home

cdex_151.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from server3.xnavigation.net and multiple other hosts.
MD5:
3e20c2ed0765a0bebc6548461ad3c7eb

SHA-1:
2ca7e5e94fb3bcd57bfc2e30a67482c2f04486e7

SHA-256:
ccb075bc5a147e97a08543e7093744995a8d6b6259288439514a2e87105ab359

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 1:55:06 AM UTC  (today)

File size:
1.9 MB (2,000,324 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\cdex_151.exe

File PE Metadata
Compilation timestamp:
4/29/2002 12:25:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:+dj9NdzcUm6enq7lEw6RTHcS9XUSIevQkHXf9zKecGCd8i0:inBC6eq7ieVIbP9uepCi5

Entry address:
0x46FD

Entry point:
83, EC, 0C, 53, 56, 57, FF, 15, B4, 80, 40, 00, 05, E8, 03, 00, 00, BE, 20, F0, 41, 00, 89, 44, 24, 10, B3, 20, FF, 15, 28, 80, 40, 00, 68, 00, 04, 00, 00, FF, 15, 2C, 81, 40, 00, 50, 56, FF, 15, 24, 81, 40, 00, 80, 3D, 20, F0, 41, 00, 22, 75, 08, 80, C3, 02, BE, 21, F0, 41, 00, 8A, 06, 8B, 3D, F4, 81, 40, 00, 84, C0, 74, 19, 3A, C3, 74, 0B, 56, FF, D7, 8B, F0, 8A, 06, 84, C0, 75, F1, 80, 3E, 00, 74, 05, 56, FF, D7, 8B, F0, 89, 74, 24, 14, EB, 05, 56, FF, D7, 8B, F0, 80, 3E, 20, 74, F6, 80, 3E, 2F, 0F, 85...
 
[+]

Entropy:
7.9951

Packer / compiler:
Nullsoft PiMP Install System v1.x

Code size:
24.5 KB (25,088 bytes)

The file cdex_151.exe has been seen being distributed by the following 35 URLs.

http://server3.xnavigation.net/dl/eTLZ8/323/12539/defa/.../cdex

http://www.cdex.fr/fichier/3128411789ec620da084481e2cce3b3e/5755af5a/.../CDex_1.51_195.exe

http://server3.xnavigation.net/dl/FY5yJ/323/12539/defa/.../cdex

http://www.cdex.fr/fichier/cf4f86ddf89a87aaad7739299bad05db/57dbd349/.../CDex_1.51_195.exe

http://filehippo.com/download/file/.../

http://www.bigspeedpro.com/software_files/cdex/.../cdex_151.exe

http://www.cdex.fr/fichier/680ed9f569338a34e2d2e3bd79f28af5/58077028/.../CDex_1.51_195.exe

http://dc394.4shared.com/download/.../CDEX_151__convert_CD_pra_MP3_.exe

http://www.cdex.online.fr/.../cdex_151.exe

http://server3.xnavigation.net/dl/10gTUv/323/12539/defa/.../cdex

http://www.cdex.fr/fichier/928e90cb6b337dab35a4bfbacc0afa1a/57a032b2/.../CDex_1.51_195.exe

http://server3.xnavigation.net/dl/MJG4B/323/12539/defa/.../cdex

http://revpx10.chomikuj.pl/.../File.aspx?e=niIrwpkB8paSybvXPBqinJNFdNhAOVYOsLkqN9A57H44YNrMBC8mdg6_v6kfBtXO_iYN1krN1PZLj6UlWd-1mOG2Zu0wy5tP0tzQxNMWbYg_CDiB4N5Enddh6Db2OQdJT2xEoixN58SBmYwNOPNSYQ&pv=2

http://debutantes.debutants.pagesperso-orange.fr/cdex_151.exe

http://f2h.nana10.co.il/.../636337319|da8a6d6d2f0614d58709748081a6a032|.exe

http://www.cdex.fr/fichier/07acf7e71aec9c37b66889640143e644/56505771/.../CDex_1.51_195.exe

http://mirror.cdex.mu/.../cdex_151.exe

http://freefr.dl.sourceforge.net/project/cdexos/cdexos/.../cdex_151.exe

http://server3.xnavigation.net/dl/sqRQ9/323/12539/defa/.../cdex

http://server3.xnavigation.net/dl/Tvecd/323/12539/defa/.../cdex

http://filehippo.com/download/file/.../

https://www.usherbrooke.ca/moodle2-cours/mod/.../view.php?id=552054

http://switch.dl.sourceforge.net/project/cdexos/cdexos/.../cdex_151.exe

http://filehippo.com/pl/download/file/.../

http://download.instalki.pl/programy/Windows/Multimedia/.../CDex_1.51_www.INSTALKI.pl.exe

http://i.download.idg.pl/fannef/b78b437203c45dd31b5aec3b86073b7d/5687d143//zx/vol2/w95/multimedia/rippers/.../cdex_151.exe

http://enjoypclife.ikaduchi.com/.../cdex_151.exe

http://gnuwin.epfl.ch/apps/cdex/en/.../cdex_151.exe

http://ufpr.dl.sourceforge.net/project/cdexos/cdexos/.../cdex_151.exe

https://downloads.sourceforge.net/project/cdexos/cdexos/.../cdex_151.exe

Latest 30 of 35 download URLs

Scan cdex_151.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.