379a89e76c3569452d7030000000100000014000000c3197c3924e654af1bc4ab20957ae2c30e13026a1d0000000100000010000000aa0f958845d6cf47c0442d3960f923a414000000010000001400000082d1857330e73504d38e0292fbe5a4d1c421e8cd6200000001000000200000003417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc6509000000010000004c000000304a06082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703080b0000000100000052000000530053004c002e0063006f006d00200052006f006f0074002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900200045004300430000000f00000001000000200000000cf408e20830ac839f2a12143ce4b3e53ac6a27b2338a504f200fa3a154c4fd82000000001000000910200003082028d30820214a003020102020875e6dfcbc1685ba8300a06082a8648ce3d040302307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f7269747920454343301e170d3136303231323138313430335a170d3431303231323138313430335a307c310b3009060355040613025553310e300c06035504080c0554657861733110300e06035504070c07486f7573746f6e31183016060355040a0c0f53534c20436f72706f726174696f6e3131302f06035504030c2853534c2e636f6d20526f6f742043657274696669636174696f6e20417574686f72697479204543433076301006072a8648ce3d020106052b8104002203620004456ea950c4a623369e5f288d17cb9622643fdc7a8e1dcc08b3a27124ba8e49b9041b479658ab2d95c8ed9e0835c827eb898c5358eb628afef05b0f6b315263413b89cdececb68d19d33407dcbbc6067fc24595eccb7fa823e009e981faf347d3a3633061301d0603551d0e0416041482d1857330e73504d38e0292fbe5a4d1c421e8cd300f0603551d130101ff040530030101ff301f0603551d2304183016801482d1857330e73504d38e0292fbe5a4d1c421e8cd300e0603551d0f0101ff040403020186300a06082a8648ce3d040302036700306402306fe7eb5911a460cf61b0967bed05f92f1391dcede5fc506b114646b31c210062bbbec3e7e8cd0799f90d0b5d723ec4aa02301fbcba0be23024fb7c6d80550a993e800d33e566a3b3a3bba5d58b8f092ca65d7ee2f00708686dd27c696e5fdfe56a65	GLY93DA.tmp.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A	ADRD2F7.tmp.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 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	ADRD2F7.tmp.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 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	ADRD2F7.tmp.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A	GLY93DA.tmp.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\C3197C3924E654AF1BC4AB20957AE2C30E13026A\Blob = 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	GLY93DA.tmp.exe

Opens file in notepad (likely ransom note) 11 IoCs

ransomware

pid	Process
6128	NOTEPAD.EXE
8160	NOTEPAD.EXE
5660	NOTEPAD.EXE
8212	NOTEPAD.EXE
8776	NOTEPAD.EXE
6384	NOTEPAD.EXE
4348	NOTEPAD.EXE
8700	NOTEPAD.EXE
5132	NOTEPAD.EXE
10248	NOTEPAD.EXE
11056	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
3048	powershell.exe
3048	powershell.exe
3048	powershell.exe
3168	AIChat_83236836.exe
3168	AIChat_83236836.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
812	Process not Found
812	Process not Found
812	Process not Found

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3048	powershell.exe
Token: SeIncreaseQuotaPrivilege	3048	powershell.exe
Token: SeSecurityPrivilege	3048	powershell.exe
Token: SeTakeOwnershipPrivilege	3048	powershell.exe
Token: SeLoadDriverPrivilege	3048	powershell.exe
Token: SeSystemProfilePrivilege	3048	powershell.exe
Token: SeSystemtimePrivilege	3048	powershell.exe
Token: SeProfSingleProcessPrivilege	3048	powershell.exe
Token: SeIncBasePriorityPrivilege	3048	powershell.exe
Token: SeCreatePagefilePrivilege	3048	powershell.exe
Token: SeBackupPrivilege	3048	powershell.exe
Token: SeRestorePrivilege	3048	powershell.exe
Token: SeShutdownPrivilege	3048	powershell.exe
Token: SeDebugPrivilege	3048	powershell.exe
Token: SeSystemEnvironmentPrivilege	3048	powershell.exe
Token: SeRemoteShutdownPrivilege	3048	powershell.exe
Token: SeUndockPrivilege	3048	powershell.exe
Token: SeManageVolumePrivilege	3048	powershell.exe
Token: 33	3048	powershell.exe
Token: 34	3048	powershell.exe
Token: 35	3048	powershell.exe
Token: 36	3048	powershell.exe
Token: SeIncreaseQuotaPrivilege	3048	powershell.exe
Token: SeSecurityPrivilege	3048	powershell.exe
Token: SeTakeOwnershipPrivilege	3048	powershell.exe
Token: SeLoadDriverPrivilege	3048	powershell.exe
Token: SeSystemProfilePrivilege	3048	powershell.exe
Token: SeSystemtimePrivilege	3048	powershell.exe
Token: SeProfSingleProcessPrivilege	3048	powershell.exe
Token: SeIncBasePriorityPrivilege	3048	powershell.exe
Token: SeCreatePagefilePrivilege	3048	powershell.exe
Token: SeBackupPrivilege	3048	powershell.exe
Token: SeRestorePrivilege	3048	powershell.exe
Token: SeShutdownPrivilege	3048	powershell.exe
Token: SeDebugPrivilege	3048	powershell.exe
Token: SeSystemEnvironmentPrivilege	3048	powershell.exe
Token: SeRemoteShutdownPrivilege	3048	powershell.exe
Token: SeUndockPrivilege	3048	powershell.exe
Token: SeManageVolumePrivilege	3048	powershell.exe
Token: 33	3048	powershell.exe
Token: 34	3048	powershell.exe
Token: 35	3048	powershell.exe
Token: 36	3048	powershell.exe
Token: SeIncreaseQuotaPrivilege	3048	powershell.exe
Token: SeSecurityPrivilege	3048	powershell.exe
Token: SeTakeOwnershipPrivilege	3048	powershell.exe
Token: SeLoadDriverPrivilege	3048	powershell.exe
Token: SeSystemProfilePrivilege	3048	powershell.exe
Token: SeSystemtimePrivilege	3048	powershell.exe
Token: SeProfSingleProcessPrivilege	3048	powershell.exe
Token: SeIncBasePriorityPrivilege	3048	powershell.exe
Token: SeCreatePagefilePrivilege	3048	powershell.exe
Token: SeBackupPrivilege	3048	powershell.exe
Token: SeRestorePrivilege	3048	powershell.exe
Token: SeShutdownPrivilege	3048	powershell.exe
Token: SeDebugPrivilege	3048	powershell.exe
Token: SeSystemEnvironmentPrivilege	3048	powershell.exe
Token: SeRemoteShutdownPrivilege	3048	powershell.exe
Token: SeUndockPrivilege	3048	powershell.exe
Token: SeManageVolumePrivilege	3048	powershell.exe
Token: 33	3048	powershell.exe
Token: 34	3048	powershell.exe
Token: 35	3048	powershell.exe
Token: 36	3048	powershell.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
1052	Glory.exe
5504	AdReject.exe
5504	AdReject.exe
1340	aichat.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
1052	Glory.exe
5504	AdReject.exe
5504	AdReject.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2700	Glory.exe
2700	Glory.exe
2700	Glory.exe
5504	AdReject.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 5736 wrote to memory of 2532	5736	ByteBreaker V1_83236836.exe	89
PID 2532 wrote to memory of 3584	2532	OperaGX_83236836.exe	90
PID 3584 wrote to memory of 2572	3584	installer.exe	91
PID 3584 wrote to memory of 5964	3584	installer.exe	92
PID 3584 wrote to memory of 3484	3584	installer.exe	93
PID 3484 wrote to memory of 6044	3484	installer.exe	94
PID 5736 wrote to memory of 5468	5736	ByteBreaker V1_83236836.exe	96
PID 5736 wrote to memory of 1688	5736	ByteBreaker V1_83236836.exe	97
PID 5468 wrote to memory of 4868	5468	GLY93DA.tmp.exe	98
PID 4868 wrote to memory of 3048	4868	Glory.exe	100
PID 1688 wrote to memory of 4708	1688	ADRD2F7.tmp.exe	102
PID 5468 wrote to memory of 1052	5468	GLY93DA.tmp.exe	105
PID 1688 wrote to memory of 5504	1688	ADRD2F7.tmp.exe	106
PID 1052 wrote to memory of 2700	1052	Glory.exe	111
PID 5504 wrote to memory of 3480	5504	AdReject.exe	112
PID 5736 wrote to memory of 3168	5736	ByteBreaker V1_83236836.exe	116
PID 3584 wrote to memory of 4620	3584	installer.exe	117
PID 3584 wrote to memory of 4692	3584	installer.exe	119
PID 1340 wrote to memory of 1496	1340	aichat.exe	122
PID 1496 wrote to memory of 3368	1496	msedgewebview2.exe	123
PID 1496 wrote to memory of 5648	1496	msedgewebview2.exe	124
PID 1496 wrote to memory of 5648	1496	msedgewebview2.exe	124
PID 1496 wrote to memory of 5648	1496	msedgewebview2.exe	124
PID 1496 wrote to memory of 5648	1496	msedgewebview2.exe	124

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\ByteBreaker V1_83236836.exe
"C:\Users\Admin\AppData\Local\Temp\ByteBreaker V1_83236836.exe"
1⤵
- Downloads MZ/PE file
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:5736
- C:\Users\Admin\AppData\Local\OperaGX_83236836.exe
  C:\Users\Admin\AppData\Local\OperaGX_83236836.exe --silent --allusers=0
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2532
- - C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe
    C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe --silent --allusers=0 --server-tracking-blob=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
    3⤵
    - Downloads MZ/PE file
    - Executes dropped EXE
    - Enumerates connected drives
    - Reads the TCP/IP host and domain name from the registry
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:3584
  - - C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff65d8002d8,0x7ff65d8002e8,0x7ff65d8002f8
      4⤵
      Executes dropped EXE
      PID:2572
  - - C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\installer.exe" --version
      4⤵
      Executes dropped EXE
      PID:5964
  - - C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3584 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_20261104224721" --session-guid=3cec0560-1d29-437a-a6d8-3dc9b7842be5 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=C008000000000000
      4⤵
      Executes dropped EXE
      Enumerates connected drives
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:3484
    - - C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x2ac,0x2b0,0x2b4,0x27c,0x2b8,0x7ff65d8002d8,0x7ff65d8002e8,0x7ff65d8002f8
        5⤵
        Executes dropped EXE
        
        PID:6044
    - - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\installer.exe" --backend --initial-pid=3584 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211" --session-guid=3cec0560-1d29-437a-a6d8-3dc9b7842be5 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=138.0.6044.65
        5⤵
        
        PID:1696
      - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff7585a02d8,0x7ff7585a02e8,0x7ff7585a02f8
        6⤵
        
        PID:2772
      - C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
        6⤵
        
        PID:5280
        
        C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x51b558,0x51b564,0x51b570
        7⤵
        
        PID:1000
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
        7⤵
        
        PID:1432
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x67b558,0x67b564,0x67b570
        8⤵
        
        PID:5624
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --installer-run
        8⤵
        
        PID:5916
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
        9⤵
        
        PID:4224
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x164,0x168,0x16c,0x160,0x170,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        10⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
        9⤵
        
        PID:6456
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        10⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x5d8f60,0x5d8f6c,0x5d8f78
        9⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
        10⤵
        
        PID:6688
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        11⤵
        
        PID:6704
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
        10⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x134,0x15c,0x160,0x138,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        11⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
        10⤵
        
        PID:6844
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        11⤵
        
        PID:6960
      - C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
        6⤵
        
        PID:1252
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
        7⤵
        
        PID:6464
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1884,i,9826547408526571386,6631379520906782138,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2040 /prefetch:11
        7⤵
        System Time Discovery
        
        PID:6968
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1596,i,38689022480254068,6031499503305928783,262144 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2000 /prefetch:2
        7⤵
        
        PID:6976
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2492,i,14801651018286113693,7921586147954838532,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2552 /prefetch:13
        7⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3120,i,9835661637903665516,8513660541860337588,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3168 /prefetch:14
        7⤵
        
        PID:7132
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3144,i,1720218068213735225,2977046542867031796,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3224 /prefetch:14
        7⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,12397322553417420966,2245795158711456014,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3264 /prefetch:14
        7⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,2345102933963421056,3132957062723132929,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3480 /prefetch:14
        7⤵
        
        PID:6160
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3332,i,13153192221370834020,1838678968133121645,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3516 /prefetch:14
        7⤵
        
        PID:3592
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2740,i,2912885933450703518,9044631409112071250,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3496 /prefetch:14
        7⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3748,i,5411426345226691781,13088740608772008729,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3944 /prefetch:1
        7⤵
        
        PID:6248
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_gx_splash.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
        7⤵
        
        PID:7624
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4740,i,11561824667639078022,7086863160432932981,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4756 /prefetch:1
        7⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5000,i,314302849870124716,2386341695038011619,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5048 /prefetch:9
        7⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5176,i,12965904395289824588,3466619985964091847,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5188 /prefetch:1
        7⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5316,i,9009834097327186610,5158328217711820509,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5312 /prefetch:1
        7⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5452,i,4848869151173757851,202678500008493674,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5444 /prefetch:14
        7⤵
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5456,i,9983805597388062034,2813571875346952167,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5528 /prefetch:14
        7⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5448,i,10038265592375177637,3618706411577223450,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5532 /prefetch:14
        7⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5460,i,12700624041978345674,574294967833524569,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5564 /prefetch:14
        7⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5988,i,2100159205269901512,3899908811577020519,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5948 /prefetch:9
        7⤵
        
        PID:2880
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6952,i,13871032651514256348,11663975567236090131,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6976 /prefetch:9
        7⤵
        
        PID:7924
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7144,i,3972112819894886003,7352227650827564269,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6720 /prefetch:1
        7⤵
        
        PID:9040
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4760,i,14103468604921146034,16263283842024662554,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6620 /prefetch:14
        7⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,17245588852580903857,6818927376236175219,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6616 /prefetch:14
        7⤵
        
        PID:7516
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7400,i,17465638998449043004,1721409137073693573,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7552 /prefetch:14
        7⤵
        
        PID:7336
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7544,i,10229655361769327802,13117222512431086455,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7576 /prefetch:14
        7⤵
        
        PID:7136
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7840,i,10357877406389307990,16303059839118563336,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7852 /prefetch:14
        7⤵
        
        PID:7548
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4732,i,8653282199162845194,8831033703326512156,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6940 /prefetch:14
        7⤵
        
        PID:7156
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=8148,i,14886610747847394776,355621892997320028,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7992 /prefetch:9
        7⤵
        
        PID:7260
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6632,i,16935778427557275149,15580802031522483910,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8240 /prefetch:14
        7⤵
        
        PID:4956
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,18244072350857411855,8431012227746238195,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8320 /prefetch:14
        7⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8184,i,4385173958156147096,15477952018408275343,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8260 /prefetch:14
        7⤵
        
        PID:7448
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,1318461168318422877,2048588469675254518,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8220 /prefetch:14
        7⤵
        
        PID:7004
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5628,i,12097973634954767929,14811908017543457482,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8300 /prefetch:14
        7⤵
        
        PID:4820
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4900,i,4827768493536836056,9698918338843398195,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8280 /prefetch:14
        7⤵
        
        PID:7200
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8576,i,1466496270104387578,2901550384639317648,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9144 /prefetch:14
        7⤵
        
        PID:7864
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9288,i,10377104402326161842,8013520823836086362,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=7148 /prefetch:12
        7⤵
        
        PID:7948
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
        7⤵
        
        PID:9296
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7df646df8,0x7ff7df646e08,0x7ff7df646e18
        8⤵
        
        PID:9556
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3748,i,1903206796987817528,7911366189010859658,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=3984 /prefetch:14
        7⤵
        
        PID:9460
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9688,i,499402658452670050,10939206344202474777,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9672 /prefetch:14
        7⤵
        
        PID:9612
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9704,i,6249929317802605177,7719624855733555281,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9840 /prefetch:14
        7⤵
        
        PID:9632
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9848,i,14325382576371141412,14176685956760430887,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10024 /prefetch:1
        7⤵
        
        PID:9664
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10604,i,11469666490087513706,1669145653884626106,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10612 /prefetch:14
        7⤵
        
        PID:8900
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10644,i,9513099528438866872,15015244373594406848,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10760 /prefetch:14
        7⤵
        
        PID:7828
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9988,i,8998953284001943541,3886837064151545923,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10748 /prefetch:14
        7⤵
        
        PID:10068
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8172,i,10654003974824562895,11577919919282151252,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9708 /prefetch:14
        7⤵
        
        PID:9932
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10680,i,7205817563996679544,7039987633375603121,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10668 /prefetch:14
        7⤵
        
        PID:9980
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9740,i,16681260539733801675,9253494600468503805,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9728 /prefetch:14
        7⤵
        
        PID:10080
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9960,i,13384708548244514065,12246239749755215051,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=9948 /prefetch:14
        7⤵
        
        PID:10004
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9908,i,7328839227129319305,12763579732462775779,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8928 /prefetch:14
        7⤵
        
        PID:10184
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8576,i,9827506203726833173,13796941858579163241,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=9272 /prefetch:14
        7⤵
        
        PID:6756
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8488,i,12191975819787481848,10472444144690166216,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8464 /prefetch:14
        7⤵
        
        PID:10228
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7816,i,6293982732102602680,12579925135732455519,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7568 /prefetch:14
        7⤵
        
        PID:7820
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9164,i,3843865804926167342,13782069650240833844,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=7308 /prefetch:14
        7⤵
        
        PID:8324
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,6373523191192618329,15647108821662460709,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9028 /prefetch:14
        7⤵
        
        PID:10156
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,12850017100013757764,16367918689769354397,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8756 /prefetch:14
        7⤵
        
        PID:8272
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3348,i,8555837495984883866,11519477521227792703,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8704 /prefetch:14
        7⤵
        
        PID:8480
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3312,i,13044522262430122214,2377927682897552067,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8864 /prefetch:14
        7⤵
        
        PID:8860
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,10935051265948525741,13636244671745979092,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8724 /prefetch:14
        7⤵
        
        PID:8532
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3380,i,7684395523977866336,7549506528923100849,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8824 /prefetch:14
        7⤵
        
        PID:6232
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3344,i,11170738308481192568,4581013078163604825,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8760 /prefetch:14
        7⤵
        
        PID:9060
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3384,i,2020537709585877996,8815370477629159507,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8284 /prefetch:14
        7⤵
        
        PID:8556
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9100,i,1230634916034236812,18311845656796886030,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=9244 /prefetch:14
        7⤵
        
        PID:8848
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9044,i,15055112831901287042,5252797444398090131,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8804 /prefetch:14
        7⤵
        
        PID:7872
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9036,i,9146634492487551924,3306764096075106298,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=8832 /prefetch:14
        7⤵
        
        PID:8500
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9064,i,16364958496144532658,2215355275739660389,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9224 /prefetch:14
        7⤵
        
        PID:7632
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,4571940448862894209,12577137176978434103,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=11204 /prefetch:14
        7⤵
        
        PID:10008
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5728,i,5236933522815095823,18091984030448837219,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=5740 /prefetch:14
        7⤵
        
        PID:4452
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9880,i,13901889033952087339,17054149659157508776,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8976 /prefetch:9
        7⤵
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3640,i,2010437980900698345,4077060877013271852,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=11244 /prefetch:14
        7⤵
        
        PID:9764
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3336,i,133158215426673298,6604704867794955788,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=10692 /prefetch:14
        7⤵
        
        PID:8768
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11504,i,2996129572360788374,14969324921269682150,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=11496 /prefetch:14
        7⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11896,i,5931670322036829843,12249377775766645696,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=11908 /prefetch:14
        7⤵
        
        PID:8344
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12092,i,14156438908185076520,13626071970058771717,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=12104 /prefetch:14
        7⤵
        
        PID:10212
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12060,i,49546930092889409,11787060598007424282,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=12072 /prefetch:14
        7⤵
        
        PID:8112
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12356,i,2105296409506951394,10604008485017921182,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=12368 /prefetch:14
        7⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12512,i,5275495109275181676,7311435159848549988,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=12524 /prefetch:14
        7⤵
        
        PID:7892
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11884,i,4106026629777570186,16868567696760375679,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=11880 /prefetch:14
        7⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11792,i,5460414332193112486,12989228702405823533,524288 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=11772 /prefetch:14
        7⤵
        
        PID:9816
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9900,i,9901260891397953829,7332705275359759082,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=8720 /prefetch:9
        7⤵
        
        PID:7228
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=7880,i,3404651584621268648,9024177758261253698,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=7936 /prefetch:9
        7⤵
        
        PID:9648
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=3804,i,5671219700135271406,2438984904553812619,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=9484 /prefetch:9
        7⤵
        
        PID:9848
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=9560,i,12404863975421003423,1524654212118064358,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=7756 /prefetch:9
        7⤵
        
        PID:10592
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 OPR/138.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-full-api=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=12348,i,2989119246640428859,7959361658977060857,1572864 --field-trial-handle=2004,i,646613353654607876,14198115110320826892,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2008,i,11585794283113725261,11799547870511561471,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=11612 /prefetch:9
        7⤵
        
        PID:11204
  - - C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\Opera_GX_assistant_138.0.6044.65_Setup.exe_sfx.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\Opera_GX_assistant_138.0.6044.65_Setup.exe_sfx.exe"
      4⤵
      Executes dropped EXE
      Writes a Windows system DLL name to a user directory
      System Location Discovery: System Language Discovery
      PID:4620
  - - C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe" --version
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Enumerates system info in registry
      PID:4692
    - - C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x51b558,0x51b564,0x51b570
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:5388
- C:\Users\Admin\AppData\Local\Temp\GLY93DA.tmp.exe
  "C:\Users\Admin\AppData\Local\Temp\GLY93DA.tmp.exe" --silent --silent --launch --channel IU
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Reads the TCP/IP host and domain name from the registry
  - Modifies system certificate store
  - Suspicious use of WriteProcessMemory
  PID:5468
- - C:\Program Files\Glory\Glory.exe
    "C:\Program Files\Glory\Glory.exe" install IU
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4868
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\Glory_CreateStartupTask.ps1"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3048
- - C:\Program Files\Glory\Glory.exe
    "C:\Program Files\Glory\Glory.exe"
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1052
  - - C:\Program Files\Glory\Glory.exe
      "C:\Program Files\Glory\Glory.exe" --sciter-ui
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of SetWindowsHookEx
      PID:2700
- C:\Users\Admin\AppData\Local\Temp\ADRD2F7.tmp.exe
  "C:\Users\Admin\AppData\Local\Temp\ADRD2F7.tmp.exe" --silent --silent --launch --channel IU
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Reads the TCP/IP host and domain name from the registry
  - Modifies system certificate store
  - Suspicious use of WriteProcessMemory
  PID:1688
- - C:\Program Files\AdReject\AdReject.exe
    "C:\Program Files\AdReject\AdReject.exe" install IU
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    PID:4708
- - C:\Program Files\AdReject\AdReject.exe
    "C:\Program Files\AdReject\AdReject.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:5504
  - - C:\Program Files\AdReject\AdReject.exe
      "C:\Program Files\AdReject\AdReject.exe" --start-service
      4⤵
      Executes dropped EXE
      PID:3480
- C:\Users\Admin\AppData\Local\AIChat_83236836.exe
  C:\Users\Admin\AppData\Local\AIChat_83236836.exe /S
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:3168
- - C:\Users\Admin\AppData\Local\aichat\aichat.exe
    "C:\Users\Admin\AppData\Local\aichat\aichat.exe" --hidden
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:1340
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1340.2372.7067227582536145180 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
      4⤵
      Enumerates system info in registry
      Suspicious use of WriteProcessMemory
      PID:1496
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView /prefetch:4 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff9c9c25fd8,0x7ff9c9c25fe4,0x7ff9c9c25ff0
        5⤵
        
        PID:3368
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1724 --field-trial-handle=1732,i,7345997467383000410,6042954229246891918,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
        5⤵
        
        PID:5648
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2184 --field-trial-handle=1732,i,7345997467383000410,6042954229246891918,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
        5⤵
        
        PID:1384
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2452 --field-trial-handle=1732,i,7345997467383000410,6042954229246891918,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
        5⤵
        
        PID:3372
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3428 --field-trial-handle=1732,i,7345997467383000410,6042954229246891918,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 /prefetch:1
        5⤵
        
        PID:5988
- C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
  "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
  2⤵
  PID:2388
- - C:\Program Files (x86)\PremierOpinion\pmropn.exe
    C:\Program Files (x86)\PremierOpinion\pmropn.exe -install -uninst:PremierOpinion -t:InstallUnion -bid:Jz5MFqr94L4odRNOy3POPN -o:0
    3⤵
    PID:8000
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:4348
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:8700
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:8160
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:5132
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:5660
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:8212
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:10248
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:11056
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:8776
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:6384
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:6128

C:\Program Files\Glory\Glory.exe
"C:\Program Files\Glory\Glory.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Modifies data under HKEY_USERS
PID:2188

C:\Program Files\AdReject\AdReject.exe
"C:\Program Files\AdReject\AdReject.exe" --service
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5248

C:\Program Files\AdReject\AdReject.exe
"C:\Program Files\AdReject\AdReject.exe" --service
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4128

C:\Program Files\AdReject\AdReject.exe
"C:\Program Files\AdReject\AdReject.exe" --service
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5648

C:\Windows\system32\sc.exe
C:\Windows\system32\sc.exe
1⤵
- Launches sc.exe
PID:3948

C:\Program Files\AdReject\WinDivert64.sys
"C:\Program Files\AdReject\WinDivert64.sys"
1⤵
- Executes dropped EXE
PID:204

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4220

C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --autostart
1⤵
PID:3220
- C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
  2⤵
  PID:1104
- - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x15c,0x160,0x164,0x158,0x168,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
    3⤵
    PID:5564
- C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
  2⤵
  PID:2768
- - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
    3⤵
    PID:4324
- C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x294,0x298,0x29c,0x26c,0x2a0,0x5d8f60,0x5d8f6c,0x5d8f78
  2⤵
  PID:3048
- - C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
    3⤵
    PID:5872
  - - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0xdc,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
      4⤵
      PID:4320
- - C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
    3⤵
    PID:4744
  - - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
      4⤵
      PID:568
- - C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
    3⤵
    PID:6168
  - - C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
      "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
      4⤵
      PID:6188

C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
1⤵
PID:6344

C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
1⤵
PID:7748
- C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\138.0.6044.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9a44b22a0,0x7ff9a44b22b0,0x7ff9a44b22c0
  2⤵
  PID:7764

C:\Program Files (x86)\PremierOpinion\pmservice.exe
"C:\Program Files (x86)\PremierOpinion\pmservice.exe" /service
1⤵
PID:8068
- C:\Windows\system32\rundll32.exe
  C:\Windows\system32\rundll32.exe C:\Windows\system32\pmls64.dll,UpdateProcess 1392
  2⤵
  PID:8124
- C:\Windows\SysWOW64\reg.exe
  reg.exe EXPORT "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286}" C:\PROGRA~2\PREMIE~1\RData.reg /y
  2⤵
  PID:6860
- \??\c:\program files (x86)\premieropinion\pmropn.exe
  "c:\program files (x86)\premieropinion\pmropn.exe" -boot
  2⤵
  PID:8652
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -s
    3⤵
    PID:10700
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -s
    3⤵
    PID:9880
- C:\Windows\SysWOW64\cmd.exe
  /C C:\PROGRA~2\PREMIE~1\pmropn32.exe 8652
  2⤵
  PID:10436
- - C:\PROGRA~2\PREMIE~1\pmropn32.exe
    C:\PROGRA~2\PREMIE~1\pmropn32.exe 8652
    3⤵
    PID:10516
- C:\Windows\SysWOW64\cmd.exe
  /C C:\PROGRA~2\PREMIE~1\pmropn64.exe 8652
  2⤵
  PID:10448
- - C:\PROGRA~2\PREMIE~1\pmropn64.exe
    C:\PROGRA~2\PREMIE~1\pmropn64.exe 8652
    3⤵
    PID:10476
- \??\c:\program files (x86)\premieropinion\pmropn.exe
  "c:\program files (x86)\premieropinion\pmropn.exe" -updateapps
  2⤵
  PID:10748
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.aad.brokerplugin_cw5n1h2txyewy
    3⤵
    PID:10796
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ecapp_8wekyb3d8bbwe
    3⤵
    PID:10852
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge.stable_8wekyb3d8bbwe
    3⤵
    PID:11008
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.sechealthui_8wekyb3d8bbwe
    3⤵
    PID:11056
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.2.8_8wekyb3d8bbwe
    3⤵
    PID:11124
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00_8wekyb3d8bbwe
    3⤵
    PID:11200
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.win32webviewhost_cw5n1h2txyewy
    3⤵
    PID:11252
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.narratorquickstart_8wekyb3d8bbwe
    3⤵
    PID:2828
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.shellexperiencehost_cw5n1h2txyewy
    3⤵
    PID:8012
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy
    3⤵
    PID:7244
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.client.cbs_cw5n1h2txyewy
    3⤵
    PID:7284
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=windows.immersivecontrolpanel_cw5n1h2txyewy
    3⤵
    PID:10148
- - C:\Windows\SysWOW64\CheckNetIsolation.exe
    CheckNetIsolation.exe LoopbackExempt -a -n=windows_ie_ac_001
    3⤵
    PID:2308

C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
1⤵
PID:9304
- C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=138.0.6044.65 --initial-client-data=0x294,0x298,0x29c,0x27c,0x2a0,0x7ff7df646df8,0x7ff7df646e08,0x7ff7df646e18
  2⤵
  PID:7660
- C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
  "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
  2⤵
  PID:9084

C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
1⤵
PID:10396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Privilege Escalation

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Defense Evasion

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Masquerading

T1036

Match Legitimate Name or Location

T1036.005

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

snt.dat.bac

Path C:\PROGRA~2\PREMIE~1\snt.dat.bac
Size 3.4MB
SHA256 df0d542e0449328e9eabcf797a7fd8bfe646683cf9a5a7612a5e26aa51788a76
MD5 c2eccf07d607ba13d847440dc68901a5
SHA1 7fc2c32404262557fb29e1d9afc1ec7bfb2d3385
SHA512 20c2f525d066d13659861fd3731904c7ff4cea0c0e6bacbdeb29f393a71e83b55730f792c7b0261cc3cc0c8767d92c67dde2058cb8d529787ed1e9e25f8c4f54
SSDEEP 98304:MIm3yPEyaEPWFYZRzzX34T8Jf+3iScjJt+ixAIO9Aykov:MeKEuFevX34QB+yfjJthyLt
TLSH
T140F53314569EB5C78704C7F871EB3EE41127848297A80D7AF381E4349B82DA75F87BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snt.dat.bac

Path C:\PROGRA~2\PREMIE~1\snt.dat.bac
Size 3.4MB
SHA256 10edb787657b03c34272892d24f9894ec9168577dd39a8afb3439126cffb5fb3
MD5 1e6de1ffabd0661a798d05ba56e69457
SHA1 521266ef1386abbcdc30f61091f71f67b1374275
SHA512 e8d019c93aa4f607765c2ed3446003ee36c5b83caf2efee9f0ef35a2f890728eb71e37697072f088918fa1da4d889e9fac64552ffd4f190fa2ece76f711eec25
SSDEEP 98304:YwHeVs9npxWFYZRzzX34T8Jf+3iScjJt+ixAIO9Aykov:feVstp0FevX34QB+yfjJthyLt
TLSH
T1F4F53365AAA7AD024B004FF444D34EA8313B6D2186B94DF8F2709474DD517B22FDEEAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Program Files (x86)\PremierOpinion\cacert.pem
Size 3KB
SHA256 9f19e7a7139cca8373b516ab1ae49c644aa1c8048e8c7aa5784774a081dcbb87
MD5 77eb3ade4c5b0db67c6e8a26f131073c
SHA1 ad9e8c00174cc2e707f59df671f89a9d7fc2ffc7
SHA512 20eb7d34c80bb8d8a415bcdccf8e46cb36396c095ed1468b69c0cb91da915e3a14c7fd55247f68e64ff71cf8d336cc286c3662710ca6281840fdc2f1eb7ac6a1
TLSH
T1CF616E89DB903C566CA941E3D52F37BE0551C7272D97EA620A09A050C32AF39423DDCC
MD5 SHA1 SHA512 TLSH

Submit Download

pmoci.bin

Path C:\Program Files (x86)\PremierOpinion\pmoci.bin
Size 4KB
SHA256 20b0f94844860501e115fccd5c1462b2e2c932041d7989dc51c6d885b3429d8a
MD5 3ef9efb5c3c17e2b685057beac484e0b
SHA1 92e7ae0ebf2b57d72ea4091f065f29187cdf76fa
SHA512 6631ba4269375b502eccbcf601b0daccc98538f36bc0e1e2e5e48a28b4b9f523e06cb46d14b7ac2c60f70ce258b873fc42e31ebfb5237cb43cba7fb6a428eafc
SSDEEP 48:0DrFGEG5/jsLG2UvA6oUZKJ6Er2wmnBKVSkdN4P:0/F4/jsLGLvfZKxmQQkdY
TLSH
T15891B5CD95D1D5A19F083EA8CA4DDBFB08194D98FA0C752B5308BEBBF8BA1590F40807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AdReject.exe

Path C:\Program Files\AdReject\AdReject.exe
Size 819KB
SHA256 95abb0133aa524e196c3b25ee9db3c4555e3cfc014f4cee01de171b6e5448f24
MD5 84de0231f88798c4e9f8323aa7fe96a9
SHA1 9cbc8184784f0cfe94a70eab4c3182a4ec795635
SHA512 6c56c5708737fe985636d2ede5327d49e5c9fbf10bfdb5a4a431322252f1a19884075bc91f072b09054fc84e28c1c5dc2cfbbb2dd1d52e368fd4a52d02d499c8
SSDEEP 12288:kygKuDSWr8x2onrUVcU5zURHwtelb8Is4+RKMJJPS4dddSznz4EeEJLdeZ6Ee:krr1rQnrxUcHwtelVxZq5SLz9LwZe
TLSH
T145058E22EA9401FDD176D2B98E674912FBB278460331AACF03D096A71F276D85F3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinDivert.dll

Path C:\Program Files\AdReject\WinDivert.dll
Size 46KB
SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
MD5 b2014d33ee645112d5dc16fe9d9fcbff
SHA1 aa69498562d350f2de06954b133e59fac1e57002
SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
TLSH
T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installed-release.manifest

Path C:\Program Files\AdReject\installed-release.manifest
Size 1KB
SHA256 62ffb2d1770f651f868d9137bb0bf83829b2ebfe4a785f7094e3069997b144b7
MD5 c0641006dd6c61079f16ab3b3bafb73e
SHA1 1ae23010c91cbc9643c45f44c0a37ee54aaf0133
SHA512 8fe5a015b932eadec1cd028f4d2b946bf3c6c0da560b6dc343f2da2245691ff246257c97c13aa4887b0988e542fdc653921afa5366c4c5c9b026c9ce7a069499
TLSH
T1C1319925C83590C0A6545CEBADC513BE7F1D9BE7E1917A881EB4ECC9A14724732C544B
MD5 SHA1 SHA512 TLSH

Submit Download

Glory.exe

Path C:\Program Files\Glory\Glory.exe
Size 2.0MB
SHA256 bb44ac75899a3bbb0ec2a44db45b6f84d44fdffcdcbe551ec50b9ef60708086c
MD5 bc94a346349570f63f93801974c4be9c
SHA1 fb5e62c8bcdeba798488c0a03ea89460fc6048f7
SHA512 b7424e3c195dd155a32457ecc66a490e8dc585cebe88cda49f480a023f4e99f049889a6191e159933910a0becd8206a3b8f415c56bf6022839ff9968de79c8a6
SSDEEP 49152:+n40WPd+p+5tDCdcHRDiLnj60ux36Yxj2pERKB6ryMWC/hm:A+hCyELnjPuxHjcC5m
TLSH
T1CFA59E06B2B901F8D1A7D178C95A5507EBB2B80907359BDF1290CA661F33EE15F7E328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hgsdk.dll

Path C:\Program Files\Glory\hgsdk.dll
Size 7.4MB
SHA256 2720d215168108700767f8e9b57819d55ca139d69d8d828186da186850a37c6c
MD5 90dd0a0de940c142a19aacde0f9acd11
SHA1 4a8f27bf18081e621c1ffdf7781ecb34d0056647
SHA512 e1a80f1374e5a22d5f0700ea2fe469cd5defe8d191e2bbd86f7f103e79e4b019c3135506f68a2f714d98f7d4467764eb4ec26a0696fc7f81355789e9adb4f018
SSDEEP 98304:unQ7R2/sjM64HLMDk/zMqrw1ndwkMKCRn+b:BDkrOdluR
TLSH
T132762911BA6B98ADD15AC87083474A735E2170DB0B36B9FF41D486383F69BF02B39719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installed-release.manifest

Path C:\Program Files\Glory\installed-release.manifest
Size 1KB
SHA256 eeeaa12c9fa053c69f25f739de99a6bff66a6e59f438fb832f98eb47e1f8ff58
MD5 5d5f7c87aceab5f20faaaba2f7a261c7
SHA1 42d87ed8bfc883966849a7cc4dc446ec4f632641
SHA512 0df4737eb5c0c9591888af04a27abd5314a3fbb70e39ec09fb3b29d259948e4e03df904bf6fb5535134dcfb60ff8e9b30438e0abee0fe2f927fe7c38b4ec5a77
TLSH
T10A11B97AC32956371B2316A398CBD0073FC61171E9D114359446D66C83035459EAF699
MD5 SHA1 SHA512 TLSH

Submit Download

sciter.dll

Path C:\Program Files\Glory\sciter.dll
Size 18.4MB
SHA256 8ec04a9f38c3cbc376d11330d9022b830dafa0d27cd4ac89f4ab87ed8b883270
MD5 0ac2c0a397b71eec8868c618b437c2e8
SHA1 03241e84a2febdf0e99cc13b761efd44f419a57b
SHA512 ab1017e3f101feca921136b2b3f848731dc9cb71e07b87c811acfff3cc976ffcd163636960e9b16523c015e0dc3672eaefb40e85ebd162e31dfca6a9427252ce
SSDEEP 196608:Hpq8jnE/PU5wupJMRHYWxhe+/qdNiNUngb2g:Hpq8zIUFjMRHYWxwJNiNUgb2g
TLSH
T1AA178E57B2A041A9C0AAC075CB1BDD1BE7B2BC4A0270D35F21E466AE6F777709D6E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0E0EA2CD61F757CEB5BB65FC2C758BF4_D49D09665EB9DA9DA3CD819761293B25

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0E0EA2CD61F757CEB5BB65FC2C758BF4_D49D09665EB9DA9DA3CD819761293B25
Size 727B
SHA256 c60e683140eb360ebf0607e8772777d0748e4ba4a636a921b1384fcc8e9b2e6a
MD5 773780e912ba68025e8b0e3e4c13b367
SHA1 6a410ffff8e930f35dbd8bff64299794184acc70
SHA512 9cedd00a2a16f47c0eb292ed04f4765e0205cef115e3b54bc8c6d1556396abdbb5fecde4aab6dd414ca49af526894cab6eacea3edb0e3355c3e5c5e2a8cbed5d
TLSH
T1730165824CC7ACB1FD5D4E8316DCBA30A4C2FC54E0E2A68BE5284DC3101A2E44525234
MD5 SHA1 SHA512 TLSH

Submit Download

103621DE9CD5414CC2538780B4B75751

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
Size 808B
SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
MD5 878e958d6bff424e59d1feb51584a01f
SHA1 b11261559bbea40f1874448196e2934277a537e9
SHA512 6481a56d17126cf94901bed6f418af28f63089da57af4258fb13e468063c4d7849f78ca00a0e4a72c249a639afc8304669f99e48a360008f8e64172ab3133213
TLSH
T18D0152CD6E2925408AB18A334AB9C4970DB9724A3AD5910C4453A4A024D07588F0F54E
MD5 SHA1 SHA512 TLSH

Submit Download

1B1495DD322A24490E2BF2FAABAE1C61

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
Size 355B
SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
MD5 53ae64e9ee4ba962ee4b516077735710
SHA1 dae8a6fd15a9c447cdb2778f63880db25b0dd198
SHA512 ec31df0d1fbf225bc5a884ee8324aab6e2aa43031bede210b04677ed825966c8ebc0693b06d8f0e55de2cd5919b95a7b25691b6ae1fab893f58756e08836a168
TLSH
T1BFE0C08867AC24200AB19E539550C4936FBE31892970B05C8251CBED30C1A58C28B30F
MD5 SHA1 SHA512 TLSH

Submit Download

22D536C4B4AD2CEF7AC6B7789FD235E3

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
Size 283B
SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
MD5 7f9d3dc54f928bf6c38576705ad18203
SHA1 2b5e33e5301753684973bfddbc6cfb11d297cf90
SHA512 ef5b01e74a5e49cd0fe887b9d92d830e1052bd93cda7d11ee68829705432a21a9943535de8dff9d77eb3402253adf9d5760eda03ca80a0c3495f83396d648967
TLSH
T102D0C29CA9273E660FE69B454A50C087AEE610CA9C15B648008EC45B0887B02EA962AE
MD5 SHA1 SHA512 TLSH

Submit Download

43FFE5C28177B37EEBE5BDCB272A0943_CC0A254C41A65F4C10C47E1F1DFF3E6D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\43FFE5C28177B37EEBE5BDCB272A0943_CC0A254C41A65F4C10C47E1F1DFF3E6D
Size 314B
SHA256 0028c7398f9d102c59a823c8a16b309dffe487efd0b982dd605f76c9ea3b36e3
MD5 c7fefb13e5613982bf4a1529c7963dd5
SHA1 1d0579ed683f5810548fab46ff21eb90cf77b220
SHA512 ba37b499bd231db4eb3708f671f5fdd3b43e46bf098871bacf03a043cf137cc51f588bcdc4d8eee7c8f343a199af36805cae85be5c1041b45cd0e403affa7fd2
TLSH
T1B2E07DEAC560E1094624AD360460DB12761005EE59FA905C791777D7DCBF61E5624189
MD5 SHA1 SHA512 TLSH

Submit Download

698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
Size 471B
SHA256 38a648f4c8f2dbd8f98e6d1d372506edfc63dcd001525f50d76972a45a9c05db
MD5 bda49de7a37ddf78635028c7b5fad3ea
SHA1 1c8c535221e132d374e190936116bd62980da5a1
SHA512 26154e3d82a95b921ab05f2a08b2e2d205cf31cd00580b4e430f75d6cac5bc080e7357abc3ea09dc28c48340e9af120ae13f5a2be711d2f6aa2661362cc20ebb
TLSH
T1C3F05CB3AAA938F22E63047C2AE56C5821A16BDD04C5D82674354FA8655F3F1225F509
MD5 SHA1 SHA512 TLSH

Submit Download

949D2E01833511C6366A8B529939FE66_A640373CFD567F7FA24BE1FC82025C7E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\949D2E01833511C6366A8B529939FE66_A640373CFD567F7FA24BE1FC82025C7E
Size 313B
SHA256 8791885f73898ec5929060a5594bdf3e678379c80ae05fd66fd5b026b473f561
MD5 0b884c3e0c93b51354d3b6f90239be2e
SHA1 e1a04fba948a944dc8ea0ebd6007883a23bc36d7
SHA512 6f07d618f8ba9267f4087331447f59a3596b2d2a54aa085e0e4dda54c44b727ef1439f1f7480a93a172ead08a65d7aefaa6de6a2410018b46642dc3ccc874913
TLSH
T169E07221E90904810EA0869EC5A3C32833764998E1CA502F3A589A801243AECEF83C08
MD5 SHA1 SHA512 TLSH

Submit Download

C8E534EE129F27D55460CE17FD628216_64A201640BD8E31E72E33FB1EBF9962D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_64A201640BD8E31E72E33FB1EBF9962D
Size 727B
SHA256 a303bb485999cbfa02a3c92cb25471ec723d7bd3b3dfe3cfd07674e4db3d3bf2
MD5 5647dfa9e8851af5a1b15ffea601a601
SHA1 32a820a62b8aa38ec9c7fb11eb123e8a3b3b1842
SHA512 219d70778a3544b8146227dc3e254e23e7ea2ff067fea432b742ef0bdf582f58ab09fee792c22cc8423c9c120e8039995363ec305fd01f29797de3db6270221d
TLSH
T16B01655BB47A79A174136F2502B550EC3D738A1C26C0E38A696480CBD1AAA229D45419
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 471B
SHA256 22d8d8130410a708fcb424b202e5faa0240fc174169bab28dc38af7f09330af1
MD5 9a709ec54cda3735d14f1432b53b7172
SHA1 578942d8324028e2635b38b3d0b85b03c2f5678d
SHA512 408b4a99627768c71acdd7c823f25085974a013a99ed5ec964c852458db0286ca41466369e38a907ceb6ccd3ca6189a9982b7c0eb10652ae2f6a0e355cf20b33
TLSH
T145F0DC42CE9DF871268544CD36E08E6A3431C338549A91ED9CBC98FC8C793EA5819039
MD5 SHA1 SHA512 TLSH

Submit Download

0E0EA2CD61F757CEB5BB65FC2C758BF4_D49D09665EB9DA9DA3CD819761293B25

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0E0EA2CD61F757CEB5BB65FC2C758BF4_D49D09665EB9DA9DA3CD819761293B25
Size 404B
SHA256 2dd329b4510c41f7eacfb56cad3ddf144c95d6d656d5869ef9dd7f918d56de24
MD5 e91f229f51c30178fad93132935aa7b1
SHA1 c2a4f621be2dfba12ac7ce88a26bad7d2b535803
SHA512 54ebe31a4fccdd3a3c557a9f7be21ce78f811d0c0b2b5a0fede98a240849238de1c8924255bee29a57f4e6894e16ae11c6e58624f8c02627a854b112a699f20f
TLSH
T17FE0C0151ABE002EF266C63653DD7431684EF1D3A415C6B10EC04B16D515E101E115B8
MD5 SHA1 SHA512 TLSH

Submit Download

103621DE9CD5414CC2538780B4B75751

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
Size 192B
SHA256 29a7d7ccee562915a1aacab7631fa3f2085a61ce6379c565f334cc58c8c5c6fe
MD5 8a0c57d105bdaad3d74d286797e47ad5
SHA1 da3dde9fd17b2f94403abcc93b4c183ce8f7e88d
SHA512 9091c6cda4017346858f9975bce603bf4427cd066c9ccc0bab43aad540733fecbfceda618707a07a52feac2ffc577db337d512b0bdf85a9aab326c1e8cc831a0
TLSH
T121C08C2C2EA20A06F2E8437C02D139439B209101E281CF051EF13A08CD96B162838C2A
MD5 SHA1 SHA512 TLSH

Submit Download

1B1495DD322A24490E2BF2FAABAE1C61

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
Size 192B
SHA256 23ea891e5c24a6102f1ba5904774b70471eb2f50f765ca61d5ba57a73f14e29d
MD5 8b7b884ba1da838479b98aff1e637063
SHA1 1bdedb48da687e58b5538b0e0163cd9f7ff82db2
SHA512 7f5d53164da615a775c1d990ea8e6883eb409245ab49a7cd2295a4ada5d971a0637cbfaa562e9adb0c09c222d7f4ffe633e966ea86e3dbebb0024636cd1cdce0
TLSH
T155C08C2C5A660606F2E4437D02C12E039B209420F2458F011AB53A08CC11F512C39C29
MD5 SHA1 SHA512 TLSH

Submit Download

22D536C4B4AD2CEF7AC6B7789FD235E3

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
Size 192B
SHA256 67e2a82e5c092ae6a1bea20ee0c1a5ba98b198cc529d9b7d29b1358fdc8874fa
MD5 19a017ae9bda2f475a1cd8c9d89e2f91
SHA1 8c3a25df0bb70633bdcf43053a038157ad0bd9fd
SHA512 e88985a9111b22ac94cbaba706e64db9d8092c68f813ef80392e5b616e6684a71a5b0d552fc194cc3a34e0e4a551748036b6c047a93e0ec6b185f491215b35da
TLSH
T178C080141BD10505E1D8077D11D039435618D015F2418F45157935444C14B181C30C1C
MD5 SHA1 SHA512 TLSH

Submit Download

43FFE5C28177B37EEBE5BDCB272A0943_CC0A254C41A65F4C10C47E1F1DFF3E6D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\43FFE5C28177B37EEBE5BDCB272A0943_CC0A254C41A65F4C10C47E1F1DFF3E6D
Size 490B
SHA256 718ad70f37528fb546b4dd74d91573594a8e18e9deab8c970e82ac1238bddcee
MD5 258e185bceeefee6c87d506184c617a7
SHA1 201e2cad8cd77ec2a14d769cbd0eb5eec304b1f1
SHA512 a3eea118426d09059b1647c7d6477f479b3883753f767780b46c87df048632bc58a4b8c2531b62cc957a11bd77917c8733550dd3dc0cc4ce27dfba811823b9e2
TLSH
T152F05C2C55BD417ED573DE358FC26AD69517B0132C10D6DE19D20B1F7502D12DC7253A
MD5 SHA1 SHA512 TLSH

Submit Download

698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
Size 400B
SHA256 6ec3d684a83f52e9995822f45af69cd60508120e43b2fce1da6424ef424faf33
MD5 6ecce442b0ee4f59a7fa3adc9ce2b5ed
SHA1 d6046b82f4f50624d3b14a1888b7efe276ccb8c0
SHA512 0ff0c41856dcbf1485f26adc4d4d4f43cf14e72c93c1e52bc0ffa8d83a4a9db36f399c2bc1b5a224130acafd8bb0c349910f7a20ce0fbdf6a214d2f4ae93eef2
TLSH
T1E1E0C03027FE407FF1B4BF7403D5A19A5B27F102AD1152BE0E81212D680BD000CD6C30
MD5 SHA1 SHA512 TLSH

Submit Download

949D2E01833511C6366A8B529939FE66_A640373CFD567F7FA24BE1FC82025C7E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\949D2E01833511C6366A8B529939FE66_A640373CFD567F7FA24BE1FC82025C7E
Size 494B
SHA256 1bbca0f9b71c0f8e4333c4a15c28c42d024369da604748945afb15cd98ea105d
MD5 cc4d1bc5fa5a07b379d0198c7f7c5ded
SHA1 e38d5d66cc4a5b6a8977757779a67282a9cb5465
SHA512 62f6aa8bc13770bbfd9c071607aaf745a1b5eebde099a338a3f72784998d403853eb9872c02cab062368c162040e5601080753ec5121b79798ec130ad2bdfaca
TLSH
T10AF05C2827FA511ED036DA79C1E143134D41F4233C0496AE1291DB01B511F00AC32034
MD5 SHA1 SHA512 TLSH

Submit Download

C8E534EE129F27D55460CE17FD628216_64A201640BD8E31E72E33FB1EBF9962D

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_64A201640BD8E31E72E33FB1EBF9962D
Size 416B
SHA256 2c3b830725ac7af699420bc1c0b4438bf84279b3113befd2d776c240839fa49a
MD5 09094116573b9043449a1228d8f33aa2
SHA1 a12535d966957634764414db99ca77d9e316b5ba
SHA512 229086614b8fde653769f336060a858b5a5647ea9dedf03cc080428b7f10bf7ee08f685ddf9d025f181299cf43086ae579097d8d07168826e6d519aa071cbb72
TLSH
T10BE0683822FF641EF020E93403F9EA355A08F20A440482B90A904788BB1FE005C11AF1
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
Size 416B
SHA256 e355f317f528fcd8631c08cb8a9bffd0e110c46fedd3ab7462c5de9e8253ffc1
MD5 1d30a59792bf1bb515db27fda87007c6
SHA1 ccb777f3cca0a9ccd608e09e1dc55b784b91803c
SHA512 c97e254fbcdf15d64f47c4656d5bb80912715e84d7163b61d7896e738d82abc62733e972e9f144b896b7269db5144ea75e15ad533ee3b1d50e9d4c0ca0d06b33
TLSH
T1D2E0682831FA012EE4F8E0788FD5B9259C56F0260418A2B50AE46708B646A00AE12A35
MD5 SHA1 SHA512 TLSH

Submit Download

AIChat_83236836.exe

Path C:\Users\Admin\AppData\Local\AIChat_83236836.exe
Size 3.6MB
SHA256 6430a772eb047467aa0c3e4bc964719dbf85b9adc58e63738a8652099ba6f8ec
MD5 8ea4d80b2d3743964c532e3c00678186
SHA1 e61d67e5606ead8c325b44aa7e56141204bcaefc
SHA512 5506c381babf22af12c9cbf7f2f137641a2d16012b30e610367d74176fc4374677f05dd69123158de264f39e29557cf243c6039f1736f4ff6592173a5b10ab10
SSDEEP 98304:Y95u/iPL3wzWHtxMvPYEVC94aax7b7QO+IHeKvzHNc3Hj8X6dVB:YS/ikZP1Vy9S7b7+I+K7K3HjNB
TLSH
T12106232243461787C83E2AF06AA3B66145B49B9507ACBE4F3675753C2F28EC811FB771
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

device-credential.dat

Path C:\Users\Admin\AppData\Local\Glory\device-credential.dat
Size 468B
SHA256 b1857ac5c422b28ef6875537d541b83d16eacc6166f81619aad3c395fd69488e
MD5 6e6ed7d5c400930b980620356c085407
SHA1 17496d33fba848a5634bda742425f68fed25dbc7
SHA512 54a9c324cecb96d79d9a2ffa5689dd9d947bd111d8fe5bf96045bbfdeef23c61741270fad3973b15b0377570ad447e9dbd9e7f2f7e067768f3c530509e7fd909
TLSH
T1FDF0D41900F6CEC1E0607278647F178E65CA1E05C57644F8E921E1698D31F0D1274B72
MD5 SHA1 SHA512 TLSH

Submit Download

telemetry-queue.db

Path C:\Users\Admin\AppData\Local\Glory\telemetry-queue.db
Size 16KB
SHA256 306bdcfef9b031a932ca6ba6a3daf566a5414a0e3c013744a01c1da2888b94fe
MD5 eb8ac6465258afba2f4a2cf828347537
SHA1 5325c8d0b88da3b675bbfb7a00b10504b62e709b
SHA512 15da506ee2971bd78c18ed24984f673f56164b5a3f4d93d9fe5a9f8014e7c751b8b5af744d33e31e9d779580c41dea6e3f5d75492f3e4056147289bfa340a6e1
SSDEEP 24:Tsrkn5FXtM3Y9u1M6elM5hO+1U1vIvxMB4hYLl6/jqlv5O:Tsr6X9MV5elMgvIvxMBdlEqlvw
TLSH
T18072304D46E501BAF7B3DA768AF954CB9E2736E22C24CC0E00966F8F0C21B41BD04F25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ContentI3[1].exe

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9D1I77B7\ContentI3[1].exe
Size 3.8MB
SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
MD5 bf6eed6cdc17a0130189a33a55ef5209
SHA1 e337f5a0931f69c464f162385f1330b4d27b372f
SHA512 90d23fd84007343e85f9fc003cf826b112fd930216a24d8c1488468443ae2a4b0c3cc2426b91c81a8228e125050e922fce05672e010e65247709fc4a7b856f1d
SSDEEP 98304:QOlxyx1rYP44YaQqtGeIEAGoZXvFYfyCu:QOS7dqtGeIhGQXNYfRu
TLSH
T119166C02F6408039FAD201FAC3B64978EE789F141389A1D383D5B8F96B765D2783675B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaGXSetup[1].exe

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\S4MXVBLB\OperaGXSetup[1].exe
Size 4.0MB
SHA256 a2d94cb65c8e0a5f642a50115acf26b5ac6f9a8fc70441d110c9b07897b34f28
MD5 42edbd67f3a72b63514da9540fa18bce
SHA1 0818ad50d224b1546eeb32bd0da42e2eab707755
SHA512 ee92ec08582e2e6e5e4acfbc8679e19755dffac1c79162ab023e8cd31e0cb3eb3501908043fa457f0acf15677954c4903f7a7926f8b1447738dda95ce83486f2
SSDEEP 98304:KAA6/Nmr00cIaiKOefiFH61eN0xHHLblGZy:fFmr0BYKOhFHOeNyHvay
TLSH
T1A2162361BB80C8B6D6A321320FA4F76982BEB1650F765A4F73D40D9E4F70401EA39F56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GlorySetup[1].exe

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XDW2KZVM\GlorySetup[1].exe
Size 433KB
SHA256 7baeed12fb8cdd76d09cd4cf51c0d72da4743af12cf9f5214363d2cf10debcfe
MD5 f707368c667af02120b57d12e2e02542
SHA1 c88b87df1c0dc9b01b9b1bf19087f8fbf30f1392
SHA512 50655ea1d828aec700cae3d6582b897c5bc4f792ec67563ea6124d33824fd3a67965adac72fefddcd49ddfc23372f4bb0580589a9416271a18dd4e5289892817
SSDEEP 6144:WuRp7JeAjvAGGeedCu5LsL4tRkeXJwLoArY0vc/PPv/UKyy8aFsG2OZvwc:W6NqR5LOwk8+F1vc381/Oh9
TLSH
T12894AE15EAA400F9E1B7D178C9634502EB72BC5E0771ABDF23944AA61F237D09E3DB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log-conversion[1].json

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XDW2KZVM\log-conversion[1].json
Size 16B
SHA256 6489d6d7a33c5d40e18fc61eeb6c34c341279ee61816394dde5189aa4ad8fae5
MD5 3a0386dd403566b954d2c0610133f6c8
SHA1 b5cd90bb66e6a329a5d5e002ba4b7130f944c2c4
SHA512 c34ce1208cd675417059efb86817dc4a548f43bc6d9de9e364ff02fb4c4019a07933b14e57ed875de681a9cce651d403f35be0ad1328a3451e079813a437af17
MD5 SHA1 SHA512

Submit Download

snapshot-new.baf

Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
Size 20B
SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
MD5 7177cd1b3e21f48a23cb47dc11b36f7b
SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
Size 215KB
SHA256 94d5beeaa42bb9a2b6142bb1e3b7e59f1cc6d909d93494a42eea19b726296a65
MD5 196ff7e43bd1f169c627772dd5a2b90e
SHA1 c46d4103542ec03d9d08c4824f5ef749e370ad23
SHA512 5545d764d7e83e24069048147de9f17de3a2d28530ef56c27c41bd59e922aaf6765c0b520b3ee5f18fe4d66e725ff6c2e79cdcf327e373084179ec7ecd3c9b35
SSDEEP 3072:o5MGSTsdxN7wEQml8GUFQkk6wR+81C8je2mPB0bkCHIdc8iosxugMIH5n4FGx8k:WMG22xNnhMfv8E8j4PBxCo4B9hl8k
TLSH
T1F72423B770C1A33079B91C0063526E2E56B18F8499B146A2927F6A81CD3FF9EC53AD85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs.json8e4dc1d9-e718-4843-901f-efe3497b922d.tmp

Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json8e4dc1d9-e718-4843-901f-efe3497b922d.tmp
Size 1KB
SHA256 20c2f80c7a4f96c4ae515efd96b8fecd3e4b3d92c1b35cc100415e672772fdfb
MD5 e71343b47fa1ffc532c55669eb5e8d96
SHA1 b8de58689f49d3d205c4d48dac3e139f29d8f75b
SHA512 59c2d861989f41eef97054c989d5b6b7ab6ddd6777c66e4a65e4e525eec184597d593d4f6bc2fa061cf568fb059c4ed98b4dec92322e61cc3c3b21d94f9f862c
TLSH
T1C931EA3451164035BF22D36FEA9B651973230803D07C74F8A6FB0A2624DBC8A277BD1B
MD5 SHA1 SHA512 TLSH

Submit Download

Opera GX Browser.lnk

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\Opera GX Browser.lnk
Size 1KB
SHA256 df760cb191b8da65f9010b66ada23d8906767c924554a0cd45b3436131d1b26c
MD5 0f7f4a88d9f071831e74c4bbb02c2768
SHA1 60de250276647dc86669f933a1dfeb03f4325a6d
SHA512 ca432798a04cb5b1e0fd299dbb4fdf13c705443d76839c9c213389e09821290a12b7a0f5e04dfdcbfd55a835a6bc1f6a2662bfe4812bd5f8bdeec3678e4225b1
TLSH
T10C2121092BD82B13F7FFC23A057E7A39817DB841FB268E0C015092481DBA542D598F9F
MD5 SHA1 SHA512 TLSH

Submit Download

additional_file1.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\additional_file1.tmp
Size 3.2MB
SHA256 8d1e4a8a13191d403e17a993896355662aa334be3bc865e16aa7286096ae7ee2
MD5 df00b1ad96beedd4a1c6e8867f1bdb40
SHA1 aec83c0d6d477b8b27a0a0c4ebc8ca484a1a713c
SHA512 e5b2c5c814b59d938fedcdfd38261733a5190391e7955b43d30067036b2c6ca2dd23faa02c470893c47dafd2cfca0506ba927314d28515a4e591f07d8c682e69
SSDEEP 98304:UkioEBSNtcAGCGAcTSTiEQxHfm4JznCxL:UuncAGCGAcTSOEQtpJ+xL
TLSH
T139F533337A81C431C16723365CE4B3BD627D72616EAB19F337940F1DAF205E2A369692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\assistant_installer.exe
Size 2.5MB
SHA256 47022db9ccfec3e7e2d7e370c634f8ecd709a52c998d50a182108b0ef98cc0be
MD5 e1e458afa892c4ae6ffdba54a638061b
SHA1 3fa98256dcac016d8b8e6233db6d4efa20c779e5
SHA512 a8f64cb0dec68897f3ac4acf3f26b00885e43720709e57d2c0449049e52bcfc7ef8d1f7e8afaaa9a3df297f165538691ead5fa018e3a89ef0d3f56d4827679b7
SSDEEP 49152:273GDmmLBwWDPzS4T3hCC2Y7nPzJiNgsd0iDtG1Q8YX7e0/QDUA:2IlwoP3TRV2YLPzkJOiZG2LX7e0O
TLSH
T152C5AE01B86090F4D8663172311CAF3F9E255E169B32D9C7DAA5BCC46BB46D2223B35F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\dbgcore.dll
Size 238KB
SHA256 e4e5cbdd1d1da29cd7bfa36379824041111c9f820c1737614fd677e0ca38623e
MD5 bde481b96cddd44a861b3fd438f4f01e
SHA1 ba4dbb4d56f22d5386155ea9f11bca61991c15e8
SHA512 bc0fb79b161f437bc2546e5a2da6886a156ee90a81a823fb5977046599f09fc99dae4b753d2ede1413aabd168211a925cc15bfe4bea8f8373487904d7f0aa50c
SSDEEP 6144:CgIASx0NdOiN9a1WpPNmiFZr09fgPczwishfCpkIJnwsnpb/xetMt:SWDFDi7yIJnwA3aMt
TLSH
T1FE347C61A6C48475CECB11B4724C7A3682FDD2B223E080D392549BECE9656D5AF3C2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\assistant\dbghelp.dll
Size 589KB
SHA256 5ae4f4925678573357af66ad2eb5b99e1cd84d33a98aa909af9683fb902277f0
MD5 40142fb9859d8cb361902c2f729b2393
SHA1 15464a12d103fc61ba4037ba99e2a0438d5a91dd
SHA512 de2de4377d1a35b6cfb059e0b1bee0da54c638b925c6dcd60e39194ae8c96d0cbd16d00b572f0655567da412b326379dab4ceaef76e61e2266c426dc63c7e744
SSDEEP 12288:0Ufvs6QXZkBkp5qbhmJLKAilH77ht8YO6EIJ:TfvfQXZkBkp5q1mJLKOYOc
TLSH
T193D47D71A9C04074D5EB22B0296DE73987BDF6614B3091CB63444AEDBA607F06F3A397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\installer_prefs_include.json
Size 342B
SHA256 ec27feb66cd089e4585052888e70889e760b000391b9b2041b353be5c5f2f906
MD5 4b4ba5c02a0a19e8f03114f60d055c2b
SHA1 816a68a940d2a11c3559d9e3d93f6755ce407b10
SHA512 a18150a041c490f13597906ae991a38d8ae8cf276f655661ac6b47a0fa051598b239bbb515b0d81cff0edf44066dfbfdf7f8677c8647d24824c63d7749662d8f
TLSH
T18EE0D804902AC0A95775524F287631C841A31602C5F5B89C639666210579E1525FAE4D
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.jsonb1989130-f9f1-40a1-8c41-6f2f14f1c914.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\installer_prefs_include.jsonb1989130-f9f1-40a1-8c41-6f2f14f1c914.tmp
Size 357B
SHA256 6c34247b816da38a5dc8b589326f3ec945cca2205dddba91aa35f7a6a7d058ec
MD5 44a6f25a6af8866c29016ed862e47c2c
SHA1 a63f9a4e4e99aa5b79e2c47257c7472b041406f2
SHA512 44f7c8a334ca5665a3ebc7d1dc1dc6bbb5789f38308a97a7558f35e1bb4d01207be35731408887735eec3cfa904ec634b9f5f3dcfb9c287241598eb2b7101bcf
TLSH
T115E0D804902AC0AD5B75534F287635CC41A31A02C5F5BC9C639666210579E5925FAE4D
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.jsonba9a004b-8a8e-4f20-95db-e1a2561fd220.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\installer_prefs_include.jsonba9a004b-8a8e-4f20-95db-e1a2561fd220.tmp
Size 1KB
SHA256 446a4b3a7f2bfa8f49795557a5584417915544cf98f8bd2cab19490320d49285
MD5 e88d0da2eb1ddf20b76f05e2721e4639
SHA1 cffe1d75a72d5dd2789d1d7e052ecaba3656bb26
SHA512 7e807a1c474be48f2cb9b116e9f026933cd9dccb019ae18e4d7e2060e681e011313abeadffe38b25f78c0d8601199c35739d4865561e7b379fa964b8d6581b75
TLSH
T12C11602951159051BF3AC35EDAAF264AD283450385B874FC91E3083214EFD2517BAA39
MD5 SHA1 SHA512 TLSH

Submit Download

custom_partner_content.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\7a793160-7231-4922-8d87-2ad432f31d0c Opera GX Installer Temp\opera_package_202611042247211\resources\custom_partner_content.json
Size 245KB
SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
MD5 f68d0557a8931cf979a21c59c1bae019
SHA1 e0bfe0f9a947916ebc1fffa52d7dff524e76c2ff
SHA512 2f0ef8e3e11daf0ad266c4fdc35d1e6e2215556115054f635ef9199b03a6924b1aa989f052461d59b9cdf57ec5eafa918e806fbf2d242f63699a8a65b0328ecc
SSDEEP 3072:iwK+GwaiHEaacjK+eMuhKS1d/ttUYD6W6Z2NrwYrVZCs0iUCabiKfAu/wX2OCy:XGuE/c9L+1btUYOnkrPVZCCUCabNU
TLSH
T1BA349D7BD4090CE327A561E68879611EEC21D26B0CE97C257B4C254C0F9ED6F25BC2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c8bdcbd-4b5e-4607-bbcb-431a74aace98.tmp

Path C:\Users\Admin\AppData\Local\Temp\2c8bdcbd-4b5e-4607-bbcb-431a74aace98.tmp
Size 14KB
SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
MD5 6845fc58fff640f3cbbdf4b2ee00be8c
SHA1 883c95059a1c7ff393b6908ae577ebf92cc853bf
SHA512 cd103cfa5c51f69f18a72acb51c7ced52b59afee1b6639e6f9b66253f1a68e6a8dd9789a2a40012571143ff9ed7903dab92ba5bd82f2c0db7f6a8a072ef42d7b
SSDEEP 192:F4nMSME5b5cHuj7mSNcukNm20g0Eikk6Bt6nUxylKctW6IDIkpH4ubxwddwtTJlJ:o5mHK7mSNgwk/4NlntW6IDj14qwdwNJj
TLSH
T1D252D016C81E7F70FB48927A8449454919EC9728FAA6C77776E7BB45CB0FAC2F42240C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ea45204-8ca5-4df3-983c-c637c652a4a0.tmp

Path C:\Users\Admin\AppData\Local\Temp\4ea45204-8ca5-4df3-983c-c637c652a4a0.tmp
Size 3.7MB
SHA256 ddee330dfaf285dfb3e7e12600af030580ffd36042a37e1515dc030ceaebd245
MD5 dc949b486646dcfe52d0a2c2b5070ebb
SHA1 7bc1675d0ded9c941a1d7577a3d65ef8ff280953
SHA512 7442f6d22ed660571c6286b5d32d5dbe694a4bc69cc2b91c756b9ed16047992008f4dc92f31045ea9534406d676c50f2574adb54e0ef85647ed63c90f630afa7
SSDEEP 98304:dhkwNSNW7uUSKQExGB07RFq3iWXYm1Sd93TB:dWwNSNWSLP4GB0rVxm1wF
TLSH
T147063334DA3498A0CDA6D2F2C9222B891AC0825ED594F92F3B6556CB34F3DD4530AF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56781f4f-fcbd-423f-8f11-3c811000d710.tmp

Path C:\Users\Admin\AppData\Local\Temp\56781f4f-fcbd-423f-8f11-3c811000d710.tmp
Size 389KB
SHA256 9a5fa2ba17600acac359d5eddd7dcb05a93ea1f2a93bc5d322435ef98619242a
MD5 4eb37a6b25daaa63343f5223c82e31dd
SHA1 b2835fd7f45181966659b6c0b88346419dffa51d
SHA512 7cc0ea8fd5bade48c4d7af81541c807bfc18d020c8e026ee95aec39a789ab8b33b7a8f2f572d92fe2f2ff4b9f83c96194c6bbf7d2d9aa602f3c2ea9d891301c5
SSDEEP 6144:Dp2tOyRFOHTBP/gnIfOhvHMnyRFf/4p2t4f45c2rRs701byGm8WjGcAO9jQlqj8v:Dl2wTZhoMn2N4jfy7FsjnqcAO57qb5
TLSH
T1438412A6C12F381CED6F67B164159E16E60E400146F23EBB3E7C2E82557A7D315FB608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e3b8e94-be17-43a0-947f-23d6ec400c30.tmp

Path C:\Users\Admin\AppData\Local\Temp\5e3b8e94-be17-43a0-947f-23d6ec400c30.tmp
Size 472KB
SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
MD5 a5c805a3fd291996bf5394cfe97c872d
SHA1 c2a9ffe8edbb59024902d235e267096846acd8c8
SHA512 c4b0f3f60e8f67ab640ebc6411cba992b2c4e796f7168edc5aeefa4b3ddbc1dd91539dfd1dbc29b6ef0e6413eafd6224a2e01cef0a8706d775da345ab1463839
SSDEEP 12288:rK5FbrrK9ssxYE6yvpQSbNcwTVq/8m4pqLmyJd+:rK8xJRpLbSY40ym
TLSH
T17EA423DDC8E80B44C906F53310A53F92EC0F1D07806AA3679E7A633A97796CE6F112B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS4E9B3669\installer.exe
Size 9.2MB
SHA256 881306fe79419ad72de3a450a25e1a87ef7c087cefe121bcf452dd5d4eead7e3
MD5 ba6c3bad1d296f280b62edb57ca919fa
SHA1 64a9b2750565f7542c2fddb00bee3eb7e0581297
SHA512 3fdfef89288c46af0709094dd5ea98f131a8ee8dd60b02e4fd0d6e007ba3f523f3e995a24ec482b3e463cf5d539390d66b1456d4d90d3dee95d34ae31c68908d
SSDEEP 98304:6PP4QCd7zQL98mBM391w10RAab6kOspnGV2xKFBI3++wteEm6:cP4QCdnw83Gau6G83+Bq6
TLSH
T1C6A69D53F3A601E8D0AFCA748B7A563299357C4A4B34A3DF0A943A250E75FD45B3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADRD2F7.tmp.exe

Path C:\Users\Admin\AppData\Local\Temp\ADRD2F7.tmp.exe
Size 456KB
SHA256 8dbfb95ec17e37b886d788de193d50d12301fec48b67f6c64a5df01ed6b41cef
MD5 8847274fcbade681dc5d284f89ddad56
SHA1 2152eda4f3002122c21716d201e1fd7031c24f2c
SHA512 4db3bf6bc773a68b0efc27de3e303ee057cefa94dd8c721232117593e5f380b83b130072c47be1960927198c20df1e8bb7acec092524f5483f63c13279139f3a
SSDEEP 6144:ttBjmpAjv53denSHq67r/i8qdsIkFq+v1IpPec35DljfyNwLdeZn6Hk7ft:X5uZ67b0xSxNI4y4wLdeZ6Et
TLSH
T19BA4AF15EAE400F9E1B7D278C9664502EB72BC4E07719BDF23944AAB1F236D09E3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinDivert64.sys

Path C:\Users\Admin\AppData\Local\Temp\AdRejectSetup-98F677A1-DB51-4B3E-925E-6146A0851A0A\staged\WinDivert64.sys
Size 91KB
SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
MD5 89ed5be7ea83c01d0de33d3519944aa5
SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
TLSH
T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinDivert-LICENSE.txt

Path C:\Users\Admin\AppData\Local\Temp\AdRejectSetup-98F677A1-DB51-4B3E-925E-6146A0851A0A\staged\licenses\WinDivert-LICENSE.txt
Size 59KB
SHA256 14a0cb5214d536e4fdae6aa3f5696f981eeda106cd026e9794bba489ee79d628
MD5 bbd7a5894dfb29429e01764c2b3e6265
SHA1 9c587dc1b47c857528368ca72d24ca57f7087e26
SHA512 300bdb513fecc9f3d212e99ed4daa34c24973a3703afb9f1c6b884e18d79f38d2611c07b9752a1823f673dffe87d294f86602c3a120df28de370c420a0277dd5
SSDEEP 768:uBv5Oe47gvUo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7MmFWixMFzMdm7jUS:uBhOL7gvUhcycsrfrnouRFBzMU
TLSH
T18B53852F774413B201C206A16A8F68DEE32AD079726A4464785DC15D27A7F3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

miniz-LICENSE.txt

Path C:\Users\Admin\AppData\Local\Temp\AdRejectSetup-98F677A1-DB51-4B3E-925E-6146A0851A0A\staged\licenses\miniz-LICENSE.txt
Size 1KB
SHA256 0115478d567121238cf6cc1c0c361926cf07a49d9e4c9e66da97fac6a01646b3
MD5 292e2564dd2edd7c3ee1eb1e50480e25
SHA1 7d3772817ef6dd00f95c6841e07552968eb74600
SHA512 7b5a84b7c459519aaeccd1d253fbf035c05a309a1cded1641a814bf35d927de4b26b0cf8fd2f087ac17a422c587cd848533098985e469d3513f719a2913d0929
TLSH
T1D721A71F729603A32C6213624569E8C5F13FB15A7E6F1680345EF244132B46CC9FB858
MD5 SHA1 SHA512 TLSH

Submit Download

allowlist.txt

Path C:\Users\Admin\AppData\Local\Temp\AdRejectSetup-98F677A1-DB51-4B3E-925E-6146A0851A0A\staged\lists\allowlist.txt
Size 203B
SHA256 b7f1d1534688b789ad5691cf93d2cdcc6ff17b19236a28345f60d9e676534d02
MD5 83172adaa6a41f2938bb75eebedba9e8
SHA1 cd8b76366e831a81bbc555931d8d7782b7b8506c
SHA512 71d19d2810780689ac54777c9c71d957ec909a8069f256814f6b473f14734985ed3914eeacea127813e6809423b042300aea68672ebec445db01ebf5320a1ca4
TLSH
T163D0220E0396C2E502D483A83A94BA0BA8AB93D289810CC4A093806228D15108A88AEC
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist.txt

Path C:\Users\Admin\AppData\Local\Temp\AdRejectSetup-98F677A1-DB51-4B3E-925E-6146A0851A0A\staged\lists\blocklist.txt
Size 204B
SHA256 1406fa4cf20a7296160a511c512e9423be56e1e2e5a819a59d18345d3fb563ff
MD5 92e922e02aaf8ee040a0907854cdb5ae
SHA1 ed032ef054c96b5ced23bf8b13319cdb0b5cbf12
SHA512 938967d8eef6d6e9e82c463b72ef32ac3343270e534d62796821429c3ba9f9bf84d37960b68ec9bf1cd6c7e290066f0e63921e46c21c762525bc5577470fa600
TLSH
T143D0220C2B7B88A180805269AC1E18F7F87DD80B0CD83D10B0C943801C8992930E47EE
MD5 SHA1 SHA512 TLSH

Submit Download

Glory_CreateStartupTask.ps1

Path C:\Users\Admin\AppData\Local\Temp\Glory_CreateStartupTask.ps1
Size 1KB
SHA256 a052536bcec47a3b2c63dcf49123aa3c89b9c01535a6ae02858b8d15e845c925
MD5 40c553932c268068f61a2977d4505851
SHA1 14a39d9639bc40b0b2ec832aeebd15fa451e9df0
SHA512 84de30866e9460664d3c4f95c209dd595d715cb4e9ee975e21e75cde71272c192b99f768f8668b6a1b20a9962fdd2ed5f66ed7519ae162fd7a178a2ab2d482db
TLSH
T1D8215040BBF4151CF2F37B84EAB814259E2BFCAA5836CD2D1150854F15F1E8189A1F3B
MD5 SHA1 SHA512 TLSH

Submit Download

Glory_log.txt

Path C:\Users\Admin\AppData\Local\Temp\Glory_log.txt
Size 128B
SHA256 d19f804f951e6f513cfeb7d6c7c27ec68fdcc596f10a2639f8918401b5a101ea
MD5 b3fdaf9d501c3ea2d53a2a651f4aaea5
SHA1 491932a562bb6323afe143c28124553d90140c6c
SHA512 0e5564aa1fd1929122a566c61b5a3c2081fd959a0a77231d47f57ecb0b74ec6dec0c3debbe9dbe70f9dc23eb7292a6bc6f08fa15d7fd710ea0ba9dcd5118ad36
TLSH
T1AAB092A03DEC04F08ECE09540C4703C4DD520B0841FEF04007D4432CB0C3C8E612121E
MD5 SHA1 SHA512 TLSH

Submit Download

Glory_log.txt

Path C:\Users\Admin\AppData\Local\Temp\Glory_log.txt
Size 170B
SHA256 a2ebfcec24f3c0b70f3a2a367025575e5988a8b444107ccfc3af0a3b7a9b2450
MD5 7e6da94f953820391eeebe30fa11b5cd
SHA1 7a4b9f5ca373e7b8c6c786585faa06fa47625632
SHA512 3e8e2db5cad83ffdd0d0309063190e794c334dc1386bf44f048eada03efcaa024f541c80fbd1dedef01f3a003a5d101f8193319e937150634f39ec03cfa246a4
TLSH
T15FC001A03DEC08F08ECE0A680C4703C8DD620B0881FEB04007D44328B0C3C8E612222E
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_fqgfr2ch.og5.psm1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_fqgfr2ch.og5.psm1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

aichat-startup.log

Path C:\Users\Admin\AppData\Local\Temp\aichat-startup.log
Size 411B
SHA256 807844e826b1ef57a48d42c72a1c245c5e5e16376d80ffc3b3651e391a733ab0
MD5 a81e435acfb1a0bfd7a1926d98992329
SHA1 623a1eed6ea6c3feb83d56a506b92ce07fc5836b
SHA512 bef88d8a9ac8ca4d675a7318bcecb5f42dd71c2b6a013b6e0bdb40dab878014a43244f3ab3ee4c4c8e90f829adce2423f74d1f0fa389fa929fd75cc9a72c2794
TLSH
T1A8E0E5D04EE1595981930071E695C2024E2EA708CEC225241F1644FA35371F1A0F7CB1
MD5 SHA1 SHA512 TLSH

Submit Download

cc237815-f8d6-4c48-bed2-629bfee263e2.tmp

Path C:\Users\Admin\AppData\Local\Temp\cc237815-f8d6-4c48-bed2-629bfee263e2.tmp
Size 46KB
SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
MD5 8485decd497d32d49f8a6b83d42c7635
SHA1 0ad7b9fdece0998f1b66a5979da412b9aac7e3a1
SHA512 82ffe4eba0d7defaac0b5f034b71db136704c919f5fec240fb1496799d41efb56857772a05aa5013e8d205c7bf8775f6ca59f3f3620eb256dafe42930eb259e9
SSDEEP 768:DDKL8NQZ4B9QrLRIrfyyK9R5dWLKrbIK4a6KsV2EjfyyK9R5dWLKCoIR4aBKsV23:DuL8NQZ43hPU4kbIK4a6KsV2ELPU4fo7
TLSH
T13E23E16E8531CC30F5754E31A30582DBB12592E4C537397CF0CCA5E1AD0376167CA5EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf3c8e15-6ca3-48e0-b4c5-986b174598cd.tmp

Path C:\Users\Admin\AppData\Local\Temp\cf3c8e15-6ca3-48e0-b4c5-986b174598cd.tmp
Size 1.4MB
SHA256 a75f68026cc1314a842f2b95800dd32a2c8792824be753ef40720af6beab58c2
MD5 91c91327f43d93323d7c3ef936c8b672
SHA1 92340b4ccd20ccf61fbe3ffc8a2d1db0ed88db72
SHA512 dc2a2f50fed037a55c599751d63e637bab27722b22e7abd78290a1e4f524c899ea12abaa53588de8a9ae97326955d317992dd2dc903322d1e2d58da91b106a1d
SSDEEP 24576:ft1JmaVWdnPfQTeH8SymTFiqsmEVyQ6noNwA+KuhpXdD4xKHv4hwpvgxXYBELsmc:ldVWxPf3HViVHNwA+NptkkHQhmvAYOsd
TLSH
T19665339221712FE5661B67BCE2337676581D49B1214E7BE682FC20A0FC035A74F8CB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f721f109-87e1-41a5-be58-21e24547004d.tmp

Path C:\Users\Admin\AppData\Local\Temp\f721f109-87e1-41a5-be58-21e24547004d.tmp
Size 3.0MB
SHA256 73222b578c4d71d0c3d7daec8f9c34a7cb48974961a972e39cb58a7a329e3fe4
MD5 da9812fade36ae61d71a84f064c815a4
SHA1 07e3a25ca018645d0dfd98a9605c1e8ac4e744d6
SHA512 998d0f63c24a4342ef36ba21614bd899c52d09cedd7524d55a9b2d808ef8267b4e7e4b0146a1e89d835e54cbf31e668cacf9816f7896c02f24e8de6c0fdeb7b0
SSDEEP 98304:8K0u+wKAswNBbxolE0+wEZ1IYnYLiT4XWp3:8ru+BAszE1tdYWxp3
TLSH
T106E53335B37B04ABC0364EB60E494542ECE8796285CE4B4BAC7E91B36FAD012C7BD553
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsuFF96.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsuFF96.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_11961632\CRX_INSTALL\manifest.json
Size 1KB
SHA256 a2829f3f71f076f86b10bf610d9d35c45d8b653ab501c9cc5d7fe4634cbf4f9a
MD5 e053856640ab7efcde376ebab6a0f07a
SHA1 6325f068e7c86c33bdef1fcd2eb51008ae919e76
SHA512 caf3631a9eb75251508b1d67408df5b0be12c617b2be468626340285d3296ef7cc7e1a74f94609ac1509672745b89ced2fcd31ed0f859a5d94f5fef683e8ede5
TLSH
T1513161BED8DD8D32158599798CB66713696A0A870FA87D0837EF408C0F0CA1F10BE15D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\de\messages.json
Size 395B
SHA256 7f068365742c910bd20d60741e89473e3b422ca92776fcfe7db1529bdfcb3efa
MD5 766fdaf4d7c56e476b8b7cafd7ee5175
SHA1 e23ccc85412477a731561374d0829af452473d64
SHA512 99248f5641eb078ded03698236496191a5e48789bdd4c015ed181d433d8b54f1ae95a851836d8bd81823edead767c13897105c6b5234547a1d223688427bf7c3
TLSH
T161E06D04C8446B3B459E8265FEA4BBD0AB742B5A3260FC1829C891EC0B49FF244F2398
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\en\messages.json
Size 396B
SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
MD5 f4b909ef13d8b4dca31e542f14ecfc55
SHA1 4381ed812d8073b5bd5b873b51697364a1690772
SHA512 bc0b136cd2c055d27e7c8e4b8aa5540f3926df1e3be0f6b25d14c14ddb72602eef8a4a60e4c15085d63610f6696cbb12feb8d21447f35ec844997c6242be1a35
TLSH
T133E06D0489049F3B419E8269ED68BBC4AB301B6A32A0BD2929C8819C0605FF344B23D8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\es\messages.json
Size 398B
SHA256 d2c36a6b4b6535152df5adba5c9d85c45ea6898a1b170a4f795c228931cacc5b
MD5 f79e9bef10b6d6de4d7aa6f3d18de774
SHA1 956274b413e77dfd9390e029e0af91607cd41f26
SHA512 77351018e202d2d263b3a4582268a9f7259afe671275be993f644064d5a00e52c51655e782224e1786b71c1b8dd2aef9a5e1a6141e4476a2c3f75219ec21a5f3
TLSH
T193E06D048C545B2B44EE8365FDA8B7D0AB301B5632A0BD1929C4919C0705FF284B23D8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\pl\messages.json
Size 401B
SHA256 c6e32b74d1b21921946f59b9a12cc7b24086e876608d3db3f29628c35b35dbee
MD5 600e8f7cbbdf2f674b6cf4b2a59af0ca
SHA1 1b6ba511e40c3ed8bbe9cc373c271550418860d5
SHA512 53cc37975ec5de9a5424b66729b45cd86a79c2061b42089d0e2d3aba2fb161f3dab90bdc05e91cb09991bdaaa408898370dc18462111b625f6fc8773540cea20
TLSH
T130E09204CC549F2B41DE8265FDA5B7D0A7742B5A3160BD1A69C850ED0B45FF344F63E8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\ru\messages.json
Size 463B
SHA256 5f08e78f50623ca8140af8d02eb7fd7e56ff8e9538e4449f7ee327a7b2ef292d
MD5 774ce48960c8e7f4a5b2f6f2240da471
SHA1 652d72633c737a5b5df81590ea7ec550638c367b
SHA512 2e1cf5b930fcd8354408c4b824193760d74b1507983a172f20e559448b6cf033d1f4173f6f9910e3cee96072bb7452e46c1ba50c72cefe5b4494f676e1fb4029
TLSH
T149F0A7008D805E3B419DC256FD6CB784BBB01BAE3550BC1569C456EC1A45FB644BA3E4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\_locales\uk\messages.json
Size 410B
SHA256 95ef7c34001a60c39cc5fb3516081ff901bb65a08db6ed00acd70afb48858675
MD5 775abecb046522d5f384385f523c2cc5
SHA1 2198319f537f9b8eb34c9942ca35a7ffb6daf6aa
SHA512 fbda7582fc10fbffe393b1ca0d1039f44e4de76359ddf37f5d6df81a8ddaf463b38dc32f76a2cbee20fa39c22f68e09c40eff1ef9447fc027e2c4db0a452248b
TLSH
T130E022148C556A3B51DE9221FC64BBC0AB300B6B32A0FC1928C4A0EC0748FF244F2388
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Active.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\128\Icon_Light_Active.png
Size 2KB
SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
MD5 4805f857f6ec86c67d6b63ac902f4752
SHA1 9888b818fa830bcacaf384b70dce4c0afb0baffc
SHA512 6da9c63f4896dd278b4a29aacd523f052b98c3bf2426fe8b1aaa79a47e13527ab2834744d713964605d2430e96d94d3ebe9526e63e76bcdcfabbb1cadc1a95c5
TLSH
T1C4515D49BFB8561FD4E8F602B425092AF5FB645094829981F3D3D09B5F9C414CEDCD10
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Available_Red.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\128\Icon_Light_Available_Red.png
Size 2KB
SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
MD5 16ae2826000173329d9ae233205c3b45
SHA1 1ebdb2024aa19413be8c0382b9880b39020b4019
SHA512 444f955355f080376394e4593f98c81a705a44f8c4bbf1d149adf0d2a75b9b1efa09da742fd2846e12b1c7e2aefdf5bb0ad0b641743933b353033bef8607f3e0
TLSH
T1CC515E91DFFE269C4ACECE6B18592266219D4686DF42343187305056272EC83FE7B55C
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Available_Yellow.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\128\Icon_Light_Available_Yellow.png
Size 2KB
SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
MD5 690ecdc93f4bb7d92dcace06972cde64
SHA1 d7a6f16e34188192e247ae55c29d93d6821c7dfe
SHA512 0c86e835ed152a3c21232b1fb2e904cb28c44ede45908fb775dad250187894d13077867eb768a10819b0b93e935cde1aa1c86bfa6031888f4e720ed1059b4652
TLSH
T112514B9DE07D07542B13843842B67C2DA4321A384108153DAD8F4894A73FBE046AAB25
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
Size 2KB
SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
MD5 0566b67d5fa120d6da250a92577c8873
SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
TLSH
T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Active.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\32\Icon_Light_Active.png
Size 883B
SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
MD5 426980c9ff405355a4389dd121b31b18
SHA1 ec3e88aeb91bfd7f5a368c29de27b7ecd7a793a5
SHA512 8d14e5b173374deebe3adae31514b40227279a3eb566ba9df121deb77905ba7d011046830d663b53d7553718ff1077ef4364e504b7766c40a8bf6c9695f66ad2
TLSH
T13411DAEA276458BC578E6E7960C601E87FA31B80C476327CC814A41FB56C40DF6DB30B
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Available_Red.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\32\Icon_Light_Available_Red.png
Size 895B
SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
MD5 5e8ace45e9a0da06dc1cf459448282d3
SHA1 4bf77fde79bb7bbf83d6a970454d3f37460bf82b
SHA512 04550abc95d708b831c152e9a29d86957aff1d6abfab7dc3ab1eb389c6e395ce6488ac24ef17c958c88b911a3fcad4551a6d6774c5fa64fb02ac78d01c4fef48
TLSH
T1F51163D7EB2F68C4240D8C365D665AF332483CF79D2811CEE6464421AE29A4899C56E7
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Available_Yellow.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\32\Icon_Light_Available_Yellow.png
Size 895B
SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
MD5 ca414d88c570b79af1635441d40df0f1
SHA1 e79d58ba493c2638923017e263405748377a8307
SHA512 836ecd41819a40555fbc40b504dbb97c5a90d05c93fe9462ff5ec7348790ec6d25cc53f0738e90694ee416f73970829114ffea449145f5173388676c01501673
TLSH
T1D611B7855F459677827747516A3FE727F08C2CE822B1411A6A89503A162E065820620A
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
Size 962B
SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
MD5 a31c3c0f384b4c1af2e9d8bc153d3824
SHA1 f2174d637bb60be75695b82639e9bb0ff0fa9951
SHA512 7cd09bb9b3b357f4ffac7e982a676d8f92ddcae8ce02192dedac9a7b3f3580ce2b1ea8be08a041094a45173d279076d19d3f5e6cc99be74d483921030e09edc3
TLSH
T13D11FBE6570FFFB289DD4EF87BCF0140107B09BA0B2069647C975A15557F52D49D0127
MD5 SHA1 SHA512 TLSH

Submit Download

window.js.LICENSE.txt

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1426475235\CRX_INSTALL\window.js.LICENSE.txt
Size 1KB
SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
MD5 56868fb04ec3f6436a450b0be0c49947
SHA1 3114eed847366239e1b72b45af410bfba81bde4b
SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
TLSH
T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
MD5 SHA1 SHA512 TLSH

Submit Download

icon-128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1784742361\CRX_INSTALL\assets\icon-128.png
Size 9KB
SHA256 8a909845237ef287d26ee417ab15fa924b0c16351f5b31dea656940bf09111f2
MD5 714d83ebcf0d44db3c17229a0c7c7c20
SHA1 76f5c5db05ef94e27991bbc863f1c5d3bf698ebd
SHA512 dd5c618244d4c651159a574552a4a24a0520146b5569e0bc2bae5f186deb984eeb56fd65eaa8069619662ea6617e39f180338559379a588e82da32927765c8ec
SSDEEP 192:5INFOyxlcmPVMZD9CAfbseHn8yuLkQ2VhW0kcz3Wi/dTitL:5yFfxlzyD9TfbrH8DL0XKi4tL
TLSH
T10212AFAFC9971DF4390FDB72A9644E0B5A0B871002B4C23710B3AD807259AB99D7F247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1784742361\CRX_INSTALL\assets\icon-16.png
Size 654B
SHA256 8e6ff8ab8b4dedec067b7cb06d5f4dcad566d1174430f5e5156be4c196e6af66
MD5 5bb9e3c889a394940f016998909aeb57
SHA1 5c18907149a0dc8fa85cd7a6e2dc6d6960fe9258
SHA512 ecb9057608162c3939a775b7bf7bbcd9a3a3d0960f3eb236d3f457f61eff89b6e54458fc527c313c65173b7b8bb28a1ed800386d4f01f872cfc21f2e31162684
TLSH
T145F0233B2C556078DB2F6FF387701289D8A8024857B132F6C85281F9672E119439236A
MD5 SHA1 SHA512 TLSH

Submit Download

icon-512.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1784742361\CRX_INSTALL\assets\icon-512.png
Size 46KB
SHA256 2f0ef2b9ecaf5773ec985141a2020497348eb77e71fc852e5823313adddd96ed
MD5 35381b667461619e5ac4b10f20ac6da6
SHA1 5c8971a0c1392f09e26dd4e89e3e2901a4215f22
SHA512 21fb34dec1bc1f60605680bd5dde7d2e923890cf4b6d00a01d61fc3f62d47c03b83ef6b1c33ed1cb59cd52713c5fc4a5c8c27c948368019f3c2f7afc96b01b1a
SSDEEP 768:9N1XEEtntDO/T+IFYOiGeMoxUKA3VR8JJBXUTWV18BWU5vklW/rN2/4M0rTiT4tY:9N10EZtSRFXRKA8JJBB18AJWzM0r24tY
TLSH
T15723F1B7547271D186F40CE0B2905255F34C14FEDFB98EA4DA37048DFDA6892F689A07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-64.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1784742361\CRX_INSTALL\assets\icon-64.png
Size 4KB
SHA256 69d4bdc94e86a99d29d0d78300b246d08f4957b957cd81d400a2cff2ed815477
MD5 293091f5652231fa11205ec1450cb37e
SHA1 53ed57774ba7750a6026436cd2895898837dfd4a
SHA512 62e2f00df37f5e3ec81bef806df6678c4e5627a7bce7046c5d7f5d6a97d34ef76eda59bdc4c7b92a1f4ba1f2bd97ec61aae0b665099dbc4db189e062a96b05a8
SSDEEP 96:8s+qJP1bGy9TobRBxDKEqcwTl1MbSHxHOYmgw3FGQaaITc1ewj2SN:8byMy5obRTKVBl1MSRUgw3cQaaIIB6E
TLSH
T11F917DDAF430E97ACC23950B37581A66241EC5D0F0849B3F6AA8F4874C08E04EDA5FA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-gx-dark-32.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1784742361\CRX_INSTALL\assets\icon-gx-dark-32.png
Size 1KB
SHA256 7bafbbc53c7baf9cad8e417945ceff6298b6316dfd89f213f68accd888076aac
MD5 b7e0a5446467832c4be198548c089115
SHA1 b999c0bb9791f1cae67bd7d65be2ccf65821ea86
SHA512 8e0d2d787ce25be7a610b317c60d26a1fb4a0b42f032dc326ec807f8c45f0c035bbdf4ed1149afb0c9ea61bbdb36904b9ad602885750256882725ea56b1e5078
TLSH
T13031FAAED44678B80D0165DCD44E3DEE85BB88F6A7F31847861C2B3C05F2C158414E73
MD5 SHA1 SHA512 TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1989719789\CRX_INSTALL\background.js
Size 105KB
SHA256 a0fcb8e352a16eebcfc67a4d2358f9b3e1175abb0bc4e8a26e8d5bf8dc6aeca8
MD5 9555d3a6c6c68197b82716a2f05e625c
SHA1 9197006ac22149172e6ecb3d86feb292eeff686e
SHA512 14f2e76e48b210ca4053f6f3e0681baf464e08da826c6afacee5ba116c4e6f93bdeaa8f8ef752693e5409df894a98d644e7a55fce7fcd7b97a42c53d8d88abe3
SSDEEP 1536:EEHMrJtImIFyP1K7xCpjAdmFYd+aEZIuUoHlsosLw+YWL3FRmM:EEsoFyPqqFsosLw+bRRmM
TLSH
T1B9B3F88DB6C7F26397E3907A803F611AF23D2D14700D9414F626DAD1782658EA237F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1989719789\CRX_INSTALL\index.html
Size 222B
SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
MD5 c590faaff78866c962af44074a2da1b8
SHA1 418da44a933e3ed87a68b4ce849cab2c7917baf6
SHA512 c5185d1822035385753eecba19f278ee8adf06cb15424c44ef649ca5b77c728c9c929a91f5391992df4144cb0287647063762b15f79a47c39fdf86c2a673666a
TLSH
T190D0A7D2C861442C43605AB56D61621D480DB914BB425C007AD924B81CC5B469C56698
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1989719789\CRX_INSTALL\manifest.json
Size 1KB
SHA256 c8e33e8ad6143f374fce42d1da1d82aceef0deb8e99a79b2ab0c19022716401a
MD5 5660aee5a1e89152ebd58d67229f71ac
SHA1 e60523a134625e8aa1c814bba573d15170438605
SHA512 072981b557457c24376f42915681a2ef8f559e1a90f67a9d7cb463526ca5a9cd1df03f63470455b0588569b5d581484867873e18f7311d10a96a76dcc55996a2
TLSH
T11D311E51C47CAD7B15985A19BC360643DB646A875D207C4C37CF808C9F9CB2F01FA28C
MD5 SHA1 SHA512 TLSH

Submit Download

rules.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_1989719789\CRX_INSTALL\rules.json
Size 839B
SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
MD5 112b4a4c6143b507605be0de6f359ff2
SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
TLSH
T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
MD5 SHA1 SHA512 TLSH

Submit Download

main.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_2082135725\CRX_INSTALL\main.js
Size 48KB
SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
MD5 3aaf0b6a10ab3c0d020ac8eac32e415a
SHA1 de636ca0c3614ffda3d2db228ffcb76464a7a37a
SHA512 b99dca9df7b4a19cdd777b11590e24a7b37c72fce204275c9d207f9e7ccb3bcd3c38c5d4c27dd3194523cc53c5f26e5a056f1ef6d88bed3fc482e6d82d228bdd
SSDEEP 1536:un8okzEbWXxYNG8/A85DQqkslr46JUmC+0vzrzJYBBp+M:un8ouEMksq7RHJUmCY
TLSH
T1D22318992269787E0AC6D1ED926D1313552460F8681D84AC723CEFDE660FD82127CFFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ebfaf1c4dcf4f3b0255.ttf

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_256491166\CRX_INSTALL\3ebfaf1c4dcf4f3b0255.ttf
Size 316KB
SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
MD5 3a56dbb96ab7c12545cde2b328e8d6b0
SHA1 7d05d6fc506d0c4acf3b46bbf3b3f2b697cffa7d
SHA512 656f1ff17bccd0f616d3b618fff8b364798cf852521aec76c20ffbb28ffe7ed32e2209c60a51e99d1eaa91ce8e285c48ae1609b9d313eef54e5a47f89f2a180b
SSDEEP 6144:b0qqHV/dGkUb1Lij5nzfoFaF9iCsaadxvlBYidKu8eAIiIlQwfffffNQG62f:bm78b1ijR22WvAfvwfffffyC
TLSH
T1716491D9FDFD9D27B3882DF4CC28619B00F27724E86575426C8ACA06CABDC905A56E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_256491166\CRX_INSTALL\background.js
Size 561KB
SHA256 4761b2a40e2d0da01ab6e2fc7a22694d4964cf6738347874d6c9a8f7797b66e7
MD5 bfb9208d4db0259fb829a57fe5e2f43a
SHA1 7bb9583c264e9a3f09df07fe4b755a91191d6176
SHA512 767bc144c72f0e711770b02d599cd9a40adfcb984e98c4daae8f56f1d67e3c4d19e292d2da9e0ca1c0af12b822658149e68710eb53fa4b54af97a00342784f49
SSDEEP 12288:8/wEoRFJl8yXoH9yF/hiwRJlvJ0O5j+V72fvLL/OIMp8bDj:8/XkXoH9m/hwO0d2fvLL1McDj
TLSH
T180C45CCE31C3BD7743EB1292D02F1607B27D5859B44DC601E2A9C9EA7869489C637F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compact.css

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_256491166\CRX_INSTALL\compact.css
Size 46KB
SHA256 253ebedb6efa6f9f44f70a0807b3b6b98f749c30d11786f46d878596ac3d5274
MD5 4ea31805c3c80b263945e64e80b3fcc4
SHA1 2f1fe114ec25a80c565e46e97c08667446084af2
SHA512 9ea406be487c94adb991e89da4ab6b8e6ecdd8b46baadf1a036e0631784431afcc311c60290d572de3b897115d35259864a840ad572ed758c62f29fc992bafc1
SSDEEP 768:JZU3ZaTg5GHs0tLy5X2hT/69WXmjUitmjvGNPX22CJYVa1Yriub2IS06uvItfsKE:Jm77aB+PFnEvHAicf+uJpq6
TLSH
T155235280E0750172293FA67AE39AF74BFB5850466449DF5AFEEC118C0EC63B94271BC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

compact.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_256491166\CRX_INSTALL\compact.html
Size 967B
SHA256 aa4fe5f4f3ba3c9525f26863bd96d8193068e4fb0d7c1a10cea08af3107a39ad
MD5 973b6bca43673814315515b26798528d
SHA1 3caba19ff0fde98ff56b7951c25d342e0834c3f8
SHA512 94139782c3bdf607393f96420fcca1a05b196d0b50b8cbf5fc601a2e46c8145029fd74f0ee02f5d40dbd4c935e894425c2da16389c9f61b343450061b62997b5
TLSH
T16F11BAFB4028805D1BB40BE0BAF7B09CE46A640DBDD9EC90E6868C1158C4F72F519F85
MD5 SHA1 SHA512 TLSH

Submit Download

sidebar-icon-512.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_256491166\CRX_INSTALL\icons\sidebar-icon-512.png
Size 9KB
SHA256 d49e839d49257f380f7b2253e8435392d0ad1df8489fe23aaddcf99a2a256952
MD5 b241fbd23b660a98e0643d2737499a44
SHA1 d661b374cbb225c32beb4940e15c74ab21043363
SHA512 fb3d1871ac8276a1d1c38f26633907a2b0ca00d45784f5db85901fba0bdde1dcef33c8deb331b131d914a599b0f8428323927325697ff9e9cf2914447732336e
SSDEEP 192:nSNGeYGuSrmweUt+qBAwdU5mAkCuo81rDwLu8oGj67+2ha+29nTtBilkXnZh:SNb7uSrmwB1Fdcm/o0rsq8lr2V29BXnn
TLSH
T10A22C0A70C4DAB46E5BB473B128FA3828F097F6E25D59081F5A0C80D296D81D6B8D7F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sidebar-icon-57.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_491136601\CRX_INSTALL\icons\sidebar-icon-57.png
Size 914B
SHA256 47814ebe57fa54280f03a94a13f582ff7b781fd7362c797117cc2e6ae388a160
MD5 7e2beb5f8eeb32b1e6bc9dd2465119a6
SHA1 049092c41f967ef21cd7cd9c9c016efe70b52b55
SHA512 01fa605f496a4ed651ec176847b1ec05d3e77fa18e8d480e017e62733517774dce8b6780f0e377243db2445ee258909ee10ed5a3fe1ddeb6b36e35957a6f67d4
TLSH
T15511B7C4AE27A2B572281B92932F8129CFAF1B65C0595A19D8507514E12C951C03BC26
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_491136601\CRX_INSTALL\manifest.json
Size 2KB
SHA256 f4adea5cce9c04981174e6b82796c732d7fdfb8f543837cfb0cf5321c87376e6
MD5 0fffe9212696250c9a4caf043a06f8f6
SHA1 052966cad66d0b3882d2b63a1a407959f329ca0e
SHA512 f13ed183dc023edf49a9c9b72e5f889ffb97a3841434aff45dea06a8b9250ee3890f46ed99cdb1f97482ed964e9fbbedd0b8e3d11082a03ea8a28ce494cd4e2f
TLSH
T1C451F1ABC1658C23179846A5DCAA374AF226040F6DC9FC9AB7D9006D4F5CDBF147928C
MD5 SHA1 SHA512 TLSH

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_60755374\CRX_INSTALL\favicon_opera_one.png
Size 2KB
SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
MD5 cd78c5defe6084243478de9874682e1f
SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
TLSH
T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
MD5 SHA1 SHA512 TLSH

Submit Download

reader_mode.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_60755374\CRX_INSTALL\reader_mode.js
Size 112KB
SHA256 e904e1871f448ad76ca9f1069d58edc269ca4de3e936488fa51a9a9c55fb3293
MD5 d66711ab009da8d3469baf613559022f
SHA1 5aa950b9532660ad8b96b2dc5c15fc4ce2b5b25d
SHA512 8d9b3af8ae72b107889b063186fc0dc656a9076bd2ba5b53fe775ba9ac9a4aed672b3eed2c05ee21ef40ac165042ae8fc6ca4f880c33bca37502646c82c26790
SSDEEP 3072:Ska6rka6Bs1Cx9CT79vt3jzbSvkkrX+w3:Ska6rka6Bsoxy33Huvky3
TLSH
T126B3DAADB3927199928320E502FB0047E3365D451C0A5038F669E5DFBC24A6A62FFF7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spotify_frame_interceptor.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_60755374\CRX_INSTALL\spotify_frame_interceptor.js
Size 5KB
SHA256 1c0bffb9971b48b5bd388112639d5e62b5dc5c5a1d1778690e46bdb4f0d756e4
MD5 96ecca58ac7aae5976f30c15f21d176a
SHA1 230a362535e06e36ca673daa9cf75011ef864d63
SHA512 89f6ada58bbf8007356dd20d59469f62afcaf8c6cb1fda186f2c65d008135d139d0beb75fcd6e872b27045b83484ca27f184982fe0c533ce705882215dca6b77
SSDEEP 96:xSVa6rQaSVa6awgq38bo5bYe3m/I6FScpoV9FVKovz1fFUAJxuis1Z1uS1u12HTS:xka6rka6alq3805se3m4XFVVJFsL1xud
TLSH
T103B1A401825C4C7D8FB5029ADABE135212DE2287787BC4D4EFA3C47597293CE9213BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo_128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_71877946\CRX_INSTALL\public\icons\logo_128.png
Size 7KB
SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
MD5 8723b83f007f8c910ae071e275f99383
SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
TLSH
T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo_16.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_71877946\CRX_INSTALL\public\icons\logo_16.png
Size 653B
SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
SHA1 350335cd55b2acb2b8957cb79257375513b525f1
SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
TLSH
T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
MD5 SHA1 SHA512 TLSH

Submit Download

logo_32.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_71877946\CRX_INSTALL\public\icons\logo_32.png
Size 1KB
SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
TLSH
T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
MD5 SHA1 SHA512 TLSH

Submit Download

logo_48.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_71877946\CRX_INSTALL\public\icons\logo_48.png
Size 2KB
SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
MD5 1a3f93acc11338a092785da97956c034
SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
TLSH
T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
MD5 SHA1 SHA512 TLSH

Submit Download

logo_64.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_71877946\CRX_INSTALL\public\icons\logo_64.png
Size 2KB
SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
MD5 9c3af737a428dd3daa949313d69be52f
SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
TLSH
T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_793244387\CRX_INSTALL\_locales\en\messages.json
Size 2KB
SHA256 13f83e7ad61d853293597de9e7583e7724680b7c80c31d0834097f2a7022741a
MD5 bdae707104607c47c4f5744c2b49a103
SHA1 fbf4bcd6032e863acd8ae9150b246fa0fd526d37
SHA512 dc3469b80b735884b68ba362022912379b4edfc52cd5679c877e433a7d9be70c431f15571a89424342e18fd6327957f72bc99379e00acc3b9e87bb9aba2541bc
TLSH
T1E541BD15C860AC2742CB51697CB6B116B378439B651CBC297FCA518C4F88AB6D4FB358
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_812115150\CRX_INSTALL\manifest.json
Size 3KB
SHA256 e1235450c575ef2213ead40a408373f1473912185af31f5f0ebb925d97afe3d1
MD5 03cc9b4aca298b2e29f4e72f80247717
SHA1 3d5481032b1ee129465243733169fa092b58e376
SHA512 a7af5d5df5ff8b80e9edfb30d63e6e8bd4bbeee58d771d52bd0570e177f076546571c8e88e7bf4f4ee0a870bf738e8c76cca059874ad9da7ba3349b29083539f
TLSH
T1AE8153A9D4EC4DA206D817B98CB91B47A1108A479F8C3D0873EE418C8F5DA2F24BE19C
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_812115150\CRX_INSTALL\service_worker.js
Size 1.1MB
SHA256 16b7aeb711b7d8d65fc76ab0abf22a56dec65e43fd74a40fbed7c7db77d76554
MD5 616261aa2edda14e45afb5d1f1177460
SHA1 2d15afd7f96ee28df3a6de11257eb9e822f1aa8e
SHA512 abde1944ef04faf9fc5db828eb7c7b52c8a8514e720268283e22efdcc9aed9760720ac16025303d9697ed8cdf05f4fd10f25452c74febb794c3c71b210f4a2a8
SSDEEP 12288:5FAwUkHr3FMnF7H0Lw62I6wKfn7w3WTnFUEUsQ+640tZ+1zF7cbfEbr3TmqpPkF6:5FAwNHr+x0LfSwKfnEGF1HQ+ncbQTe6
TLSH
T1B74509CD75DBF11A8393A426401F3902F66D1D46215E0A62F729CED7B858809E3BBBF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-24.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\assets\icon-24.png
Size 1KB
SHA256 51afde0f0c99b34110e30edef3b463f33fc17bfdd0eb468d9ba29f3194407a81
MD5 2c6e4fbbd8a36824a051cd1a1ad659c3
SHA1 8568f4c85ba2b83d8eb6225179f62ea403bf29c1
SHA512 58b267d961940f7e33aa9e93fb257aaa7a03ab2929f43d36089844d754fbf9242a04008c8679e7f931ddd6649d883508740a272db8ad9ee931a35ac8112c59d5
TLSH
T192210A27222CDD3B869582BDC147EE1B58BCE421890233BA267D780123435A2EFA9701
MD5 SHA1 SHA512 TLSH

Submit Download

icon-256.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\assets\icon-256.png
Size 20KB
SHA256 baf92ac25edee3761e519b1487225ede2571eb20f077baa99dfec9b73f98c410
MD5 d3fd07563ae6e8fc1151488e15405f36
SHA1 fb37d7c4a84259136fb35485a73d978f6c7f7410
SHA512 3b6c0c75e63c47f491912aff37f0974645d4b352fbf5f1101b03c652298b694052fc026e14701d50f1e7cfe825ceeda4f971bb0626394b8c6d53f341d477e199
SSDEEP 384:y0oDgGJOURTBJ6oLKBLxWo7Nr7+r5+w+bKSVzdD+Fkeg9ZXPEP7clRO:kkGJO0BdOQo7NP++9bKS3Dekeg9tPicS
TLSH
T1DE92D005D3C1E7ECDB472951B9532ABED0B6D7A85269CF3B9227842F2A1BE3111308A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-48.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\assets\icon-48.png
Size 2KB
SHA256 dd6af856419d516ca881bfd9effaeeb6001de30152a290010801679b76c6f27d
MD5 93ab8335de5cad56ef32ef47520968a8
SHA1 5643593e59bd4aeab057dda9175ccb019e3a9bbe
SHA512 10a111eb9c95f82b77387678e3b2ac644b126aaf6332e600b8b59962221b37d2cb4e76182d1b9fc76b6752a3fa7e911a37a97a441998b5d71e80f3505e3fb7db
TLSH
T1AE516F89361D61A58A354C508401C661B3B074C9DB7ADF43A7F37423648BDF6FB222D3
MD5 SHA1 SHA512 TLSH

Submit Download

icon-96.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\assets\icon-96.png
Size 6KB
SHA256 4dd5190066bb215e53b6673b752a2a7dd1b2b7e835a250af5df282f538bb6e45
MD5 e37f8704171f1a428bd27007419d5890
SHA1 fe333c0e1a26af5ab24641339c7f0a705233d061
SHA512 ea61bf6788361fbe99914288904adc6b6889b69bb6e1da82cf651e04efeb1cbc4759c36478229df96afa5317a284fb4175bc2807a3bc2cddb314b2a35ade3e9f
SSDEEP 192:dBGieAvn1dmQWPdJbgEnwyP8zBvqL7HBmVQuXioxuv:dBGPAvn1dm7PzbDnjP8zGTBIRXov
TLSH
T194E19D86DD91804C90EE2471F6DB913D3B4FA054C67EE6A6902E0052F0E4DFECE02B34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dashboard.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\dashboard.html
Size 1KB
SHA256 b07b146e63e5f66f5d74942d187cd2b3b9bced774538108c40cb3838a99f35dc
MD5 53cc3c96bed82f55e3233e0b7293e3b6
SHA1 7acee3a74ad3d967fadad057166b32cb9efb5509
SHA512 a67d8b592376dbd038a629b2f6f29e5915b87f333f76e4698b340015a98898b28c78b6eda6ae7964209435068c1fdc03d481d644a29102448269105662e4f663
TLSH
T1F02111A34450C82A251252D9FB763BDA55C2850CCEA20D5011BF47F45FF6EA5D47B885
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\manifest.json
Size 1KB
SHA256 4fe77de231d5c4e320a97802c2907c64e7711140fc18122b17369703f1049780
MD5 0be2debd2eb8140fb13ed11dce8d46ce
SHA1 731dfaf09116fce2bc22558dd5298f34a96b5e5d
SHA512 68a43aaa30c184f0a621d1b01458b683cb1e70fb1e2af883a8195f56617cd3b0d334ab74ddf822a9f9413c28df399e1a60fc65dc335d3468ad61611e3dc2e9bc
TLSH
T10131E200C0745DB306ACE72C99B614C1A5660F47AC887E1C3BB9A4185F7CE2E51BEBBC
MD5 SHA1 SHA512 TLSH

Submit Download

popup.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\popup.html
Size 1KB
SHA256 5e8cf10a29d32333a46477cb7df9ef8007fa2ecddd27d196a179ceddd58deb07
MD5 b3de476609c12335fcd0912a457d694a
SHA1 6860c29775297499812c0117015ceec746090430
SHA512 e0da61cc7cdf61c97ee4e676b24c7b569ccf787f8b056d0deb788d5ef97fc48aa2806ccf23dd09b4395a19b1ee806a37e07e09e44716a6942eef80484d43b227
TLSH
T1D1111FB38891983A151342D9FAB5779A55C6840CCA660C0062FF47F40FEADA9E4BB885
MD5 SHA1 SHA512 TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1252_840268082\CRX_INSTALL\src\background.js
Size 1KB
SHA256 89fafd21a5abcebe851a1450ebd0c2824ef83655c5153b0405498edb569321bd
MD5 ce941f4984ae02a95b99005788f37dfe
SHA1 fc68fdfc36d50ddea5d5eefc99c032fabc9d992e
SHA512 ff888b49d4bdf4fe98eb609f738cfc9f09c623872b3c12cee53e8ec653ddf919e4a15f3a93dc05a964367e67135809e039fa6c8b551ce53272b5731578a56ed1
TLSH
T16B318736A29A27314CBF0A4DCCCBA1B62265C41C22589D10B3AF65280CC762DE4172D7
MD5 SHA1 SHA512 TLSH

Submit Download

pmls.dll

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmls.dll
Size 884KB
SHA256 e471da417462c9f60181c27efe2355db4f0b3b4df6bd0d4097864a72677d8e5d
MD5 090730c9ca6c88c8ca73ded170e8b197
SHA1 5e4b58186e532af507fd4dca01f6396e55ddcbf7
SHA512 177efae6a662f42d4c59e6d9260af2eb126266e51e84ac324d4d319c761d9680044ffb6472c846d8c22895c6ad3c92d9ab6e4330b23febf1f8646e4e3bd572b7
SSDEEP 24576:Gde43g1CYMCZPGUpzR1EytT6ehqglHz5fbCKr1liRdHQJbi2pKwouuyv:GW1tfbCm1liUbi2Uwouuyv
TLSH
T10215AF023D59C070E39F117029696FABAAFDDD200BF18DDB67C01DFE99309D2653266A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmls64.dll

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmls64.dll
Size 1.1MB
SHA256 877c2894f42bf078dfa36f06b543490d800a32c4f5245464bfec300b56867661
MD5 3bc077723836060db010dacc3daa5a7b
SHA1 ee2299462546960e9505d3aa339bbaf1f95688bd
SHA512 3b31567564ec4c01c478f58192f49237d4d7a9744ee65c8cd9f19c34d1aad32791baf7748d2d11f3a5c2b7c0de9a341774e5b2137dfd1c7416e44a07eb966840
SSDEEP 24576:vX5RidvQ7Df5LWOkAgiqqi7oc/ETQDw6s2KM:/5LPdWOkAgiqqiP88D9LKM
TLSH
T1A6358C1F636501BCE0ABD078C51B5A07E3B4784A03B09ADF17A056AA2F677B16F7E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmph.dll

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmph.dll
Size 806KB
SHA256 7cdd0b4b6492483d07ddd1869ea4c213d8d5043aec14117b1a5926093bedc7e1
MD5 27c1633ae24898c3c8fc6638ad72d4e4
SHA1 5c7751029cfd5c4055512f40d95b63fdee919ac3
SHA512 4b670092da2fbb6ff7814ab170e2c8141d148d99300794fcbd524f7ce9d0b20b3abff80c250cb949c8bf53dbb1612be65613f20e02225ce4dc20f7c43fdaebdf
SSDEEP 12288:i9VZRG3DDOEM3/auz7iMpAxHeoHVMSe60z1eEX:EVZRODGhZa1eoHVMSFEX
TLSH
T16D057D01EA8380B1F85D137411A6A72E7ABCB716D3302BEFFB903E7A5C215E055792B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmropn.exe

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmropn.exe
Size 7.4MB
SHA256 b8e134c1518903be8b260f821d1896b521f7f70956090562b3cc71b71bf8cb1b
MD5 4ab3a64141bcb6b1e34cbe8cd310fadc
SHA1 45120754f1821ca49f4520b1b31724023a07e752
SHA512 0e6a6dda054503f88eb714a4c6ea0b16e297a77757d4d42e243596d808f2a99540eeddb070dc3df06f0ca16822abe39f421c70e5d2891f7da6079020da963c97
SSDEEP 196608:wwlq5MyNKcI37mqQgLVSC3JEpgniiLkNCqtcF97:wwl0MwKcI3CqQSZ9iiLkUqt4
TLSH
T13B76AE02FA408079F6C600B582B60FB9EE78DE200365A5C353D1B9BD6F76ED27836756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmropn32.exe

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmropn32.exe
Size 244KB
SHA256 b56a74fbe9b0a0c027f230a412dd69afbb697c41f31635352b37fe74d334fc15
MD5 a6348e20d0a07a438b3e596350c8875a
SHA1 6621babf23511ed41f8910d15a263da7ba9b3c24
SHA512 3158f2893ad8b316e69868bd98736d6405ab345925bb5bdbb0bb6897897ba048c72303e957aee0739c239bd45c17fb04827f7f21ab1a000beb1bad3616f3a6f8
SSDEEP 3072:Tf1jylH+OCcTA/3xjjjplcg8kNRuEbrqAyMyKpNoQwOqw8930/iuAg0FubzgIZAK:sleOvk/pp5Rh/yMy+ovDCAO7WU1
TLSH
T1AE349D1176D0C472D973153608F8DB799A7EBD200F519DEB53D80B3E8E306D2EA31A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmropn64.exe

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmropn64.exe
Size 303KB
SHA256 f6de7618e24c0731e5ff77aa56f200d3c0e30e672a63c7d11b9717ece29e6814
MD5 b6ce4ef9f276abe27d3dff35eead758d
SHA1 77e8545d979a595acac1a900a0c1d551166eaf8c
SHA512 c13fd956bef83be59195e766874b8502ac514d12de2c2f411619ab8d61c3353e06ad01987b32e7a3cffdd51c25e07873f0bbcf2d00a8dfa5692539c3b96a9836
SSDEEP 6144:q335ui2SMWpQcXubvHPUyKn6ZXu/x630ohVbdquTCB:G35ui2CpRAvHPUDn6C630oxc
TLSH
T186646C59B3A414F5EDB3C13CC8911506EAB278665771DBEF03A0865A2F237E0AD3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pmservice.exe

Path C:\Users\Admin\AppData\Local\Temp\~os5B70.tmp\pmservice.exe
Size 4.6MB
SHA256 f76c45ac8440c5a36096d7956bdf933bfff268469d1a73573c7f001f790dafa1
MD5 20eb40af892fabf7e74d1e64081ca481
SHA1 6683863abaefb1f8d9b201f5af316731655ea4b5
SHA512 249031743bb2a8f8466e2afca73b0ba9d1b99082746974629763099bc41e00db2107282a0dc1477789000f86268f3587b5051c7fe629634ea167d2c7bbb49704
SSDEEP 49152:agOW4nR8lACIclR6KeFWLkCFRRGN1NYWmkxMpXmP5cpmeNgYPgCFUJxazDGPO1pt:agOW4RkIcSEoCjIYW+vgYYCFQYN4R+
TLSH
T1AB268D01F5408029F9D300B283F70A78EE78AF201765A1C793D5B8F9AB769D1793979B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aichat.exe

Path C:\Users\Admin\AppData\Local\aichat\aichat.exe
Size 13.1MB
SHA256 b085082eb2af43465549651cb3cd42145861f8f9d7de68b2e37a5671a09c0a68
MD5 3ffa809e5e04eafcd7bfa3c441a64c8e
SHA1 203d119cdee5205337fd415b4d18f001dc0462b2
SHA512 80a730db25c519110305f849897f114517ebb4bb21a54f979bec0037cd92edf4ec0efae97ef761ba1b16d86c3e626d603ccc8b42315f528e91ba8612285d492c
SSDEEP 98304:H4iLkUzjjAI18w4o55z+Yh4O4Mby8wdssqoou3xIaIIvwA1+8sd3dCLH+B4Zzp65:4Uz4g4o55Xpkd9uS6Mi
TLSH
T17CD6D6217A5B9A6CD09BC474838B4A72497130CB1B35B9FF449492392F6EBF42F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

04712754-97b4-4587-943d-ceab587e81f7.tmp

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\04712754-97b4-4587-943d-ceab587e81f7.tmp
Size 15KB
SHA256 80b6f4034fa69f4783434068b0e4bbad6406ee426e4c090798d6e49d0862e2d7
MD5 c8114f547eb4ad00c0f85dc524789d88
SHA1 784281f7ceb910c787a478646a05f7ec1a42be40
SHA512 027420d42acd9c6d8e5dbed41c1a53f6e419ad3f8f1396bb27bf5fb3d9434ee50f2baf5523203623e5c50c29363b3c387571dcf947212ca1ec33c277fefc7a73
SSDEEP 384:R+OBqImmJvGBLx3NaFMJFcNBSfM4bcVHg6r8:ccvGtlN7wXw
TLSH
T1D772AEAA2D766F276CF7C509BA8D2387CB2462A3C0D53BD5CCEC9F1F016B1941351816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58da73eb-6397-4ca9-b56e-646e2362f5bc.tmp

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\58da73eb-6397-4ca9-b56e-646e2362f5bc.tmp
Size 3KB
SHA256 f2478c9253cf3737494cfa562b98b9f3f33a368bbc879563db9647b4d6357e12
MD5 5353ef661e1b9ebfe9bec24ff9020c57
SHA1 21733f80148de5179840f181caa385765197200c
SHA512 cedaf4ea2dcfda9222c5165edc1f4f8de95ac5e9a2b5bab6314728410c1f0e5ab766c295484cb0e9f27f03a56d598ff2288f2e25502087c51441665b561c4274
TLSH
T1886183676D65AA3B8DE3DA04B9862B06EB646027E5D23F65DAEC0F0D01D73AC1381C17
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 19c768af5c2f030e50d3dfeab59b9a1286cf16aa3d297c06b910778f5a34b639
MD5 d8d70bc613e10ba49330578c66b9c66e
SHA1 77899e15d5fbea8b14f41a6a3d89572a5bf31b90
SHA512 9e3bd82f786b6a22c46075e5bc3a339516670620849e4971cb99dfbbe88fd9f3b7689e135c77a5c7a2873a4142f8001ed2007df2a2f4eb01ec641821b5d72b08
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f487f55f240d60e6d3ea73bb557803f4b650634ddda07d2894e7d318e65ebac3
MD5 398b313989d63d262ad5c786cff58441
SHA1 52235f324391b58f81e0aca6fd006d2142fd5510
SHA512 4227cedca594ff671897022905e77a67ea8b382e57279b84886e3a6be293d8c3ef99f6c54cd415970e7ddcaea4000045866407fcf6450d884ed6e34ef65e18e3
TLSH
T1D6D0243733510134CC1035734043750C15C0D30F400D4000DC3CC71D1F040500D17441
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 144B
SHA256 7ca20a16e1ab9e29d4a7a5938ae350f53bca2cbfb5b44038ad736cec7387aaba
MD5 e35dc7a06229e1c52b8b964139fb42b4
SHA1 4e559529266ce3aa06e468c13ed20ac58874812b
SHA512 f9af1f86da818b3b2b79309b2731ca1453e459034b76b0dd1a289841912ee2b68fabdb37db7b6f8abd84ec8aabf60dd3149bb86f73bdbdafdd150980cc3096a7
TLSH
T17EC0921F124C000CC79402B862D2268CBA78A72082338BA680A240B8AEA534482211A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 6f96a0f35d969959941617741d5059f87641621a5799a84c9b52fb83860332fa
MD5 e9785a072667598a938734f2519a8cab
SHA1 f702d4413bbaa947fce655b425fe94a15fce80d6
SHA512 131e18d68a085a4a63b9f08d6024661e217b0d6cd753ef61fb1d93d136b6ed789d82a5471eb89366c87b0197744907ce311df36f552698de8565b3527086e7b9
MD5 SHA1 SHA512

Submit Download

933dc2b1-55e9-46b5-9932-f25461e0e554.tmp

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\933dc2b1-55e9-46b5-9932-f25461e0e554.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

d3624479-6dbc-44c0-bb82-40b18822956b.tmp

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\d3624479-6dbc-44c0-bb82-40b18822956b.tmp
Size 6KB
SHA256 624f2cd8f74ec5494dfa5b18fb61e4562f987fbe68627a7bd162c46bcdda0747
MD5 c017fb2555f0c7ad697df0dca510a77d
SHA1 fb3c006379a41bd611fdb435433e7071d65fa291
SHA512 8b47e6008cecbedf42e084a01cc49013005aaaa050db25b67561a88f5da2baeb64f96809b2b143cca03b69f2a0a9734d715049f2d8bd2fc50f7ff7c9d2f6015d
SSDEEP 96:stYU/d0+4BWb91kWo5h16Z0zs7/x+6MhmuecJ+u1ejeIK+gN28XM1C7K:stYYXZhonzsV+Fd+uQjgPG6K
TLSH
T18DD1A6015E64797F8CC7E509BE29BA17E2F5603265D51E58EBFC862C08EA6DC6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State
Size 1KB
SHA256 9a7d6096001ef85b74c0cd215da1276a854b2d76253495e30d05267d7c69f185
MD5 a4ab796d112bfe3c8c8d0b6367e87b60
SHA1 0a89f70153b81bf9143aa10d6bb6c37720367361
SHA512 cc5d0e7e4596793cbebb04e4ee8d6126d29613a8c1ff1c17962fd4faaf6a150917e14da1680ccb4065b445ec07c02accaef0a984254930eb8c7d36617645f05e
TLSH
T1E42198F2A9556B37DCD3A20931166BC7DE3470BA82A24F1065DD471912E336D9259833
MD5 SHA1 SHA512 TLSH

Submit Download

c2436997-a8dd-45e5-a6fc-04b6735bb447.tmp

Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\c2436997-a8dd-45e5-a6fc-04b6735bb447.tmp
Size 2KB
SHA256 2d3b85b8c6e73bb7f6ec766e065fef6f6d1c88c8b8a08046d154ec35f86a4ef5
MD5 2b734bc06e4b3b787d57ec3eaa66c85e
SHA1 8a5d9c5eb7af8546bc430b82218c418e1d72864d
SHA512 75b38a3485746c15c6d50a9c943d6ed4195944a8a0492021eac3a53a682812ef101097f5b331a291870a3090ff0543206c3a850906672a493e80fb981c18500e
TLSH
T1A251A5737D15AB3BD8E387087E5A2B53DE38B0A59AA32F219ADD0B1801D726D1341C37
MD5 SHA1 SHA512 TLSH

Submit Download

file.txt

Path C:\Users\Admin\AppData\Local\file.txt
Size 56B
SHA256 3799048e52446072b7c9c869349107be983601d0cecc5471a5328fad9cd218c0
MD5 b6ee4ae1f4190a28d45797090fe62c66
SHA1 f06a3c03a200acc5185fbb31ff0a92c412899806
SHA512 b19305e497e3764bacca7a1a55b0be8cc238b98f8b29b935878f68fb00149e5809f1ac39bdd51848411bb0d696e54ad2c81dcde6761c0569244c8f8d1a816773
TLSH
T1DB9002185CC8257A18818D5971D2142D20950083427EE259CC210605546668665E2559
MD5 SHA1 SHA512 TLSH

Submit Download

4UOC835YI3GZDJCQVFX3.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4UOC835YI3GZDJCQVFX3.temp
Size 22KB
SHA256 4a97e2e90b2874b2416db3df7397a6c395122a3552ed983b10187dde7ac21fcb
MD5 2034a9a7c46d3a1f7820f3a23c711b11
SHA1 5802d29fb17229b5d640f94a87290ee4f8bc1a8f
SHA512 558542912d3f74401e7326f80316114e914ec81e843e78bc9f3e7fc9824a7c1a67a6b28d3aa4875a7111c09b30b1f7c83931a79441566caf6e075729c69e0918
SSDEEP 384:SdsVYzdsVYCdsVYJFPgdsVYqDdsVYEdsVYc72dsVYGdsVY2dsVYKdsVY9:S+w+t+uy+hD+3+/C+l+N+5+Y
TLSH
T1B3A253503ED93543F3FB937606BE6A98BA78BC40BB259C0C01A151495CB3E42ED4AF5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8875674e252d13c1.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8875674e252d13c1.customDestinations-ms
Size 22KB
SHA256 8f676b344015325c648975dd49c7a567e903a910e94057bfccc6a03148ec7249
MD5 1e553c8bda86553b73340458eda1101c
SHA1 e3f8907e755a60d082cc3c2d954003b3f451c48d
SHA512 672edcb873af6d2e6fc8c4e4814dd0d6f99c283d8c17ecb0c9d505d3dcfab220bfe38d2067aa64c9c4d0daa6f31164c7804a43e350d529f3b402bc5aea36915a
SSDEEP 384:SdqYZdsVYBrdsVYJFIdsVYq65NdsVY2dsVYcrdsVYYdsVY2dsVYKdsVY9:Sd+e+uC+hi+N+/r+/+N+5+Y
TLSH
T1F6A253513ED93543F3FF837606BE6A58EA39BC40AB269C0C01A151495CB3E42ED4AF5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

M0EROP610Y7QGOI2CY64.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M0EROP610Y7QGOI2CY64.temp
Size 22KB
SHA256 b234811f8974c4ae3a8706709f699a2035f9708c22797d0c820e88a91f342fc8
MD5 c019686f6cbc062d96ec60b11595534a
SHA1 bb77afc5bae35a6c320e0d58aa0972463d8c8b56
SHA512 e4553e6c763ab534dc8a1df247a49b61d581f0d3660f93adaf2a30f6d17faaa7232a96d377af8bc661930c8d159ab3a155e5d15097be1c8acf295c9530341f6f
SSDEEP 384:pdVYjFRFhdSYldSYJFgdSYqN0Bo0jdSYadSYcOdSYsdSYNdSYBdSY9:pOFp+KKh68OMthd
TLSH
T11FA220613EDD3542E3FF937606BE6694AA79BC40BB269C0C016041495CB3F42ED4AF6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

U886O4DR884FSNS4AH4G.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U886O4DR884FSNS4AH4G.temp
Size 22KB
SHA256 2cefbd4e4b65cf3e6546cf17a067c05889b041284c1a6c02d22f514910d00522
MD5 db7d5b37a5dea604f8acb43b1ce93f3b
SHA1 1678fd156e9896c90f0895949b5fe2e7e937dd6a
SHA512 8518cc03f3c9c8c0b05461f229fe2bfe93ff459afb7946148baa4e430a7adf6c30ab8f28d8537af0b68db480d7fbb891f29e7df390ac5cc3fa237631cc1f94d1
SSDEEP 384:pdSYrdSYAl2dSYJFydSYqZdSYldSYcldSYO3EdSYNdSYBdSY9:pLtpIKZF8lrthd
TLSH
T1B6A243603BD93542F3FF937606BE6698AA79BC40BB269C0C016141495CB3E42ED4AF5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
Size 40B
SHA256 c79c9ca26062c62eeab3ca59b2e5d70d30e9fb6a32205815e506b2fb15d3b661
MD5 2685cc3cb12eb3a26a89ff1a971c3e19
SHA1 b9f478a8cd2c5bb50e902c360656fc128fe79f80
SHA512 313aa9d3497b78dcd96bba037f1f3d782da4bd6b59cbba575e497f8768fbc1cca156834e1d0ffa61affdcf460fbfe3faf4d1293cc9b49ddd9e0ba235d3ad73ee
MD5 SHA1 SHA512

Submit Download

Bookmarks

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
Size 21KB
SHA256 12b857a7e8f6f837eb0183ee93d9fb9908cdd9def5431f1a54f95902c13f1f60
MD5 4ae62ffd68dffa0bd91600f146827258
SHA1 31de3663887b3c4757141701eccaf581a5560afa
SHA512 0414d59b83dff3179e03fe52928a677ab9bc9282fc19565eb2f15dbd5c996a4f8e04fb2f76e0c331b986baf49f42d57ab02e151154db96e80f85c00a94195f1d
SSDEEP 192:+Ygj2icpRargCtVOdm8aZB96KDkU6eFumd3nUNhIVRN9csWNZuoukTvsdrmdKSfU:+BjBxr1mXNTm1PVbEmyKSfCB
TLSH
T14BA26F77C507ACB791B412E660FA620BF745332F56848E8776BCD88D8F359233296B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bookmarks1279a3c0-8eff-4457-ac61-661dcd0245e0.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks1279a3c0-8eff-4457-ac61-661dcd0245e0.tmp
Size 23KB
SHA256 75689ecda2e250070bc713a60bb24a69378510385778585ba3c15933cfc5bc88
MD5 1965455689ed2be70cb29c4a2b0df000
SHA1 2c42a8e6f22d8b7d503cb6d29b74f26899f69a69
SHA512 2bb7e64e20623f3ef02ccf481b96cc43a65d625d3ac7e112b27fe61e96b95d97bf0d383d9956dd221dc6a7ea175689b1fd4c65acbf81c725204929a33cbea6cd
SSDEEP 192:+NgB92ihpRargltVOdm8aZB95FKDkU6e5uad3nULhIVrN9csWNZuwZukTJQsdr3I:+K7BcrSmXMda1vVFwTQmhKSfCB
TLSH
T1ACB27277C5076CB791B402E660FA620BF745332F5A848E8776BCD88D8F35923725AB09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarksExtras

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\BookmarksExtras
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

BookmarksExtrasa8eb737b-3603-41a3-86a5-6225f4e6bf90.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\BookmarksExtrasa8eb737b-3603-41a3-86a5-6225f4e6bf90.tmp
Size 467KB
SHA256 cf56cddd68b16ed365cd0ebdf970f00d29b671f4eabb612f62017899362c67a8
MD5 67d4fddfbbf8a63f5d1ce873447efe8f
SHA1 a90ae591cff51e45349cf5ad4ac3d3074b12aba7
SHA512 803d138ac9fd529511d2f8ab50965755343bd23d1dfd58a965552e00df3e992df99a4623fb86835e1c4c128b28ee424c0d5b6593c1b90f499a73992dee630cec
SSDEEP 6144:KyVsqphKWyce1MZFpuoWDmQDjx7YzgxL/+I2D2gXhsdJorMk18NasoXRs1AMr2YN:xsqDytMtfi/7YZItUsgsNmXMr0zMAFUF
TLSH
T163A423B018261C6DA1FCC61835BF7B329EE549EC41F8915EC340BD7AB74CE44ACC9A96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 007899d5ed4e1c1fb14eba5b13cfd3be37f50b8bae24a502784abe6d0aa5965b
MD5 9803c9ee8ad95099c49b68702f511922
SHA1 1ab4118f81b007be8e60fe96c9688480799c320d
SHA512 28ecf7b608e8ae93ffc6fcfebd1f9382d9ac1494bef90b097bcc637fce35b6d32acc667c8cc21f6f73c7271aad292eeec1472f82dacf3ca655546e5f7accd184
TLSH
T1832187CE24FC6B0BDF2C017160992C4CA065C1F480931BDBE656107E597BAC847E6D31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 11132363dd4df070e4201c005e4ec470813d62fc3349164c4c742da8cd104445
MD5 9b82ff3d06d8b494b638d9d0501e4380
SHA1 e5809350af68bd456fc213907646f433aa614131
SHA512 a87f708dc12ac59d1a7375b87c01b85bc5bd480aaf7f6b08da8c489a4bff0586ff7ba64700bf440533b0e24d3790bbb0de8fe6cc6123108caab8a1773c398154
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
Size 2KB
SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
MD5 f7b9c08913fbb4ee164db4de91a1cfa8
SHA1 ee748920b53e30beab4925c3d4aa30bd7f667904
SHA512 d39802a782fa37146bf509131d98d8e2ff121bffe7d5b37e6300b60c0acd6dfd80d2154825753395ca231493162b5668f2c752d125e4fc810cbb3d5d77331260
TLSH
T19C517F1AC850AD2B41F742697CA4A216F37443BF6104D45B7EBD918C8FB2AB3D4E7B08
MD5 SHA1 SHA512 TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
Size 17KB
SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
MD5 d35d682b17b1efc0528e351d5da2a63d
SHA1 3e0723bd0389fe65d68555ab6c1c7e23cc945132
SHA512 b0192b5a9faa3ce9e50b5d3aef967b2f0975e7e62c48b4cd0c7902d7bc833001fc50678affb28294436cdbd6d4193f3eb0a2cfec08a40e29b4a498d59bda7128
SSDEEP 384:+EVS0GCdigHBVrF67GAoDyD9X8zLAFfIEsqqUAmHS:+EVndRzF67GAL9X8zsIsHS
TLSH
T1778233291AFB142559A7603D1F8F92027224901F381EDE1D7EBDC6E45F8127849F9BF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

twitch.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch.png
Size 677B
SHA256 959a810529fcf478d40d02fc418e6223e38bdeba0deae8e83b55028d47bbef6b
MD5 0d4310e562ea26fe728fed5f387fcdfa
SHA1 d68932c0466231eaab4b679bf1a53f20e5ee1b04
SHA512 d3f7063a1448b2c6c91b8df1594a566230fd8a17286e70c7efab2171f154c765b44610cd137c14c2bac4af5180b009ca099b7356da29ae0378491b37bfdfbb5f
TLSH
T1150188539AFD405DCCBC77AD92D18B0BE0E154D9B092D70CC19DC4139D7754D1E4320A
MD5 SHA1 SHA512 TLSH

Submit Download

twitch16.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
Size 370B
SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
MD5 b40522160b071581a7bc72884ade2d4b
SHA1 ab23615bcaaa870b78e54e4d1061612282aec406
SHA512 6a58400e6aa7eea02477f00de667515f3d8001d628dd8be1c4b5971a087386f5ed328e87a0639add1c3482cefa637a2d1d7196c42b55e8aab4b6173df979f011
TLSH
T12BE0605B9797E8BDC352C0B302B388502919FB09AF6302220D68796E083BC4822A30BD
MD5 SHA1 SHA512 TLSH

Submit Download

twitch48.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
Size 921B
SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
MD5 3c287b3c8c01ed2888aece71cb04bdba
SHA1 3ef53a36e4746521a4fdf845c54d05a4ea2ff0ee
SHA512 984232ec2fa22271fff7aa0de4228a049d7a267239be1cb153a254261ee27bb0c4857e7c0cd8b14723aca5907d50faf36b0e42a8a04e1d4b7fa31f7888aff4a6
TLSH
T1EB11B31349144EBBC22C1CB6D907C10785F5A8C4E6009A3138F99B3D66935EE603833E
MD5 SHA1 SHA512 TLSH

Submit Download

colors.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\colors.js
Size 5KB
SHA256 80cc31214c554212050ac62dd04bdb33b012b3b42634ef16f461aca2dc8572fb
MD5 29337742bff635ce1cf6bdbd5f1313d7
SHA1 897db4e76cf82d1fc234fde6eb9eb1421e2ef438
SHA512 78b9adff81d67baec75301c1274f4f45e8af4a666060ce23f131bb1714df41353075e6b31e3c6eca8fff1bf5267d4ed94ddf1170c83b1490e29ab5b7bfbe7d22
SSDEEP 96:FHR/VZU+lw+8g5u+B1QuUwyklCo1bMxmv/gF9xHxlDRDVmLXCUC6Cu5CD5QK:FHR/VZUmwD0u+/QgpGmv/gFbHxhdVQSl
TLSH
T191B11F18A7E21416645BBAEE5FC7D580E236381F6817DF0D7EAC42B05F865A884F2F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preferences.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\preferences.js
Size 4KB
SHA256 424634b7911f5002d426d9455139bfe578e0a3d8143a4b5f23597ffc22ec0923
MD5 70c366ddb3cd467d1545c82050e26197
SHA1 25404dd0e1cea5fb2e83990fc96b3bcf93673e93
SHA512 f27eabf89dbe8ba93b5db9f516a77c223ed961ad0e01b4f473528a21d577b12248b9d08dcf5d376bac78412a0a509eb76cef3eb90a65c70bd3251a09b5ba8404
SSDEEP 96:FbyUJwWxlkRLo8+Bu+vwSrwbh9o0dAj1CwseXJGQnY8DtQ0MnKmetc3St5kCl9un:F5JwWHk28+Bu+vwQw9bdAj1CwsBQY8Zc
TLSH
T1E9815214E6EB40214992353EBD0B6103603AC10B593FCD4DBBDD52E86F4C66891E5EFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stats.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\stats.js
Size 1KB
SHA256 f2b7e0086a62415550738764edbd98a22ed7524623343b4276951b8cb2207b52
MD5 f213291aee8e3dc53615f9f3459ab44b
SHA1 37f3f0971462e0af338fe47e0454d5b896637780
SHA512 bd5c5132fa95012c80466eeb20f51c78d91944b9f6fc78f6064252e62d5b06a1f2dc4e0d5d0c32a79d672e30c8ee7b884bd25a0c9b8b53993a81781808ac2b87
TLSH
T1E2211256ACEA30048E0BDE965E07A13C1F395902361D5D8437E463F0AF4D6E1846FC18
MD5 SHA1 SHA512 TLSH

Submit Download

twitch_api.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\twitch_api.js
Size 4KB
SHA256 db2f7f893c141525ecb33ce344471ef44dd457980f1fe138a91759d556b4a002
MD5 4aaa3286d76fe90f577adad48956328b
SHA1 951d9bf3794af87ed1773ade5224d8fdd0de7c33
SHA512 5dd7e2ea1d0d1b1477dcbe1d2d5bd887800b20dda346335bbbb5c817d4399fe07eac8b59bf7977415ce395ba2f3c028cc547dde5f84fe9c0917a0e67ee55c4c8
SSDEEP 96:y2/6+ofiSQcWZ2QcQBMBdkVdxkdrMRnZRQtxiQAfM//VmmarMVWmOMur2r4QSXTB:yZXfiSQ/QQ6BmPkyRnZyniQ0MHVmfMVw
TLSH
T13FA1445EE9E360508763F078AE5FE302F0646503784CCE39BAED42645F89D2486F4761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

volume.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\volume.js
Size 1KB
SHA256 3a30f4a95a4ca688fafa4c5594c039bbba5e5d14187dd1da286e48387d3e3d7e
MD5 94a8bc87908986aa0575f6a8bdef95b0
SHA1 e041219829b6de3e56ca8aa5ff062bc12f47f542
SHA512 ae558a9d8b85a1846e666ad8895513c455d9d56d24f50eae1f8ed4e4d86b77aa3ac498960815164816227dada02618d6c5de5b2cc52cacba5e54383540645828
TLSH
T15621992C16F920299087AB3FBD5F42012814810B097EC9467BACC6E01F81FB921F8FD6
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\_metadata\verified_contents.json
Size 1KB
SHA256 2da5576dbe6f83e339e733336ff13c91c01cb3440dcdedda455f554b8e7ddfd3
MD5 974654299e911bd2ef27cd80e5b9a068
SHA1 5b6112088d6448132706d845a448fdf3e4728b02
SHA512 3b840938d49dbd537043bb3e8ee7566e9dbb307793ce4e236e58c1b7c367e04cbfd8d59d4b8cfce897dcc7066930b78a14c76baefa54740bb7142069a54b6dd2
TLSH
T16221D6A1CC0B73297D4819B571857F2B1A0731C7C1C7134E24CFDC49E994A86A0F7506
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_1\manifest.json
Size 1KB
SHA256 8b3312d3adb43c2f1b3e88d0941c8c0edbf038f9056a734f8b1495a1b1d1a51a
MD5 cc07cbf38364361540c788f1e57eac06
SHA1 83864410cb372b3adce25d2bd18cf5f60f79e225
SHA512 c9de02ba801a133ed0b29116fded99adc1c2814cabf1d567230d5eec4938438822c3dd4a75271409e303e48f3f7f34733ebbf323e3b62375ec52d3502426ab44
TLSH
T10E2161BFD8CE813B0571AAAD9D721313F66A13AA03998C0F3B7DD0498BA8E05107D40C
MD5 SHA1 SHA512 TLSH

Submit Download

sidebar-icon-512.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\icons\sidebar-icon-512.png
Size 10KB
SHA256 eb3581b5590aa7ba9f2db8b902d8e6d3ff7a5d1e845a9e710fa65351ae1968c6
MD5 aaf085ac07adef95bf9a98831533526e
SHA1 1be1e2f2b72ec03bb4c112ec5a61deca98bff691
SHA512 0120b753a1608d56a9f26e7c00ef21f63c04e0add26a9028323a0f66f601e2116af208b7a7a0063fd04ca314345617be580fb16b777989fe01ecf828e0933b99
SSDEEP 192:RlKjfqEbf4kM9XOcr7TrsiuSb4bSdLV33nanY/6zBSCN6/HYVpORN:K7xbFM9XOcXTYuPVanY4fN6/YbO/
TLSH
T1E5224B45C2444AC0E011324AC69B93EF22F49BAAD377C449C2B29B3F29D9335BC67F64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sidebar-icon-57.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\icons\sidebar-icon-57.png
Size 878B
SHA256 f933e3885645efb79fb9c683c14d58a6c324162f7f79c1b2550caeecce708cb2
MD5 6fa534a9301d524f2d92019bdf31d1be
SHA1 af8a232f5c18dc30cdfeae0832e2dea63b41a226
SHA512 a81a6a8d0c2590a81a29f39d2a4a0d403495b14fe968205a809c619139bbbd8fe7d69e003e5e791c5f6c0633fa90b3affc5ab79750d2a64beeb6fc4eec03e6ae
TLSH
T1CF1196D2B6B6AE3CD44BA8EF1163C420C0D121BC35F931EEAE93446A20497C477D98AC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\manifest.json
Size 2KB
SHA256 e9d1fba9c39d0c1b8c2fa37801da70cd7a67f39e04699e20ab0536a387e76cc5
MD5 8b731e9e856b98d8d5a6dcc449fb1bd8
SHA1 baab9bc31841cb25b52994fe9b4142e374b3bd31
SHA512 470beb4697f836a853adae63c4a187f42a2d66c5fd27b6838d57c4da2f102a4961f9219e13e03f18d617da9f5bb7f9703766963a9b87ee7aa8d97865caaa7904
TLSH
T12351DEEB8065A42707F846A4ECAE2246F225811D5DCADCCBB77C80D58FBCDB35439A4C
MD5 SHA1 SHA512 TLSH

Submit Download

scraping-method-Dq4mm50p.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
Size 6KB
SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
MD5 fab39415a729d22b161ccb0f46006897
SHA1 01aae91afcc6be7d0b4d0866da1da1e4f3dd58d4
SHA512 2f2366a2970d89e6944df1da53fa8f68ecbd8daf655f7e898d6d7c07cc27324b8d7b43b21c7e9955ad8355337be4cff64920e894d1d07ed109d6ab3aec6234a4
SSDEEP 192:si4AdmyjEmh3Lml/axenXI4qcr6TaUbj4oRCJOSmJ:sxtyomh3Wo
TLSH
T142D174E1F2F3A8796A32A89EF8E74D94F8A583105173C254E51B5DC4CB30B93DF20966
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

service-worker.ts-fle0M1Xd.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
Size 13KB
SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
MD5 28c8dc913e80f5480c20e200cdbefc5e
SHA1 f0bb1b2304877eaf4163f514e1382829c1f828a8
SHA512 45a12b57b6585d7260fcc197c8fd03171157f81d08a6a226764c182c9b6da62efd509d3ecc905c9837bd4597c9c4a9b9800cd0364e595a10ecaf16561ef23f80
SSDEEP 384:Xp7UwWzZIyYXRWRhkVAOmts0OTSLHmHk44Y:FUve9XRdV3mtITSLKF
TLSH
T1385299B2BFBA542702D8603DEC527A01B6295651682D405CBADC74EED1D8B4C4DBFF38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

service-worker-loader.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
Size 49B
SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
MD5 4924ae3164cb599ef50e43d008a34cd5
SHA1 09ba9cc17180bfa2c2edeb3ee367dc545a1fdd3d
SHA512 2adfafd18927c17fb11b0c7834a99fb4df50ff5f97873f424bbcff392cabdbbfb8f2d984575e293a531be14a602ed090ef2c348717f090a5de851d8818c344b9
MD5 SHA1 SHA512

Submit Download

favicon_opera_one.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_0\favicon_opera_one.png
Size 2KB
SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
MD5 723cf51fae375f557b2f891a2ea603ef
SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
TLSH
T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
MD5 SHA1 SHA512 TLSH

Submit Download

1567.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\1567.js
Size 513KB
SHA256 6bf532d760542dbfc35b4545a83206ea6651b5353c3133527885f466b635189a
MD5 46064150f4ac3d06c0b07e355c3a0037
SHA1 f133cff8a31fc2b30f496897afbb34e75c15e66e
SHA512 508f49639091c8c8a5f3a84f5e5b6759ab2db1a630f885399729fd3165f4df6e08383c6e8bfb38cea3ca9cece5686224295ffb20f4f106c411d78751eabc840e
SSDEEP 12288:j+CdDRrSD6CKFsS0TbmO7M/SBRzEsm960EDg1E/:7doOCKFsS0TbmO7M/SBRzEsm9pPE/
TLSH
T18DB46DD3F6B5B52647D701A1E0AF1102F33C5A04645D8030F39AE9EBB4A9C49A6B3F76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4032.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\4032.js
Size 23KB
SHA256 9e5dce35ac959927855adf610f6156e4f4fa4e621c21c86c9de4756dbb5faf36
MD5 a4f98c8d3b1ec61f427c198ed4a94f73
SHA1 ac54cf9def45d6578d17a2df8b7f57e016e7725a
SHA512 12ba81e7408d7640fba1cb45cdb41b5c701ad20a71ed4a6f5c26b4e92e6cea5d268bdd111ef87cf41fd3994559c9feb549837fe4cc85e95603d68585ba9b5dbf
SSDEEP 384:xka6TvYka6tsame24XdspqHhMibEMZrMIAjTgC9Fddp+3ChoeqaE7zhpgoQ:xka6TvYka6tsame21pqHcXIETgC9FdTV
TLSH
T16CB2E98C71D7F5724BA35525C42F2006B27E1884245F9891F73AC9BAB82898CE377BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5345.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\5345.js
Size 89KB
SHA256 15636608b50ffeecab1209c14f0bb9bef8bf55e82c6b2991aa22608ebdc2d488
MD5 09ea247d548b4cff5f73bb5e9ed27082
SHA1 f08c721aeeecfe1a6fe91bad20076699b053b170
SHA512 61b16a3e9a45eb383157013474fffcd5abefd985377856a34b0a507e6fae7edb34d0db896fdfdd218a6a884ee77987d6268e09f31d3d999b5ad7e3b6f7861d3a
SSDEEP 1536:xka60ka6eamhcSEJO+b8b/+mSpL70C1obsMkJS8RMfRQZbGskby6fXI76yhR+:xka60ka6Zv4zhSpL70gjp0skby6fXF
TLSH
T1B69308DA73D2B07213EB0271903F4106E3BD5994144E8928F668DDEE7AA505DE3A2F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

649.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\649.js
Size 11KB
SHA256 6a323f864488ba1d85c344c4f837779ddc2a3fa14a2e8c79b6ce181272003c8b
MD5 1f13dc05e2eb7948e8f317c92ff666fa
SHA1 6306f704ee3fffb6e87dbb24ce19566b3c70524e
SHA512 bf8f777675c76bab4a191a9be12a6f4dffd82ca51e6c645300e0273948b6159acdee55581268c534d4845cd4004e14b66fe3992f4b0848fe75c4372298c6273e
SSDEEP 192:xka68bka6tsq3805se3m4XFVVJFsL1JoGC5+GLAIatVQlGMAUrzVgcOukyeok28j:xka68bka6tsame24XdsQGLuVggGob65x
TLSH
T1CD32A489B19CBC754EB21295807F9606F2AD7543287ED4C0FB52C4F4ADA13CE8123E7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6699.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\6699.js
Size 367KB
SHA256 3f820f64f2c83876fd064d1a8b733fa08f61d29f29ea31a11e003d37bbc74eec
MD5 2caba77de9bff39d6c57a94a95ff2cb3
SHA1 f8cc41d8a37a5c2abfd34c0dbac15d9ef72556bf
SHA512 f3a778881d932ee14d152cdd0736d594515fcc02a7361fc875f86edb567c8b9ec64d3d0cf4f8ec1e5275cc5e7ac2fe61cb9b7d22b900e485c6d6ff3651a7c2d0
SSDEEP 6144:Ska6yka6up12FURy9ZHzimDjSF68RCF4PbU0h00duzaMNl/toSB29fqhaDZ0zbw7:jcyr/cmtw9l25u3
TLSH
T192842AC9B292B02643E760A0507F1107F23EB919548E4868F398D5D66CBCD5EE1BBF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6829.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\6829.js
Size 47KB
SHA256 b48a416b7799b3ea3f158d15ac38b027c5c261b52caceaaaa08775c573581e44
MD5 670bfd6ee1d2919e094a58c8e18c94eb
SHA1 f0e8bf2a40775c5db00fcd44dd42b720ff144f5f
SHA512 cc4ad8ef22459db5394c116a7ffebb8f608e3be54d54cc7340cf2d2f4dc20bbb6bc162a36c16523cf6544691ccd1440c40ef69bbb3bb4b53442a1051d5502d30
SSDEEP 768:xka6Aka6tsame2123lGCZlX4X8CZBMocB6gOCZ0yRCfCgTWE+qdGqsqL7+BqM/p3:xka6Aka62amA3lNV4XrW6gVbCCgTW+GX
TLSH
T1FD23A5DC759BF62B4393A56A501F3046E36E284420AE2452FB39C9E3B81440DE7B77F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7565.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\7565.js
Size 39KB
SHA256 f0082b5e7c790907ef2ba53cd10c2ba0207709d9281ecaf74ee8a5c6c5ae7f98
MD5 2977c259a1ab56d4329b7cc8ffeb1804
SHA1 0ed88f982bfe2e5d7d5145b9bbdbf451f47687fe
SHA512 a29f6996dd59438e2510f03d645594f6b555bbc3c712b057160c7c46d57dba84082791590b8bc9fcc197fdde7d1d10fac258abf3292e2f4264a3350b1147d942
SSDEEP 768:xka6Yka6tsame21e02P186GCDOmxDhGNXZBhbckupD:xka6Yka62am8jy6fZhqPSV
TLSH
T11D03E78D7ACBF92213A35424D42F6102B15D2D44254E9E12FB2AC9E77864C4FE733BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8319.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\8319.js
Size 27KB
SHA256 5f84c379da30dc719610eab7686f8d1fe5120b2252bcf5b0b3d1b59c0fb1f651
MD5 71e836df48b21641a1fcb6896f5110f9
SHA1 37d3cc25c933c6387ab358bf2e2f5584668edaf8
SHA512 5e9174c5c08c570d716683b38d5cf07afcfe0c974ff852120cb22641852030e476b84871da9297bd6c14d15ca4e69551d698025508de9636c48280294212dec0
SSDEEP 768:xka6ska6tsame21XsjBmQisdpjHj/b2G6/CrrpUkPuKz:xka6ska62amihisddj/b25/CrrpUkP1
TLSH
T117D21AD2B2D9B8B247F6029960BB0101F2AC4815147ED8A4F7E494E17592DD9F1F3F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\_metadata\verified_contents.json
Size 37KB
SHA256 10b9f040464c76a76ec5ae54bb3c2fccdbc72b774abbec0b9c9a728546bc1c54
MD5 c20de5f2e0a85e4719a4027f75cf4de9
SHA1 bc5a5f588e7459a7e497aca0d58bcd1365eb7333
SHA512 8de4588fce9c325fe1951ce2a8caeb6a8895d40d9300ecbfa6e863de67c3352c00b6470b6cd2d7148e42e89a3652f68409814b7e79f3f561e7f1b7c23f790f55
SSDEEP 384:AopGmC5kLv9oJsJHP/D/u78fcBZgQZm6e2c6laozACI1qBnqWFFYZzqop9PdaqZj:O5kpkus8fogQZw9WntIS1FYypdC
TLSH
T19303A2E0C8AD3504FD0972BD1BE92A36833D92DE94287E5A56C34C9DD1A2D5280FB8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blacklist.js

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\blacklist.js
Size 76KB
SHA256 95e31d7ece9ffa8bdeef3b8bbe61f66c8968765f2e2abdb7d53d4f09131e2859
MD5 637cdb31ed5e7b0014739d042184863b
SHA1 ea9d456b5a1330ecaf8d6c3014b2221d4d6b306e
SHA512 5c13753d6cec85371334bc828254e4d6074630edb37d32b899b84f348d6f2e926447cfd1a9c4ccf4957274cb995176fe8e38da557adac64de98a7e3b3106f2a1
SSDEEP 1536:Vka6tka6eamIK4PMihQiRAiNJRLbhhND/CVt6LZJqi0SyeSf/PToIGLCZKRjXxSP:Vka6tka6nwiJLhu3XgsJ
TLSH
T1F4735020A05A5C2A9AF94F85CC9B7F0710FC25A0A7D2C2FDABDCB5AC1355744E1D09EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.75.0.1_1\manifest.json
Size 3KB
SHA256 80342632811e45efae4c6c3ab1134ded21b2de9119a2c6cadaccca5797d4b46f
MD5 043cfee39fa2d53b8fbef9cf457eb084
SHA1 d4809319a0c22e09f60b6c0ee6f13bc71e85f015
SHA512 179fb635f8014de49d6ceaf331a4e1bd69a94bd7ca32293c4869a5555986ef3fd76776b2b3999151ed6db5dd6555eb63453faf7de6899255df4af60c61e7a2ac
TLSH
T18D7141B6E4DA597706F457A89CB50707F200936B878E5C4F7BFC90888FF9E61205951C
MD5 SHA1 SHA512 TLSH

Submit Download

icon-128.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_0\assets\icon-128.png
Size 7KB
SHA256 78b24693d4a641aef3a81dda21e275077488dbd5a953d2d4136de623ecd615ed
MD5 8a1ca5163f9c7d40f8918ff7b4469b02
SHA1 5e245c61d8527c7aa695b944ef4b699249fca678
SHA512 d675b16d2d363acd7f8234a89a7f047147fa422c31800d627e62a576515e027675095b074baaa360e3d7557a1304050ae8570aae868d7ff843678338606af6c2
SSDEEP 192:gQGX9XFYn+cuQVcuDJGF2TfqsaDoQFtC37lu8TkiZT:gQUXKnCkc2wFYqw4tC3Jum9
TLSH
T132E1AFB969C4D769817B369CF458C36AFA061A10A43F7A84A50EFC58854B3867681B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-16.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_0\assets\icon-16.png
Size 598B
SHA256 65b72007a25a0dfd139a17d452272f1f2a31aa9adbccd0c01beabd01f5ce9c6f
MD5 0636927c33c137530ab1fca9539d1790
SHA1 64f60e61c338b510d379f7022a38a12495ee7759
SHA512 b23ed8f83d580e4138652dcda856b3ca9e76079348cb72bf1eb0a109150b24a4a771c733f00ac0c0bd9db57121a058d8f721021b36dc1724ad96a39a88beedc1
TLSH
T1BEF002F97F5934729C85129791143EC14D37834A05F96724709DC5A100EC3A19EA7C59
MD5 SHA1 SHA512 TLSH

Submit Download

icon-32.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_0\assets\icon-32.png
Size 1KB
SHA256 92a8f864ce76af0bc1dc7fd186589d464b1f696a35d10bd94fcef5d0db608661
MD5 0fad7cb606c6a0e16ecb6c574097e49e
SHA1 19dbbbe93abc064caa8c0e25d1c10b46c0af38f7
SHA512 3eda96c5c0d2f894465f7e673dff89342ec9bf88661c75bf29f559d6ec2f57f625a6ae10c66a76675e6cca2cfd6e52555d3db16aaf7ea2e200a953aef0be011d
TLSH
T1DE31EB9C6F20B42BC1EFEFC9430556C3F8F6065542DB62EBAE6446CCE408690A459218
MD5 SHA1 SHA512 TLSH

Submit Download

icon-64.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_0\assets\icon-64.png
Size 3KB
SHA256 ff87f8bb6ce5f9596166ebdf032e8fb6a4acc31609083fe5cba18e30950e3c11
MD5 c27e17d4b331f8d00025ae0a7a2501b7
SHA1 b1a8936d041347c79f970de209bf0c4901e3acf2
SHA512 d269a3c16b33bc169a906db9717399b62d0766d55bca1d1f2f0028cb7313d3e478a6205df46eba8a9bce61f40d24cbb4c2ebc12382167a425336b55d12d451c0
TLSH
T15B614C8FAC020DD9DE39463DD112B7428C2D4D0EE0ADC619FEC5993ADF2D586AC06C6A
MD5 SHA1 SHA512 TLSH

Submit Download

icon-24.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\assets\icon-24.png
Size 1002B
SHA256 7c5e9b254c98437033027c2033842b1d5d131a0d2f711e5d8cbac8b48b5f285b
MD5 68968a519e767c1ecb2e04d1cc73d31f
SHA1 11ff6562f9405a22c62ceda3fbc37fad6faa76d9
SHA512 b40fffc41b8527259756261622952ec5822a5423cb45cf85f3bdcd3a4b9a12e9ee83c1a9c60b197d8b08185163e31b10b2419b1aa2233fba343056a495f0a545
TLSH
T15A11D53A08001F33DB96E5633D3E90E87E190DE7093508A09321E268B537910C0E8BC4
MD5 SHA1 SHA512 TLSH

Submit Download

icon-256.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\assets\icon-256.png
Size 14KB
SHA256 64e0df3c8578c3d8a527164d835931616ff3cb699a67a2315f41a999d1c3a6a7
MD5 4e49435cb356b8ea8ccfceadb2140902
SHA1 53e18e0aea7c110c9e4e4c940ae0b756b19bb92b
SHA512 8bfd4f034ac5e5021e65263dcfe097405f384e73715db951c9e413bf40819f2ed0ec31e6fc0db08ba33a246f984cac672c5c4c04ceb4bf9b28560846781049b9
SSDEEP 384:sqa0prZAWAVTqgUt74etqlIk88GiDuF47Cf7QnUv:iENAWAiG68Giz7Cf7L
TLSH
T10F62DFDA02CC4EF28848CDCB4D57656BA799C408AB57D216386752FF4B2FE7044CCBA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-48.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\assets\icon-48.png
Size 2KB
SHA256 34a7d20a4130fe7276185ebdc7b56bab70445898c5bbfbcef422337b268d9fb5
MD5 6736d615c09717a80891dbdd48148d58
SHA1 ff85cd1d32191ccb1c989cacb114c5de90d8ad51
SHA512 10920dba35ef479a3ef93169a3f73e99201f773aaa2af802a0b25481234c97108816ec8dddf04f03b5f4a51fb1102e9c6cdbfd8301a15a324bafb02be9a72cc7
TLSH
T10C413ADF91EB24829E3EBCA348BC9D40C44D6EBDB64D033775609B397B821EC9801410
MD5 SHA1 SHA512 TLSH

Submit Download

icon-512.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\assets\icon-512.png
Size 31KB
SHA256 511065d4067a4c5590913519c7ef838a258df4f8f39f3c9136dc1b84ce89e97a
MD5 ff3d4c91f0577634f057616fc4b4456c
SHA1 e3402819dd3797ad219162ec14ff9953de55df6f
SHA512 4ad8eefaf30d41f663f45817980a5e40a5d99d515a9e00d967402b6f1918c713066f9a12fbe210b574a2195903589450678ee06b437e13952e4107ab6a9287d6
SSDEEP 768:fBZ4bAel2ZaIVw8XwCZgHBQlPoVlrE3vo48F:J6Ao2ZaIVw8XwJBCAb4/oV
TLSH
T10FE2E16E3DC1EAF6F08C12BA3707120A589A9E776B37CB14AB47A45F9332390F546117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-96.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\assets\icon-96.png
Size 5KB
SHA256 e92cbdb9fea18b43cd824ced20a43b14a273faaf96830c20b37df07143e621f3
MD5 ea152173eaa92a589eb3a9cfc8c24f7c
SHA1 4b7c93678831a7fb3e0e2c0e3799947e3131453f
SHA512 de6a452661175818436abd4d82ea0f4ec409be32b8575aac1ff5c2ee07edfe0f7b6a1ea7e580099ef3f9c4b8fb3ae834725b5d3e15c5f30e36986b6b4a2e8463
SSDEEP 96:YRsLORd7Y1heYUc4Gll5qD2NTJlyMA6YGarag4LXe3siWv1f/9djkj+G:ydGhCDwPq6Ntx/adEXxf/bkaG
TLSH
T196B19ED30EAA33399117D6FB8DFDD17CAC801148DC194B70929BACB51ACFA8514B0580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.9_1\manifest.json
Size 1KB
SHA256 49e624b583b8c288b571d01a49feeb98a0999974e3800ad483ed583ac7500a34
MD5 21f16553202e01e32672bd2fc8a47f49
SHA1 4977198eb12750c125b0f445ec79601b36502f56
SHA512 9c0c83d2ae643c6e26408c6821cb7baa550a1a4657e422382d3d0a1e0e54a4a200f94500007a890b5a647a5a0a63a3de36c24d15333d65b0cd80c7b097ee4768
TLSH
T1BC41EE06C0654CE7063CE72CA9B24681F596072FA5C4AE0F397CE468DFB4E22519EF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\_locales\en\messages.json
Size 429B
SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
MD5 5250cf7c9dd7e49a4ed52b24698c3a49
SHA1 7f155a461d23312bbfdefc569b06eaa1d39cd250
SHA512 24e45c5c5cc87c8284fd852f347b6d9bcfb6a60e81d87758c95c01b9535d3a6fd468fd3dfb599c763ba355991abf0ef58259fa27cd013974d8ce2d593f1dd7cb
TLSH
T136E0C01889045F2B45BD4365ED68EBC5EB34173A2150E95A3CEC919D4B21FB344E27D8
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\128\Icon_Light_Neutral.png
Size 2KB
SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
MD5 bf24b39c7ecacb4ce180d5013d771066
SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
TLSH
T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
MD5 SHA1 SHA512 TLSH

Submit Download

Icon_Light_Neutral.png

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\32\Icon_Light_Neutral.png
Size 932B
SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
MD5 5a8f82ba759b01fec7dbceb2c7287d6f
SHA1 dbc1d49775f1487b5cbf9b6ad7e67d10e831a1e7
SHA512 b82bcce803f5206e5c081e71c76ca973d240f687b5a4f9b09521c7618c6239683afc01a3115ddd93e58be299371d5815231bc9714a306c06abdabafc3eaf3132
TLSH
T17811F7DB0298B579DC3745FA31A235CACA6B19202AB50BE0074CD996352F8C090CA38C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\manifest.json
Size 1KB
SHA256 8ee85206ac7d1046515afc966819cefc887230d7ac6a85ce56a3c38b6e703587
MD5 2ea7fa270c07124bdfc2776caf580f22
SHA1 e9254df1d8ea36a5714b22544385ad3721732fbd
SHA512 e523a2ab457938248aedecc87181d6c4d4806910577e396e9ef694410c3c8dd23794e92124c0ed2ec73b5b53b27d721e8620bc88e272547e62efe9ecc117ad81
TLSH
T19331CB17C468A97F16346B59BC760A43FA68636F1A009D8F35BEC09CDFB162B0186A4C
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome_startpage_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

399d6f11-faa6-4c2c-8664-d4eb92d05de8.tmp2b38129a-e1a3-440b-8043-7d6cd0c2226c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\399d6f11-faa6-4c2c-8664-d4eb92d05de8.tmp2b38129a-e1a3-440b-8043-7d6cd0c2226c.tmp
Size 27KB
SHA256 ad036293bc2f9d442fb3be1c6852e8cd322d80b10ef5d51bd365a87e2ded5679
MD5 e9a45e7d12341b420991e586d8bcacaf
SHA1 8c69d4c59930321824f91a58cf266dc728b5d872
SHA512 108a918c896d80e46bf09b90d5330bb498c3aa9edf417db70dc6ede6b52456d625505173772d0795e20f0724af4faed27f50475f62b08d5d2519f773967c9254
SSDEEP 384:O1iBwQn+/FhnHiDx2vsJBeliM33QiT+htQ7RFeq1jGgJaxBHqnf8V:IiMFhnHi92vIM33gtURFeqlGggnHEs
TLSH
T1AFC2BAD28FC66ADCD28915349577830742AB87BC42B51D9BA9E8ECC7BD8E483503BF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3da4ffaa-7b5a-41c0-9b4f-43858930f657.tmp631b0512-18fd-4d85-9d18-b89a58300cd1.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3da4ffaa-7b5a-41c0-9b4f-43858930f657.tmp631b0512-18fd-4d85-9d18-b89a58300cd1.tmp
Size 27KB
SHA256 2812a1a85198aa0c3b5170580573935005cbded7ffac283de2da0085f9e83d64
MD5 2c7352e3b19410e1c24c4d2bd41b3054
SHA1 a92266cba5d2d9fc3b6745a5afbd66fe5fe04420
SHA512 d8588535bebc5185000824373d2e0b6017fbd91cec14ced461d697d5767be86bdcd32d9b328bf5a7262f528c635ea744d7ffa9fd9a84687383b0be65c3ba9008
SSDEEP 384:OVMyONM9Nuu3CEvbiMKRUr8YX8OX6WYMARPXpi7OgHrc/uSepxhUmfNA:+tPvbikrVXb5ARfp8OgHuYjfN
TLSH
T114C28E95F1482901D122B574E01BCBA13374FF9E4951E387BAB879363C2E79B688B4C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f503f9a-2b07-4f85-adb4-b2d484c2d4ff.tmpb235a0ea-b74c-4307-848b-062c3df8036a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3f503f9a-2b07-4f85-adb4-b2d484c2d4ff.tmpb235a0ea-b74c-4307-848b-062c3df8036a.tmp
Size 27KB
SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
MD5 fafd40f7fceb49324821acd292290bc7
SHA1 0c3a32c4edc6f4f4b6b4e0ba371cab917751885a
SHA512 1a18133b6b2371fad37f53e5a23439124403a49282ea0df14af982c32beebe49ec5ddca1a32c7854d2001b2d1ddfee45dc180c1f92fb7ce55cc0ea76417c8008
SSDEEP 384:Ogao5jgnaTCrfbwkIjxgrVybIfLEpH+tjG:xDe3rfbwkOxwVybIqa
TLSH
T174C2FA84D9F22938C37648BF51FB5908BF3F5E625C9B0462CD3A5E91787280F066F892
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

595e8418-5190-4c1e-94e7-ec80f5f32056.tmp1a633e4e-771b-4b85-b87d-f0d5d0dbd8e2.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\595e8418-5190-4c1e-94e7-ec80f5f32056.tmp1a633e4e-771b-4b85-b87d-f0d5d0dbd8e2.tmp
Size 27KB
SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
MD5 73889af3b383a202fcedabfb464d4480
SHA1 c248a6f31c2f49eec312d8ae516eda260b647f01
SHA512 84ea287342dcfe50fc62eb4c14e80ebee0a452d3c39dfcc22eee8b0a45ae7be3c6bf9fdf712457741de9966a23792485acd216e7c3a82b52aa37de98311deb6c
SSDEEP 768:pHQG314Cl6vdw20S0NzHBDXnkKEJzPRAf:p2Clww2SBHB7nkK0R
TLSH
T12CC2A3A561522444E6E98F31F10BC85984295F5C45FD4E1F2C903FE6BFEE390BE1AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97f39c89-aac0-4342-84f3-896121816a7d.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\97f39c89-aac0-4342-84f3-896121816a7d.tmp
Size 27KB
SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
MD5 020c1aeb8d8e137a03d5244491a1da9f
SHA1 fbce07337cb53a16c340251c7cf146720c0bb408
SHA512 ccfa08ed2426517eb85969d9bb482602c0402973aed5f46fbcf9fbd66647f9a65f60fcb037f0328ff04644f44d69a0b03cb6d79227d9b08ae27103ae58adabb9
SSDEEP 384:OEUBizljf867VPsLWqJAtyF+G64zJCNz8gWaoSwFSk+M9Ol:uB6jJqGUE+zJCForQk+M9s
TLSH
T1C1C26FCA1F3806B9CD6416B4CE9BDF5A0A740DB2BCD97746CB6038920933EE515B249F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

995a42e3-b941-4af1-ad1a-5d8c1d54a693.tmpb17ef164-90d3-4795-83a8-6606375a5b75.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\995a42e3-b941-4af1-ad1a-5d8c1d54a693.tmpb17ef164-90d3-4795-83a8-6606375a5b75.tmp
Size 27KB
SHA256 81c54325adf7d351dffacbd1fd0eb15655795d84a6c63682d5a8ea95a11f7a20
MD5 e878f9b6b37efc5838c40dc0c7a6ace9
SHA1 b9ecb32a3f46bd450e48ce51fad9d4ce76d143ed
SHA512 f0e27d0e7fe05d2c2cf76aafb06873cd9d368a68b20996ab5bfa5d4945545d590b47f9a4bb11c55133762a7a721595d3b6c45ad1102509ed6ed12cb657089188
SSDEEP 384:Ozem+p1NzHay7u/CzQc9W+TKVSvADdFaDCZ7vJBynt5:Mem+p1NmF6YcKVSIDaDo7vJByt5
TLSH
T1ADC25042BB8422CAD83855F8039B2FF23F7AF10B466253A757764616CE7BF827D12581
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eed43a9f-10d1-4dd8-8037-93d3c56b1211.tmp00a37a9e-1b57-4ce2-9a65-3b75a86da202.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\eed43a9f-10d1-4dd8-8037-93d3c56b1211.tmp00a37a9e-1b57-4ce2-9a65-3b75a86da202.tmp
Size 27KB
SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
MD5 dd8e6df155a2ff5f53f81679d8701c70
SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
TLSH
T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State546e21d8-da5b-4040-8b2b-97cf1520b819.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State546e21d8-da5b-4040-8b2b-97cf1520b819.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Opera Custom Icon.icobf527350-4007-4221-acdf-f9cc9e5638c3.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.icobf527350-4007-4221-acdf-f9cc9e5638c3.tmp
Size 162KB
SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
MD5 6c07e783fb8030c2aae67919d45965f7
SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
TLSH
T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
Size 12KB
SHA256 680354d1ab34b1a0eaf7a15a7be2e4be24da9f9a71591b7976e285940cca6f38
MD5 a6c78bafa3a59df8d1dcdeb42e6649dc
SHA1 37ea4c944a5fabdaf478c43a7b5dbafeff01116d
SHA512 82964d866e545f1fa71fc248ba3de9dcf5a8acfac1d23869c43da6cde5774987b635845279ef5122d5d40d0f710f64ad8dd984d2298d79a176b42a61fa228a6c
SSDEEP 192:cZ1r9JvmvY371oB+JBwIA5mOXMjU04zr4wqba0GwVBwwWceWvkVr36+WNOB1KsND:E1rTvEXJ0h7RJFIsLXi
TLSH
T12C4251879D656DBA3DC69562E614B21BF3E11020A2627DD5F7F8C82C04E7BED30229C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences8333d4d0-e113-4ef4-a688-ab1698784920.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences8333d4d0-e113-4ef4-a688-ab1698784920.tmp
Size 12KB
SHA256 9a835d321290443997554dc257e1bdfc57c13d46a345c96287a718c1e3772378
MD5 a489f683fe330851ca049bdd6a31c750
SHA1 c2f3be002522440fa13825cf6e27aa4c547a17e9
SHA512 a9c9783caae044c2e72b1d72e23be39dfa83b3c131e542446b027ec10e68091b0c7cc05b6c20ee262b65d9b28beff407c09b35b51e2ea964dc7c979c2c806c0d
SSDEEP 192:cZ1r0JvcvY371oB+JBwIA5mOXMjU04zr4wqba0GwVBwwWceWvkVr36+WNOB1KsND:E1rovOXJ0h7RJFIsLXi
TLSH
T19B4262879D656DBA3DC65562E614B21BF3E11020A2627DD5F7F8C82C04E7BED30229C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferencesbbaa06cb-0bb4-4cd3-ad3f-ea33ba636a89.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferencesbbaa06cb-0bb4-4cd3-ad3f-ea33ba636a89.tmp
Size 13KB
SHA256 fc1e34555a914180f6f44de4c847b1dd2e8c69a0c6d1e14e581ffb9f7a98b817
MD5 a94c387d16e798a028df0eccd682835f
SHA1 266cd3f642c1707e5fcb963c540ccec1d7ce31e1
SHA512 08a3aeb4683e39c21eba187888421b0fdeaa863c7aa04e44044ec47b4090a2e4fb66f0e7d45d3838eae270cd40e584ca03f23a79f0619ddeb80838045aa9be2a
SSDEEP 192:cZurtiJvcvY371oB+JBwIA5mOXMjU04zr4wqba0GwVBwwWceWvkVr36+WNOB1Ks3:Eur0vOXJ0h7RJI/qLXi
TLSH
T1845261879D656DBA3DC69562E614B31BF3E11020A2227DD5E7F8C82C04E7BED31229C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
Size 80KB
SHA256 cb1d38fecedf4f795032f4179b43ab6bd7642e7234e4d0c98f0dc62953a76401
MD5 65880b29cf021f113c10a09b9829dd62
SHA1 7b4b431ff5937e4ef7aab03a6ad63652575aea7e
SHA512 002e13fd907daebabb7baf239a3d809157555ec261c6ca163cc338db9507cba64ab82ebf0da68ff43e265836f7a2e1f5a6c62e5731554f8f8cdd023f9a536efa
SSDEEP 1536:+p3piF/pFIpvJ+XpOuBpvIbphfwS7GxTDpL8XpwGkvocXatptpQMpgpSUp3p4pB7:pFHCIRSUmA4pAIage+
TLSH
T11583E7EBC8CD8E798ED98BBDDC366B17A5D504159BDC8E04A7FA404C03C5789207F68A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences6b4d6b50-24ae-4272-9297-998d124d5a4b.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences6b4d6b50-24ae-4272-9297-998d124d5a4b.tmp
Size 128KB
SHA256 be0b92ca5e2864ea0a6a2b42ebc083d96d8e0c322df7a344dbc00763bca43ad2
MD5 78346430ad2015b43bc715a4b5e638c9
SHA1 06fbfbc8de4111ab83d1fdcf72495d1654f14add
SHA512 e4f3e2f43acd0f5e85aa2dc06adbf22978b5437dda3f1aabf712532d43620b670bd3657ca336cdcb760fb88de6327ca75334ee92af9535713a8381195e72f45a
SSDEEP 3072:wX3wM4d7DEWFHze8QRihNhzdmd7UUmA4pAIagGeqK:u3R8mUOU
TLSH
T115D3F8EBC8CD8E758ED88BF8CC3A6B5795950115AF9C9E4597FA400C03C1789207F58B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences847c7147-c856-422d-b719-e4610fdb6ba4.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences847c7147-c856-422d-b719-e4610fdb6ba4.tmp
Size 101KB
SHA256 53ca24d98bf376c220177465a6e2e3ddb47289307302aaa719928ef5a1bf2991
MD5 9db2e0b4f4c8488ad543bbe0f15e3365
SHA1 00a40f2672cf70711c9c047a99d4299be685403e
SHA512 87aa3b911cf5de18e0795fae0b5953f75aa46d78e632f5ddf7c39d45cb72e9c81b95b58ac762bff33bb2f1d7137104e2bda90d31d30e8ce28dbe84deb7547c36
SSDEEP 1536:RX3wMuS8dPzWwBqAp3piF/pFIpvJ+XpOuypvIe83HUphfwS7GxTDpL8XpwGkvoc3:RX3wM4d7DETFHze8bRSUmA4pAIagc
TLSH
T147A3F7EAC8CC8E799ED98BF8CC366B5BA5D505169F9C8F0197FA404C03C5789207F58A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 672B
SHA256 2ab48e6574b84f5f83abf820fa7a402b5cfff0f70a995d7c716279cde7af0b1d
MD5 ba7317ad75c8e4d4c1f1d93924ce3906
SHA1 55736802f08262842e70cc57eaba3ae5a6d39ec0
SHA512 c557e2a5d7c8e20a174fb2c6bf3b858ad2725d4b466ffe3f147d294078e9aecd31220ef1ebace6ffef4dfeccd2f4c81646fb64c5e825895167cccf580dd10c72
TLSH
T15F01D41FD42E40CACD911B342D64514443326937F81973CFCB6801588C67B154DFB815
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 66acb03fe2e7f3044150571c5be6767bba28adbf5cb93719b34fda427439cb5c
MD5 8408bc624ef3589d9e2c2b533b6eda23
SHA1 f6f9d022b1f4baaefc0c6cda369de62d4ec3faa7
SHA512 92e9295f8cf9c2b6701b22cba6103d40c0565cf2a0014b3cf1d58fcf6467073d72bfcd9c2a183ef154f3a2cd2a65eb5e7f195074eb40104de668817a4357c8df
TLSH
T15DA0026102809132C10523B52991838A7238B9259A4643137AD043679C64750CA511C4
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw
Size 429B
SHA256 c1306574930d440fee4d9fe4665cc541043e201207a3e0b26bc1c2615166c728
MD5 cbdc6331a89cdd64004f2bac9426d200
SHA1 3fc6bcf31589cbce06254a67d2c4e0d12354d884
SHA512 2af4e5ae82b668b26a751143f2ad2c925d7ef482bcef3a1cf8c4dff30cfdbc665cd75df7c6df806db180b6cb7bd309c6d24a30982902333c036ff61a7af3bbb9
TLSH
T1C6E02BB38A620E25338C095A28C186C46806C1B820AB624DA6ACE80852B3950EF03909
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw028f635c-b4da-4114-af32-ee9ed8309fed.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw028f635c-b4da-4114-af32-ee9ed8309fed.tmp
Size 11KB
SHA256 2d15984833d8aa5ebe9ecce888986387f170301f79cad90d839d44b9c7d9cf77
MD5 da3e675fe9d39eef41c192f4f6e3a35a
SHA1 9a0573cd6a0f98b93f9973e4fb090eb3358bb5ee
SHA512 acfa98dc9b9b98086e6e0312c9e3cd819858fb1d04dd756cb786b374421fb6b3661ea8d689e0ef2f05eb39fdf88027148cff6fe2820acb736562f1357d05dc4d
SSDEEP 192:Q3c0xJnQAhqDiQvDsaNtnLtblbhU7TaQKj2R0+7+F7uexvrv0FoUHV6rXM25gtfk:YbHhevga/LtN9X+A7uexvrshHdqgtTg
TLSH
T1C932D07DEAE6E94E8C45D896991D90357750838E528CEF0083269CFEC5879BD04097D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw068d58d5-0f9a-4306-b489-7ff3a0ce2fc3.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw068d58d5-0f9a-4306-b489-7ff3a0ce2fc3.tmp
Size 9KB
SHA256 f1372f876b4134bf36e1c8ef24394d8be0efe25af9d2369f73a857ab1e31c234
MD5 6991f32c2e57f7edd7d69ee9c300131a
SHA1 b85f11c85f6970f674d2b225549fe83fbff433c6
SHA512 bd4d1e64858023ea7c470b65495b6b954220bbdd16b92918e442ecc0b27af453fd4b4a0cf927d8ea08d41b7f8f94457716009d89591391da16006c6e3f3f93fd
SSDEEP 192:Jlhzc6OoqRJg60hPPujTu63b3cXk/I333LYI1yhYuLridckOS:JlcoqRuT8zI33LyhYuKdeS
TLSH
T1BA22D00E5B7045E2D40CD0C7ADA408D0836B87F6564526DAA0F238B5333F9E49BCB55F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw0c896d87-3994-4f74-b281-666344f3c156.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw0c896d87-3994-4f74-b281-666344f3c156.tmp
Size 11KB
SHA256 4b0c2b4664a2e2e873b49d7bf2e5f10d925e9f11099408678181871617e3d578
MD5 30bc0b34c5efe0ab8b756cacdc6cbc19
SHA1 aa6781a1419508ab80c9275ac12e87263cd37440
SHA512 463c07a808c75b9d6b1da0afadfabb11dd90ed7b2ec6f3bbf815751ae3cf8c5892193a9f64b6038475c0259dd0b904d18afa3915c627d2ae85d17f43e7c6300a
SSDEEP 192:dKrhx78h6adOf15A9XWE8+lbvls84Hv8yLleMcKU3os8D5l0zZmszgnmU0/5YTFd:yhEC15Al++lbvC8yv8+cnL8D5l0zZmcE
TLSH
T1D932BF1D8B204FFDA97F87E96E0420D612999466809BD37232A1452D4F9F1C09F927DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw0f4783ba-629b-4c44-a7f3-4ca8dd7aeda8.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw0f4783ba-629b-4c44-a7f3-4ca8dd7aeda8.tmp
Size 973B
SHA256 23fb9767c12752011f766aef67888baa8613668068ebfad0e1184ccd89ae9016
MD5 c6ebb9d88b5eeedd61449998fad894cf
SHA1 e88d5d37ca3484aa788d1fdbd2128817d84d138b
SHA512 f05203150654e76637f917584b037bd5c517fa0bc35a5a0e11911ee5d156d13db7210e136df6ca268f85590901396cac87efbf31502bd02b72b6dcddd606db2b
TLSH
T1F71108081F5262A22DF980210251A903CF40A91DA8E31EAA98D15F1D4525CE1603CBC9
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw1236a8ae-f7ef-421b-b262-698c406ee857.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw1236a8ae-f7ef-421b-b262-698c406ee857.tmp
Size 10KB
SHA256 b8e94fd41fb60a12556b222963fd45ae7c787d529b1d046d5b8df87d3a7763a6
MD5 c55a90a69ca01650369474d6b27b4d5c
SHA1 cde10c4d15596a4cc7344c4fb090169f1beda571
SHA512 715363cf25b2f819c001ee37c23cfbc1f6cc12523df8098976ab7b0c72c67b0f714bb5092d88a43ae972abcc6db7d285e6252c15e322e69d636268b0bc6be871
SSDEEP 192:TBvplCdc9WgruvIsrDu6SQsi/U5ulxKGWV402+DQ0M8yhArdkE:tvpl+oWgrunq6l0uLKnV402+/Ny4
TLSH
T12622AE43643FB05BC86EBB1C31387A1ADE49261E83D51B25E439D0D45E67BE3B0B6382
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw1834ee19-ef03-4560-8171-98ee0d961660.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw1834ee19-ef03-4560-8171-98ee0d961660.tmp
Size 8KB
SHA256 101f7e84e5453aee9ef87ed7af7c71092a93d020f755236188775ac272f8b8ed
MD5 40096b1ab0ec48300ae56c6c8bb1a3d0
SHA1 4c9b8617c6b7900d371cada39f1d5e9a7b97a666
SHA512 dfcebc138b2722122f0584bf0e6ec848e959e951a818fa34bfd541bda3f788b33b93920d73ccf3fef3f66f601c55ee2fbe277ce7af532c59db5f75ecdfbc27dd
SSDEEP 192:ccSEIYZkl1hXAeN7aox4WDVm1/iFt9wBWdqSFkbexu:cwIYm7dfVWKFt9cxSF+
TLSH
T1D802AF903BA7D801193EB5DD528518F2798E838081A7284598B969BE7D4A35F46F0F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw26281bea-c543-4229-ba83-4fd3d12701ee.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw26281bea-c543-4229-ba83-4fd3d12701ee.tmp
Size 1KB
SHA256 c78c55330ee061740fd9799988b5250bcc058d77157a215e9e081b355a3f8766
MD5 94bc8675ad271c083960db91a2fda12f
SHA1 0ef100d029feed6b739e352b32c5f5663bf9537e
SHA512 ecaab49f7e6cca8d1c17c527358ad20a65d97e64a61fff1019eda7b0bf3737561b6684389207a1689310fa36d8ec0f9e39799ce038ccd35d480ed0b30939999b
TLSH
T107413BA73215A145D0038801820D99E4CA353BED7F0CFD593244D6C4A4C1D32DFD1C3E
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw2b9827ab-f277-4efb-87cb-683d039c98c9.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw2b9827ab-f277-4efb-87cb-683d039c98c9.tmp
Size 8KB
SHA256 a3fc4bfc8fa181e6b0cd043d1043d08402ca189fb26793c05ef9d080e3fce568
MD5 2340f4b0c01119133a1ec4cb6bb5c8f3
SHA1 64f731632dd5c031d737fb6552840f11338b891d
SHA512 e5d575b482e64d1c8db03082568863c37214a1f31097927b622fcf1375defeb582f61eb1134e80672d79c4e1eaf7b294dc6613ec4262e89835ec9089f8c41f8d
SSDEEP 192:p0GcGqt9uoA423naL6aswUQBy79ZIiJ1gLU7NG924H:TU7uj4NLTs/9GI1gUE2a
TLSH
T17502AE193BBA41832BBDA1BB3ED1F47747910A4A19D112E74AFCCA519C3F20189C6B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw2f0bc1bb-0220-43b3-9d84-8c1263b02800.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw2f0bc1bb-0220-43b3-9d84-8c1263b02800.tmp
Size 10KB
SHA256 36f2f8536d7cbe22701f2673089139bb3f9d4c3f6bfef64a8a04dcc180e6b243
MD5 0761275a40a1f9d12ee8fdbd654be842
SHA1 d5fdf351a373c5050f272c757f6b27366e30282c
SHA512 327189f9851cabd868653aa5c5f3069c3a523e3ceb90eb4ae6d8f13bd003255f955900347af3201f1d6ded0573b243318ce4b67a94d4f168c770d299ab8db200
SSDEEP 192:Hg9nEkCwNOAh0WKg2gE/7h2IBeOjD6GEc4arAZ0h6jA4GDfJrEbj3WZS2Ao:A9JHxcgUcg6EU0h6UlkjmZd
TLSH
T1A232BF65BC08D62D5118386A17C3E92AA5724EBCB970E062CAD03C30DD589C899EB9D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw337b9f54-39e9-4078-85d7-a5c5a26b888e.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw337b9f54-39e9-4078-85d7-a5c5a26b888e.tmp
Size 9KB
SHA256 b398e6995bff44139cb9feebfeebba4c9780596631dceb2f5cb12ce2ab0623e4
MD5 64da9f9a450bed499e1316e26199d2c4
SHA1 e80a617f9f67221f68976a9f4ea513b6724f89d1
SHA512 ca355e830f089c63626da82d88262c992d8f132aa3fb356e62bb18d3fc4c99367b5052447f83f19c256f494e9e50a663fd24626797237e0ddcf3ee8af44c84d2
SSDEEP 192:iHDkSw5KXCgAR8sC8y60RJL9/CO4EDaqq++GNINWi5Q8eQCuN9en6:iHDkuCgA+sCX1DLE0DaqaiINWiO8eQDd
TLSH
T13212AFC2A47C43420D6CD5D094CA01078B6635A12D782DEB6E84EA28FE78EF99F19E65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw367c52dc-db2d-41e8-a564-94a44c6b3245.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw367c52dc-db2d-41e8-a564-94a44c6b3245.tmp
Size 1KB
SHA256 f992f94de727a9e17f6425aca4f9c9819e626f6f978ab3ad0dfdecd615d5073c
MD5 3f8cfbbdbffdfef9988c1faccf8d503a
SHA1 1b580efe158185ed9e4e6ff3be3ea5321810d5f1
SHA512 8851d209b35360296e49b932a0e4fb21d3256b225f44ef2d62b3723fdd0c534eb1e2bfe3d9285a8da3d4735ece2e7ec06c627ac4d32095fc31d36bb80509cb1d
TLSH
T14531E9166D60740A19F545D0158497F07F0753B4841754CAD042F3FF6EB2BB508EC362
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw3b9fd2b2-5d9d-4d3a-880f-2d20aea257a7.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw3b9fd2b2-5d9d-4d3a-880f-2d20aea257a7.tmp
Size 9KB
SHA256 b1bbf9be2a156aecb8e95be327329925ead0a1b7b2fef730a49fe1fef19e054b
MD5 38adc06355e7a62db9e02272350c8492
SHA1 9c183ac821071a313a454eea7211e3b8a03d0665
SHA512 b45ba0cab18fb900c5bca14cdec20a6ad83bbce6395ac24fa775250df45dd0e16f37aa7ceb77ef1f0782cd797ec4266c241ed3abc9980781259da0d10dc7118e
SSDEEP 192:7W5KqztK/uVuaMrJhTEztjpuY+w+m2X8oyd78dIt65vkeW9Qn+7hK4m06j:7W5KqZquVpMrHSjAY+x76AG6Jsi+o4g
TLSH
T1DF22B0C6265A26C2ECA2673DA8AB8C76452DF221F4F35F9C09F3C80BC512D1610DC767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw3ee86732-f3fd-4222-8b19-0205b31a01e0.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw3ee86732-f3fd-4222-8b19-0205b31a01e0.tmp
Size 10KB
SHA256 ca14d6190ab98e2ef49b3f36a8975781a419da3d354851c9512b75c1820cdca9
MD5 e6d69a3619c2954f5220219d45393e5a
SHA1 865352d3d5861ff442cdcb2a69f3f128ec79431d
SHA512 358c6f4252d4b0bbb87a6911cd03958dd5ca87acea31aab5ab31f76c6278473e50167d61bd3995da5ae2312df45cb2286ba5dfd259458e8885a6415669877fb5
SSDEEP 192:+SyOiORmm/kEfbLHMjNX3Sb0WwvtfJEL5ieDzissKZwceHAeo6:+PZm8WbLHM5X3lhfJE1heHho6
TLSH
T11A22BF865D98A2E15BC02E719922FE3035F3A29D50FBC744343D81583AE1FAC7974B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw42bea12c-c78b-4f9a-bfb5-1b177c2813ea.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw42bea12c-c78b-4f9a-bfb5-1b177c2813ea.tmp
Size 10KB
SHA256 270faff9faaebf9724a3b4fdc5dcb98dcafe07705f3cd0e0f6471bb899f4ff73
MD5 e2584517431beab914f3013fbed25737
SHA1 1f7816416c145b9728abd8fe9f98eb1e42da3b68
SHA512 708327ab5b4a613921a68c391c29f240006fefd44ebeb7dd5f01a62b4f043b6c5c3260c92d3195d2ac81874a849862a69479bf0d750b544c41ad6bbfbb717596
SSDEEP 192:VyeDWLOIyly9EJnPWcC1AlknU5gO3IGM4HiUiO/IqiJijWeWjEFIg0SJ/Jp2rEY1:QhLOjy6eklw0gO4GMoiUi5sTFFbjy1
TLSH
T19922B0BDDC9C499BDF711FE0EC95630991072EC8E5247696D40D147F13223742CA9ED2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4700ef33-d5a2-48f9-9ce0-ac3a0fc25932.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4700ef33-d5a2-48f9-9ce0-ac3a0fc25932.tmp
Size 10KB
SHA256 224d528e081ab3d85904b1dea3fef10ef516def42a638c80786b3cc344b78ae6
MD5 a6816fc30a1ceaa6a65b1d43160c17f2
SHA1 2f975b4a526c2570c0e838f82fe6608fe4379b1f
SHA512 55503adbe9c1093c147e66f15cba78304ed5ea7111c9c1e84d7dc2cd329e8388345418cea93e2d8ed9994417e8a14c76d3af3afff57dc5e1a4bcf34fcb667593
SSDEEP 192:NZSqsapTFc66guk5OwemZ2Es5biBGgng/zxupahbcLnutlhkwbOxe3iqVJyVP3NX:NAqxTsguffas5bmGf7gLut/kAOkVQ931
TLSH
T1F622A0C3B7923D7502DBD1D6E1439628D25080D1EC7B11652ECCDDEAA10DEA9E3129CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4b827fc8-4df2-44a3-885e-4f7a4a77ea33.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4b827fc8-4df2-44a3-885e-4f7a4a77ea33.tmp
Size 2KB
SHA256 608d25cbe5738491ba76cc23cbf5861139047277d0395cc408d19ac47ef86a61
MD5 3794767396dcdb20e780b72567713dc0
SHA1 d696654d8f65d3f3a9852c3f1abaaa09e960644c
SHA512 4b97c2fd8d92998cd21b6ee5b7fa19602dc13e4d4236b266d137b0e9d019dc0ce3e03858478ce2a6548b91a6d578c1c8c3701eb46cee2f0e6fbe7d053e9a7abe
TLSH
T1FA515D66919CE70C9DBF6F476B9A724BB32D63FE0A1214EF19042A3445B680D38C1B3C
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4fac86f5-a7a5-40db-bb35-b2e5d353b49a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw4fac86f5-a7a5-40db-bb35-b2e5d353b49a.tmp
Size 9KB
SHA256 9691200a86d42e3dbd58b89ea0513aca3bf061237da8ed00e5eee5204303eee2
MD5 46c08550a4a312becdfbab60adb01015
SHA1 ac591fd66efe1a4361294c2b27aba6cf5ae7b02f
SHA512 add29fdc051e88ca6779724b5adb4e33748fa82db30ffeb78ff36cca499988a3fb009c78c5a3986215d49768b8dd29c2c4e35a12857516261bc37997dcedf77d
SSDEEP 192:4KZLfiUK4dlxVHL8EZr2KjxKNowcLju4wVIDMsE:1aUK2lrHgEZrFjUNgIaMP
TLSH
T1D012BEF14DB119F0B6F5778F882F527E049B011E1EEEDB8A8858182CE90B44DDE4383A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw50a64f6d-86c2-4bd2-9b79-2a90cb158c6f.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw50a64f6d-86c2-4bd2-9b79-2a90cb158c6f.tmp
Size 669B
SHA256 0b795500b537a43c698fbb6b2bae8e91ba3217d9376b66bc1f13e872ef2ad988
MD5 a67d80979a341056feb07906baad8dac
SHA1 67358d37b8a94d2804134720f33bedc563cd6bf5
SHA512 2a3f58633e8a6eab098f64c8fc6a710d177660cefbcae86f5428c28b7b31cef28618bf1d5d832a55f5657aff9eefb54c6b9ccfe96a87b202f24cf6e1a3776c38
TLSH
T1C301235678A6072ACDE80BB4011F6754C90E44AEE45A74A94DCD2E9D8E78C0C7464982
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw5164b23b-9e9a-4b1b-be1d-926b60c86927.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw5164b23b-9e9a-4b1b-be1d-926b60c86927.tmp
Size 1KB
SHA256 2a03a933aeb1cafd471d01cb6696e6df525c4982763e1946236139e55edb59ef
MD5 7d3671aecac0fefd9703db8cad0c3e75
SHA1 09ed1acf15321e0a6ee525121c147546df3613a1
SHA512 95f315767d7b755b7581a53a1ae11aeb5647b3898880345ddc0315cac71ad343379177a5501ef7d62cd69c73376d74fb0dfc2c54dee98a1a263c8294daa452ce
TLSH
T16921C61F042D4915C6E92E265C2A4EBF170713DC82C4326AD1EDA04EDD362C2C098A0A
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw580a94c4-596f-4828-bc47-0576e7283044.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw580a94c4-596f-4828-bc47-0576e7283044.tmp
Size 1KB
SHA256 d67ebae0a488e4403d68c5039d42b6a0cf8bd8b9eaf778adbf385a082320176e
MD5 bc2834376283b3287f9372b8ed170cf0
SHA1 90bfe72b8df445a9ec8acbe7e0e91a3ed14ace3d
SHA512 d54c94e1aea39e3adec3ac0d82ddd28b3d7b8fd94743521ce2de3b822346a0246b120d5e8021d361056068aac8ccb1e41702cb1042873a69f4dad613a398c1a6
TLSH
T143315BBFD8AC6E88099B5EE221842CF586BC1D2ED47A55C330C2129E4C248882E018E4
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw58357da4-6bdf-4d59-aab1-97f6ed306e55.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw58357da4-6bdf-4d59-aab1-97f6ed306e55.tmp
Size 9KB
SHA256 de61fbc4ddd4a4c0b296f4a9f6ecf926511ce064c43100dd7a9c9eaaac07079c
MD5 f3f482b5593bfd65b4794c47b6bee4a6
SHA1 38a3eac81bcb23357b57ff504642b48162af1f18
SHA512 778fbd9da150a06c02ebbb35aac0225a810d4c2cca939ec7809a3dd582de4e9cb3b5fd759d3cad7a1203c7edfc950dc157f6a2b15a86c0ed234f07f8504291ac
SSDEEP 192:WVYDekDVk6VMOyOpj0qiHgrny6fbfjvlWMLXNnCfNO7YEYEOHnvzsem+esq:Bi0VVM0jeHgfHXNClOk97sUeJ
TLSH
T12512BF878792DBE572DCD1AE806EBDAD382082B2B77450409686EF6D2599D44F4CB098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw59f1a4b9-3ffb-4479-b1f5-9d0368cddaa2.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw59f1a4b9-3ffb-4479-b1f5-9d0368cddaa2.tmp
Size 11KB
SHA256 5a1d6deaa5a244a187e59513670db03d4a62893370a510f00bbdccb5526c110f
MD5 6f40884995c393c2bd748ca3e7c279da
SHA1 4c3ec9e045bf6e61f3133d19e346c6884b38b14f
SHA512 553456c977aaeb67eb477494de78a3463c83eb81352946821f8e96e1be40043ab04847c83d5270501d6cbe8c9728ce299b2f9637af943db52e371e7d669ab648
SSDEEP 192:mp9yoANjc59eI/eUtsYK/XzjcvpsoPVAqJy2FelGCGj4A4G/gGPZD8mwhjUd4gza:mpENjc59AjaJV7JybwIA4GR2mwhjctjm
TLSH
T18732CF5201B1C7AFC78E361C6AFF08083930C39F9FDB97E4546A9BA2D091F5954AE711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7966bca4-4dcd-41d5-ad61-1eea726c9398.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7966bca4-4dcd-41d5-ad61-1eea726c9398.tmp
Size 9KB
SHA256 e5300138ffae72da95c8f6d80369efda3df8090f8e4cd219b37ca244429d56b5
MD5 9fd2584aed9080044d6e039fe4424cbd
SHA1 c889995aa0e90bdce42cf1b82b9f85ed4df03006
SHA512 432f33ba0b42a4fb481cf981c23f66d464bbf01715fcd71d0c10e7a87b95faaae5b0bd7c9b9e5c024e8be5b70a7d772bb46269c0c0b0cd4bdd1ad40b1ff70a63
SSDEEP 192:plFJVgcBxjIYGG3bXS/TrKUfGdoNmV26r4x+V0NwA5:RJ6cBxMr8S/TDxIsE06A5
TLSH
T1F512AE6F5409D925E237AAE2A9870B31330155A5FF31A90B5668C6390F3120A7CE6F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7ea36a8d-dbae-4df7-a8a3-476f1c1086b5.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7ea36a8d-dbae-4df7-a8a3-476f1c1086b5.tmp
Size 2KB
SHA256 4c738df2d3bd58c021033481ff6e3fe30ab8da54b3c0fc4aeab9f51b1895becc
MD5 77637f6573e9d40fa4bc7aa916f107d5
SHA1 f8381ee28fa1e6cb73c7cf8a2c36d00152c6a670
SHA512 28987fc44fd5926e48a532aab476cc1122f6770cf9535106433569cc1015d0c5ff74ae755eefc386c1b1884b06a799b84f68c51ae37eca761611fd9d96ccaf66
TLSH
T1EE515C8B2463E73BF13616993582365C29182CACFD265F09C0C87DEDA1EEDD15E162C9
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7fce2d20-60e6-42b0-a289-c770b3ad82a8.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw7fce2d20-60e6-42b0-a289-c770b3ad82a8.tmp
Size 10KB
SHA256 9ef1210b8b904c7680bf6cf7d339d2378acef0705857ae54bb9e35c50cb0b4ca
MD5 e2bfd8b9184f62186b66e7bccdb65285
SHA1 f274e84ca4d44bac586ae4ed9069b21b4cb4ad4a
SHA512 bd21352623d37b157293c040bf24bd533ff0b2f3bb80567b7d87d53bd78461e250857b6c3fdce793b09b33cd02df73c8ac5e9df6b4ae07ffe4082dea201e52fa
SSDEEP 192:Vn2qPT2xjFQ8sR5hn2sFcTS36nWRiJZbijY1wiJSwtaYtjKHSJdpTxc:Vn2GT2v7sLhn2sFqSqnNJZpSaLKHwdp6
TLSH
T15822B08316B6B672C045BB088499D7BBC8F03196C931CEB62965A00E4FB93DA567351B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw90ca0183-2398-4ded-ab35-28736af9736b.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw90ca0183-2398-4ded-ab35-28736af9736b.tmp
Size 1KB
SHA256 17b440a35aaa85d52ddf6942fe9373b8639b57d9c56a1f40d96027b96fd2fb8a
MD5 82bd2caa98b99f8af31393724220f2b2
SHA1 d4d9922279a09341d1ec44cd25440338d1c2ae70
SHA512 c07f5e9f34cb1fecb31f20aeb3a8f7c5b43187d0fc1605376f9b8908fb19a41ab972cf552cd329a7cef654054217b944e495283d564012739db52aaf0bc19771
TLSH
T1D8312B60E2C75F47EE0FFBC85EC6D010409A2AED981689D92E0B166A5CF7DAFC016905
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw93af5618-9a79-49de-a13a-bf96b7095173.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw93af5618-9a79-49de-a13a-bf96b7095173.tmp
Size 2KB
SHA256 25f0d6cfb1f5f57ad747b98d26c79a0fc9c7c6dc65c800c2f4b76cdd7301c54d
MD5 e3af7e6900a88a1d720233214900278a
SHA1 4f4bd6c952918c4ddb8db4beab90b2c4c0bdbbe2
SHA512 b6207b73d958553f3c39511f0ceae04957643bb8654a97ac973eb76aff2b9b5fde5c19451d013ff3a3e895b3791ba49646914afe9a0a9783cc5f0778ae9808b2
TLSH
T1B8413C82AB62EB09D1D496169C98CD1099F9162FCB1B1AC436E1787BC4EDCD8D4EA830
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw9506bbee-3f71-4479-8e3e-06f14358963c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw9506bbee-3f71-4479-8e3e-06f14358963c.tmp
Size 9KB
SHA256 0bd0689e26ff51f486116378d98937edb779045509f2dba481381d20ea657988
MD5 d5451cd2f0c6f516c2d1601961304f14
SHA1 4dbd18c5a08e2466a0571d366036ce60eb915b0e
SHA512 59c7cb96c06da5817bb700c013af2efde617c745d003abda6ff6dfbefc96812357cc8c831baf7642cbbd18aaf32ffe11316b1db16d34674595237072fcd5e794
SSDEEP 192:SgUlZVl9pXdCfPQAhFaVnemHAyE7ttjsI9ukzl8uUVnqHDB4iORJAAc:SgUlZVlPtwh0FEJtBundqjB4iO1c
TLSH
T17D22BFDC8A6E312B985190DA6F867D61409B8168D4BE73C6D2C7CC931F57CF2F468D05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw99350d04-2f52-4f7e-a870-9b76d44a4415.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw99350d04-2f52-4f7e-a870-9b76d44a4415.tmp
Size 1KB
SHA256 108c758baa225829afd0cdffba265602246411483428086154274c13b76ab8e7
MD5 b37ce2a62f8914c60d87e56a63285e7c
SHA1 79929a5ce6235001857196b5074146f75282eb9a
SHA512 a031d1d49fa615a828e234347e8d042f130c760cd71622de0a9cc6bea2a5e6f90002c7bf12b34330b0df61d5686972ceb93103bfaf99e2a23027541475df0ccc
TLSH
T17331F8635DB789FCAA822CE7D97B40A05915A930876EA236385E253F0744E00C890B69
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw9f476a22-821b-472c-95d2-54a38a0810fc.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.raw9f476a22-821b-472c-95d2-54a38a0810fc.tmp
Size 10KB
SHA256 9093b6b32c15fc36cd2503625622febad9be9fa492bb73bf01f8eba7f4391af8
MD5 705e65162cc60933d03568e6f2a9c9b4
SHA1 2538d3e4e588ba8f16fbf92c62c528cf7b70eaae
SHA512 1f782048b9794a8f7a57ef508e6ec0dcc1a9986a8361109943b9aec3b8dcc361ef52865f9104c158c0363a90c99f17290739596f080ea0726a94aca97a001ceb
SSDEEP 192:/2+UJOkliK9tYGOwA3qVsESvGbzFWQPuf12rhdFUnBNIVQP85cWC:O+UUkI/3qEc0QM12fi7IVQP8iWC
TLSH
T13B32BF51BB021492FCFDFBAA9682DB719861881C0F3A4AB48787490CE9B47754AC0C9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawa2addbd1-fda8-4228-8e5a-a26bbba8a120.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawa2addbd1-fda8-4228-8e5a-a26bbba8a120.tmp
Size 2KB
SHA256 24cd32447ade41ca84d614a100c04a233c0d80f9dfc326302adf0febc0357b34
MD5 aed9edf1fbe7fdaf772e12765843e889
SHA1 c02e0f35debc4cd50ccd9a93ecf3042c6ed33a34
SHA512 cdb97189978376654dccb259db6edd1ca685cbfbabd2aefb9a1d38fb54d54726a2259ebdb1529d78861daec098fe36f2f696df45a91bac60862eb4119dbe3ea5
TLSH
T13F512CFE79D75165B734E3EED493E4A72AA30C801C3095B0AFC505125274B2F8DA5C91
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawaa6e9eb2-5d03-413b-a966-b0725d9f2731.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawaa6e9eb2-5d03-413b-a966-b0725d9f2731.tmp
Size 8KB
SHA256 dbd717541ac8c3e3a50935d05d68d8a5408022ac94d65db362b979c24a55477a
MD5 65c0b16dad6277973c706c65243301d7
SHA1 6e9561a54cc3f02fc4699e02aa332098f6d98349
SHA512 c327c6515a8858f3a61faefe02fa9c470d6ad621b2e1c1c157355d6683a73f9210e955d581491d15a062897178983c7c0676129d8c502c36a44d77def5972c3a
SSDEEP 192:gd/UnIlHgbasqTM6jI7JznjtOR1GWx6lGN0KUwuB9aYfeJQf/04Bz0K:QgIlHgeXjI7J/tOHsYeKM6keJQfc4BwK
TLSH
T13712AFA7170AD16F2FB7AA2435F8B54368154A440957CCCB938302F42C69646737CBE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb07e1f65-417a-497c-bec8-6d2b97091540.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb07e1f65-417a-497c-bec8-6d2b97091540.tmp
Size 10KB
SHA256 34e0ae1a31824bbb6d6314f614faf7ff0e605a54d17f390eb447a2754501ee3d
MD5 d39d66e8741d425b9ef4c83fab3f471c
SHA1 f0bb1ad9ae0f76d4b05670116b111fd3d31a26a5
SHA512 627d54a904ea02d8b7074ea0e529fb6d618517cee35d5a596e39552f428666fbe656a9467d4187ef508a22eb9f6c700a9daef2b8955acbd53e4d035a0e341118
SSDEEP 192:t/L4UumTUD71IJBqISS+7tiNI1stc8LcqzpWNHQbwP8oPG6Lm:RLAmTnU2+7t/mLcqzANHawkoPG6Lm
TLSH
T1A422AE04F252B9412FA1CE937DD5B2A812A2CCFD7A0497FF1969C24917F25E2C11C356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb2fdf3e2-f811-4a76-90fc-03b4fcb53e5c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb2fdf3e2-f811-4a76-90fc-03b4fcb53e5c.tmp
Size 2KB
SHA256 fe14784e6bc43c258cc14087ef130650c6a3f838b5102ae3d4996779ae54ab7e
MD5 63dbfc206f61dc69d2d797f23a4cb2b3
SHA1 040b76b3a07401e0f84653f46171cd03361c69c0
SHA512 5baba052a79e3daac656acad71095fc7c02756f9aff06d93687bbe7f2ef933b8ca4406f228976fe9bbf198722860f323dc14173acf7325283010e82b290801f5
TLSH
T14C5139551B8B01236EE5563B8CC2E151C0FAF4027712FFFF049D6FA6DA5480C9403D96
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb40eb2df-1d9c-44da-84e1-e6e418af9984.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawb40eb2df-1d9c-44da-84e1-e6e418af9984.tmp
Size 10KB
SHA256 9643da7ad5c1e125d30eb1cc19488f1a7ff0dcdcb071204b167dc43fc07de5b4
MD5 febdda6ef773757006a680afbcad8c4a
SHA1 53d3271d73e168e230bd586fdca71bd6fcbd6983
SHA512 eb6ff6176843ae9fb592a2e8c1f89b228e0cf69121f4991adf1585db528799fcaa6934e954cb2aa3ebbf1c41644251c3c69f58033084c76a274a3f7b19760432
SSDEEP 192:vdXhfQxxxpK0gMMTzlA+H0ASsW5esYq5AZ7AqmuhTZ:vdXhYPuBlAK0eW5e7qS7AqmuhTZ
TLSH
T12222C037467B12360036FD201BB9DC76B4A77A3DC8938E2E0B8617BA017D7A4154AFD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawbc0bf064-8502-4dbc-87dc-45fd5743d378.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawbc0bf064-8502-4dbc-87dc-45fd5743d378.tmp
Size 2KB
SHA256 db235fde25cc120890b893207b5190d4950b528799c1ffa792a02abe0942db23
MD5 0cb77fcbfc5ccd4e8aaf0694ca474765
SHA1 1b7448f77556a69c0885ba16aa7f5a6d5a11191b
SHA512 e122db81f4be6b21815cab293c622c241393138a733d55e66d1e63e2f3aa317d30918c8e81034150ba92d0166e70b569dcc9506d4246df0c29d5caff39c6a9c0
TLSH
T1C8413A4EBA41FD568848C98DCF0FD088EB1E93B86D0A01F5BA9B5A02981B47F5634188
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawc643d5af-bf42-48dd-958a-75289e9f4b11.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawc643d5af-bf42-48dd-958a-75289e9f4b11.tmp
Size 9KB
SHA256 8c6e0ed950081b3990c2bd3ef09b918959f4d8998ccc600e4efeb5d4b354092b
MD5 363bdfbd39677525b645bafb065677f8
SHA1 89bc92444e98e6ef4599d42ee0c5136283243283
SHA512 2bb0985ee924bcb319a5570d20584b2e9cc25938a9798cbf7a13c7ddb020467a53ea1aaff7595d21cd0707d177452fc513c4e78c47602f7f52765e7f3f34a009
SSDEEP 192:bVBs2d1Z52zvxHOIXGOssr9Dpi95bK5lttvGi7FaRxkTbn8:Br1ZQlOIXGOQO5lPV7FaRxkTT8
TLSH
T18812BE3E12618A1659F4E60D06CF31879C59ABAB4DEA1A2EF4E4B4D44433824E533CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawcbea4351-2dd7-471b-9e99-04bdc63b4c20.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawcbea4351-2dd7-471b-9e99-04bdc63b4c20.tmp
Size 7KB
SHA256 8692f3e4ca307ca56c1d2b2fc26f6d4b38fdb5275fe5003adb2b9defdd589753
MD5 62b300dbd6d5621c0f9e185f7d952cd8
SHA1 956006f6fe780de3786ba0554b2a610aee176356
SHA512 1bcfab2a7fd0d4b753e25bc0be78becab6efdf8aff71257e4550355bb3e0c2a4cf59d59fac64095758a8537172b261d7c797dbdcd79c298405f14d9b542587fe
SSDEEP 192:a0p/RoeWvNwGZtgVXCr6qPKPndA6LVUEVotoR8ptywJnis5:rpzWaYtgNY6qyPtLVnqSepNUs5
TLSH
T1A9F1BF9848168D8784FA0F71FB4A61C2551D16D73861DCB92FD326079C88B9434F777B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawce717510-d85a-43b6-bd97-f4978169b2b9.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawce717510-d85a-43b6-bd97-f4978169b2b9.tmp
Size 11KB
SHA256 8ce2683bba49dcd8f2f3898454b1a8adbefb345f20c54f4a23cb91b9f49d2f81
MD5 566797ab953ee2687e8cf3eb9419f782
SHA1 c8b23d4f174653ce8a6513b9dd46da283da2268b
SHA512 eb1bce69c0ce2f3bddcf17cd07eff2ce2178a2e0aa28a22831da6c18e3e02d81921de20ca85356bc543f59cd84ee6f35ea40e2ea112acef697dd655236af435e
SSDEEP 192:MX34fB9cW9ztymnX/ztf+ee/8Z9yNRuau76sK6P0DqDe5Tgzjxnt+uw8cpxyW6:S4r39hlnXV+eh4u2bpDqDe9gzjxnt+pO
TLSH
T1F532C04BD4EE3ED57C4DC42480190DAF83E4E2C8011B397A374AF9C39B6A5B64211B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawd7079453-a3e9-4296-a69b-eb1c984487aa.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawd7079453-a3e9-4296-a69b-eb1c984487aa.tmp
Size 9KB
SHA256 737a28f3b90a0cc76b6e9894d5d69784e70fb00481ac21e7a6fe110cc0213cfe
MD5 6625fa69146cb7eb4f7ddd80981e5c21
SHA1 ebe1583aee799c19cd543b6d38787aff3ded6e9d
SHA512 1045fe9de451917644579cb3dea6b7e60966525f17f52e6205922d4086d3ba226f2f3a01dc22fc932390e9aec1b3894958f085e276e729d0ebfd50b263708d75
SSDEEP 192:dLIs3zDl5JNfxMgJNe5b/nres0CugrgEG0SwCL2GCYD1olNtwT:dLIsvbJNagJNe5bv30Cugrgerw+NNm
TLSH
T1A512AEFD22C42A8A20BD2D1252D7F54377C96EF2246F90823F827D2ABE5076C415B1C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawd996bc72-666f-4d04-8dc5-cc9bc57ba51c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawd996bc72-666f-4d04-8dc5-cc9bc57ba51c.tmp
Size 7KB
SHA256 c200c2de63c37d59e90a9d5582ac5af3475571431beaf4a21fe787b8f974bf32
MD5 692cbbc6c39dcf82aebee71a165e331b
SHA1 f3c9b5ff133db073c38ff4b16a1b99bd4fbe5208
SHA512 8ce16acdbab8a8ac94abc2e83a37b905c2cae882c7132b3f4b4967913b8c68adc848cb81e57de6894050ce96b19e3d841e0d76ecef0c19667d8fd6c173cefc49
SSDEEP 192:3MiY1KNcySeUk5xJm07HXLoL7LN5+e/4fUFF8GRCp+LU3D:ciYVXJkbJmU2LNCsFFfRX8
TLSH
T13EF19F9F8EC66FE0E196BC2A1803487BCC6A2AB053F9C8760AF62465E58D5D2C4012D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawe1ae8ba0-55ce-47e0-9eb6-e4e815d5c056.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawe1ae8ba0-55ce-47e0-9eb6-e4e815d5c056.tmp
Size 11KB
SHA256 dc488bb4e62fe661bc502748b8d81cbe8d9833741b06b457d02ce6fd7f0ff0f6
MD5 105cc7b83d7b525b38027201adfd475a
SHA1 7d4956d1b5a5f53b95700a3ba24216226e0fccab
SHA512 9c4a3e3610c1b7bc081ef9d3d5afe77033e400fb98b83b9a91dd8ff8ad5337648a4152ab3f165efa8a2f73b2f801d59641f52cd74e27306266bd7a14a7e7c84a
SSDEEP 192:O22yci2wipfDZab0AVvDd4XG65V2ADWhW+f+sUZMtobLc2utMHanvkUzEQ+hNLys:X2yha20yDSVV2AkWXWMHavBzE/NOs
TLSH
T11C32C0794C996BA48BE1A9254423BC918AF3896FA0A6335CDD514F32DC5DF10B1A43F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawea120964-0d6a-4a8e-a93b-9f2ad9c1318c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawea120964-0d6a-4a8e-a93b-9f2ad9c1318c.tmp
Size 1KB
SHA256 9a9240ad34d9fd3d193b8e957e293a00a2f50610a7f8942fb27792f73c2a1ef9
MD5 bbe9447d73e2dccfa4226cbd16ba7059
SHA1 17ee0c790f2e342b99606336607bbb451572168d
SHA512 99ed61166e11c739c05d347f1a42f01b1a2cae46721d6fb60f915b1199e2b736a7042879dbd6a0164bab567db2c752308b2772df8403a18be675caaa72a2a9d5
TLSH
T10E31DAABCA23BA0624A8EA776176D55D6754B250018BDB0B859114C439993ADD38122D
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawebbaaefe-daa9-4e87-8e89-d57a2cb3b85c.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawebbaaefe-daa9-4e87-8e89-d57a2cb3b85c.tmp
Size 10KB
SHA256 7c2895df661bca6832589b30376eaac6f0570f4e07d4b7a1e06ee3e618c0ccb0
MD5 9f72160ac6210603df7f6cff90ffb8d1
SHA1 861a631d45291f15b4be6a80fc1f417225b57a59
SHA512 edc1d57644bb95e910e63282c2b7c4bfae756f725c034428f55821e526b31378cda0e1c6910afda56b1cc4cd67b0dcf05c516d88c0a088a21c3695545947fb2e
SSDEEP 192:DTfc3RO6FDI659h9mWK85Y1+asAq0/QUDYR9Us8VhI/0TRE6a4KiQ9s:Pfc3RXMYz61bsC/QWYKsWST1s
TLSH
T10632BF6BEFE21B24646570E038EBFA61CCA70015EE8777BD5CD11267651725C8F0B08B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawebfd7ca2-8bbe-4a2b-87e8-839370c527dc.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawebfd7ca2-8bbe-4a2b-87e8-839370c527dc.tmp
Size 541B
SHA256 8f464dce1646b3cb1d3324743f069657cadb565efa8607788d6b356ba8a31528
MD5 bea14469e556fb2aa5b3987b4810ed42
SHA1 e12c2dd94d40582f8de4d363c63742291290491a
SHA512 1c0b32bf5b54f99336e19f897b846e6add822eb483d032baa3d33352c41532dc9f2e98d07af7a5730ffdcc0656fc2142ed07289f84e8b091046770f15ebc7d8d
TLSH
T11CF09622442EF7F23620A9C1FA05B4DC03781E8152810298C11F7224ACEDA4C48945F3
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf06f97a4-3191-4a60-a537-f04d6d7e1107.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf06f97a4-3191-4a60-a537-f04d6d7e1107.tmp
Size 1KB
SHA256 04495ff48bc9b905b44795ee2501a88dbbc7b79d6f595f0d5b9ea6b7b6d464dd
MD5 71d8ba0ac51440fcc40fbd00f7d726cc
SHA1 95728182b0f2e50a25969e7e6cbc85670d17bfd2
SHA512 e9860049e8cf62ea15ca5f56d3794e7c370ddb00e62ec1339376f4608bceb79a2e6af17af7fe74e3320e9b223b03569ddb34ecb09800c409ec318e51f73b9c90
TLSH
T1CD21C84B6A0A0D93E12A58F673B1C0E476DE6EE0680F05360D392BD03FB074479EE252
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf1aeb061-7e1d-48ab-bcaf-08ed815b3e3e.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf1aeb061-7e1d-48ab-bcaf-08ed815b3e3e.tmp
Size 2KB
SHA256 c0db03e74d1f7bb41c2dd6fe14b2a130ae14a399ef769c21c5f2da5337799d51
MD5 e15bb82f8e50289835fe9f9e9578ea3b
SHA1 7e4aac4c21620b5bbdcc29fac013485c933df975
SHA512 2e6488bb43bbebca34513cb2ee60e69ba9f44b587271e675db93c3a47e3650be0be5d9e02f76a60e25410e511408b8dba8a21c283f94b526fa501d61d8132926
TLSH
T1E3412C3D51EFAF6A54424853D16E9431C9B48675FC6FE90B44F8911C325825C1F81553
MD5 SHA1 SHA512 TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf2645a14-be48-430b-bb67-a2740a79c423.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf2645a14-be48-430b-bb67-a2740a79c423.tmp
Size 8KB
SHA256 690ab8d4e2681f697c128a78ef32145dbc6a771d762b2f7f1c6eb4d8e03304d9
MD5 4b5c6de117ba0330bd63d952ee11f9c3
SHA1 46be4e30d98d4e2549d3ad4338b131e6c32d4e2d
SHA512 81d85896ba8d4f8fbe4340591a5cf6114479e6f8829c0353a43321fd24b81755e10654d428d0e2dc8a5c08b89a4e8b5bcaa80b7e485465b42352b240f7b35e10
SSDEEP 192:O5uQjqt5hDUguHJBD7J6mJOzH5G4Z1hlYntc68yXfQF7yJ2sW8t4hO:2OjmlJ7smJOj5NaGNyX4F7yJ2s/ehO
TLSH
T1BA12B0F2B7AD2D694FEB1B8BDEC637F067349A40611E0206C639D5A4F046240A7B71DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf460a207-406b-4a79-8c08-031b15fff03a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawf460a207-406b-4a79-8c08-031b15fff03a.tmp
Size 10KB
SHA256 f26a47f95f5cf279cc9498e3052b56431b9d6a8ed86959d53ee61ad384d38601
MD5 1af87b56a6d6d4340e3c6f8d76adefb3
SHA1 b97011334a6a18cc813120bf98528ca3e79960dd
SHA512 1c4d02aaab075756f9656f2950e3a5e80c19817e4837849a3b6899fa595d0e077798792092056d13ad5d3775c193994ccc2afc0994712f113d57db27cd523b49
SSDEEP 192:F2ETD+OincVn6DQHD2zwE1dS3Hfy4sX2OW1EFqbEOLtxHQkMTnhkRg1:FiOicVQQHeKXfyLKEYb1MTnhkRg1
TLSH
T1CF32BFCEA1EFA9433AA88CBB3A94EEB96D44418F124517610652B720765335F480B5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawfaaa6a40-e398-4806-a462-09631dc09b29.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_6446c421-42a4-4b3e-b7fd-665a073e028c.rawfaaa6a40-e398-4806-a462-09631dc09b29.tmp
Size 781B
SHA256 320ce47c19cad3471aef4a30c6d08b37e59f3da92118e1699f2b05f5e0fd5998
MD5 13e32b01e51d2f2bbabaeb2761536076
SHA1 0ca365a8e3e053a89c750b65435cc473b93463b9
SHA512 1117fed04a9fc5ba25b2632c973157383cdf67f425ff51154e66c002a57ea20d0c8ce7ccc3f6180691eeed2511f0d194bbe9de305089203da4567909f0039266
TLSH
T1B301758AEDAF854FA165C115B3278579934E2714045CC037CC4E1CFAF1E8706E74653B
MD5 SHA1 SHA512 TLSH

Submit Download

daily_wallpapers.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
Size 4KB
SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
MD5 8d7dac9c74c7237572b609e9e1aa34f5
SHA1 afd70ab0bc706289d321098b1e31289aa798d660
SHA512 dc7a25129e867a85a1d2094860686352a70cb28a8347b2c06c31b9e259abd34d38e65d5818da5ca38e1ac303db1221366d204b6bd249a4b6d687127ca9b29011
SSDEEP 96:y9L59LqE9LF89La9LbImU+5ULFUtrFUKewUhGTtUqqVUO:N+QCVeyTMl
TLSH
T19B91ED769BBD8C3AE62933901961FD82479E71B3D7A81C7873C94F4241F88B80A32657
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rhs.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
Size 107KB
SHA256 6f7b6f007f424f9e4da217ea7fb4a54edf5da748095a7b9737b546648d322f3c
MD5 2df783d509a03c6056c587cc3ef2f7b9
SHA1 3700edf885ce33434303fad62ba289647973ed61
SHA512 203ecf4cce8c68e441094034809340f1ef5096c66ef8a5622b343c5ae867879b345d2f4b542296a3d05c0c4abb4f6e285870daf729d4db9438545c8b28559fdf
SSDEEP 1536:dIwPeD1eVJeslaBqF8kbKUKmezjnQaWFuexugZ7iEtFys6skr4Glrz7XoUCRnAEF:Ar28kb56H9ZexugF3t8sG4e7fCRnh
TLSH
T104B3124BA2407BF7A2E7F1516BFF4327DC284C3EB395A896C7401D6A4522965CBF2E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spotlight_campaigns.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
Size 41B
SHA256 c7860a3f5a72aabbad8d3fcb1dca86e7458c39e460968409b15e6001dc4fb45f
MD5 36b62ae60c0435891b23398c304a8547
SHA1 ca0cfbc0e68a0409e542fad90513223b82f04717
SHA512 24cb2c37d099a2a098c9b850b5025b7e073668082c749f4d4e1615ea9c0a33e3acfc1a2881ce2b6a9cc3ef328ceb3edd0b1f9611d637df3e4235c929c5a56134
MD5 SHA1 SHA512

Submit Download

ssdfp1252.0.770488384

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384
Size 327B
SHA256 86b6c0e56f53dadc20ce83f191c932dbfd45789384b87837f4f99cca255e34f0
MD5 d1fa8429b61250f872cbeed53f1dd2cd
SHA1 8214a55c4636ca86870db8b891f7cc45a35feed0
SHA512 4a65b3c9b1199f17cbe80618cb71fa9f1f0474e05074504a4e3156d7f8c9fb55c907d0d612866da459671d3f3d6c504db1d26c750674433f85f293850cf26bd0
TLSH
T138E07D11FE51CE55FDC67FB230BDBA3293DA454058D01A314CEE708E521941D072D321
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384128b531a-8f33-488f-8344-6566235b1165.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384128b531a-8f33-488f-8344-6566235b1165.tmp
Size 1KB
SHA256 ab1a3ab48410cb8233b8917ec8e2e77762fc796e3226bc101a043b25a507db9e
MD5 c1c81c9a80d63290c16f8e39979ec8e5
SHA1 1e32d41ca48597f6a0565642c5588f7869669e16
SHA512 b0fb5237307508bbb2a02f27638076c276190465e6770231bd5bd98458d8197292bbcd9e087e151a039bd2b5bd54d91e5d6064b15017518ecc1696af3b3fc548
TLSH
T15D41F0099A11AD73AFAB832FF1A13F170F7DC193310575BA60DF000E2AAF9AA4017217
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.77048838417add538-d68b-403b-bf4b-e416f541ab55.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.77048838417add538-d68b-403b-bf4b-e416f541ab55.tmp
Size 487B
SHA256 ce22713bb80efc150ccbf9892fdf13d1e7fc58f1b08e3852d0ad972cdeab9ab2
MD5 97a1861c7de9937fd7a1ddb21f5577a0
SHA1 c27842de01154a43c91553d8a095f8431aff3e2f
SHA512 2fb86c776048c41ad6214e07994fc749df9cc388fbdfd2d0c63f4c5119749e5fa9ca2979cbe14037a69b0c5c3eaac94d386ebf5cb44cabcf9508d3ffe5e5c07d
TLSH
T1DAF0DC41F846A6A1F9D5ABB6B2B87AB343BE05014451593108ED215F427E03E031A322
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.77048838423e87697-2b9b-44aa-a2b3-a42dbb3a5588.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.77048838423e87697-2b9b-44aa-a2b3-a42dbb3a5588.tmp
Size 2KB
SHA256 dea83f024b4a4d535fd1f285a2c7a836de53809d6dfedc137a3233489d82ff12
MD5 6e45656548dfafe4f492223ef0d09f5e
SHA1 8c747617c1d040761290d061548b35f4ccc99d6e
SHA512 61ad7bda953178318bde758cf7748a523eec4c3ee9a59e0e634c343004863b6ad37859041a9f9ff9491c25eb14e8d3653d1b3d5c75d52bfa2b9867964c882075
TLSH
T165411205AA11A973AF9B876FF2A13F171F7E8193310575B660DF000F26AE9A64117217
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384543d290f-c7b0-4146-ad24-f01d2f165368.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384543d290f-c7b0-4146-ad24-f01d2f165368.tmp
Size 2KB
SHA256 327fa1777fba605286bcb877e31dc971bc49329949c94b98cdb55aa682a3317c
MD5 2318288cdcd61047e4eb968dc7dbfc4d
SHA1 d5105aebe454162b0a24be1b8d5fc1a8ea91925a
SHA512 313d8341689c282801d99072621a9e0558475eea1f22ff6101082a5139cd62db4763a087239c5b885b4f6edbe117da28621f0bcf4a7940c47371233a70541eba
TLSH
T1D6510004AA117D339FABC76EF6A13F178F7E8192311575B660DE000E26EE6A60217207
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384729ff7e4-3d1b-479e-8547-8a2a1f9ff949.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384729ff7e4-3d1b-479e-8547-8a2a1f9ff949.tmp
Size 2KB
SHA256 b529ac5a191c7941be5a00ad8476b7cef766d381dec0232fe1f8d7e4feaa8e7f
MD5 c8017f81670d73772e9ec0665c62ed35
SHA1 411fda6145dd556ec637a394fbb92506ecbf65e1
SHA512 ed44764fc0e8fd81cf4ddb7d91ec5a2934b22d1c1f8ab6594dc8284ba3c01f5359acf7fe9dbf8345110bc77fe862448100f0519853fae7799d83b5af009c05b2
TLSH
T1D3411204AA11B9739FAB876FF2A17F270F7E8193311575BA60DF000F26AE9B64117217
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.7704883847b91d510-b794-43ee-88ec-7cc628a61895.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.7704883847b91d510-b794-43ee-88ec-7cc628a61895.tmp
Size 2KB
SHA256 be1fbc9b622315ffe1c36193adc830e4182fe376a62d510a5ac6fb2fce03e4aa
MD5 1214979cab2f1ae9bdb0e78856cb4237
SHA1 ff579071953b67fb1b6abef7fbbf786b35d9bfc6
SHA512 26aeaaba497e0d848a66ba7e14baa3091772c2bbb577b107d92b6a10a3858d08086ac4e10cf9af211713cfa200b08a98e430b6a22be7e4a59a83260f6d54f2a8
TLSH
T1B0411E04AA11A973AFAB876FF2A13F174F7E8193310575B660DF000F26AE6B64117217
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384854d8567-66e8-4e92-8a7b-8d93ee9c38ff.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384854d8567-66e8-4e92-8a7b-8d93ee9c38ff.tmp
Size 1KB
SHA256 0e45693fa1162e9c34ed8f3acef49b729390b008a7b77a3cfbf13ea4158386f8
MD5 601a86d1c1b83b526b82846048003891
SHA1 a3c8a2b759ea40a3b74e56b2efda7b7642e148c8
SHA512 095514ca38ecb4a3b401d218e5d34516fa7be0e49a1a039a311019f2af4e89a57a7331914720f3e126471240c544ea048cd82ea117a1cf41069ae3d40b089761
TLSH
T1AE21EE15AA11E9B36FEAC76FB0A07A134B6EC592311624B714DB400E169EA78411762A
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384a98055f8-cda8-40db-9e15-18383ac09688.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384a98055f8-cda8-40db-9e15-18383ac09688.tmp
Size 2KB
SHA256 de96eaa653ceabd2f377682d5fb4245ec54749af6332efe02b641f280065d25c
MD5 4d0aafe6cc3c5d9e85438af3ce5b75b7
SHA1 000ec8a63421a418f31fae069de4cb92b2f988e3
SHA512 dbdae718becbe7227cd469ed53120e044ea1a3d2fb6e8307bfea251209c3d096b3e7a18e02ea4cad6a1429305b6a26627254fc5b1d8826a1a5d61bdcbba0b4aa
TLSH
T143411104AA11B973AFAB876FF2A27F174F7D8193311575B660DF000E26EE6B60217207
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384c43b7d37-7c56-45cc-84a3-47d5d010498d.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384c43b7d37-7c56-45cc-84a3-47d5d010498d.tmp
Size 2KB
SHA256 6f81282c0b43ff80e8ae5b1fcc8226b88880a2d34f4edbdf6c202f4cfb789e0d
MD5 0abb6ec32f8b6d2d4614d0f6f13f2e1f
SHA1 50a34a9fe7e5349368e5ca9f6e4f90fd74ff33c0
SHA512 1af3d0358653e92345e1f4fd04999f6cb5ad805dc8e400be9e486d5844e89d3b61ea530a5d0b56ac62725e4a91d0ae388fad44bd51c4ed996bef09b6cdd52d60
TLSH
T1EB411104AA11B9739FAB876FF2A27F174F7D8193311575B660DF000E26EE6B60117217
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384d5b4f3c6-889d-4452-8ef0-336814edb826.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384d5b4f3c6-889d-4452-8ef0-336814edb826.tmp
Size 425B
SHA256 19dbef945de8bbace8c89101fec4971a216b867a9bebb7650a2514df564bfaf9
MD5 417bc09302678a427fdba2f7eb5c9faa
SHA1 03d4589c5d3b24d7ad46b236b000f3f2846a70ee
SHA512 66244750764fcf5bdb3a6504988898f03df46e7c4d27df5092ebc573adbe3755496bad455d2efb4549c7820c1d7555dcb66fee01cf660fd474e33df48d700f14
TLSH
T125E0F101FC56A65AF4E5FAB2B2F83F6357AD0E1044A05E3048FE511F512D14D031E731
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.0.770488384dc0382b6-7bc7-4059-a140-fe40c93bb357.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.0.770488384dc0382b6-7bc7-4059-a140-fe40c93bb357.tmp
Size 2KB
SHA256 cff4e439f4787f888bd09911d0432b2e84eb452c9128b7feedd5d7782993715b
MD5 d4953585fb4d31b0a29668e88fbba356
SHA1 2f5c08a223755dd91b6dce394a786c2103802925
SHA512 52901ec29387adfb10154a058cbd8444df1aced8a3576976a66026f87672ba3ef1b8b9046c1778735045e1a1972e7ab122626f31253e80de85b21b78d3c845c3
TLSH
T1D5510104AA11BE739FABC76FF6913F174F7D8193311575B660DE000E26EEAA60217607
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.1.1793671759

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.1.1793671759
Size 171B
SHA256 5e30af63d2e93a2a89fd041760777eb12ee49a4a23b61a53e84f2b999cae81ee
MD5 68593e31b26973e79f46a941e3449f83
SHA1 4715702e33f2799cbc0361c8c4192612ce606ad6
SHA512 8bc1b7b8b1963031863b2bdc3a21b98ccfe20944ec4b458af427d1016b8f1e6fca091dea22ea19a339863c38319d490f90d196a4c595906d6ce17ddf5be324d8
TLSH
T1DFC0C012F43026059C482C78F05477711F8A0103410331180058304C04B4D7CC288A80
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.1.179367175914c45114-c191-4b6a-a261-bdbc17734355.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.1.179367175914c45114-c191-4b6a-a261-bdbc17734355.tmp
Size 224B
SHA256 adab54ebeb5bf55cd766dc6578cab6b5696110f93b35ff9990cfeff90f486a13
MD5 d7e73cbfb1e687e7cd5ef6bfd62d60d0
SHA1 0589b945dd0f31eb302b54722816da9846b1c131
SHA512 a4b24070e2e943d33a28b8ecd96cf0b0327b2a95a13d99ea420ac870c3cd07d0a0b189f5b3fbbef11c19a7c7c4a93da5ae401adb8fe47928677ffd01a408fe83
TLSH
T1A6D02361F5901559EF5D243CF4A87F231D9A20119D03717400FC119C05E6CFC5115D30
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.1.179367175929365342-4a99-4e21-a7af-bbc42cf9322b.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.1.179367175929365342-4a99-4e21-a7af-bbc42cf9322b.tmp
Size 200B
SHA256 5a32089dcf2702cb9b2487e5ca007c3822757e0fd6d64fa59675b257fa0ae9b0
MD5 8fab6e2f30530b8c50dcc74cd460676b
SHA1 d2f9fce2c134a7c53276fd367f68d589f743460e
SHA512 00de414b5787bf15c85406bef12c4e612449cf9b9cf209e310b7d379bb3b38d3a397cdbe334b291feb6161e3249ab90e32ee3f7ad489e77191de9032915f4a3b
TLSH
T11FD02276F2515510BC44283CF4AA7F3329A7020578013EA800EC219840B1568A688A20
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.1.1793671759c08ae73c-a638-47df-a9ec-44f139d6bce6.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.1.1793671759c08ae73c-a638-47df-a9ec-44f139d6bce6.tmp
Size 224B
SHA256 4fe93ee56437f3a0d415b7f4fdad94d16a19a586c31b259150c62710eda4aa0d
MD5 13eca36447ff22f072efe535fff2faae
SHA1 a0d80c636c1c91be856812448d443ecf7ac4b253
SHA512 994788eadd93aa56d4532fae93baacbc3b36901349594112debd9a7564b2dfb77e634d3207832956eeb695a344a9caa79f4de3c602f119ba20da246f05d9d93a
TLSH
T1C8D0A762FB9415A6BC481539F0BC7BA31A960581590165B801EC119A41F6D7CB544910
MD5 SHA1 SHA512 TLSH

Submit Download

ssdfp1252.1.1793671759e4de5413-e4e4-4785-8450-96283f33b983.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1252.1.1793671759e4de5413-e4e4-4785-8450-96283f33b983.tmp
Size 224B
SHA256 7e4f7fde82cb9b096a9eca473a321076ec12c49c4d2bdbaaa8e78708701e3306
MD5 25052fd7a56a011c6844a11fa1daae40
SHA1 abf195050884ec348865c77c91ea8b9d796ddb4f
SHA512 ec78270cd85bc3aecb9d41b718dd54ef993994d1cded4480f294ffddf42019afa6939452dd28ada745ce3955e5db6fe3f94ca616869f2525146a73f9882765ca
TLSH
T167D0A7B6B3E009AAAC4A6D39F0A67E2308DA44417802266840AE166C15E6D795605A20
MD5 SHA1 SHA512 TLSH

Submit Download

suggestions_cache.json4ae8e1b6-6302-435c-a804-e080ae44ca55.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\suggestions_cache.json4ae8e1b6-6302-435c-a804-e080ae44ca55.tmp
Size 794KB
SHA256 2febf7c1b1430b7ecde3fca6d5b036145df6de99871983dfab234f38017fb585
MD5 23c43d465097d4d7e65ac6755d260c90
SHA1 99d70f3d406ef87ca853493f8c59165dd5e7cb06
SHA512 45ffcac8fffbb4dcf011f6bf1bcf92e26509bf1c038b33285d131aeb6b8fc6841b59b2dd6d5888d77d84da4107f3fe79dd3d044e3ec5b61cd9fcc433435e47c3
SSDEEP 12288:5nIIFdEKlvKGQk4TpU69WCueau28NkRiIJa9hDRqy9y1C5ITWDYaE/+cUG8SmvrM:0dChdzEU
TLSH
T16D0565AB868C1CBB5F8136D960CBBA5980C2701FAE8D7E59E780CC4CC2A55673B7C157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsSafeSeedV2c6f1e6c8-3ba0-4ef4-8dc2-804849d7ff90.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV2c6f1e6c8-3ba0-4ef4-8dc2-804849d7ff90.tmp
Size 19B
SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
MD5 0ba451e89bf7a6a0144344570515f79f
SHA1 76f1bb126b80b61ff6022a5691f39d75f42487c7
SHA512 3a0527494b10bdb2aec6280cdcecfe86dacbf02dd55cc8f6a1e0fa981327617a6fcf2543bd9788e7aa866fa397f57bbc1fbcf0d2f6aaa74a35c4d06970afa75f
MD5 SHA1 SHA512

Submit Download

VariationsSeedV2b18916d0-f450-4d02-8f83-b31adae1e95d.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV2b18916d0-f450-4d02-8f83-b31adae1e95d.tmp
Size 11B
SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
MD5 78bb337b5e38a8a32331f18d8a2d3cda
SHA1 ad1ea4656ba8fcc889aaca9a88bd975de1e2beb3
SHA512 ec661136e4830c211c0eb418623f224423b681107cecefd18792799c25969688dc8585aa56f794bec55847fa47925c025f26e56c276228c20aecdd7b55b12710
MD5 SHA1 SHA512

Submit Download

assistant_prefs.json3585dd3f-8378-41ac-a1aa-ece352af365a.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json3585dd3f-8378-41ac-a1aa-ece352af365a.tmp
Size 151B
SHA256 ae9421f7bd535c41a83be52b1945d59c74814c33004c6a22be770a19ca3e3dec
MD5 be7361c89cdd06d7bfce5643a42fd1c8
SHA1 6064d8f1bdb13f7f9a0aa8cac41a7c1c516ec07d
SHA512 96f8b933fede13cbe8f685da1ac212712238446529cafc32e96ecfb0bfe7a0c7981c1d8e2346b80cb9d7e2602def0caf7e04e9a132b8df9f37f33f986007fb92
TLSH
T1B0C02B1C1A8B6417FCDD06C44058B50CC6A8710BCCDBACB3B2D45B214FE872330E2452
MD5 SHA1 SHA512 TLSH

Submit Download

clipboard_injection_guard_rules.json

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\clipboard_injection_guard_rules.json
Size 7KB
SHA256 cadfc443f92476613d67eaf9ed1b81dbb2919820e03e1c8be4e28722a24ec67a
MD5 8c2b3a78449128d7db943fccb404b2d1
SHA1 de8366fb38a5b4da4269cf09a7242f21e81549a6
SHA512 ef8e128912c5cb62e0763bc3b3b967c2567cbd25d012c32a67a3fe584591f056531f405e5bf48beec1d067691d5396ee8849a20e00e329c5d786f7fc63bb486a
SSDEEP 96:drnkKEMHssR0nz79IAf2iO76zwyJRdEzS:XHssR0v9IAA76zwyTSzS
TLSH
T15AF18677CD3CCF52519E64E9828508A5C6B2E0839DDB5C2CBB4C46DD0FA813DEDD02AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.jsonca84612a-2acb-42c8-91a0-3b6d589253f1.tmp

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\metadata.jsonca84612a-2acb-42c8-91a0-3b6d589253f1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/1052-4326-0x00007FF9ED5F0000-0x00007FF9ED6B7000-memory.dmp

Download

memory/1052-4330-0x00007FF9EDE00000-0x00007FF9EDE74000-memory.dmp

Download

memory/1052-4327-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/1052-4618-0x00007FF9E44E0000-0x00007FF9E4606000-memory.dmp

Download

memory/1052-4332-0x00007FF9EAD50000-0x00007FF9EAD98000-memory.dmp

Download

memory/1052-4328-0x00007FF9E44E0000-0x00007FF9E4606000-memory.dmp

Download

memory/1052-4329-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/1052-4619-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/1052-4331-0x00007FF9EAFB0000-0x00007FF9EB018000-memory.dmp

Download

memory/1252-4637-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/1252-3843-0x00007FF9ED5F0000-0x00007FF9ED6B7000-memory.dmp

Download

memory/1252-3844-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/1252-3847-0x00007FF9D8840000-0x00007FF9D8AC3000-memory.dmp

Download

memory/1252-3845-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/1252-3846-0x00007FF9E44E0000-0x00007FF9E4606000-memory.dmp

Download

memory/1252-4638-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/1252-4762-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/3048-186-0x00000180FCD80000-0x00000180FCD9E000-memory.dmp

Download

memory/3048-185-0x00000180FCC00000-0x00000180FCC0A000-memory.dmp

Download

memory/3048-184-0x00000180FCA40000-0x00000180FCAF2000-memory.dmp

Download

memory/3048-183-0x00000180FC810000-0x00000180FC82E000-memory.dmp

Download

memory/3048-179-0x00000180FC5F0000-0x00000180FC612000-memory.dmp

Download

memory/5648-435-0x00007FF9ED6C0000-0x00007FF9ED6C1000-memory.dmp

Download

memory/5736-4729-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/5736-4656-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/5736-4174-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/5736-4727-0x00007FF9D8840000-0x00007FF9D8AC3000-memory.dmp

Download

memory/5736-4577-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/5736-4179-0x00007FF9E9AD0000-0x00007FF9EA2FA000-memory.dmp

Download

memory/5736-4201-0x00007FF9EDE00000-0x00007FF9EDE74000-memory.dmp

Download

memory/5736-4169-0x00007FF9ED5F0000-0x00007FF9ED6B7000-memory.dmp

Download

memory/5736-4177-0x00007FF9D8840000-0x00007FF9D8AC3000-memory.dmp

Download

memory/5736-4203-0x00007FF9E44E0000-0x00007FF9E4606000-memory.dmp

Download

memory/5736-4210-0x00007FF9EAFB0000-0x00007FF9EB018000-memory.dmp

Download

memory/5736-4178-0x00007FF9EAD50000-0x00007FF9EAD98000-memory.dmp

Download

memory/5988-521-0x00007FF9ED6C0000-0x00007FF9ED6C1000-memory.dmp

Download

memory/7092-922-0x00007FF9ED520000-0x00007FF9ED521000-memory.dmp

Download

memory/7092-923-0x00007FF9ED000000-0x00007FF9ED001000-memory.dmp

Download

memory/8124-1331-0x00007FF9EDE00000-0x00007FF9EDE74000-memory.dmp

Download

memory/8124-1341-0x00007FF9E44E0000-0x00007FF9E4606000-memory.dmp

Download

memory/8124-1330-0x00007FF9EC1E0000-0x00007FF9EC581000-memory.dmp

Download

memory/8124-1329-0x00007FF9ED5F0000-0x00007FF9ED6B7000-memory.dmp

Download

memory/8124-1333-0x00007FF9EAFB0000-0x00007FF9EB018000-memory.dmp

Download

memory/8124-1343-0x00007FF9EAD50000-0x00007FF9EAD98000-memory.dmp

Download

memory/8124-1345-0x00007FF9EDF30000-0x00007FF9EE626000-memory.dmp

Download

memory/8124-1332-0x00007FF9D8840000-0x00007FF9D8AC3000-memory.dmp

Download