home

20050907175540609_ml-1520_print.exe

ML-1520_Print

Samsung

This is a setup program which is used to install the application. The file has been seen being downloaded from members.driverguide.com and multiple other hosts.
Publisher:
Samsung

Product:
ML-1520_Print

MD5:
e5c1fc19b154ea332db9c23cab79297e

SHA-1:
dd8ef347f558121bd5c45b8ebfa6d210fa8441f8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 8:36:53 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.FakePDF@CV!1.6AB2
23.00.65.14712

File size:
5.4 MB (5,679,971 bytes)

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\documents and settings\rendszergazda\asztal\prnts\samsung\ml1520\20050907175540609_ml-1520_print.exe

File PE Metadata
Compilation timestamp:
8/2/2002 9:01:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:06YmRs48eAuf5Lq+VMK3CjUvXUWWpavaK/wGH+clmNDTf6MVUD8qUmCYUdyaNT9k:tY4s4G2MKoUvEWWYvR/P+jNDbuHUmr8S

Entry address:
0x8AF7

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 43, 41, 00, 68, F0, C3, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F0, 41, 41, 00, 33, D2, 8A, D4, 89, 15, 7C, 93, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 78, 93, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 74, 93, 41, 00, C1, E8, 10, A3, 70, 93, 41, 00, 33, F6, 56, E8, 70, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, D1, 36, 00, 00, FF, 15, F4, 41, 41, 00, A3, 4C, BA, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
76 KB (77,824 bytes)

The file 20050907175540609_ml-1520_print.exe has been seen being distributed by the following 5 URLs.

http://members.driverguide.com/.../dispatch_cache_get.php?msl=e5c1fc19b154ea332db9c23cab79297e,620542_1140685051&time=1482174771&auth=c9d49e47e1f70d9c77d04cb2d881156a&file=20050907175540609_ML-1520_Print.exe

http://www.downloadpresentcity.com/0UXYB89X9dDZIPq2NRUFtyJM8IOsJlLL2DizWiidIlOYW3LdkZMYLSDjIHVrhK2GIdXqgrlYmdw2ulX0_XiheIQzvsf0AtVJXKl4_53_G 54dKg54sN8V6Oy8eggvOi6UDZ9RMCxp0618GzawfoqNQnwom_5WcxIf2vc08HG4I8BPOrUZlQF8bJ5VD0X6pztkOGKuFtPkhWnJy5PnWdhcJlns7WkHQ==-GyEDAGS TumPh2whSthfR41RguiXPMLoBSZywN4WQ8wnsffGgSdrjPwsAnNO1i5tsi1emwXvuYAMHNdow4972xdllZUb92ImF8N6u5e44xN9RGoQzGWH2meJs75ocN6aezV1RLKJ8uatfyHumCcND4fOiBeZvfO2Yqxx85PHttMiL1LZm3GBsJYGbwJ sG4fJb4YFt0NTOI3IiNFzgH1id71YKLcvyd7lY2PTUNDO8axD0nEcxXC6O9ryHXpVAfKvWYfm7tTsD3eKplrSFZSL3q pgvuRbtOCZsn7y4YhjVCSRkWiULfOF9pQbczecZxi9b1NrDbefNvmKdgIny FEQJE7zMXnmcPS2AxUNWrRgc4sC73tMHlEWoSkHS8x1pVoMMm84WcDho25gMdoySt8D6bxdBtR1z1fCpVkqm03kET9ORjICOagtXOGo5WEGlNZRL30_DQRzyiWdjx1BMYXIMzAx6G4LaEdsbemMdqaWA83coeGvQth9SxAsZs0quPEmFY r wTiH7rzwO Lp_o5JdW1hsKELQvjkTQrdr7kmxUZORhWdXUNvkrgN1cvEzSlr5rrIko8cDEE25F5Cl_7IzH3CsFlHwVAXCz1Zv3elndpTy_wo1iTf25daNWWhj68yBk8vN950uaIYNXkzXSRrsNFI8JScXTtoUFrW3VLXPFE_69FSwHV3QEeIrdmnZK q97IHJuuo4pcqyPqnjO8AyPYQuNc1f90n

https://downloader.disk.yandex.com.tr/disk/9df8295bab965df864e223ec6aceafe1496db7e0d53cb739229d72dccc48ce9b/584551d5/jYFrOD6gUk5Bpv85rvv8KOL2QaIBTvB7yeIAgttPoFoSeZ7-6N5aK65ESXO2aMXOtFP6gwbjvtaafTptcua4SA==?uid=0&filename=20050907175540609_ML-1520_Print.exe&disposition=attachment&hash=GFw6sXnHqOX0 rvtN Fj/.../x-msdownload&fsize=5679971&hid=14550e681844f1beb30216f15e300184&media_type=executable&tknv=v2

http://www.softwarepackagesend.com/c?x=od8AWaWfFGv c HHZG37StKlaLRudZT3NZeL41nnZUA=&c=ABsah39oiaLU8Z6ocKmYF9SAmszGJyHvBdEyeBphEYm9jozFejzKKMbS2Yxdmd2u wIA5BMqDWsZ4pC5hFIriHJgq2N7qCcJcof/wW M IDSll8KXyCcBt0c51KCiSuV&downloadAs=driver-samsung-ml-1520-laser-3.01.exe&fallback_url=http://pf.benjaminstrahs.com/s/1460276363/en/3/.../35176-35178-driver-samsung-ml-1520-laser.exe

http://downloadcenter.samsung.com/content/DR/.../20050907175540609_ML-1520_Print.exe

Scan 20050907175540609_ml-1520_print.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.