home

._connect.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-10-38-docs.googleusercontent.com and multiple other hosts.
MD5:
5ecad39c470178e1b0ef93e534b60fda

SHA-1:
36dfed64b95c28cf63cce63da3d153cba020a88b

SHA-256:
4cef02e3dcd9558ed2623c5ddbfbc8710a8eb434dbfc0081b21daf818db3a010

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:43:40 AM UTC  (today)

File size:
4 KB (4,096 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\linksys connect\._connect.exe

File PE Metadata
Compilation timestamp:
3/22/1987 4:58:05 AM

OS bitness:
Win64

CTPH (ssdeep):
3:PFoESNt/FPl2ZjMzll/9llW3gzRHltlFiNQWZmLmczyqLO/PHltlB3:PgG2z/uU1SQWZmLmczyqLOH1V

Entry address:
0x200

Entry point:
00, 05, 16, 07, 00, 02, 00, 00, 4D, 61, 63, 20, 4F, 53, 20, 58, 20, 20, 20, 20, 20, 20, 20, 20, 00, 02, 00, 00, 00, 09, 00, 00, 00, 32, 00, 00, 0E, B0, 00, 00, 00, 02, 00, 00, 0E, E2, 00, 00, 01, 1E, 00, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 41, 54, 54, 52, 3B, 9A, C9, FF, 00, 00, 0E, E2, 00, 00, 00, 78, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
2.3 KB (2,304 bytes)

The file ._connect.exe has been discovered within the following programs.

Cisco Connect  by Cisco Systems, Inc.
Publisher's description - “Cisco Connect software provides a step-by-step setup wizard that will have your computer connected wirelessly in minutes. Cisco Connect offers powerful tools for managing your wireless network such as security settings, Guest Access, Parental Controls and Advanced Settings.”
homesupport.cisco.com/en-us/support/valet/CCSV
4% remove it
 
Powered by Should I Remove It?

The file ._connect.exe has been seen being distributed by the following 2 URLs.

https://doc-10-38-docs.googleusercontent.com/docs/securesc/e8mohsmupl284d7jeetllctamv2b7843/tuqc33nad0b0k3ldnuaflmhalg2sncfg/1442491200000/.../11822010734390186950/0B9olrAgjf3cSZnh2TTk3dk5sRFE?h=02369972364680484181&e=download

https://doc-08-ac-docs.googleusercontent.com/docs/securesc/drrnt7hd0g9qt7fhht5k2l2j6qtds7pg/jnvnk0bvs1u60lmh56jj2g64umsbubi7/1456344000000/02693528789185250501/.../0Bw2pS4qe4LWTOU52NVdYRDBoc1k?e=download&nonce=pgvlm5ciafb0m&user=01721862763779322875&hash=ma6rvh6gdidqtaioai4agca9mq6580mm

Scan ._connect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.