home

ciscoconnect.e3000.1.3.11006.1.exe

Cisco Consumer Products LLC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Cisco Connect. The file has been seen being downloaded from homedownloads.cisco.com and multiple other hosts.
Publisher:
Cisco Consumer Products LLC  (signed and verified)

Description:
Linksys Software

Version:
1.3.11006.1

MD5:
8d958c08ec3b7728e08f56f89b587327

SHA-1:
aa113f35f520f36c1453a355968a96188b0adb81

SHA-256:
2a0b71326f4eed1cb85670481dfa8439ad09b8e18f3daff581be2d5e44a43375

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:53:39 AM UTC  (today)

File size:
20.7 MB (21,747,808 bytes)

Product version:
1.3.11006.1

Copyright:
Copyright © 2002-2011 Cisco Systems, Inc. and/or its affiliates. All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\cisco connect\ciscoconnect.e3000.1.3.11006.1.exe

Digital Signature
Signed by:
Cisco Consumer Products LLC

Authority:
VeriSign, Inc.

Valid from:
7/28/2010 7:00:00 PM

Valid to:
12/15/2012 5:59:59 PM

Subject:
CN=Cisco Consumer Products LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cisco Consumer Products LLC, L=Irvine, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
691520D72BBA9744762D24748FB8AA4A

File PE Metadata
Compilation timestamp:
12/22/2009 2:01:37 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:KT7LHXUQR+p4ybBiQieMrLxgfTNCH1qnfV0GnxIpG9vJgGkzFkRK1tI:KfLFwlbB5NMr1gfA18fKSxIa2GdRKDI

Entry address:
0x399F

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 48, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, BC, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, FE, 29, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 8C, 92, 40, 00, FF, 15, 80, 81, 40, 00, 68, 74, 92, 40, 00, 68, C0, AD, 46, 00, E8, 15, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 03, 27, 00, 00...
 
[+]

Entropy:
7.9953

Packer / compiler:
Nullsoft install system v2.x

Code size:
27 KB (27,648 bytes)

The file ciscoconnect.e3000.1.3.11006.1.exe has been discovered within the following program.

Cisco Connect  by Cisco Systems, Inc.
Publisher's description - “Cisco Connect software provides a step-by-step setup wizard that will have your computer connected wirelessly in minutes. Cisco Connect offers powerful tools for managing your wireless network such as security settings, Guest Access, Parental Controls and Advanced Settings.”
homesupport.cisco.com/en-us/support/valet/CCSV
4% remove it
 
Powered by Should I Remove It?

The file ciscoconnect.e3000.1.3.11006.1.exe has been seen being distributed by the following 2 URLs.

http://homedownloads.cisco.com/downloads/.../CiscoConnect.E3000.1.3.11006.1.exe

http://downloads.linksys.com/downloads/.../CiscoConnect.E3000.1.3.11006.1.exe

Scan ciscoconnect.e3000.1.3.11006.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.