home

civsoc_2.0_es.exe

CIVSoc

Universidad de Zaragoza

This is a self-extracting archive and installer. The file has been seen being downloaded from ev.us.es.
Publisher:
Universidad de Zaragoza

Product:
CIVSoc

Description:
CIVSoc installer

Version:
n/a

MD5:
68cbe5c6d967f0d598ce36e303a1711e

SHA-1:
c8cecab55c241489304f2bb2ef4608afc9ee7fe0

SHA-256:
b1655e60adaae9395309d4b8353dd49ce48486adc76ec378fd39c066ee77cdea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:28:31 AM UTC  (today)

File size:
1.1 MB (1,163,631 bytes)

Product version:
2.0

Copyright:
© 2009 Universidad de Zaragoza

Original file name:
n/a

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\civsoc_2.0_es.exe

File PE Metadata
Compilation timestamp:
7/13/2009 5:42:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
24576:G35HiuwTYrsN9SLWgVllwgmK9CA4N1kYmlL73jx5StD6hGKCxS9:UwT6sN9SLWKjNfYA4Ne5lX3ryuGKCx2

Entry address:
0x1000

Entry point:
68, 9C, 02, 00, 00, 68, 00, 00, 00, 00, 68, 84, 3E, 44, 00, E8, D0, 51, 01, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, C9, 51, 01, 00, A3, 88, 3E, 44, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, B6, 51, 01, 00, A3, 84, 3E, 44, 00, 68, EC, 45, 43, 00, 8F, 05, 8C, 3E, 44, 00, E8, D1, 34, 02, 00, E8, 1D, 34, 02, 00, E8, 9E, 29, 02, 00, E8, 22, 0F, 02, 00, E8, 18, 05, 02, 00, E8, 08, F2, 01, 00, E8, B4, AF, 01, 00, E8, 87, AE, 01, 00, E8, 8B, A3, 01, 00, E8, 0C, A2, 01, 00, E8, EF, 98, 01...
 
[+]

Packer / compiler:
PKLITE32, 0x1.1

Code size:
180.5 KB (184,832 bytes)

The file civsoc_2.0_es.exe has been seen being distributed by the following URL.

https://ev.us.es/bbcswebdav/pid-1719748-dt-content-rid-5278613_1/courses/.../CIVSoc_2.0_Es.exe

Scan civsoc_2.0_es.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.