home

3152af03_v120.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from support.industry.siemens.com.
MD5:
0898bd23dc8ee6f82d6adf38df539729

SHA-1:
646c4814cc30e85870ae608ee3f25e72124fbfc9

SHA-256:
95dcc313f3bc7ec50b875ec23a88795e07e744122c46084e424194b1025e6b4d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:14:34 PM UTC  (today)

File size:
587.1 KB (601,213 bytes)

File type:
Executable application (Win16 EXE)

File PE Metadata
OS version:
298.20128

OS bitness:
Win16

Subsystem:
Native (none required)

Linker version:
3.0

CTPH (ssdeep):
12288:vEDFR4/c9qI3obus4FuvDaxLs0HPgRXpzws/7sftZltmuA:AjqIPFu7axRvgtmsD+tftHA

Entry address:
0xA6009C

Entry point:
4D, 5A, 31, 01, 01, 00, 01, 00, 05, 00, 00, 00, FF, FF, 00, 00, 14, 00, 00, 00, 00, 00, 0D, 00, 40, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 01, 00, 00, 04, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 44, 69, 65, 73, 20, 69, 73, 74, 20, 65, 69, 6E, 65, 20, 57, 69...
 
[+]

Entropy:
7.9909  (probably packed)

Code size:
320 KB (327,683 bytes)

The file 3152af03_v120.exe has been seen being distributed by the following URL.

https://support.industry.siemens.com/cs/attachments/.../3152AF03_V120.exe

Scan 3152af03_v120.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.