home

cgwebinstall.exe

CyberGhost VPN

mobile concepts GmbH

This is a setup and installation application. The file has been seen being downloaded from www.sad-load.de.
Publisher:
mobile concepts GmbH

Product:
CyberGhost VPN

Description:
CyberGhost VPN - Webinstaller

Version:
3.3.0.707

MD5:
41e3a0ea7f44f61c92f594c860ca8d1a

SHA-1:
8ee6b1b1800b2a1e7d2d70d9532db93ad95bd445

SHA-256:
cb8f0487e507c2d4296abf66670a3961bc563c8a1a993419ccb8fe527a32e779

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 12:36:54 AM UTC  (today)

File size:
1 MB (1,084,416 bytes)

Product version:
3.0.0.0

Copyright:
mobile concepts GmbH

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

File PE Metadata
Compilation timestamp:
10/28/2009 3:12:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:/DrT9+1g2QeBPTf/z5YkcjGhKTxayfjwybj7qKoZIBn4gv:LP9+Oe9STUyFBt

Entry address:
0x2AC9E0

Entry point:
60, BE, 00, 00, 5C, 00, 8D, BE, 00, 10, E4, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.7472

Packer / compiler:
UPX 2.90LZMA]

Code size:
948 KB (970,752 bytes)

The file cgwebinstall.exe has been seen being distributed by the following URL.

http://www.sad-load.de/download/software_download/international/.../cgwebinstall.exe

Scan cgwebinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.