home

case 12.3.exe

C&SE

The Nielsen Company

Publisher:
The Nielsen Company

Product:
C&SE

Description:
Consumer & Shopper Explorer

Version:
12.3

MD5:
2fc9f349254f93051f3cea90dd4624b2

SHA-1:
234862b4985dbef6103da03b799ac6f80f9f4028

SHA-256:
97d1ae6e6a565eee5ad6d01c40dfdc43bc34d40a4193ec4513d72dd42bacd0e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 3:49:11 AM UTC  (today)

File size:
7.6 MB (7,931,392 bytes)

Product version:
12.3

Copyright:
Copyright 1996-2013

Original file name:
CASE.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\case 12.3.exe

File PE Metadata
Compilation timestamp:
10/15/2013 8:07:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:RQUnsyO90WmYGfLLBj191ebblDulzdgN+l/EDlQrpS53Jjq0V4qb/YgkQT5lacM/:i1+LBj191aDKil13Jv4qb/YgjTjOB

Entry address:
0x44B15B

Entry point:
E8, BB, CC, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, 88, B1, 84, 00, FF, 75, 08, E8, F6, 65, 01, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 6D, AF, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89, 02, B8, 03, 00, 00, 00, C3, 53, 56, 57, 8B, 44, 24...
 
[+]

Entropy:
6.4832

Code size:
4.8 MB (4,982,784 bytes)

The file case 12.3.exe has been seen being distributed by the following URL.

https://doc-0k-94-docs.googleusercontent.com/docs/securesc/sabcjka666c1qnmr5hl345uer63n4354/ece9ujagtto7ge620qgmio1a2m0edld2/1466532000000/.../01329640344117225220/0B5tJIsnO1o9ObWVqdUhzX2FkME0?e=download

Scan case 12.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.