home

cpucool_cpucool_8.1.0_anglais_10109.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.filecluster.com and multiple other hosts.
MD5:
10595a22468296d317f9a23badf7d601

SHA-1:
d17c5f4bd35c98bbf042c12f28cfe515c41449b1

SHA-256:
3ca38cbd201efd57e7ef1e258bfb8fefbdef8a517e5461907f85be9696267b9e

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 6:49:16 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Suspicious
7.1.1

Quick Heal
(Suspicious) - DNAScan
12.13.12.00

Vba32 AntiVirus
TrojanDownloader.Genome
3.12.24.3

ViRobot
JS.A.Iframe.4200348
2011.4.7.4223

File size:
4 MB (4,200,348 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cpucool_cpucool_8.1.0_anglais_10109.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:gfStdEWKWOnSxJLeviNlwn805EkkLBe+1Z+tk0LanlQ6H:gqtKeM+JCaNlw15Ztk0Ilb

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Code size:
23 KB (23,552 bytes)

The file cpucool_cpucool_8.1.0_anglais_10109.exe has been seen being distributed by the following 43 URLs.

http://www.filecluster.com/.../36873.html

http://www.techspot.com/downloads/downloadnow/.../?evp=c3e319ded6df683df0e6cc6e7a37368f&file=1

http://www.softportal.com/getsoft-392-cpucool-1.html

http://lb.cdn.m6web.fr/d/c/a/32b0885ce98b5f15c09b274d311c3561/575d5755/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://www.techspot.com/downloads/downloadnow/.../?evp=3889f8d7852cdf54f3d5e54b3c4055ba&file=1

http://d210.cdn.m6web.fr/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/4bcb1b49a8a555cd91d722d4c90d454c/57eec4f7/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/c55779fe1d32491ff914f2a7b0c62ef3/57beeb06/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/6f8dd69454fe5968fb1419903b373ae8/57fea42c/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/e103534cbbc85411c95b842607dba8f8/57dbc205/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://www.wallpaperking.com.tw/downloadredir.asp?mytype=system&no=215&rd=1&s=1026010619

http://www.techspot.com/downloads/downloadnow/.../?evp=215edca76198f073ed098a5d69fa2736&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=43a3d0d498617bfcda38237cd79713cc&file=1

http://s6620.chomikuj.pl/File.aspx?e=E0jn52xJbVs67VWZMhsqA8484a106tjU3SwnAMb7xIHJq_0GBEzJ6rMBk0nQ70Qh5lBfDpJGD7pHiUivQClCY6HQBG0Yd7GPjFF3LDf3QG4GI9FSsGaXLVmjd9U1s5Gq0KkMtSzM9vZkpx1xRwU-lw&pv=2

http://s6620.chomikuj.pl/File.aspx?e=E0jn52xJbVs67VWZMhsqA8484a106tjU3SwnAMb7xIG32VovGb3_KINxe3ygdspFNogi7_Ff8cmaCuzEgOfMeouSw-oVMBct6PAVoKTLycLw_axFMwusxNKeq5OhSusQ5sKHsHCLhX4E2ZurVmbDqA&pv=2

http://lb.cdn.m6web.fr/d/c/a/f570880f6a5ad9c10909ca8ede687e8b/574cb276/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/df7d0e2731918d610c703301ef4eee01/5777d716/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://www.techspot.com/downloads/downloadnow/.../?evp=6619262a543df7d9d72e70e6e51e4e78&file=1

http://lb.cdn.m6web.fr/d/c/a/48d3ffdd2f425874772bdfd9cfe956aa/574c23f6/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/95d340f15e07f88c9d74b24800873c49/55b7e74b/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://lb.cdn.m6web.fr/d/c/a/2bf58c7f517e0b38c663c1d9956da215/576d76dd/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://www.techspot.com/downloads/downloadnow/.../?evp=8b4529ddea4b82d012bdec00e27e41b4&file=1

http://lb.cdn.m6web.fr/d/c/a/dee3f8d0f2f5a653400b9c65e35baf67/57363886/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://i.download.idg.pl/fannef/fbeddc7766772d24b1744ef7c8133d5f/56915baa//zx/vol2/w95/utils/.../CPUCOOL9_8.1.0.EXE

http://files5.majorgeeks.com/files/aaea265a9054b3b8c5df99c64685ec2e/.../CPUCOOL9.EXE

http://www.techspot.com/downloads/downloadnow/.../?evp=bc7692a73ac7bdd63853782c4e4b0ee2&file=1

http://lb.cdn.m6web.fr/d/c/a/ee2e88fa4449abcb45f0122fca82880b/56f5330e/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

http://www.megasignapplication.com/http://www.megasignapplication.com/c?x=NHSSm ojK5sJ8S4ODJRC1PSY0lECH/HQasWrf0YQrc0=&c=BjcpPrXM 1Egq2G TEPXXOKuimg0Az96WyXuDKtYMDIJ3IZfHldCwYejXRizX32ubd5fxcRL/HRK96 InjN8V09SLU13mDf2DvVoXjf3OppSmMpOY3kgmYLd4mSbUkHlUVft4q 06iqoIoUXTgMPCw==&fallback_url=http://.../CPUCOOL9.EXE&downloadAs=CPUCooL-12775-dp.exe=

http://www.cpufsb.de/CPUCOOL9.EXE

http://lb.cdn.m6web.fr/d/c/a/ec3be025427e02e38ee925612a4f2fe7/566c0567/soft/.../cpucool_cpucool_8.1.0_anglais_10109.EXE

Latest 30 of 43 download URLs

Scan cpucool_cpucool_8.1.0_anglais_10109.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.