opera_1211_int_setup_x64.exe

Opera Software ASA

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Opera Software ASA  (signed and verified)

MD5:
37fd5933ce00596fc40debe3e11a47e1

SHA-1:
602b32f85bfd326af929157396e4304e212cd2bb

SHA-256:
9d566a9650c41d0baf827d871713ffbb127a04db73eedb806fe3a71245d63943

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:53:31 AM UTC  (today)

File size:
13.4 MB (14,065,672 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/27/2010 1:00:00 AM

Valid to:
1/29/2013 12:59:59 AM

Subject:
CN=Opera Software ASA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Opera Software ASA, S=Oslo, C=NO

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13C8351AECE71C731158980F575F4133

File PE Metadata
Compilation timestamp:
7/22/2007 4:33:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:3uyGO+U64JhfbWUWzFLU6VaOs8xQEvYxFDJmyfGGHhDdUr7p0Fq/BhTLLJvycL:3Cs/UUYFH8OPyOYzoy7HhGK4/V6cL

Entry address:
0x11DE6

Entry point:
55, 8B, EC, 6A, FF, 68, E0, 49, 41, 00, 68, E0, 1D, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 28, 41, 41, 00, 59, 83, 0D, 64, 97, 41, 00, FF, 83, 0D, 68, 97, 41, 00, FF, FF, 15, 2C, 41, 41, 00, 8B, 0D, 40, 93, 41, 00, 89, 08, FF, 15, 30, 41, 41, 00, 8B, 0D, 3C, 93, 41, 00, 89, 08, A1, 34, 41, 41, 00, 8B, 00, A3, 60, 97, 41, 00, E8, 1C, 01, 00, 00, 39, 1D, 90, 91, 41, 00, 75, 0C, 68, 6E, 1F, 41, 00, FF, 15, 38, 41...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
73 KB (74,752 bytes)

The file opera_1211_int_setup_x64.exe has been seen being distributed by the following 38 URLs.

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_es&type=PROGRAM&Expires=1443945291&Signature=OaC-scVF88INN90dZww-zu4d-yaFdMgVt0uxZT7A~pdeBzaP9tIF769Htgsi19TOKWh8dO0W~BLFmjadlsi74XEzs0ungRgbDLdkPmS8d5cW5SZ2ln7gKxMfReB85q9oeJyekWGsCHUi6-m~VjPnGEEesdnLcnoifQ43Hs~jsAQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_en&type=PROGRAM&Expires=1430195257&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dgjcJ~8otnHfIP6bpX5~VjobmPuB886NE45p4W~e0MbT33I-6n7QGEofZIfXuIB4pvQwG2DAo6tndCJsH45VA0HSIVX3Y-n~jLTPXIw-B1Mhn3GvnNafmxgz8TH1Y~TCsSEtCZASbYdqwjWz1vo72AXxRWAM~j1A~a4oEVNUMZY_&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_es&type=PROGRAM&Expires=1433241626&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JcWiWBUzxo7u9DavIyIBMMnYA~x~gKieoeVZOXgVNh0QR-4rloSAH8nMygf7QK4fCrNENPeinoR26IiKkkxu3Z64NQClRvLXGC9LPPKIQ1pgx~hvMv7XMVGo3M9tkCU6WgaiWh9nkKFteUq2tTWyH~GA90Zg-OPCfnO6z5AFXoo_&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_it&type=PROGRAM&Expires=1444210728&Signature=CFR1~Vo0FQqmdRrxd5oirMKmwT2WJD-46a227y20w~6~QXlMMCROrzrl6jvKMaH30HSrO99tdkzuPomMTEZyHXAYE11VxQcJkdU0tqY0WcYpg2zDDjFT5RJzphrsvMbY3mgyjtzhg2cJuCTWhDGhBwikt~1vJ3F3gmk9bXmAZn8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_br&type=PROGRAM&Expires=1449904993&Signature=WlyIn65RNu7myzugdsEGr3grhD3ve0E7swUfy51NjKpAd4g1gZRuU5Y66bxz8YUOwf7gkXhUYpp6kL0ZM0Z537QNYJmsDRJ8glemLcCflj8jbs35YTyurguQWUibz1QzDiKxqmcgyOKkcTNpFm1V4dpT4ZgCwfMC7Wr5WWMIoRg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_br&type=PROGRAM&Expires=1434845149&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EQhvDGIGvQonHfylwGfRWThSUDrIqYVnZo1xWh-jWmGHd4hQTO42zVvJr8u1Lx9xEkMGy~CVxWCBhZ3czCRWXt5wys-u1Radj~BMBwpxbJvREVpeRxTgqPaqv5~qDeCsFG49I~DVc~HQiN~sj9nDvZpUUQK3sFNTP~mwmcqOQ4w_&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_en&type=PROGRAM&Expires=1449042408&Signature=foZVDCROUqAfN-aMaUAXYZeDqaeADDebbYeCuUZia3kAy4EGIqp0MI26lr-9ms2l~SistaC10aFIrBCUCO~uxnhGywuJyeqQJw73dMX7aqtJ4JctdiTXBhTU-4k-nToje7LXc-a1-Gi5tC3zwroCj3fnwY7CMv4Vs4VffzVllCg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_en&type=PROGRAM&Expires=1443505392&Signature=U~buBq9rfVA-2M1J0OVftK1xsgGZO4UhpbQ1v4ew4iYiGUZJgJLeSiuT0OvxvD2h5S1E5KQ1q7dr7HCVffGyNVWMvqNFCEtP9XzMs0mhBI8foG1L49TXNZLgUxONyrfCPAVYFZiieO8hgi0b~zxxWdiQQTw4nHnk860swxHAbsA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_es&type=PROGRAM&Expires=1431944457&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Mn1vywaor1HL5CNInPnW6~6vkO7nHF~su0k4tq8XAKtaR46IjVuKV~QlqxfVeB3slCUb6D9nA2AWI0ahfKERnjK14L16VzNtSi7sPQOveJ3cFLmvG~wrsBtX1RD5~icprcLieu4EI52dCS6f-PRUnWE2N~LJkIzwPUZ41EoyTdc_&filename=Opera_1211_int_Setup_x64.exe

http://gsf-cf.softonic.com/602/b32/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3334786&instance=softonic_es&type=PROGRAM&Expires=1443435895&Signature=iqCy2Pi~DK7ZUKT~VrETgaK98PidxClFNq4V5oj8AMLrzFyitiltaIy~3OIqrZmO8QOxSECFRe0MggbBNSV7LMsZSurWKz6xSP3Vv1OOwdor~MLHl7dkaLDJ7xdtJkuy-Dg4fQr36bmZbb7bqueDRKnwIzFXNavernOuZ7QcruM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Opera_1211_int_Setup_x64.exe

http://69.4.238.159/clr/.../opera-64-bit.exe

Latest 30 of 38 download URLs