home

case_12_1.exe

C&SE

The Nielsen Company

Publisher:
The Nielsen Company

Product:
C&SE

Description:
Consumer & Shopper Explorer

Version:
12.1

MD5:
3c0ad16d128c133da5279d403bf8b869

SHA-1:
9292ae4aa4991a7584e9ac72d255cf13f22d8f1d

SHA-256:
867cbced3ca4a9e62ef31d48544c9d7cff9d3a777ea192503074fcc51bf19bf2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 1:42:42 PM UTC  (today)

File size:
7.5 MB (7,905,792 bytes)

Product version:
12.1

Copyright:
Copyright 1996-2012

Original file name:
CASE.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\case_12_1.exe

File PE Metadata
Compilation timestamp:
12/11/2012 3:17:13 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:anDEEur5ylRPysgQbaJJenzKs9vIE2XGaA/aeBO7y9NFrz4kJD7BsKaWe6v8WLRX:MeEy6aJJabx4MBsK5fLR+gU73jRJO

Entry address:
0x446BDA

Entry point:
E8, BC, CC, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, 08, 6C, 84, 00, FF, 75, 08, E8, F6, 65, 01, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 6E, AF, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89, 02, B8, 03, 00, 00, 00, C3, 53, 56, 57, 8B, 44...
 
[+]

Entropy:
6.4776

Code size:
4.7 MB (4,963,840 bytes)

The file case_12_1.exe has been seen being distributed by the following URL.

https://doc-04-94-docs.googleusercontent.com/docs/securesc/sabcjka666c1qnmr5hl345uer63n4354/strvmvdump4eihajie2et0i6ko95obdj/1466532000000/.../01329640344117225220/0B5tJIsnO1o9OTjVub3ZOTWU4TVk?e=download

Scan case_12_1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.