home

opera-12614-dp.exe

Web prog

Application Soft

The application opera-12614-dp.exe, “Web prog Setup ” has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the installCore installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.contentworldcurrent.com and multiple other hosts.
Publisher:
Application Soft

Product:
Web prog

Description:
Web prog Setup

MD5:
861868581a08267c126f782bafd6fc10

SHA-1:
4cc5578800b5ccb80687f275543246c019141c31

SHA-256:
9c57ee917f8950cadbe7f18cdd15b0a155576d3cba9796c8fa51422e32eb0c7b

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
2/26/2025 8:35:31 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted application
7.0.302.0

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
15.0.0.562

Reason Heuristics
PUP.InstallCore.Bundler (M)
16.2.9.14

File size:
926.1 KB (948,282 bytes)

Product version:
2.3

Copyright:
Installer

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\documents and settings\magda\pulpit\opera-12614-dp.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:oNXvA3eyx8WxKMebhXFKePug1AUgckcQ4vZZ8Y34G65:odv1tWjiX5PuAAQeMT53b65

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file opera-12614-dp.exe has been seen being distributed by the following 27 URLs.

http://www.contentworldcurrent.com/c?x=olfxq4d7zX/35KEH7inyWXPTYtzctpIkLqtzJPJTcmk=&c=qHJpckZps3DPGkMfeSp9O4FRRz0Lb539MFtQYYs1YRRjHNA53e8SHeVG7CSKzV iTrMyze25LVi0q ji3PnSbxlizQcNswviAkzvrblCoOaRDtkHwQG3BYa9fMIM3wfe&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bundlestockbits.com/c?x=qrpi4ctrrMSEGsugXheQm6NKOd5ff0THat VNwJGbw8=&c=u5Fls0Dq58D9Wa1ygpouJXue1rFcKgRDqpE/MptD6JC8xKC/9BYExRMfKOWgkjKDZDeb kikRDj9P/WX0yVe5nGdF0iDTz0c/xFspc/r7m6e1mX1XjMl43RNXgHcJw6K&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.bundlestockbits.com/c?x=mxmvEaEZ4pw3d/onKStKem4edgjzeygtnmL/y66FODc=&c=LiH058A0sx/JNiIvrjDqZOFHYORO1U1ijJNcpqvQD1ZekOvpoLamKIGUd7gT6/AWb4aPGLONM6ClptAJmRjrUkMK/oxHtL5foT4d9tP dk3GHsThC7Lb7w2eHNKm BpS&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.presentdeliveryapp.com/c?x=ElaZnQ/AXPeMdfIp6UdRW2vWJln4UFkg0hFnFQvO3YI=&c=43FQAuWfPbD6fA0mioS5Nf3xdol/Ke/KwVPXLGbJ0gYYibDqnvPVgYFngUaLYBNYztGH2Td4Jj1cKBig/ViuAHjIRlwp0cPWJAB S97LQKSvOyMc4DUd2d lyQswS0/8&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.hostingdllaboratory.com/c?x=rIWKRKfja/P9f zZQkYnMHbuwRqc0W9uHS6e7gN1gc8=&c=7Yce9ZgV0xqXZqjEwBGSiE9hqZV/z dCB9W62B27xk1Ls/DFHq6ObZScwW1U xNdlojeREGaCynnrcqf0ojb 7x7m7x7l3PN8pf8lkYyQ7Cf lqik8tTRg/J2MlLAOQU&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.packageheartfactory.com/c?x=DD0CPMQOwYKENFe7zjIJu8ftKlaR0/BJ2 v8a9OVNFA=&c=9JxBeT2HiIM3eVM0Vl6dUaf/Zh877JTE4wQSCcyyeExa4FwGfUPDVC CqcsSmNi/QyqMlp9S tabEwGf8BB2IvELj18hA XRNeXKGYSRsBC6U/SHisLxr2C3mwflPQvh&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.megaquickdownloads.com/c?x=xXZKV2qnjdX2Br8xqdjfY6NI05apaW5ggfOxEdQuyw8=&c=Kio16CGpi/h3YKpVaPcfSPJp5oAqHj0XjIxSyJlBfuPfIscdM6q3VLwMMrr19FBSSFRSHLfkcCMHNaFBDGSfAyR6Ae8zll4jLKIsQrUGovWbaCV6ohlsNqLqdxBTBhIu&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentcleanpackage.com/c?x=DwRCUeqKZ0vjb4T6PrahKwQEQbVBKQUppODsvSySSac=&c=FebaqRdjIILfU39Si7V TLG6eGckiRn6wAcCpNQywhZFTIhNjHr7TZ1EYfUIgmqeLjPw8Do9U 0HFBczvJaKfm18lyKgl YbSsPPbDUrA1s5APxIgUn1PrVUUFHfV51K&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.towntodaynow.com/c?x=9KWZnacynAdS6H3ei7MpJ7u6h75zlgJD8h/tBIc/Hhs=&c=rXXp0odqe1qW7zG0Jzmj6IXqw92LLMIwvQxl0fxZK0ZU4P7/bMJrRZkve1hQEbKrkk/JbNPaEV3/GTElh9d2 35rBU2cpijpg2Z/QmbCwkoI8SnmQdBwZ4VGr7fAknJY&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.updatecyclevault.com/c?x=KHCiRntptxN0YV/EMOgQWjkyRXXWcE5G6LVbdFr1bkc=&c=Lf7gRBAqUQoJlDsB6hVh7ZJToJ14qyxZrcm3tz0FnukUAJFkGORsySG8vnwxmjxUrWORqn dFZQancFCPtuFVpY4/QyO9S46pSlmkt/iay8ug5uQvtfH6MwydAEtFvcI&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.repositorytagcurrent.com/c?x=pPEsJt/t7tMui4/L yOsz1JUpjZPWJPbGDy6YC4uzQ8=&c=QLES2f uvYaBphzzVKqVDn6lYZYdDfU/4hNOsXiw HwD4JLBZqubFQD6LO2o9h0XYql1Fe5v1k3TzeoOSrgm3fG26ckIdH1eztepPN0pD9i0NmE9djhnVJT7mYzYe7IM&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentworldcurrent.com/c?x=j4usBw2JsPeJ/2vO7yYYwwTMKIHzeKPYKN2ExOxWcJ0=&c=MvEaVxylTbA/EHes SUFhXjdqn zux6ekyn6h5TiJyFRZRubfBxzqRKxskC5CFoCpz8GCViyFcdyE1pC9YuaXpFVlpMsJLmADy7Jvi3 qwfo0R8zxd4Ikzo8PAGhCtw7&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.packageheartfactory.com/c?x=cNWHspBtK80dk5ZlBTyBhm TLGR38bzNmrbDbBMjSuc=&c=zWwpWKQ70hqs3aC89ygLmMQFk98 V4Y7Tx47dfHuSnslG3j1KotR35J5MLArNnJ6OiCS0Y8cMqZwou3HxoA1haLMpGMRWt5ZTny1U8UYE/r2g 7wpXyEIsvDEg9xFDNZ&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.updatecyclevault.com/c?x=H4Uqnuva5zNrS9Q/U4NpPAJWDvcnEwcchoEy 7820Ao=&c=UTwwXTu3qo92LjoQwhQBark4lqZwiZ nKiwK88gsUH1599WcGbmH3EPB82Uilwu3clWBudrwei4z594Wh ITFqghPcYetywk8yTlGW9ZC/oLT7DPVqlbb55WJSzPVaUF&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.updatecyclevault.com/c?x=05Js362as zAOqbthB7oS36HOT9e/vLI2oIAwd2dcE=&c=IWz6lotBjLACiaT/x82Fo4b0 DG6qWHJtK0WC2yCvGze 1xI/18D88g28yrLEwsyYXN5Wso/0DdOnuU0CO0NDaFwlNJf3LcKqSNY9nSR1RK9ucqmLCmw9U2FSxMz47j&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.vaultconceptsgift.com/c?x=nWl7vPqBkz/tRnYLMOuLYPUXI/HMqWP2UENt8eF7Frs=&c=HTyNFFS NtTADxJeogoA7SjfrKgpokqJP ENVCbNuV3f49ZxJydZi8jbf8I5PkJiCUjHo8h2gVQ6aAYPy4qKdiWkwidM45i0krLXuf9SVPyKaepOzCgQ1bwgmVrduiar&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.townapplicationsmega.com/c?x=PjGuBiJcj 8uCxVaX/XYdzDvIGZ7gt5/VDBdgY775B0=&c=Y6prtzoZTD7sGzPbNiqi/XXuObELdl4GjyQJ6nwgi4fKoKud9OpfT0oeOgR0PNCDiWBnflIBDhg4pqvPN8iyuLgMOn/fJgKFykZxHQbQ/288e1Mg7HgNvNAsQ2Xmi Co&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.presentdeliveryapp.com/c?x=cXj7EbkynoT6TtWiTwdqnsGy/9mwcRsg5KXbNX7e3A8=&c=ZM3Owj1PrSUtzZfBIT7g N6FC/yaCOAkAZN9WOXIy1QCA7yJPjT6Un8VERXCEIZ/tANrd4P6KYo4ZDkrKVbfki8jzVpdLY0x5ImItTgejT9TA5Fqj8m/jOqWnq3aYb8J&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.townapplicationsmega.com/c?x=DxSEkEBtgaqAs4I5YB DvXCstLGAh wcT7RdWNFkXrA=&c=sm9mATVLAX wZsOO4NM1yEi6eaaYrm3KqhqAhHjHUByxOLpAn7ANYG2 ikFhmVHeS7cYwVjD4kGocisAs5Q7cocQtQVyQzGqoy7tKaFdIvH6z vu45bU/R6ChdLNzjGx&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.towntodaynow.com/c?x=CyQiqsJrUEOuyNc7nghIGvi0tRtnlbcde56jgVP VJo=&c=WODu3Eb5vQXQAAcokZNoF1UGaboBgdfyOt6NPgnIKWxPpja uyC2tsYH1i8XFQXtzsB64N SXJPCk2SeT8pGaLbtbWvhgxBIPaTrlQw4P/gQkCQH 3aWs7jKWBc0JktK&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.presentdeliveryapp.com/c?x=nBrchQhjmX0Y uM3KX6 YsvacUHN0ER/XLY8rUC 2BQ=&c=ewt5R32/m6jBdGzW4MMKKNCDWG4cvKVODsqfw0PC5vUKP7FYdH3xa3GVugWIrJGdQEbqFU7QQrn0h5hzOLaEOi4PBSGowTHRl9oizeFeiLdJEFo1tCbPXimmQDanaz4a&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.megaquickdownloads.com/c?x=ONQpyf3Qa0wGyCX064JjohYXXkYtGcjs5s1focwGDI8=&c=EouIieSTQpLSclAPKfVeTrWFDuDgSGbxDRwFHr3TbkqRJc7m1/kBrBVRe4bWYm G2sohdbnmZ2YfOfP2fP6ht5AJAJ6UM7ki0K9JOHGcJ67R2neICUP1RnCA HfojuhJ&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.contentcleanpackage.com/c?x=mtd77gXmwcK68c2LcvhYSNBL4d1fHwldg2 XeZ2OdZQ=&c=aXqpVrItx17YdGmIbC na9SO0962jt7qsIFAAYVa173O7D33Jv7e6nWtCs2B k0MjUTfOU73OpauHz1U5UcvyPyjni87A9C95NpOFQLewrRCsZh8AVEn62h5THJisfj0&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.presentdeliveryapp.com/c?x=pg96zDH ChMAIOlSS8IMeq6vFIhXNGUYCYn9ogDFiZs=&c=O4QrtAr/k/jC9oowWxIb5q/E2CF9eUfyXmt82CPPj4QQoT9xYrWv2I8pe41UEFxzlzx KLxWKlck4Bagxgku8UhggH49XWXhmmLso/s94oFxfKmEfrv4kRuWuTyLEmec&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.hostingdllaboratory.com/c?x=ZlJ2c3k86BFfiRr7Do3WqSTCt0gSkkwN1AFK Iyevok=&c=OofP24OCook8AJ8xcH7rqGadADqZ3uV3 nFjaNm8ymnlWCifmdUseVaKxHLp Dku3O1loi0YPDNsNuMjBdlo2tiQ44RwvY5QOKFuTU5K2CeYhux9n4j03gREMfy6NM8I&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.hostingdllaboratory.com/c?x=91bNa5CCs0mS0BbwJkejAnIaR2DCH4AnjrFvbIezVbs=&c=yaxkOwBkKt/uAVbjuU0Azs9cbSrasEKbdo/59FJvf7M7FWLfBc7hWH5kzBK/yvbEqK8LMpnB4uM5Fv0Ibj m1DBjNWt1XE9gmPEeQQs5Fd/KFWNU647IZakGgduurPXE&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

http://www.towntodaynow.com/c?x=yrvETcX6Pqb/XVvjMVRdkv8KjhPcn/AZ4 sBdVBMNdg=&c=CUOytuc12OWTfcxR BfUoMgXqTOPa3gP5NZMxBndWd6tpXmjzbWkWnP0bj91RuOH9C3aLdrumKs9RbQuyL3J7LN8i6JTPUqa3/jskjFR0y9spvTuqSdDqJGeU3k0Q6VI&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.37/.../Opera_35.0.2066.37_Setup.exe&downloadAs=Opera-12614-dp.exe

Remove opera-12614-dp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.