» opera_ni_stable.exe
Overview
Analysis
File Details
Downloads (1)

opera_ni_stable.exe

Opera Network Installer

Opera Software ASA

File name:

opera_ni_stable.exe

Publisher:

Opera Software (signed by Opera Software ASA)

Product:

Opera Network Installer

Version:

24.0.1558.66

MD5:

bb55f5c5b77842bd34ed89869cc6f90b

SHA-1:

e9600256de3a339163630041f3ce53f56fc91380

SHA-256:

71d1497d7694c7ce17ed272af63ffff7e85301465a1e970ff49478dba7bac3df

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/4/2024 6:30:56 PM UTC (today)

File size:

849.8 KB (870,200 bytes)

Product version:

24.0.1558.66

Original file name:

net_installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\opera_ni_stable.exe

Digital Signature

Signed by:

Opera Software ASA

Authority:

Symantec Corporation

Valid from:

4/6/2014 7:00:00 PM

Valid to:

4/6/2017 6:59:59 PM

Subject:

CN=Opera Software ASA, O=Opera Software ASA, L=Oslo, S=Oslo, C=NO, SERIALNUMBER=974 529 459, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=NO

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

71CAC98F650605955D9AD86CF2BD56B6

File PE Metadata

Compilation timestamp:

10/23/2014 6:46:38 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

12288:aB+nwj7vbsslMqeMPwTYlOrSo8/APonLQHcNI7ibyVe+LipD2PFpjffSWF5lKQVl:aB+nsYkQ8K7imRmpD8fSWZdveY

Entry address:

0x41D8B

Entry point:

E8, 62, 9D, 00, 00, E9, 7F, FE, FF, FF, A1, 84, 1E, 47, 00, 56, 6A, 14, 5E, 85, C0, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, 84, 1E, 47, 00, 6A, 04, 50, E8, 62, 47, 00, 00, A3, 80, 1E, 47, 00, 59, 59, 85, C0, 75, 1E, 6A, 04, 56, 89, 35, 84, 1E, 47, 00, E8, 49, 47, 00, 00, A3, 80, 1E, 47, 00, 59, 59, 85, C0, 75, 05, 6A, 1A, 58, 5E, C3, 33, D2, B9, 90, B4, 46, 00, 89, 0C, 02, 83, C1, 20, 8D, 52, 04, 81, F9, 10, B7, 46, 00, 7D, 07, A1, 80, 1E, 47, 00, EB, E8, 33, C0, 5E, C3, E8, A8, 01... 
[+]

Entropy:

6.3725

Code size:

362 KB (370,688 bytes)

The file opera_ni_stable.exe has been seen being distributed by the following URL.

http://opera.software.informer.com/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.