Dumpper.exe

Dumpper

CasaTech Inc.

Publisher:
CasaTech Inc.

Product:
Dumpper

Version:
30.0.0.8

MD5:
d819c266113b532362eafbcaa6d919b0

SHA-1:
b9b4f08807ba8655f548af341e17bf15ab4f9538

SHA-256:
5b77f0b31349bae59a5aa31bc8e64defd68159aef86c74d1448a92d6b711f50a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:35:33 AM UTC  (today)

File size:
1.6 MB (1,682,432 bytes)

Product version:
30.0.0.8

Copyright:
Copyright © SkyWatcher 2013

Original file name:
Dumpper.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\dumpper.exe

File PE Metadata
Compilation timestamp:
1/14/2014 3:20:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:M3BCnYMIPFIcXFIcXFIcXFIcXFIcXFIcXFIcHFIcnhFIcHFIcEFIcP:FYMINLLLLLLbVT+

Entry address:
0x182FDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 8D, 2B, D5, 52, 00, 00, 00, 00, 02, 00, 00, 00, 5B, 00, 00, 00, 1C, 40, 18, 00, 1C, 14, 18, 00, 52, 53, 44, 53, 3C, 6A, F0, F4, 19, A0, C5, 47, A2, 9B, E1, 0B, DD, 69, D7, 27, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 55, 73, 65, 72, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 44, 75, 6D, 70, 70, 65, 72, 20, 76, 2E, 34, 30, 2E, 31, 5C, 44, 75, 6D, 70, 70...
 
[+]

Entropy:
5.4824

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.5 MB (1,576,960 bytes)

The file Dumpper.exe has been discovered within the following program.

Moborobo 2.1.2.706  by Moborobo Inc.
www.moborobo.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file Dumpper.exe has been seen being distributed by the following 26 URLs.

https://download.gg/download-6092631-Dumpper-v-40-1-en-son-versiya-exe

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_1_2102680_AFDuw0MAABEFVJljtw4pABxOk9c&fid=Inbox&pid=2&clean=0&appid=YahooMailNeo

http://dc776.4shared.com/download/.../Dumpper_v401.exe

https://doc-0o-9o-docs.googleusercontent.com/docs/securesc/h6u5i37ubq09c97joa059t0ieiuodfii/8u1pmhipqfu8is1vhnu1t74ksduv7maq/1471809600000/15846685062382247642/.../0B4RGiXhWQ53QSWNQWmtsS0hvY3M?h=11125026929749445160&e=download

https://fs10n3.sendspace.com/dl/f4d57720e01ae228357d00324ad6f213/583da09564d44310/.../Dumpper v.40.1 en son versiya.exe

https://ia801300.us.archive.org/24/items/.../Dumpper v.40.1 en son versiya.exe

http://download1968.mediafire.com/yqkk3a5ardsg/.../Dumpper.exe

https://fs10n1.sendspace.com/dl/8cce33b5ee20d4655ab47971496a4845/583a908f62c60f8e/.../Dumpper v.40.1 en son versiya.exe

https://download.gg/download-6104778-Dumpper-v-40-1-en-son-versiya-exe

http://download2052.mediafire.com/71uw1g3smuxg/.../Dumpper v.40.1.exe

temp:Dumpper Sp v.40.exe

temp:Dumpper.exe

temp:Dumpper v.40.1.exe

temp:3dumpper.exe

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../IZFxGaCQ

Scan Dumpper.exe - Powered by Reason Core Security