home

opera_1215_int_setup_x64.exe

Opera Software ASA

This is a setup program which is used to install the application. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
Publisher:
Opera Software ASA  (signed and verified)

MD5:
3c270519667c4d1d7de048d890f3aec6

SHA-1:
0557e2a5f513a79417bfb6b43903f030af637cad

SHA-256:
a2a11b9eb0a1e091b78adc89f75f992c074dede38b6eb1ae5439a7ca1c2ebc69

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:32:49 AM UTC  (today)

File size:
13.9 MB (14,535,576 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\opera_1215_int_setup_x64.exe

Digital Signature
Signed by:
Opera Software ASA

Authority:
VeriSign, Inc.

Valid from:
1/17/2013 1:00:00 AM

Valid to:
2/17/2016 12:59:59 AM

Subject:
CN=Opera Software ASA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Opera Software ASA, L=Oslo, S=Oslo, C=NO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
76952FFF53962455B352C661C2CA65E5

File PE Metadata
Compilation timestamp:
7/22/2007 4:33:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:M6aB93qL+p5umNkoCaWDvcSpCUlZSgOsP6HEu09szTSO2N:srqLqumNk6WDUmSBTTL2

Entry address:
0x11DE6

Entry point:
55, 8B, EC, 6A, FF, 68, E0, 49, 41, 00, 68, E0, 1D, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 28, 41, 41, 00, 59, 83, 0D, 64, 97, 41, 00, FF, 83, 0D, 68, 97, 41, 00, FF, FF, 15, 2C, 41, 41, 00, 8B, 0D, 40, 93, 41, 00, 89, 08, FF, 15, 30, 41, 41, 00, 8B, 0D, 3C, 93, 41, 00, 89, 08, A1, 34, 41, 41, 00, 8B, 00, A3, 60, 97, 41, 00, E8, 1C, 01, 00, 00, 39, 1D, 90, 91, 41, 00, 75, 0C, 68, 6E, 1F, 41, 00, FF, 15, 38, 41...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
73 KB (74,752 bytes)

The file opera_1215_int_setup_x64.exe has been discovered within the following programs.

Angry Birds Rio  by Rovio
Publisher's description - “In Angry Birds Rio, the original Angry Birds are kidnapped and taken to the magical city of Rio de Janeiro, where they eventually escape their captors and set out to save their friends, Blu and Jewel – two rare macaws and the stars of the hit motion picture, Rio.”
www.rovio.com
9% remove it
Eye Pro  by Classle Soft
www.classlesoft.in/eye-pro
9% remove it
 
Powered by Should I Remove It?

The file opera_1215_int_setup_x64.exe has been seen being distributed by the following 6 URLs.

http://i.download.idg.pl/fannef/f0fcfeea2ae1b18422d3ea00f6c83c0e/56c9b86d//vol2/w95/przegladarki/opera/2013/.../Opera_1215_int_Setup_x64.exe

http://get.geo.opera.com/pub/opera/win/1215/.../Opera_1215_int_Setup_x64.exe

http://www.opera.com/download/.../?id=35679&location=360&nothanks=yes&sub=marine

http://www.downloadcrew.com/?act=software.download&id=30812&t=1367681557&c=be3646dbed1f87b038eeaa423249ae9a4feba88e

http://get-tsw-1.opera.com/pub/opera/win/1215/.../Opera_1215_int_Setup_x64.exe

http://soft.archive2.clubic.com/files/5abdd930828767c3e593b902b9cf7fcd/526bbb2e/.../opera_12.15_fr_18773_64.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.