SecuriteInfo.com.Adware.Elemental.22.28512.27778.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
suspicious
Score: 34
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
suspicious
Score: 38
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Run with higher sleep bypass
|
| IP | Country | Detection |
|---|---|---|
| 44.217.103.196 | United States |  |
| 37.228.108.133 | Norway | |
| 23.48.203.201 | United States | |
| Click to see the 9 hidden entries | ||
| 104.18.8.172 | United States | |
| 88.208.5.115 | Netherlands | |
| 192.229.211.108 | United States | |
| 239.255.255.250 | Reserved | |
| 104.18.10.89 | United States | |
| 107.167.110.218 | United States | |
| 107.167.110.211 | United States | |
| 107.167.125.189 | United States | |
| 107.167.96.31 | United States | |
| Name | Detection |
|---|---|
| http://autoupdate-staging.services.ams.osa/v4/v5/netinstaller///windows/x64v2/Fetching | |
| https://addons.opera.com/extensions/download/434b0a6daa530638a964132e86b8a01d7b39aa7c/ | |
| https://www.deezer.com/ru/login | |
| Click to see the 97 hidden entries | |
| https://partners-offapi.net/apiBundle/stpstat | |
| https://www.rd.com/list/polite-habits-campers-dislike/ | |
| https://download3.operacdn.com/sp | |
| https://addons.opera.com/extensions/download/e27cf3ebc2172a1a7d9cb6978a031ef52ed55596/ | |
| https://addons.opera.com/extensions/download/3ed7347a5e10c404ea6cb96281265ff23092cf8f/ | |
| http://crl4.digg | |
| https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMeu | |
| https://features.opera-api2.com/)l | |
| https://www.google.com/favicon.ico | |
| https://duckduckgo.com/favicon.ico | |
| https://gamemaker.io/en/get. | |
| https://gamemaker.io) | |
| https://www.opera.com/eula/computers | |
| https://www.msn.com/en-us/news/politics/clarence-thomas-in-spotlight-as-supreme-court-delivers-blow- | |
| http://www.kymoto.org | |
| https://opera.com/privacy | |
| https://desktop-netinstaller-sub.osp.opera.software/6~ | |
| https://www.msn.com/en-us/weather/topstories/us-weather-super-el-nino-to-bring-more-flooding-and-win | |
| https://addons.opera.com/extensions/download/4d3d8f7f070d279fbe0d2795e10e69fbab5d3824/ | |
| https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHZu | |
| https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings | |
| http://www.kymoto.orgAbout | |
| https://smolecular.icu/tfg/?src=setupIO | |
| https://www.deezer.com/th/login | |
| https://download.opera.com/download/get/?id=65442&autoupdate=1&ni=1&stream=stable&utm_campaign=PWN_U | |
| https://www.deezer.com/de/login | |
| https://config.gx.games/ | |
| https://autoupdate.geo.opera.com/api/prefs/?product=Opera%20GX&version=107.0.5045.79As | |
| https://www.deezer.com/es/login | |
| https://desktop-netinstaller-sub.osp.opera.software/r-sub.osp.opera.software/ | |
| https://crashstats-collector.opera.com/collector/submit--url=https://crashstats-collector.opera.com/ | |
| https://crashstats-collector.opera.com/collector/submit0x300 | |
| https://autoupdate.geo.opera.com/https://autoupdate.geo.opera.com/geolocation/OperaDesktopGXhttps:// | |
| https://www.msn.com/en-us/news/world/agostini-krausz-and-l-huillier-win-physics-nobel-for-looking-at | |
| https://download.opera.com/download/get/?id=52318&autoupdate=1&ni=1% | |
| https://crashstats-collector.opera.com/collector/submit | |
| https://www.deezer.com/us/login | |
| https://desktop-netinstaller-sub.osp.opera.software/v1/binaryBy | |
| https://browser-notifications.opera.com/api/v1/ | |
| https://outlook.com_ | |
| https://desktop-netinstaller-sub.osp.opera.software/v1/binarytx | |
| https://addons.opera.com/extensions/download/505f20c0ceb331ebec9f6b8d9def5e0f59be4612/ | |
| https://translate.yandex.net/main/v2.92.1465389915/i/favicon.ico | |
| https://addons.opera.com/extensions/download/313b7f796952f2b34bf6bce6ba10a7b51bd18913/ | |
| https://autoupdate.geo.opera.com/api/prefs/?product=Opera%20GX&version=107.0.5045.79 | |
| https://gamemaker.io | |
| https://addons.opera.com/extensions/download/aad01b6c6f7f2f01bea6584af044c96d8850f748/ | |
| https://download5.operacdn.com/If | |
| https://www.deezer.com/no/login | |
| https://addons.opera.com/extensions/download/0239ef3d7c95570d61b12b2fb509af435ccc2131/ | |
| https://simpleflying.com/how-do-you-become-an-air-traffic-controller/ | |
| https://partners-offapi.net/apiBundle/geo?sourceID=31120&subId_1=361D4F6E-6488-4FB2-BF8B-32AC8683517 | |
| https://crashpad.chromium.org/https://crashpad.chromium.org/bug/new | |
| http://www.opera.com | |
| http://localhost:3001api/prefs/?product=$1&version=$2.. | |
| https://desktop-netinstaller-sub.osp.opera.software/b | |
| http://autoupdate-staging.services.ams.osa/ | |
| https://ff.search.yahoo.com/gossip?output=fxjson&command= | |
| https://www.baidu.com/favicon.ico | |
| https://policies.google.com/terms; | |
| https://www.deezer.com/ro/login | |
| https://addons.opera.com/extensions/download/13655f413caacdcc677b24dc0c615d1f5328d6a3/ | |
| https://api.msn.com:443/v1/news/Feed/Windows? | |
| https://help.opera.com/latest/ | |
| https://download.opera.com/u | |
| https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV | |
| https://api.browser.yandex.ua/suggest/get?part= | |
| https://www.deezer.com/sr/login | |
| https://legal.opera.com/terms | |
| https://yandex.ua/search/?clid=2358536&text= | |
| https://net.geo.opera.com8R7/KLRL579/ | |
| https://aka.ms/odirmr | |
| https://net.geo.opera.com:443 | |
| http://www.kymoto.orgA | |
| https://yandex.com.tr/search/?clid=1669559&text= | |
| https://duckduckgo.com/?q= | |
| https://desktop-netinstaller-sub.osp.opera.software/v1/binaryCx | |
| https://autoupdate.geo.opera.com/geolocation/ | |
| https://www.deezer.com | |
| https://addons.opera.com/en/extensions/details/dify-cashback/ | |
| https://crashpad.chromium.org/ | |
| https://wns.windows.com/L | |
| https://www.deezer.com/mx/login | |
| https://www.so.com/favicon.ico | |
| https://download.opera.com/download/get/?id=52318&autoupdate=1&ni=1e | |
| https://try.opera.com/72TR8R7/KLRL579/?sub1=setupio&sub2=31120 | |
| https://download3.operacdn.com/ | |
| https://www.deezer.com/fi/login | |
| https://www.innosetup.com/ | |
| https://desktop-netinstaller-sub.osp.opera.software/v1/binaryve7 | |
| https://www.remobjects.com/ps | |
| https://addons.opera.com/extensions/download/ad5beaae2fc679ccba1db1f7b3c9503d8da6ec70/ | |
| https://desktop-netinstaller-sub.osp.opera.software/v1/binaryera.software | |
| https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gTUY | |
| https://desktop-netinstaller-sub.osp.opera.software/U | |
| https://listen.tidal.com/ | |
| https://completion.amazon.com/search/complete?q= | |
| Name | File Type | Hashes | Detection |
|---|---|---|---|
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1453063255\CRX_INSTALL\f650f111a3b890d116f1.woff2 |
Web Open Font Format (Version 2), TrueType, length 26272, version 1.0 | # |  |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\themes_backup\gx-classic-light.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\themes_backup\gx-classic-dark.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
| Click to see the 28 hidden entries | |||
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\themes_backup\gx-1-classic-light.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\themes_backup\gx-1-classic-dark.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\themes_backup\default_dark_theme.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\siteprefs.json |
data | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\browser.js |
data | # | |
C:\Users\user\AppData\Roaming\Opera Software\Opera GX Stable\PartnerRules |
data | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_493994295\GX_Wallpaper_classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_386930391\GX_Wallpaper_Light_classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_240964628\GX_Wallpaper_classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1960971200\CRX_INSTALL\img\welcome_page_coin_logos.0d4e909e.webp |
RIFF (little-endian) data, Web/P image | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1960971200\CRX_INSTALL\img\portfolio_background.e09645c2.webp |
RIFF (little-endian) data, Web/P image | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1960971200\CRX_INSTALL\img\crypto_wallet_background.34d522e0.webp |
RIFF (little-endian) data, Web/P image | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1833749219\classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\Opera_GX_107.0.5045.79_Autoupdate_x64[1].exe |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1453063255\CRX_INSTALL\73ea273a72f4aca30ca5.woff2 |
Web Open Font Format (Version 2), TrueType, length 28076, version 1.0 | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1453063255\CRX_INSTALL\39890742bc957b368704.woff2 |
Web Open Font Format (Version 2), TrueType, length 25324, version 1.0 | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1072004584\GX_Wallpaper_Light_classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1055328301\CRX_INSTALL\assets\twitch-placeholder@x1.png |
PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\scoped_dir6668_1054666066\classic.png |
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced | # | |
C:\Users\user\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202403291935511\opera_package |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\opera.exe |
PE32+ executable (GUI) x86-64, for MS Windows | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\resources\standard_themes\gx-classic-light.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\resources\standard_themes\gx-classic-dark.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\resources\standard_themes\gx-1-classic-light.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\resources\standard_themes\gx-1-classic-dark.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\resources\standard_themes\default_dark_theme.zip |
Zip archive data, at least v2.0 to extract, compression method=deflate | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\installer.exe |
PE32+ executable (GUI) x86-64, for MS Windows | # | |
C:\Users\user\AppData\Local\Programs\Opera GX\107.0.5045.79\assistant_package |
PE32 executable (GUI) Intel 80386, for MS Windows | # | |
