Overview

overview

7

Static

static

3

winbox-4.1...er.exe

windows10-2004-x64

7

winbox-4.1...er.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    136s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 12:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    winbox-4.1-installer.exe
  • Size 2.0MB
  • Sample260623-pe5pbacx91
  • SHA256 3cf00ccfbe7dbea6a51526f0e5a17b7cb80184cf0f2e60f9237662da39bfe904
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
bootkitdefense_evasiondiscoveryinstallerpersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 5 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks for any installed AV software in registry 1 TTPs 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 11 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies registry class 52 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\winbox-4.1-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\winbox-4.1-installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4272
    • C:\Users\Admin\AppData\Local\Temp\is-P5S33T9E8W.tmp\winbox-4.1-installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-P5S33T9E8W.tmp\winbox-4.1-installer.tmp" /SL5="$E0210,847735,840192,C:\Users\Admin\AppData\Local\Temp\winbox-4.1-installer.exe"
      2⤵
      • Executes dropped EXE
      • Checks for any installed AV software in registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3408
      • C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component0_extract\OperaSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component0_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdDBT7YSar0lOciBrzBS61TjRnxt1lemxUBJ4aSdfMHetUYlCWQ9KWZDknMNiuNg3QjghWsIZjykv
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3196
        • C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdDBT7YSar0lOciBrzBS61TjRnxt1lemxUBJ4aSdfMHetUYlCWQ9KWZDknMNiuNg3QjghWsIZjykv --server-tracking-blob=MGM4NzNjOGVjMDNhYzUzNjZhZDY4NGEzNzU0YmQyODgzNzY0NWFhNDZlM2JlMzQyOGViNjRmZDY5ZGFiNGZjYTp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3ODE2OTQwMTIuNjc0NCIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiMzU5OGZkMGUtNTIxZS00M2JkLWI0Y2EtYWY5ZDdkYmJiYzJmIn0=
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies system certificate store
          • Suspicious use of WriteProcessMemory
          PID:4764
          • C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff7e7c14e08,0x7ff7e7c14e14,0x7ff7e7c14e20
            5⤵
            • Executes dropped EXE
            PID:4400
          • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\installer.exe" --version
            5⤵
            • Executes dropped EXE
            PID:2060
          • C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4764 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_20260623131633" --session-guid=bcd0eb47-3800-44f9-a4f9-6040fb74995f --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0809000000000000
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Suspicious use of WriteProcessMemory
            PID:4704
            • C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2c0,0x2c4,0x2c8,0x290,0x2cc,0x7ff7e7c14e08,0x7ff7e7c14e14,0x7ff7e7c14e20
              6⤵
              • Executes dropped EXE
              PID:1796
            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer.exe" --backend --initial-pid=4764 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331" --session-guid=bcd0eb47-3800-44f9-a4f9-6040fb74995f --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=132.0.5905.73
              6⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:5288
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff652e04e08,0x7ff652e04e14,0x7ff652e04e20
                7⤵
                • Executes dropped EXE
                PID:1920
              • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                7⤵
                  PID:3004
                  • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x744040,0x74404c,0x744058
                    8⤵
                      PID:4368
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                      8⤵
                        PID:1856
                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xfc4040,0xfc404c,0xfc4058
                          9⤵
                            PID:3672
                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                            9⤵
                              PID:4292
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                10⤵
                                  PID:4152
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x254,0x240,0x244,0x250,0x248,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                    11⤵
                                      PID:1316
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                    10⤵
                                      PID:840
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                        11⤵
                                          PID:2356
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0x105c830,0x105c83c,0x105c848
                                        10⤵
                                          PID:368
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                            11⤵
                                              PID:2544
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                12⤵
                                                  PID:5628
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                11⤵
                                                  PID:5208
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2ac,0x2b0,0x2b4,0xb8,0x2b8,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                    12⤵
                                                      PID:692
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    11⤵
                                                      PID:2392
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x23c,0x240,0x29c,0x218,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                        12⤵
                                                          PID:2320
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                7⤵
                                                  PID:3500
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                    8⤵
                                                      PID:1436
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,11655723653723829600,16825369437175426865,262144 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1880 /prefetch:2
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:5844
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2120,i,11151583309582854696,13983729401468247570,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2148 /prefetch:11
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      • System Time Discovery
                                                      PID:5772
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2308,i,13861172249024675124,6561130075613453545,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3952 /prefetch:13
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:3360
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3312,i,17490273675604794174,5616468211259608279,2097152 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3968 /prefetch:9
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:1544
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3552,i,9297909879399211726,337884186365422259,2097152 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4008 /prefetch:9
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:852
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3648,i,16339383646320878301,1125524061416478322,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4028 /prefetch:14
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:2088
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3700,i,12515136463856170389,891257308102485445,2097152 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4048 /prefetch:9
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:2432
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4856,i,16400950857567655421,3938313476516636516,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4868 /prefetch:12
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:708
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4876,i,14902914651204188103,12532216683977760699,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3676 /prefetch:14
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:5524
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5180,i,14022694101236666900,11854384962970648847,2097152 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5352 /prefetch:1
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:6352
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4912,i,10700057388680101337,17516796312239171107,524288 --field-trial-handle=1884,i,5833245494056892725,15071625359561430183,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,5022317701611740111,9614301698872163329,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5476 /prefetch:14
                                                      8⤵
                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                      PID:1052
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                5⤵
                                                • Executes dropped EXE
                                                • System Location Discovery: System Language Discovery
                                                PID:6000
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe" --version
                                                5⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Enumerates system info in registry
                                                • Suspicious use of WriteProcessMemory
                                                PID:5500
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x744040,0x74404c,0x744058
                                                  6⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  PID:5388
                                          • C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
                                            "C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe" /silent /ws /psh:agiSfNdDBT7YSar0lOcizVFme6jixNok3Grww1tSAZrPiz9ATGklcy65C2LbOiE7QP0lU7PSjAa2ncmjtR /cookie:mmm_irs_ppi_008_585_a
                                            3⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Writes to the Master Boot Record (MBR)
                                            • System Location Discovery: System Language Discovery
                                            • Modifies registry class
                                            • Suspicious use of WriteProcessMemory
                                            PID:1916
                                            • C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\icarus.exe
                                              C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\icarus-info.xml /install /silent /ws /psh:agiSfNdDBT7YSar0lOcizVFme6jixNok3Grww1tSAZrPiz9ATGklcy65C2LbOiE7QP0lU7PSjAa2ncmjtR /cookie:mmm_irs_ppi_008_585_a
                                              4⤵
                                              • Executes dropped EXE
                                              • Checks for any installed AV software in registry
                                              • Writes to the Master Boot Record (MBR)
                                              • Checks processor information in registry
                                              • Suspicious use of AdjustPrivilegeToken
                                              PID:4888
                                              • C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\avast-suite\icarus.exe
                                                C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\avast-suite\icarus.exe /silent /ws /psh:agiSfNdDBT7YSar0lOcizVFme6jixNok3Grww1tSAZrPiz9ATGklcy65C2LbOiE7QP0lU7PSjAa2ncmjtR /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_6f79fb3d-ea8a-42e4-8b10-b646949f2075 /er_slave:avast-suite_slave_ep_ba3f2219-4f5f-4d9a-b3aa-eb4b32f192c0 /slave:avast-suite
                                                5⤵
                                                  PID:6076
                                                • C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\avast-av-vps\icarus.exe
                                                  C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\avast-av-vps\icarus.exe /silent /ws /psh:agiSfNdDBT7YSar0lOcizVFme6jixNok3Grww1tSAZrPiz9ATGklcy65C2LbOiE7QP0lU7PSjAa2ncmjtR /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_6f79fb3d-ea8a-42e4-8b10-b646949f2075 /er_slave:avast-av-vps_slave_ep_77a339ec-e0e5-4ecc-9c18-13859d058717 /slave:avast-av-vps
                                                  5⤵
                                                    PID:4792
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                            1⤵
                                              PID:5716
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                2⤵
                                                  PID:2880
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                    3⤵
                                                      PID:2084
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    2⤵
                                                      PID:4172
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x274,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                        3⤵
                                                          PID:3016
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0x105c830,0x105c83c,0x105c848
                                                        2⤵
                                                          PID:2268
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            3⤵
                                                              PID:5860
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                                4⤵
                                                                  PID:4908
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                3⤵
                                                                  PID:5780
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                                    4⤵
                                                                      PID:2796
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                    3⤵
                                                                      PID:1076
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                                        4⤵
                                                                          PID:1000
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                    1⤵
                                                                      PID:4548
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff9c6083b30,0x7ff9c6083b40,0x7ff9c6083b50
                                                                        2⤵
                                                                          PID:2144
                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                        1⤵
                                                                          PID:6592

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Reconnaissance

                                                                              Resource Development

                                                                              Initial Access

                                                                              Execution

                                                                              Persistence

                                                                              Event Triggered Execution

                                                                              1
                                                                              T1546

                                                                              Component Object Model Hijacking

                                                                              1
                                                                              T1546.015

                                                                              Pre-OS Boot

                                                                              1
                                                                              T1542

                                                                              Bootkit

                                                                              1
                                                                              T1542.003

                                                                              Privilege Escalation

                                                                              Event Triggered Execution

                                                                              1
                                                                              T1546

                                                                              Component Object Model Hijacking

                                                                              1
                                                                              T1546.015

                                                                              Defense Evasion

                                                                              Modify Registry

                                                                              1
                                                                              T1112

                                                                              Pre-OS Boot

                                                                              1
                                                                              T1542

                                                                              Bootkit

                                                                              1
                                                                              T1542.003

                                                                              Subvert Trust Controls

                                                                              1
                                                                              T1553

                                                                              Install Root Certificate

                                                                              1
                                                                              T1553.004

                                                                              Credential Access

                                                                              Credentials from Password Stores

                                                                              1
                                                                              T1555

                                                                              Credentials from Web Browsers

                                                                              1
                                                                              T1555.003

                                                                              Unsecured Credentials

                                                                              1
                                                                              T1552

                                                                              Credentials In Files

                                                                              1
                                                                              T1552.001

                                                                              Discovery

                                                                              Peripheral Device Discovery

                                                                              1
                                                                              T1120

                                                                              Query Registry

                                                                              4
                                                                              T1012

                                                                              Software Discovery

                                                                              1
                                                                              T1518

                                                                              Security Software Discovery

                                                                              1
                                                                              T1518.001

                                                                              System Information Discovery

                                                                              4
                                                                              T1082

                                                                              System Location Discovery

                                                                              1
                                                                              T1614

                                                                              System Language Discovery

                                                                              1
                                                                              T1614.001

                                                                              System Network Configuration Discovery

                                                                              1
                                                                              T1016

                                                                              Internet Connection Discovery

                                                                              1
                                                                              T1016.001

                                                                              System Time Discovery

                                                                              1
                                                                              T1124

                                                                              Lateral Movement

                                                                              Collection

                                                                              Data from Local System

                                                                              1
                                                                              T1005

                                                                              Command and Control

                                                                              Exfiltration

                                                                              Impact

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              sfx.log
                                                                              • Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
                                                                              • Size 11KB
                                                                              • SHA256 74d9e7cca68d38a55ef319ddd989b9157b9bf4888457845ae64ba6dcd5bdbb79
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              icarus.ini
                                                                              • Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
                                                                              • Size 732B
                                                                              • SHA256 c2afddccb3ba6a7d73a84a73a90038aeb4e7820ad6b5db2d94f0feda1a96e0e0
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              data_0
                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                              • Size 8KB
                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              data_2
                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                              • Size 8KB
                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              data_3
                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                              • Size 8KB
                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              132.0.5905.73.manifest
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\132.0.5905.73.manifest
                                                                              • Size 225B
                                                                              • SHA256 fb2b9309aa0d8c8ec09daa28e5fa9a8794b8cb23cfe9df6c5d505a344d248ac4
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-100.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-100.png
                                                                              • Size 1KB
                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-100_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-100_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-140.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-140.png
                                                                              • Size 1KB
                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-140_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-140_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-180.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-180_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-80.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-80.png
                                                                              • Size 827B
                                                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-80_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\150x150Logo.scale-80_contrast-white.png
                                                                              • Size 799B
                                                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-100.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-100.png
                                                                              • Size 781B
                                                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-100_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-100_contrast-white.png
                                                                              • Size 752B
                                                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-140.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-140.png
                                                                              • Size 991B
                                                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-140_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-140_contrast-white.png
                                                                              • Size 865B
                                                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-180.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-180_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-80.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-80.png
                                                                              • Size 590B
                                                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-80_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\Assets\70x70Logo.scale-80_contrast-white.png
                                                                              • Size 519B
                                                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              assistant_package
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\assistant_package
                                                                              • Size 3.6MB
                                                                              • SHA256 44e96913a5e26343e666f1af357add52bfd54398ba7d6f211a74cf345fbfb720
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              d3dcompiler_47.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\d3dcompiler_47.dll
                                                                              • Size 4.5MB
                                                                              • SHA256 01d3d80df13fbc763aa7ff0d446a472385820cfa70ca30344d1274a8c7373a4b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dxcompiler.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\dxcompiler.dll
                                                                              • Size 24.5MB
                                                                              • SHA256 79f1df25ad0ee7bca49ae661552f1b0ce27ddc2c2bcc66dedbede62b39b62978
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dxil.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\dxil.dll
                                                                              • Size 1.5MB
                                                                              • SHA256 68452e31e79bcf9bb9a0ea607be63359b7d02696fc031d794146fd947fa76d9f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              files_list
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\files_list
                                                                              • Size 6KB
                                                                              • SHA256 bac3d87b3e24d41b3e24ce1434e6fa93e0dc9a661ec5673cbac62cbf4f002ded
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              headless_command_resources.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\headless_command_resources.pak
                                                                              • Size 2KB
                                                                              • SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              icudtl.dat
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\icudtl.dat
                                                                              • Size 10.4MB
                                                                              • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 e30d873677489c6685e2ff7f7cc51039a93ae2d918fa6895ca3d0316cf93f231
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer_helper_64.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\installer_helper_64.exe
                                                                              • Size 652KB
                                                                              • SHA256 19e52c2417c15f7d2f5c272580d03561c6e48b8eb86087c3a89c33763a50f92f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              libEGL.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\libEGL.dll
                                                                              • Size 502KB
                                                                              • SHA256 4731d04a53502b2830adfc13691f267ae1c6c991760d105d913fd249029af6fe
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              libGLESv2.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.73\libGLESv2.dll
                                                                              • Size 7.5MB
                                                                              • SHA256 fbabce41ddb994d69236591185eeb30f2d42f0daa0e6f086c44aca444f8141c5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Opera Browser.lnk
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\Opera Browser.lnk
                                                                              • Size 1KB
                                                                              • SHA256 943a155ce9cfabc0d42538b2bf28cb5d5eb3194243ed2086da9037c11344e32c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              additional_file0.tmp
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\additional_file0.tmp
                                                                              • Size 2.8MB
                                                                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              assistant_installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\assistant_installer.exe
                                                                              • Size 2.4MB
                                                                              • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dbgcore.DLL
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\dbgcore.DLL
                                                                              • Size 222KB
                                                                              • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dbghelp.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\assistant\dbghelp.dll
                                                                              • Size 1.8MB
                                                                              • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\installer_prefs_include.json
                                                                              • Size 243B
                                                                              • SHA256 0ffc4a230caf38a4a09026e68bba0522b2c12e3dbf287a3fcd2e3b26dc8cd506
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\installer_prefs_include.json
                                                                              • Size 258B
                                                                              • SHA256 545d77605a931bb5ceae1a271eeb53105a8427d055bfadfdcc26b0752a511109
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\8800f906-1406-4315-a2d3-fe6a5aa95061 Opera Installer Temp\opera_package_202606231316331\installer_prefs_include.json
                                                                              • Size 1KB
                                                                              • SHA256 a29b4bc2691ebce5d303a744efdbbc073f5176a70c7ce71051ef9e2c7f6e40a2
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zSC7CC6789\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 dc3d10cc8484cd68565230d8ee80dbae3d55a8731e77ed698dd20e4b295209da
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              winbox-4.1-installer.tmp
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-P5S33T9E8W.tmp\winbox-4.1-installer.tmp
                                                                              • Size 4.1MB
                                                                              • SHA256 ad44ccbfc69fda66fef3c812fe4aab5eafaf8bd654f8b707081c30233677544a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              100.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\100.png
                                                                              • Size 51KB
                                                                              • SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              101.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\101.png
                                                                              • Size 42KB
                                                                              • SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              component0.zip
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component0.zip
                                                                              • Size 3.1MB
                                                                              • SHA256 7bf1457c424bc988f46d4a724a41b575e28532ae1d4d516ded36755548103b2a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              OperaSetup.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component0_extract\OperaSetup.exe
                                                                              • Size 3.1MB
                                                                              • SHA256 2f4845da5165fca2852bc970c40be62aa4d410963773e4eaba16516b3fec3050
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              component1.zip
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component1.zip
                                                                              • Size 782KB
                                                                              • SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              cookie_mmm_irs_ppi_008_585.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
                                                                              • Size 1.7MB
                                                                              • SHA256 2ab4329fb77df9f5b70ac45d9fc005f019c8ef930eabf82e6a10052f9cbeec2d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              image.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\is-TQVPLSHZ6F.tmp\image.png
                                                                              • Size 124KB
                                                                              • SHA256 93c52c91ecf6683722cb8d2b1adbffb302eba7a00e0414035f5ce2f473a13908
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              favicon_opera_one.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3500_71668018\CRX_INSTALL\favicon_opera_one.png
                                                                              • Size 2KB
                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              reader_mode.js
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3500_71668018\CRX_INSTALL\reader_mode.js
                                                                              • Size 112KB
                                                                              • SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              spotify_frame_interceptor.js
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3500_71668018\CRX_INSTALL\spotify_frame_interceptor.js
                                                                              • Size 5KB
                                                                              • SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              settings.dat
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                              • Size 40B
                                                                              • SHA256 4e4cdcb63c0800a6051807e42bc02a6fc0ec72c1c514ae79864412b6529f11c7
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              2afe0b68-39fb-462c-a833-80172530707d.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2afe0b68-39fb-462c-a833-80172530707d.tmp
                                                                              • Size 203B
                                                                              • SHA256 9eb81367f7b58527fd57d288c124dfd40b12b33d24e1eac922ff5980fabd7495
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              4efc33fc-1d3a-49a1-9340-31e4f9c81923.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4efc33fc-1d3a-49a1-9340-31e4f9c81923.tmp
                                                                              • Size 10KB
                                                                              • SHA256 146376c819740fd00b4f14ddde74b3c3047b198e13212a26a51ea705fa25aec9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              eca2df3c-313e-4103-86c9-5430ed102bba.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\eca2df3c-313e-4103-86c9-5430ed102bba.tmp
                                                                              • Size 48B
                                                                              • SHA256 da635121d5840365d032f0f98d30cf51bbc89ac4d614cf2b1b0f080d70f247de
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              the-real-index
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 264B
                                                                              • SHA256 b42230dfd0995d36192a8f3591138a9809a0132c19a1d9dbc192bb1d08a24d2a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              a3b2ffb7-31cc-45b0-9e52-8716a17c804f.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\a3b2ffb7-31cc-45b0-9e52-8716a17c804f.tmp
                                                                              • Size 72B
                                                                              • SHA256 27ceca0be1d2416fd84898f319bc1b1ec47d04d7bc651663d3279e76f29090a5
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              the-real-index
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 a627ff6859547caaa3475e2bef612aafe7b04bcfdf1f9822d9ee496ca5e398eb
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              9f581c48-532f-4741-9032-8d1e0adc7444.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\9f581c48-532f-4741-9032-8d1e0adc7444.tmp
                                                                              • Size 445B
                                                                              • SHA256 aabee42ebf7ede95063d724dbef17ca6a2f26a96645fb24af01ef97cb002c8d7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 557B
                                                                              • SHA256 6aefbd632d6c9600d781232c0b68ff5d363defaef571d6820213579a1ba0e044
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 669B
                                                                              • SHA256 197a9f6aeb81339a954f3500ddfbd948a406c8c0d9dd12c3cb2402569ad98592
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 829B
                                                                              • SHA256 15f6b42c0a7ebbb8c0bfbe137eb61488bf673c6cfed18f6c4b41bd214c95553d
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 845B
                                                                              • SHA256 60fb9f6e29d27ca6abea9728527e7f7a602644cdb85d12060683b85e1b3ca42f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 861B
                                                                              • SHA256 f01fb613ed575c96f79257622d3effc9baf790eb07b64b0dc76bbd19aa0de3dc
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 1021B
                                                                              • SHA256 051481e549854b71a13ab26313ba15176fa736b0707d3cacd669cf2c28bdd79e
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 1KB
                                                                              • SHA256 a6a9e75377a86bfe3a29a51520859765ee172a6559b240cce0ab995031069668
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 1KB
                                                                              • SHA256 7375398c0d2515e6bbfa9633a3640fab1a31dcf5052d03990476b1adaf403c2f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 1KB
                                                                              • SHA256 2546235d0e8fd8bda17974daed115cb2dcf310e9838ed99d5e0cce4c051fc397
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c075253b-6410-4446-a609-da7a61b45ac3.raw
                                                                              • Size 1KB
                                                                              • SHA256 5f800f2eedf963bf9294f57d494573e63d9a2a8d12419a275b41a172cc542266
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              CURRENT
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              MANIFEST-000001
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\shared_proto_db\metadata\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              ssdfp3500.0.371259592
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3500.0.371259592
                                                                              • Size 265B
                                                                              • SHA256 fc3148b132ad243ff5742ed242015c850f61f39d93ad0ec5bb69ae861b9fb533
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp3500.0.371259592
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3500.0.371259592
                                                                              • Size 1KB
                                                                              • SHA256 107c5b588a15806914a7373fd0331a05db335913ac6e46d9847d6ba20510b92c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp3500.0.371259592
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3500.0.371259592
                                                                              • Size 2KB
                                                                              • SHA256 8695f7be125723157aec80df19cd0c3ceac3d735d9c5f96950a6c1c409714137
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              data_1
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GraphiteDawnCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              icarus.exe
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\avast-av-vps\icarus.exe
                                                                              • Size 9.3MB
                                                                              • SHA256 9e13c107162cd9f8da49f694b9ccfb57c95474f23fb65dc30298fda747325f22
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              icarus.exe
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\icarus.exe
                                                                              • Size 9.3MB
                                                                              • SHA256 97427e9692e0c5ec88752a2a048c0ffb4d534a961ccb762939e4efb0bdafe7d5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              icarus_mod.dll
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\icarus_mod.dll
                                                                              • Size 16KB
                                                                              • SHA256 52e07dfe261985b53d95759721c6ec3dd7af79d6a8ef646058f825f009aeaa68
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              product-def.xml
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\product-def.xml
                                                                              • Size 2.1MB
                                                                              • SHA256 c1e0dcc603727e8b8be9a155fd42210467706a792afa0d42a070e634d39810ac
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              product-info.xml
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\common\product-info.xml
                                                                              • Size 11KB
                                                                              • SHA256 fbec0294649f3f8754582447a2c401b1e09f6265d6e6d3c4612e8e9e58750edc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              epps.edat
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\epps.edat
                                                                              • Size 80B
                                                                              • SHA256 c6528b50bbe1265eeb1beb88535e7f6257075daaa245ed693e9ac38511b297bf
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              giet.edat
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\giet.edat
                                                                              • Size 8B
                                                                              • SHA256 c2cb92b00918d830aa68e4d5496ca412e3bc86f88444cb3de9d52e62a877b93f
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              icarus-info.xml
                                                                              • Path C:\Windows\Temp\asw-b010360c-5151-45c3-9ae3-7053fd914aa0\icarus-info.xml
                                                                              • Size 2KB
                                                                              • SHA256 77037fab4c61e9490cbdd5336dfda3bba4372e49f88ca20137de8e16ab2ff2d2
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              memory/2088-730-0x00007FF9FCB90000-0x00007FF9FCB91000-memory.dmp
                                                                              Download

                                                                              memory/2088-729-0x00007FF9FC300000-0x00007FF9FC301000-memory.dmp
                                                                              Download

                                                                              memory/3408-64-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-35-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-32-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-26-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-14-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-33-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-36-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-10-0x0000000000CC0000-0x0000000000CC1000-memory.dmp
                                                                              Download

                                                                              memory/3408-9-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-279-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-6-0x0000000000CC0000-0x0000000000CC1000-memory.dmp
                                                                              Download

                                                                              memory/3408-27-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-40-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-41-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-42-0x00000000061C0000-0x0000000006300000-memory.dmp
                                                                              Download

                                                                              memory/3408-46-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-496-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-119-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-277-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-125-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/3408-191-0x0000000000CD0000-0x0000000001106000-memory.dmp
                                                                              Download

                                                                              memory/4272-1-0x00000000001F0000-0x00000000002CC000-memory.dmp
                                                                              Download

                                                                              memory/4272-8-0x00000000001F0000-0x00000000002CC000-memory.dmp
                                                                              Download