home

cssource.exe

MD5:
6d53fb8af37acd88f8c06112032ec2d1

SHA-1:
fc44859a35f570a1f86aa69b022c5321a184ea83

SHA-256:
0fa72fbf59304d4006d2d6175032dc4937ea58827beadefe0735159dfcc1bcdc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:10:50 PM UTC  (today)

File size:
52.9 MB (55,513,389 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cssource.exe

File PE Metadata
Compilation timestamp:
12/1/2013 12:08:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:lyF/9LCryJ3I7ZR5YhuF+SJFvwAPJcBssqtYy1:lyFNCryJ3Ir5zF+Syqtb

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.3610

Code size:
98 KB (100,352 bytes)

The file cssource.exe has been seen being distributed by the following 27 URLs.

http://fileshare1010.dfiles.eu/auth-14851958544be49722d815a2ee1ae5ed-213.16.158.124-95422068-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1471194267328d804553e1a8b5d4b6ec-103.56.253.145-2650754787-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1476438423aa1cc56aba6b707565f95f-106.51.235.136-11088358-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-14557173174b15af9282c9098bcc39ed-89.132.84.34-2473282797-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-14631814323ab9ac8685c0ca03332cf6-109.78.76.166-2562263494-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-14718537205c2e616126c2f396f12802-85.65.171.190-2658570867-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-14783640858caae1825e4f296fffbdc7-5.249.92.106-31036527-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1469711395d582c5025eda6a0a51317e-156.208.121.88-2633918519-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1462772132acfa8cea6e33c90f3d95ef-103.47.133.44-2557711699-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1455287365b5f02c80dce8d74d26a9a5-119.95.69.21-2467357295-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-147167330515d23d31abe37592274244-112.210.83.183-2656369811-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-14768481930ae0d641fe908f37bc4898-112.203.21.50-15266305-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1476405456e4fc52cfa7486c7ef2d73e-112.202.47.81-10830375-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-146016079190b6a147996bb131f2982a-100.32.169.166-2526527935-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1471679509e538b4063322d244c9d1a2-180.191.118.193-2656434138-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-1446485357e1c4eef7b318b83fb5f7f5-188.52.66.75-2338846907-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-14664430413ccbb8e3f50b2311fd44e4-5.29.232.176-2599461995-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-1466444611acd2b643fb37cde86a61a7-79.115.114.107-2599483358-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-14641137343a23c934c7ca3870c300cb-84.103.121.125-2573094935-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-1449431552d3c67ca86a26700d692486-178.149.196.87-2382774935-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-145238329345f70c337c11dfa9cddfc3-71.95.134.164-2426509355-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-146116915424d45a511b560f114ea822-105.156.204.163-2538806015-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-1453911479ccef4f2244d2629148a17f-81.106.150.250-2448524966-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-14557821294583cef112f721ffa0080d-23.243.198.68-2474062852-163757479-guest/.../CSSource.exe

http://fileshare1010.dfiles.eu/auth-145523618622d5bde914c8350c678dc7-82.233.138.156-2466741125-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-144384450858c03d7d41e43e21a22b61-110.159.108.207-2300407937-163757479-guest/.../CSSource.exe

http://fileshare1010.depositfiles.com/auth-14437692247711e136095b2dbbedbab7-49.149.181.39-2299252082-163757479-guest/.../CSSource.exe

Scan cssource.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.