home

dvdfab6_dvd_コピー_ダウンロード.exe

decode zip unicode version.

Jungle Co, Ltd.

This is a setup program which is used to install the application. The file has been seen being downloaded from download.junglejapan.com.s3.amazonaws.com.
Publisher:
pon software   (signed by Jungle Co, Ltd.)

Product:
decode zip unicode version.

Description:
Win32 Zip Self-Extractor

Version:
7.01

MD5:
df6cc84e0e5c071606d3d9ff1a72474f

SHA-1:
026253eeab1a0e875ae35c84d8c0fe6651994836

SHA-256:
d09c2aa653848df2b833d67d59ceb5c72d4b3be0ce953a4b3bd6946cbaa9d628

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 9:42:05 PM UTC  (today)

File size:
116.2 MB (121,792,672 bytes)

Product version:
7.01

Copyright:
Copyright(c) 2001-2015 by pon software

Original file name:
deczipW.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\dvdfab6_dvd_コピー_ダウンロード.exe

Digital Signature
Signed by:
Jungle Co, Ltd.

Authority:
GlobalSign nv-sa

Valid from:
1/13/2015 4:55:32 PM

Valid to:
2/27/2017 6:28:59 PM

Subject:
E=jung1e@junglejapan.com, CN="Jungle Co, Ltd.", OU=カスタマーサービス部, O="Jungle Co, Ltd.", L=千代田区神田錦町3-15 NTF 竹橋ビル8F, S=東京都, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D635A6EE6808F755A4173B41AE335AD4

File PE Metadata
Compilation timestamp:
6/26/2015 2:43:12 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:yOhsLVAb6gYN5u35urzeqFJdlVeFbCmKT:vh1b6gD3mplVelk

Entry address:
0xC87B

Entry point:
E8, D3, 48, 00, 00, E9, 89, FE, FF, FF, 6A, 00, FF, 15, 7C, 41, 41, 00, C3, FF, 15, 78, 41, 41, 00, C2, 04, 00, 8B, FF, 55, 8B, EC, FF, 75, 08, FF, 35, 58, B0, 41, 00, FF, 15, 74, 41, 41, 00, FF, D0, 5D, C2, 04, 00, A1, 54, B0, 41, 00, C3, 8B, FF, 56, FF, 35, 58, B0, 41, 00, FF, 15, 74, 41, 41, 00, 8B, F0, 85, F6, 75, 1B, FF, 35, EC, E2, 41, 00, FF, 15, 6C, 41, 41, 00, 8B, F0, 56, FF, 35, 58, B0, 41, 00, FF, 15, 70, 41, 41, 00, 8B, C6, 5E, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, FF, 75, 08, FF, 35, F0, E2, 41...
 
[+]

Entropy:
8.0000  (probably packed)

Code size:
74.5 KB (76,288 bytes)

The file dvdfab6_dvd_コピー_ダウンロード.exe has been seen being distributed by the following URL.

http://download.junglejapan.com.s3.amazonaws.com/DVDFab6DVD.exe

Scan dvdfab6_dvd_コピー_ダウンロード.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.