home

7922_opc2.1setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.phmed.umu.se.
MD5:
6ecb1d92b0710360fe9da91c9230434f

SHA-1:
2bfa7cfc7db359610571587f500b89c628a37219

SHA-256:
b4c7ec22fa375a576aaf02aabdd0fb3cb23e1c0a6cbea99c88f57476195da086

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:33:58 PM UTC  (today)

File size:
1.3 MB (1,405,064 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\7922_opc2.1setup.exe

File PE Metadata
OS version:
77.10861

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:zoUMIT99G8Ms8TnOjvOgpukmIjsXpSisJZjHHgozxljBoLMJdynFP4I57yTJ+AUa:oITGT6pzmKQSPXjHHgq3dyF4I57ylwfS

Entry address:
0xA0009A

Entry point:
4D, 5A, 9A, 00, 03, 00, 03, 00, 20, 00, 00, 00, FF, FF, 48, 00, FF, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, FB, 30, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, AA, 01, 00, 00, AE, 01, 00, 00, B2, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
192 KB (196,610 bytes)

The file 7922_opc2.1setup.exe has been seen being distributed by the following URL.

http://www.phmed.umu.se/digitalAssets/.../7922_opc2.1setup.exe

Scan 7922_opc2.1setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.