home

CitrixOnlinePluginWeb.exe

Citrix ICA Client

CITRIX SYSTEMS, INC

This is a setup program which is used to install the application. The file has been seen being downloaded from citrix.hs.uab.edu and multiple other hosts.
Publisher:
Citrix Systems, Inc.  (signed by CITRIX SYSTEMS, INC)

Product:
Citrix ICA Client

Description:
Citrix online plug-in web

Version:
12.0.0.6410

MD5:
655be433fdb9cbc616bda1cb7da44208

SHA-1:
9fa1e8fec3309916dd28b4a8462d87adceef33ea

SHA-256:
b2ad0bdf9d441990f2824b761173c03abf09d7d3b6358c6f9e1f91e66f2aa862

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 2:29:39 PM UTC  (today)

File size:
11.9 MB (12,436,848 bytes)

Product version:
12.0.0

Copyright:
Copyright (c) 1990-2009 Citrix Systems, Inc.

Original file name:
CitrixOnlinePluginWeb.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\a2f8f556\citrixonlinepluginweb.exe

Digital Signature
Signed by:
CITRIX SYSTEMS, INC

Authority:
VeriSign, Inc.

Valid from:
3/6/2009 1:00:00 AM

Valid to:
4/1/2010 1:59:59 AM

Subject:
CN="CITRIX SYSTEMS, INC", OU="CITRIX SYSTEMS, INC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="CITRIX SYSTEMS, INC", L=Fort Lauderdale, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
39C70944F2C31AB974E85B3388A34F39

File PE Metadata
Compilation timestamp:
3/11/2010 7:32:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:Q0ylpbba/VhoaUXqvhtxlvobiyY1HZjq9FAH9R0hhZWr3qw3eLRkJdscwL:6lh0VhtUap3lX1MrCYLZWr3qPLR4S

Entry address:
0x253DC

Entry point:
E8, 9C, 72, 00, 00, E9, 17, FE, FF, FF, 8B, 44, 24, 04, 8B, D0, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 66, 8B, 4C, 24, 08, 48, 48, 3B, C2, 74, 05, 66, 39, 08, 75, F5, 66, 8B, 10, 66, 2B, D1, 66, F7, DA, 1B, D2, F7, D2, 23, C2, C3, 6A, 0C, 68, 38, 12, 46, 00, E8, 4E, 12, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 08, B2, 46, 00, 03, 75, 43, 6A, 04, E8, 66, 74, 00, 00, 59, 83, 65, FC, 00, 56, E8, 77, 75, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, 93, 75, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF...
 
[+]

Code size:
328 KB (335,872 bytes)

The file CitrixOnlinePluginWeb.exe has been seen being distributed by the following 50 URLs.

https://citrix.hs.uab.edu/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://remote.sparrow.org/cvpn/FrkiQy1RGzv5lRnXa0qXMAIAUz7J/Citrix/XenAppAG/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://portal.onslowcountync.gov/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://sigaf.gcba.gob.ar/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://citrix2.jazeeraairways.com/Citrix/AccessPlatform/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://secure.cala.co.uk/http/hqweb1.cala.uk.com/Citrix/CAG/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://10.0.1.8/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://ctx.council.nyc.ny.us/Citrix/XenApp/Clients_common/.../CitrixOnlinePluginWeb.exe

http://124.7.89.101/Citrix/XenApp/.../CitrixOnlinePlugin.exe

https://xengen.genband.com/http/172.18.42.66/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://46.235.89.132/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://37.76.242.40/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://ra.ftpsllc.com/Citrix/XenApp/External/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://my.hestra.com/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://myvpnemea.bnymellon.com/Citrix/Remote/Clients_common/Windows/.../,DanaInfo=mycitrixemea.bnymellon.net,SSL CitrixOnlinePluginWeb.exe

http://74.9.90.218/Citrix/XenApp/Clients_common/.../CitrixOnlinePluginWeb.exe

https://edulwebsg7.liveweb.sas.com/Citrix/XenApp/Clients/Windows/.../CitrixOnlinePluginWeb.exe

http://190.214.22.253/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://entrada.navantia.es/Citrix/AccessPlatform/Clients_common/Windows/.../,DanaInfo=.a11B445F88-JEB CitrixOnlinePluginWeb.exe

https://citrix.lcmctroy.com/Citrix/XenApp/Clients/.../CitrixOnlinePluginWeb.exe

https://remote.relogistics-services.com/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://sa.ocset.net/cvpn/aHR0cDovL3B2dWtzZGN3eHdiMDAxLmdsb2JhbC50ZXNjby5vcmc/Citrix/Gateway/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://workplace.avebe.com/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://188.117.100.60/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://srhsapps.mysrhs.com/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://wtcgateway.wilmingtontrust.com/Citrix/XenApp1/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

https://stl.nextgenrcm.com/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

http://190.14.228.237/Citrix/XenApp/Clients_common/XA5_FP3_ADV_ML/Citrix Receiver and Plug-ins/Windows/.../CitrixOnlinePluginWeb.exe

https://webaccess.moa.gov.sa/http/secureProduction/Citrix/XenApp1/.../CitrixOnlinePluginWeb.exe

https://citrix.winthrop.org/Citrix/XenApp/Clients_common/Windows/.../CitrixOnlinePluginWeb.exe

Latest 30 of 257 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.