712beddf69888728f9d2d80e1afd36cff8c66b6ce7fdd5ecfa3b3b90a93c230c

Analysis

max time kernel
149s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OperaGXSetup(1).exe
Size 4.0MB
Sample261023-e7d2ysby9n
SHA256 712beddf69888728f9d2d80e1afd36cff8c66b6ce7fdd5ecfa3b3b90a93c230c
MD5 819bff076a088f3cd93831927ff54ebe
SHA1 c40bf44aa6280f2f67368d6c5766e852bb606513
SHA512 8a9171f637fb033265734e8cc917dfda4d952e34ca9422704c02701cdf738a09327a5780c93a7ac1783a6839c231ae2b0e52106a860af3c37c5a679ca047d863
SSDEEP 98304:MA/TGXUwgfmIarxovlcO9pOX0YXMXL8eo/YKufqBWhEEw:DwgfhJv2do87YKuCSy
TLSH
T1DF1633317785C431D5A322324EB5AA5856FFB1511F37068B27846EBCAFE1281BB34F4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
19	1332	installer.exe

Executes dropped EXE 6 IoCs

pid	Process
1332	installer.exe
3200	installer.exe
1240	installer.exe
1176	Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
964	assistant_installer.exe
1876	assistant_installer.exe

Loads dropped DLL 4 IoCs

pid	Process
964	assistant_installer.exe
964	assistant_installer.exe
1876	assistant_installer.exe
1876	assistant_installer.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Writes a Windows system DLL name to a user directory 2 TTPs 1 IoCs

A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

defense_evasion

DLL Search Order Hijacking

T1574.001

Match Legitimate Name or Location

T1036.005

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\dbghelp.dll	Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	installer.exe
File opened (read-only)	\??\F:	installer.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	installer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	installer.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaGXSetup(1).exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	assistant_installer.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1332	installer.exe
1332	installer.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3324 wrote to memory of 1332	3324	OperaGXSetup(1).exe	90
PID 1332 wrote to memory of 3200	1332	installer.exe	91
PID 1332 wrote to memory of 1240	1332	installer.exe	92
PID 1332 wrote to memory of 1176	1332	installer.exe	94
PID 1332 wrote to memory of 964	1332	installer.exe	95
PID 964 wrote to memory of 1876	964	assistant_installer.exe	96

C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(1).exe
"C:\Users\Admin\AppData\Local\Temp\OperaGXSetup(1).exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Users\Admin\AppData\Local\Temp\7zSCFC6F9E8\installer.exe
  C:\Users\Admin\AppData\Local\Temp\7zSCFC6F9E8\installer.exe --server-tracking-blob=ZGVhMzJmMjM0Mjg0NjgzMzk1YzFlYTNjODJlZjkwY2QwNTE2OWEzMjliZTNmOTU2OGIwNzk4NjMzNTdkYTFlNDp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYUdYU2V0dXAuZXhlIiwicHJvZHVjdCI6Im9wZXJhX2d4IiwicXVlcnkiOiIvb3BlcmFfZ3gvc3RhYmxlL3dpbmRvd3M/ZWRpdGlvbj1zdGQtMiZ1dG1fc291cmNlPVBXTmdhbWVzJnV0bV9tZWRpdW09cGEmdXRtX2NhbXBhaWduPVBXTl9VU19IVlJfOTU3MV9XRUJfNjU5JmVkaXRpb249c3RkLTImdXRtX2lkPTUyMmQ1ZGMwNWQyZTRjMmU5MDM4NTVhODc0MWI2Y2Y3Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cub3BlcmEuY29tJTJGZ2V0JTJGb3BlcmEtZ3glM0Z1dG1fbWVkaXVtJTNEcGElMjZ1dG1fY2FtcGFpZ24lM0RQV05fVVNfSFZSXzk1NzFfV0VCXzY1OSUyNnV0bV9pZCUzRDUyMmQ1ZGMwNWQyZTRjMmU5MDM4NTVhODc0MWI2Y2Y3JTI2dXRtX3NvdXJjZSUzRFBXTmdhbWVzJTI2ZWRpdGlvbiUzRHN0ZC0yJnV0bV9zaXRlPW9wZXJhX2NvbSZ1dG1fbGFzdHBhZ2U9b3BlcmEuY29tJTJGZ2V0JTJGb3BlcmEtZ3gmdXRtX2lkPTUyMmQ1ZGMwNWQyZTRjMmU5MDM4NTVhODc0MWI2Y2Y3JmRsX3Rva2VuPTQ3MDgwOTY3IiwidGltZXN0YW1wIjoiMTc5MjczMDA0NC4yODE1IiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTU4LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTU4LjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJQV05fVVNfSFZSXzk1NzFfV0VCXzY1OSIsImlkIjoiNTIyZDVkYzA1ZDJlNGMyZTkwMzg1NWE4NzQxYjZjZjciLCJsYXN0cGFnZSI6Im9wZXJhLmNvbS9nZXQvb3BlcmEtZ3giLCJtZWRpdW0iOiJwYSIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJQV05nYW1lcyJ9LCJ1dWlkIjoiYmY4OGY1ZjYtODIyMy00MDZkLTgyNTgtN2FlYzZiZGViYTdmIn0=
  2⤵
  - Downloads MZ/PE file
  - Executes dropped EXE
  - Enumerates connected drives
  - Reads the TCP/IP host and domain name from the registry
  - Enumerates system info in registry
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1332
- - C:\Users\Admin\AppData\Local\Temp\7zSCFC6F9E8\installer.exe
    C:\Users\Admin\AppData\Local\Temp\7zSCFC6F9E8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff74f3469d8,0x7ff74f3469e8,0x7ff74f3469f8
    3⤵
    - Executes dropped EXE
    PID:3200
- - C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\installer.exe
    "C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\installer.exe" --version
    3⤵
    - Executes dropped EXE
    PID:1240
- - C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
    "C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe"
    3⤵
    - Executes dropped EXE
    - Writes a Windows system DLL name to a user directory
    - System Location Discovery: System Language Discovery
    PID:1176
- - C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\assistant_installer.exe
    "C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\assistant_installer.exe" --version
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:964
  - - C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\assistant_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x116b950,0x116b95c,0x116b968
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:1876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Privilege Escalation

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Defense Evasion

Hijack Execution Flow

T1574

DLL Search Order Hijacking

T1574.001

Masquerading

T1036

Match Legitimate Name or Location

T1036.005

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

additional_file1.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\additional_file1.tmp
Size 3.2MB
SHA256 cd8129a92e34618206b386216a307a768ba8770cb76b4c16a08b35ac23c1228d
MD5 f5cedf5646d96ac3e4554d058a37de60
SHA1 2cde51206f36d00f0903ca47b7ba62f1fb24b895
SHA512 a9318118a7d4181efd23639636c3ad2494f2557efa817bf212d381c764d2e684cef54f9e551b9d2f88fd16ee47ceb6157f87d6894f19be51f2aa9a21528fbed0
SSDEEP 98304:4kio6wa48dBWXYtQLws6P1bI30vzgtzupl:4NNdtqwsOytyT
TLSH
T1B9F533237E914831D93309334D91F7BA2A7FF1611DA62D5733D80F2E6EE0293672598A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\assistant_installer.exe
Size 2.5MB
SHA256 d1bebcbda51c7869eebf33275e4b6c3d2b3d37df6fae74a0561cdf2dffb5b293
MD5 a672623a902efc070296061da956b435
SHA1 1eb2fc2af2a4d0c2146f9ea6619fc28af53c9981
SHA512 0ff39f11aa7ae191c8849157e769a2f768f35da3216985dcd91d5ed58c986cee742c7f8170a9b67259667de01fe63182b954dbbc1c3a8421c210380277606082
SSDEEP 49152:7qjohLttBeTJrKpGDVXCQnpWFbPFEL9ZFv1i1XTEop05MQSv:7NBeVrXV9npIbPFwvi1XT7p6M
TLSH
T1DAC59E01B860D0B5D8563072752CAB3E9E209E068735D9CBDB987CC46FB46E3267B35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

browser_assistant.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\browser_assistant.exe
Size 5.3MB
SHA256 ca7d5883a0d16362f9adcc9787d84c3b6d0535b5c8625f44cf80b1a665f6cb63
MD5 cb353563f277957413f2166c5f29d314
SHA1 dbce83c341d573f7f3ab4b74d0aa09d646699af2
SHA512 8b0909c6e8bc3aec0a27f21255e0dbe52d598e5e712c8d4b77af4fef3de2ce084f227047f9d028e3d09937ded94218c0ff41dbc30bc73c67d945ef2e0a7c0944
SSDEEP 98304:l6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww3:83Hk/2APJoO2akkOgyeRIK4aVP
TLSH
T17246AF82F7516078C8076571653D7B7B48285D67A722C7EF9AD83CA01BB09C2273EB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.DLL

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\dbgcore.DLL
Size 238KB
SHA256 65a487c32b2b0fdb5a022a7ed54dcf6b6f8271985d50c45c432fc8acb1bdf115
MD5 5afba74463884e766afb4c41131eee7b
SHA1 975a56a7b075866fa4d9651e0b2039a7113c6af9
SHA512 f9169d42824bc88af2a3643afdcecfdab72ce070564b45437ea82f1ee24abf480ac26fba6e59720e8c6fa3bffd8239d2d23c772a2fc869566fc28a6ca7d71deb
SSDEEP 6144:PgIASx0NdOiN9a1WpPNmiFZr09fgPczwishfCpkIJnwsnpb/xetMUG:lWDFDi7yIJnwA3aMb
TLSH
T126347C61A6C48475CECB11B4724C7A3682FDD2B223E080D392549BECE9656D5AF3C2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\dbghelp.dll
Size 589KB
SHA256 2ec4dcc1209a7f59c9215c5d8f17d7b35a91b2faf84d63ca5666cb6b02e46050
MD5 7755121a98731dc9006a23e535590f5e
SHA1 6980c8cc8d8dc711a7fbb0183798ec67ab9698ec
SHA512 db905cb33cb1b3228aa26d382fa0b9eecdfc89e50a5f734e95915539d497c980fad878c46b6975f538ec4c98a07f910875e4461f5c07f0850c0c6d5653111bcf
SSDEEP 12288:OUfvs6QXZkBkp5qbhmJLKAilH77ht8YO6EIE:FfvfQXZkBkp5q1mJLKOYOd
TLSH
T110D47D71A9C04074D5EB22B0296DE73987BDF6614B3091CB63444AEDBA607F06F3A397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

files_list

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\files_list
Size 86B
SHA256 403b9075eb28634cb9000e1029fbfb968274642e3a2356d9fbc18c2ab3c60eaa
MD5 33151ad85f370b17515cfb991ba64582
SHA1 c40eabbfd28e0f93f69270958057bdf4c39f2935
SHA512 15bb590da74a00905c9acc98a4d4d93244a44868d6a148ee08e416cd9a0fd939322ffbaaebc06393aa225a59dd72ef73292b6aa055990e5143e74472222d20ea
TLSH
T15AA01204C00E048C6A802056420085FF26C324041664C280025E04C80412017074A731
MD5 SHA1 SHA512 TLSH

Submit Download

msdia140.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\assistant\msdia140.dll
Size 2.5MB
SHA256 261c8cea0752fdbc241c9a02be493cb0dd53b033a686a2c5eb6cc24d7bd74b5a
MD5 c0034e978ffcb945a8323a0700e746ea
SHA1 8b74886d0cd0403b1fca38750333917514e2a2af
SHA512 7395ffcae7cc45bbdf605504dbea80a052d81629f19655f5a5d11afd7ee186099ed619a648a2d9ca1030b82c0da1b94208809ce7b83902e9147bf035fa26307d
SSDEEP 49152:pbrg2fTIsOXnuf7VSxLrah+N0Pl8xW/e2d5FOGB+p:W2EsOef700h+ilX/
TLSH
T126C56C70E60E8634DA8E2031DC7E6B5F52ADAAAB0B7104C773689E7D5C22CC27735587
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom_partner_content.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\7ce91a27-ae0e-403e-bd5c-94568c6ba2c1 Opera GX Installer Temp\opera_package_202610230534561\resources\custom_partner_content.json
Size 245KB
SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
MD5 f68d0557a8931cf979a21c59c1bae019
SHA1 e0bfe0f9a947916ebc1fffa52d7dff524e76c2ff
SHA512 2f0ef8e3e11daf0ad266c4fdc35d1e6e2215556115054f635ef9199b03a6924b1aa989f052461d59b9cdf57ec5eafa918e806fbf2d242f63699a8a65b0328ecc
SSDEEP 3072:iwK+GwaiHEaacjK+eMuhKS1d/ttUYD6W6Z2NrwYrVZCs0iUCabiKfAu/wX2OCy:XGuE/c9L+1btUYOnkrPVZCCUCabNU
TLSH
T1BA349D7BD4090CE327A561E68879611EEC21D26B0CE97C257B4C254C0F9ED6F25BC2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zSCFC6F9E8\installer.exe
Size 9.2MB
SHA256 407955bd8dc43601214a22c6696f6db8da9352eb0c13b38fbeb780a90755fc52
MD5 8f27cff13792ab0e35a8b085e4280c27
SHA1 9df2ba468a8e9f2cec09878363909d1695f8d7b7
SHA512 492f29f3032b2acbbd06904b0f875a86f10a31402f39ea20c6481b1bea2797856aee7fe11d7f7d2338f01539f3145122019a7872f6d10c07170ab6a918abb464
SSDEEP 98304:e/RAqHJe0Kj80vsfk8uLrUqtkSRNIj7/bgkxFBI3++wteEm/:URdHJQjkk8mNi7zy3+Bq/
TLSH
T198A69D53F3EA01E8D06FCA748B7A5232A9357C464B34A2DF0A943A250E75FD45B3DB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
Size 40B
SHA256 b671ac19dce744425b353cf6aa3ed2032e29860040b959dd3d6210d56853afe9
MD5 6e7493f36a069e55d0568ec3aeb4ce38
SHA1 a2872db558e71c520dd38dda84c5d83654fa34e0
SHA512 2b112645e7621308c713398cb2b39bda9a1d22cc1c8b9f02d48255f7d687d64d433176ffde726ffd986e6b5e517fa2a27ad2ad523ee99ff813194984725daaf1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads