Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 02:04

General

  • Target
    OperaSetup.exe
  • Size 3.1MB
  • Sample260705-chaxwsgv91
  • SHA256 fb14e4335ede95f5df35b6b190ddd1e59668789b5e351a2cf25cfa7ce9b6259b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5532
    • C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe --server-tracking-blob=NzRjOWI2ZmZmMmUzY2EzMjBjNGY0ZmQyNzcyNjQyOWE4ZmI3OWZjY2E0OGU1YzdjN2VlNjcxZTc1NmZkMjFlNTp7ImNvdW50cnkiOiJTQSIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPWFkY2FzaCZ1dG1fbWVkaXVtPXBkJnV0bV9jYW1wYWlnbj1vcGVyYS1kZGwmdXRtX2lkPTE3ODMxMjE3NDgxMDAwMDBTQTUyYTcwMjViZTA5ODA4ZDNJJnV0bV9jb250ZW50PTEwNTkxNjU0LTI1MTc1NTUwODUtNDI2OTQ0MTQ5OCIsInRpbWVzdGFtcCI6IjE3ODMxMjE3NTQuMTAyNyIsInVzZXJhZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xNDkuMC4wLjAgU2FmYXJpLzUzNy4zNiIsInV0bSI6eyJjYW1wYWlnbiI6Im9wZXJhLWRkbCIsImNvbnRlbnQiOiIxMDU5MTY1NC0yNTE3NTU1MDg1LTQyNjk0NDE0OTgiLCJpZCI6IjE3ODMxMjE3NDgxMDAwMDBTQTUyYTcwMjViZTA5ODA4ZDNJIiwibWVkaXVtIjoicGQiLCJzb3VyY2UiOiJhZGNhc2gifSwidXVpZCI6IjU5NWNmMWQzLTEyYWItNDQzOS1hNzIxLWU3MTRjMDI5ODdlNyJ9
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Enumerates system info in registry
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:6128
      • C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff612a6ad88,0x7ff612a6ad94,0x7ff612a6ada0
        3⤵
        • Executes dropped EXE
        PID:5788
      • C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:5256
      • C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4432
      • C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\assistant_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\assistant_installer.exe" --version
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:1096
        • C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\assistant_installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xc14040,0xc1404c,0xc14058
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:7136
      • C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=6128 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_20260705030418" --session-guid=b399156b-6dd7-462f-84c2-a629a48258a5 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=740B000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:6040
        • C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2c0,0x2c4,0x2c8,0x290,0x2cc,0x7ff612a6ad88,0x7ff612a6ad94,0x7ff612a6ada0
          4⤵
          • Executes dropped EXE
          PID:3060
        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe" --backend --initial-pid=6128 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181" --session-guid=b399156b-6dd7-462f-84c2-a629a48258a5 --server-tracking-blob="ODdmYzNkYzgxZThlOTRlY2U0NjMyMWMxNzBiODUxNzM0YTBlMTViYTM1MDY5OGU0YmNmNjZiOWFlY2FmMDAxNzp7ImNvdW50cnkiOiJTQSIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPWFkY2FzaCZ1dG1fbWVkaXVtPXBkJnV0bV9jYW1wYWlnbj1vcGVyYS1kZGwmdXRtX2lkPTE3ODMxMjE3NDgxMDAwMDBTQTUyYTcwMjViZTA5ODA4ZDNJJnV0bV9jb250ZW50PTEwNTkxNjU0LTI1MTc1NTUwODUtNDI2OTQ0MTQ5OCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MzEyMTc1NC4xMDI3IiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0OS4wLjAuMCBTYWZhcmkvNTM3LjM2IiwidXRtIjp7ImNhbXBhaWduIjoib3BlcmEtZGRsIiwiY29udGVudCI6IjEwNTkxNjU0LTI1MTc1NTUwODUtNDI2OTQ0MTQ5OCIsImlkIjoiMTc4MzEyMTc0ODEwMDAwMFNBNTJhNzAyNWJlMDk4MDhkM0kiLCJtZWRpdW0iOiJwZCIsInNvdXJjZSI6ImFkY2FzaCJ9LCJ1dWlkIjoiNTk1Y2YxZDMtMTJhYi00NDM5LWE3MjEtZTcxNGMwMjk4N2U3In0= " --desktopshortcut=1 --install-subfolder=133.0.5932.24
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:1432
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff70a43ad88,0x7ff70a43ad94,0x7ff70a43ada0
            5⤵
            • Executes dropped EXE
            PID:6048

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        133.0.5932.24.manifest

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\133.0.5932.24.manifest
        • Size 225B
        • SHA256 0c224a50985264cb571fd2c0ed61bc989fd6ecef11c453e2582a226700d6d268
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-100.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100.png
        • Size 1KB
        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-100_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100_contrast-white.png
        • Size 1KB
        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-140.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140.png
        • Size 1KB
        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-140_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140_contrast-white.png
        • Size 1KB
        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-180.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180.png
        • Size 1KB
        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-180_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180_contrast-white.png
        • Size 1KB
        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-80.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80.png
        • Size 827B
        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
        • MD5 SHA1 SHA512 TLSH

        150x150Logo.scale-80_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80_contrast-white.png
        • Size 799B
        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-100.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100.png
        • Size 781B
        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-100_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100_contrast-white.png
        • Size 752B
        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-140.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140.png
        • Size 991B
        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-140_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140_contrast-white.png
        • Size 865B
        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-180.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180.png
        • Size 1KB
        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-180_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180_contrast-white.png
        • Size 1KB
        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-80.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80.png
        • Size 590B
        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
        • MD5 SHA1 SHA512 TLSH

        70x70Logo.scale-80_contrast-white.png

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80_contrast-white.png
        • Size 519B
        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
        • MD5 SHA1 SHA512 TLSH

        assistant_package

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\assistant_package
        • Size 3.6MB
        • SHA256 476635dedd92ecb61b45179264d0f6f73da81e68e9786c3c4f6c2b8efe540452
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 7133c3fe1899ef81aeb523a22b58598172e5763fb0a27a10ccce4b34566612f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxcompiler.dll
        • Size 24.4MB
        • SHA256 a453267bdd1c7f207702684b6a11b742df49176eeb2e28728cb5eec086896a99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxil.dll
        • Size 1.5MB
        • SHA256 d77798ac46e1d6610805033b266320e343d00741cf76049dd96ea5e2d99e39de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        files_list

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\files_list
        • Size 6KB
        • SHA256 df53c99bd75d5a50ab78ca0291b46b2da3dda808c903b90d928e814808205df8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        headless_command_resources.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\headless_command_resources.pak
        • Size 2KB
        • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
        • MD5 SHA1 SHA512 TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\icudtl.dat
        • Size 10.4MB
        • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        installer.exe

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
        • Size 8.3MB
        • SHA256 968128ce27a633a91f092062d5d0a36586dd01129c9e50d420d85b2f69319fb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        installer_helper_64.exe

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer_helper_64.exe
        • Size 639KB
        • SHA256 adda39e020da8fc8c98fddb668bc07cd3aa3b72a0f96ab9819eafe028844c994
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libEGL.dll
        • Size 492KB
        • SHA256 47ba65371272562b0510f1b389bb9ff4a0e21845904a4a83958497dead3dc379
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libGLESv2.dll
        • Size 7.5MB
        • SHA256 85e8cf63991c492fc72edd810c239d030656e31de2a04def498b82d5d891cc36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bg.pak
        • Size 1005KB
        • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bn.pak
        • Size 1.3MB
        • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\ca.pak
        • Size 634KB
        • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\cs.pak
        • Size 633KB
        • SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\da.pak
        • Size 584KB
        • SHA256 2bce9052d3537685476b030689ddd793045e5d173201192455753a374903a5d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\de.pak
        • Size 631KB
        • SHA256 a80aa856a2294dab6291202009ce6fd2c773193e49d1b1baf32bc122fa04cd04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\el.pak
        • Size 1.1MB
        • SHA256 99f84f005cdf1b39df775920a1d3fcabffe5a1f825edc34e06090afe05f5cb89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\en-GB.pak
        • Size 512KB
        • SHA256 ef56d4e338e0e86fd3d05fe605fd60af16ff5c070d99a77650a919abf94d3e21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\en-US.pak
        • Size 516KB
        • SHA256 ad5bfad4fe64061de9919e3a4afd93092aee683d801564c6b6ad26ee6668dc3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\es-419.pak
        • Size 622KB
        • SHA256 8cee384e86019c7419aed20c35153d012f047a732d3ecdfb90433617e86aecdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\es.pak
        • Size 616KB
        • SHA256 7168eade62d559f6ab9358a4e0ca4820207ef97e58dc68a191dcc438ce5d5516
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\fi.pak
        • Size 579KB
        • SHA256 547bb213d39eb59a3cee96c739e285a5376af32a75b0bc6c5b4c992aba9e5125
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\fil.pak
        • Size 647KB
        • SHA256 fc2de5142a6a1c4ba889999cbdbcb8ae1bee8f5bf3bb4720e592e4d2b64ab0f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        additional_file0.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\additional_file0.tmp
        • Size 2.8MB
        • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
        • MD5 SHA1 SHA512 SSDEEP TLSH

        assistant_installer.exe

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\assistant_installer.exe
        • Size 2.4MB
        • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbgcore.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\dbgcore.DLL
        • Size 222KB
        • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dbghelp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\assistant\dbghelp.dll
        • Size 1.8MB
        • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
        • MD5 SHA1 SHA512 SSDEEP TLSH

        installer_prefs_include.json

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\installer_prefs_include.json
        • Size 398B
        • SHA256 dd9331ea61fca051dbf7f37a45fda3173cc02fcf37803f558df00f507c43b346
        • MD5 SHA1 SHA512 TLSH

        installer_prefs_include.json

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\installer_prefs_include.json
        • Size 413B
        • SHA256 6e29ff548038b8817dccfbd2236c9d5e9a5acfedbb64205ec23c5f7246197389
        • MD5 SHA1 SHA512 TLSH

        installer_prefs_include.json

        • Path C:\Users\Admin\AppData\Local\Temp\.opera\36f47d7c-97a9-4d7a-b44f-b771f9aa1a05 Opera Installer Temp\opera_package_202607050304181\installer_prefs_include.json
        • Size 1KB
        • SHA256 abaa20a49161c79fe452b337c1a3762a19ba9516a71189d4a71b544f7047d251
        • MD5 SHA1 SHA512 TLSH

        installer.exe

        • Path C:\Users\Admin\AppData\Local\Temp\7zSC9520AA8\installer.exe
        • Size 8.3MB
        • SHA256 0221deb9031dc461368bc66f1db22c1c6b1d4a291a9f3223f4c3653bbd646e0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.dat

        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
        • Size 40B
        • SHA256 da7b1039fc245d54d6aeb901bdb78186ded3ce9026406c3764dd20e5c841c712
        • MD5 SHA1 SHA512