home

cj2600en32.exe

Lexmark International, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Lexmark International, Inc.  (signed and verified)

MD5:
38259dddb04cc905254b99afa01292ed

SHA-1:
593df491f3a35732d38655aebe8fcf7ea4a9f447

SHA-256:
cf2a34c3f343397bcfadca07016c6b0e01d77369612a545207c728bf522b3b97

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:12:03 AM UTC  (today)

File size:
84.4 MB (88,499,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cj2600en32.exe

Digital Signature
Signed by:
Lexmark International, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/22/2009 6:00:00 PM

Valid to:
8/3/2011 5:59:59 PM

Subject:
CN="Lexmark International, Inc.", OU=PS&SD BUSINESS SOFTWARE & SOLUTIONS, O="Lexmark International, Inc.", L=Lexington, S=Kentucky, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
379E69DA6C2693E3297B6FE45D78EBE1

File PE Metadata
Compilation timestamp:
7/23/2007 11:28:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:nyaHk1BR054pm6xwyMFXbGiNS3vjx7ETyKD01+OXjGOgKcTPnx6qzNs+NlxtOtF:nTUC54axxb3w3FqL01VXabPbF4

Entry address:
0x7698

Entry point:
E8, 19, 28, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 10, 75, 20, E8, A4, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 35, 15, 00, 00, 83, C4, 14, 83, C8, FF, E9, 80, 00, 00, 00, 8B, 4D, 0C, 3B, CB, 56, 8B, 75, 08, 74, 21, 3B, F3, 75, 1D, E8, 75, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 06, 15, 00, 00, 83, C4, 14, 83, C8, FF, EB, 53, B8, FF, FF, FF, 7F, 3B, C8, 89, 45, E4, 77, 03, 89, 4D, E4, 57, FF, 75, 18, 8D, 45, E0, FF, 75, 14, C7, 45, EC...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
56 KB (57,344 bytes)

The file cj2600en32.exe has been seen being distributed by the following 10 URLs.

https://d2.driverscollection.com/1247ac8571262367/e55274e2aff25d82f0e45bfa38ca2d9355a0e07998552b372ee0045b544e328c4ca8b1ed1bc18c9360fe406715e2c04058343ed4/1/94/36/.../cj2600en32.exe

http://www.lexmarkdriver.com/.../aHR0cDovL2Rvd25sb2Fkcy5sZXhtYXJrLmNvbS9kb3dubG9hZHMvY3BkL2NqMjYwMGVuMzIuZXhl

https://d2.driverscollection.com/451379182ff3e/ce3213e2bdf4874a7baefeff39bc6b5b1f3a5a77234a12fc892e7eb51b8976f3c145d8c45def74693b75efb728cc96bb54438bc9/1/94/36/.../cj2600en32.exe

http://ziggi.uol.com.br/.../53551

http://www.lexmarkdrivers.net/down/http://downloads.lexmark.com/downloads/.../cj2600en32.exe

https://d2.driverscollection.com/_7_141821321822322823328047f1168076664d5e1aac119f215c/a62bfa8fbd69d23e19226b30eaca4200079414ae12a1c30fb3c34539ad19b77d313048bb2234270ee73f92871d4e426b57389037/1/94/36/.../cj2600en32.exe

http://www.siliconguide.com/drivers/download/.../

http://www.printerdown.com/.../aHR0cDovL2Rvd25sb2Fkcy5sZXhtYXJrLmNvbS9kb3dubG9hZHMvY3BkL2NqMjYwMGVuMzIuZXhl

https://d2.driverscollection.com/2b355f63d95719/a8704c99860c112bf5f2e02697885e76f3c16e362ff8bdf89dcfe65c34c8eb7d41b9c6b0693a37b1a682cb92b78abafd56998067/1/94/36/.../cj2600en32.exe

http://downloads.lexmark.com/downloads/.../cj2600en32.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.