home

e5372s.fwindo.21.271.11.00.1151.jalantikus.com.exe

UpdateWizard

Product:
UpdateWizard

Description:
UpdateWizard Application

Version:
31,110,00,00

MD5:
f6feb1537395c8afbc5baac3a3949be8

SHA-1:
48ff008966f4a238ca7c6851a151b3a87a2aacf2

SHA-256:
7bfafe631c0d99ecb0fe0498cc3d2c2869d49e950f832b8462e9a61c5db92765

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:31:50 AM UTC  (today)

File size:
73.4 MB (76,999,168 bytes)

Product version:
31,110,00,00

Copyright:
Copyright (C) 2012

Original file name:
UpdateWizard

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

File PE Metadata
Compilation timestamp:
4/21/2013 11:28:01 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:kvs0Dm2j2atXMc3Om3D3PoOCVJiJCcYDjfq1ACwiBaF:kvsN2j3juJ2lYF

Entry address:
0x22DB3

Entry point:
E8, A7, 74, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, 1C, 17, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 67, 4F, 00, 00, 83, C4, 14, 83, C8, FF, EB, 4D, 8B, 45, 08, 3B, C3, 74, DC, 56, 89, 45, E8, 89, 45, E0, 8D, 45, 10, 50, 53, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, E4, FF, FF, FF, 7F, C7, 45, EC, 42, 00, 00, 00, E8, 42, 76, 00, 00, 83, C4, 10, FF, 4D, E4, 8B, F0, 78, 07, 8B, 45, E0, 88, 18, EB, 0C, 8D, 45, E0, 50, 53, E8, C3, 74, 00, 00, 59...
 
[+]

Entropy:
6.7497

Code size:
211 KB (216,064 bytes)

The file e5372s.fwindo.21.271.11.00.1151.jalantikus.com.exe has been seen being distributed by the following 50 URLs.

http://www.grabupdateshare.com/oA9McqgECyplreyQMAieIlup TUlow_saXT4LnIxKG8SdEJobJwDX2SiUVKLmWor8KCx57ZQIy0u5X26Wr_a8Ea8tv5Ui03f_xLbEu071e6kW66CZWtKE_KqRR_j48ftmKeqmYqS9IMSQhqkSMtfaBe8tC2ThzlJiMvjj4cSL1BvlL1QfArzqRLKzzOa6iRFcJfjYZd8gJGevClacswlPf0tyAum6cbf56BJFjOqNivebArHKHVdN3uO0s9ZFBAWr3Zdf_68vz0upfqb1wAFugA2_N0IsM3UvHlvF2xVnIpvzEClr6HufU1PIIZEpQuOPymZbGDY5IwAU8bT34AdyWvXY9KGmsI_PVwAFHOPU4nUkmm4_6jhyeR3CIwAGbEl_nQvugOxRq0RpyzrGgl5T5KQhQkJ6FAqRBS0Iph8Bup 0g0Isov61LP0Pwgg6uKW7iGN1WDGl24k1muVae15Opw4DTtgXdI5up2KIpGtuQvakRvJu0SNMg7vBKRwwsy68RcO EBy8VET4uVczJyE8BcaAi5LL7C3A2fLNqG953qrOVdQ79bTuQKfWUAjLf9UG6XoG51JKlAF1j Rm1LRRDTBuTk9K5iBZDpg_G3um06T7BMTIa0fFuj3lfWCcnVP2PfUxLiR3eTTq5qD62sC4qu9jA5LhrVaVi10ntmdsDTRYHoa65hSHpSyH0jBgu1oaquLVTjn-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf

http://www.grabupdateshare.com/PtRbzZPoYVzb7V5kOC1yGipaxswOyAEe3sVgvmeJ_Rx8OkxrJJV720FEtV4T0w1r dxlHJQUG0Y7dzZQvn32LVZiLmNVZKWL6rKI5_jM 6bFyAYWS7qRbu9dSFacmeXOFuJ I7x3wZ lsu6RZVtrri5CYzHSoBrauwV9xK WUpdIYjltoW09ccqBePGRkK0xHHOmz3lDHly9uAUIlNAWqJqacE6UkihvBWM8VsNfpKHhYSGeUORHHZzPS8HCEox1kEOGz72xnmHZBAAeA f2sO3TzqklP4mEERTeYfsCC7NJJgGM8yvTmezXVx2wKMI1qn0WslXGfucYhAA0ifEZxNz TGjZZh5jnLqzbRmplZVpOxOwrPJexiOMOtRer5q_wGP7FtovJZdqNVEMx Zi_9KLML2veA5ON6qnpuwAFEg8mRfyRTcODsMU65pBU0IrhYtktr1JGl3bBjtsqfBE8JaIpgrW6YwtxF6BEjIzcAg0Mv8saxrZOGvdXg4TwEf6Ry8zW6ZtpMSr2aPDbN0__qcJpKCCW3ifTlhpPQbI9gPRUFeR3ph3c2iNe1wJ4_SYs3vVVlhPx0Az3yHx8JWtKWQqYC07FMkYckpgeRwebTxUtOPEhItIAqufaBUoYjGzjqarELI8JzbQ7fBKXnrnXozlHUSC6cpUNIAuVTcX6nlZDYklGIdgeEfkBjkHXJ82dU5042PmRStH2pJzRkBa7sXLxk7nRA==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://docs.google.com/uc?export=download&confirm=BNL5&id=0B0Zrz_ejD0MTMXV0b2lJcV9EQ2s

https://docs.google.com/uc?export=download&confirm=ybTx&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=zGqb&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

http://www.grabupdateshare.com/R7nkGvDF98udWK2WooV2vnCGox0rYFXRT5rfkbjZh9dB6cFMWuA3wG8wv8Gxs1mvNU1PV 2lsGvhOa1g xw6dBFj Q2I9Pv3iQLVFJQjFT Cab8inHBhvzazUc6xCNSD4mcqy0XLQoiaFoSdwJIMKvIMQXY2sTo9eKJZQWoLj90HqMT_Qvo9u2wXI0qz3hGv DFFDrf6UbPIj1 eqxrJAXSJmASLAWPlV8o0n2PLV_i_OT4M3VfOoDefF_FsfBB1hd2bzrHNyifIAx5WiSsZ12DysxYUV6abA8agsFoOMbCwJgZwMgogMZZFwLgoxWeMYgWGHfnzspqPq_te87dQJ2WVPfxBSDbMdqTids7AmhVB7TAIFRmmAS5P2SJC2Oz2VpfS6ZgSpdgGgQq2BY9NV7PC lIh3hZ8 Alw5 V3arGrAE8MvGXrSia n7Sw1_nnHByAodSMXuQ8OxFRAFUMAn_5rWHzVMzecCYR BA3N73Bt_GIPo2P8UzuCtHxSeqhEuZKZsv73j6OKJ78MWFXX5Me4fO 26hJhN5wqt55dHl6ef6xspEgtzQE6Bq_mkSXKWUhb0pRMYqyB_MdNUfgr6yy5QrlCMiE4YQzd5i_ANPuqrIjvCHrjXUtS 0xbNF3HjCg7itrFq7k1TRvixIJ7DccGAi3Lr53ueFnD6miVFMh3UiDGwC7vuop077s556UsIsP0 mx9TLRu7zCnsEEa5EEVejCeg==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://docs.google.com/uc?export=download&confirm=Gav5&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

http://www.grabupdateshare.com/7Pxe45xVj1czEB6Occm7UsH1MyddWbDI54EgYkPZnY_b_dTazFO d25K42nHJrU5wvE8 2t2If0IvDP_75zEBiY bwHpYM3EnRe516nvyTwBNOTLyspo7uRCbsv5xX_vvI9TfamyIy1qi58iIXOW78fIrg1m_CHy8t Et9dOxgRAo49RtxPUanJMFdvfvEn0toOKDlYfoQg17WsTEir9pj1wTP1cQdBf8cdmJ3jqK rPAOLoYJ2LXk7DRHUbjnnAcLlwTWrnU0V7EHzBaqVhy1vr0UmMO5 pViL84af3sqlcIKdfj6df5RDpo9hDRpQqSYR0PfaJvHkT632 4efxMYpQpCNYnTKJEe63mgtzKMDeRYWIWO0vexxyWh1aHf6tj65mPyGNyaWs2tE _hvby5MTnX7wY0duKSHzdWRQxhnUlw2dF2cL1 IfLrxGFxXJEc7kr3kPzoUZUkJVoqk93S96uvm8VtSAnfQ1uE6fLaYxqwfwX6lla2f3tNgN16s9yr7YAGENcZDkil9WVhuE4C7507Fwv59N57m9jTV9BmfAXObvvejFtM7zdIHpE4JTeIgdiVMxqYOljs8AC2fl8WxMjbRMkWGb7GrY5FNO 6hU6vqZG8NThQPZz49WHw2mNHWPYNQXmPglzNceKrI6Ub AU1VRnKQCgX7 z3OhoPCg75RJTXgJFqzTRI qWkRcqZZs5ZKDKeAxgv_k6 p3a7dXMvB VA==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://docs.google.com/uc?export=download&confirm=5GYW&id=0B0Zrz_ejD0MTMXV0b2lJcV9EQ2s

https://docs.google.com/uc?export=download&confirm=ZlFy&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=fX8f&id=0B0Zrz_ejD0MTMXV0b2lJcV9EQ2s

https://docs.google.com/uc?export=download&confirm=QHGd&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=gC-S&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://doc-08-5k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/2ch8v0arqibq5qgg1poitjmv14goqbi6/1473530400000/02800028391856706329/.../0B0Zrz_ejD0MTaTI3T0VJalA4ZUU?e=download

https://docs.google.com/uc?export=download&confirm=8QvN&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=nZT1&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

temp:e5372s.fwindo.21.271.11.00.1151.com.exe

http://www.grabupdateshare.com/OOwTKo6eKbsyK3DIaBgGOdn_4 okLTr9PRKqjapydrOnXlAJsQEze9Nz_TEfemWVcu1CCEUYTnWAKF6jlqJVm9M26bGoG8ePaUaXrNy5_7KGoWnV9csfbvzwBF0TwNUy1_PMsY04FYTYWF2qPBJLtUfsP7uZkD8 Rwt1iG46s3ljdM27PU8J_FCFrnta5VVyJ2lyeLPXXSbegoEIUJQTErx_po14Y6VQf1x Jr47QX0Z41OOWrmgSYgESo9_WU1vLJjTmL97b6NBe1wyFX3oP9EYS23Zak4YaBfmafPnlj6yqzp8vp SprmposchawUvBdpBdT1i9gIlrHBsYjqiADR1aRYKz__qKOEYB g2euxg2RNHSSNbzn0BsQjIC6JHnOOi25DHzG0wHQdOfnST6fzFvdvdCFl6qpPzKYAFGcHA4s3nuy3PJzZb3EbnLiBGg_WoIDQm8wyWhpHOY8YIKq4NoHeA hm0gAUJPH77tLyGd8tkkyZFlMXLhmtHmsoOz5OdgDQMMD5Xa1gtXq31JUTiXZ_R6vwuRPqK0mfretTbOpSRubhuadErxWxX6JUjEMM5ixB7LMQ1_QyQpWN1npFM21tVNEgQw5fHP2lFsHnNedFbw0yLcJ5vSkxiYhREADswbAz32pPnxsQoautzpTChOEDV5lbNM5tvHPZ78malSnlFwQuk3UhQK6C3wmexaYJuL8BPqexcpMx96zkY6mxooJckTQ==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://onedrive.live.com/download.aspx?cid=8EEF58C0DE2C225B&authKey=!ABUIKwv8LxG94-E&resid=8EEF58C0DE2C225B!20374&ithint=.exe

https://docs.google.com/uc?export=download&confirm=RjIn&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

http://www.grabupdateshare.com/CsnGuqxUvU6zGpwQhZxge5y7pOqlwvb97 UmkG IMB1Z g T4830Cp01SE9b8uoAErrbqVEh9BV6vgccvVCw5LEXCnOCjD6nXHqeTookUNGJxPK5MraTz8jGp 0YPuwUIrTivHDbo4oEadQDwEaGnmjXIOvGzYiEAbbtFnBzfcm2m7cmRWPk058LK4sgtdi4fvSf tKvExZmyTprTNfyFhcvHQOrUrujAR7M9DZt XXrplXh9bX8nT6xBFwwZX3iRjESRM7nvtBHfoHszY6oE2ToSguJ7X vfbyvhUK2qE6sgEjh4LeZWT312 BOgcNNSU6MoJYPOfB062Fh7fe1dpSinuXDuT0fSwrfCBuB1Pdbd5AbBo8W paiZdcQBBY0KbDskt7 DMai_5l7OdoNA1ZTK5dthapY5z9sNPDOZ7i9mpKd tXVKSKOEIlgN91sfqoOS0_SscZwEQve1CkpD6kF1Ckf6ke280RS94IGtk9SnQjQqMmNxdysB 5v8T6fQW5XfLO9ayvdUY7nB6u2l0VXXvrHr3Nr5qbzjkeOwkpz7syuKTMtGyok33PgvfbVtcae6AzU7lO ctkvoXv53L5AAa5Np3knhfogAh_zLBmwibxGKccXdRaDn6uPiD2Am9NRpDvrk4HmFVKD _tFF_S0OK8qtwS19RzW5FhLWF5WckzwFPigGz_Az0FRlYqeHb1RRzyTaZ38K8dfBqiUZFDFW9HK6Q==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://docs.google.com/uc?export=download&confirm=6PsB&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=ac4C&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

http://www.grabupdateshare.com/dvezajWskpMU92I8idUsfKMQOE2DBb0DiIQOmu0yl6AxQ9GV1L0IH7Czf2M1oRRCw kRj7KexvFz87Mw0YJuPcgfWzP_kJBw9i3r6c19ubwGWlHimTMAZ90s9SjXf3KBmQEOc4Yx9ZQ_I YOznqkiAQw0AI5KZrqr1ljjPsrlMwYfbfs H LNBa5WU1hOw5G0ji3dLr9w mWBdgQ1ZCYDb8JxwAb1CpP_UV0uwQ_PJcD3CwIEetY 7NxdPL s7sflStiDg4P04LKBPw_hjY6M5b66d4eh7t7mbOJWHdiGgN Jdagyp TPhgikUlE5YRrCCmEcbgd98yHgkNpq9JXMYs vjUztKkdJFeV50WqE0jViAzGOYQQVf1pb_16fN4X16AJqyu1qdh8eMoriZTttbQFHrXT3BIWoPI_srQ09f4qF7HwRFKMOIA_xJ7 OGNpeTP8UucRGYeCerJsvmmH4qg6ewabdF_63whb RRQxeqp0dIS F3CYY7slYIGz2yxbbhn9r5w1afV3ROIJxZl14c xd6AaLCXnXLMO59egArYc4Q71VUngpdHm4jELvDeQfA3jMPxxbd8uVMVAHgiyEbODAL7T_C4WgbyZrOLq4_aTvaOFWOQ pOnnnVZcEToHweFL561H6CJvh3E2D9AP3DCMtDt_XZ0NEZWiCVn4fCOV8PnXhsjzVTuGMyQPcIRuHSxdB6k-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf

http://www.grabupdateshare.com/hFTT9prhDMFLMCQqafga_tQsolHiPCnPoU tVa31NK5l8xcdjqvgQ9_KPZ404INWK3Cf5exvFfy4JV0jhkOBX_6 zpAhsYDa5DZ7U3C5yH0VnYX6aIbPreVdhf6vIsYPhLyVe 2IChGieTv3TtrXaF2AV3uXPHDxvpoRWgRjw4BhlSRjp5Uvhn0ELy0uzL6kqVB7VDafE1ea0As0APUBzJaTD4Ag1fO_6r1nYvpRRO8GOWSJyr7pCAoqV1kTw5BNI4kLW3FDLC_NKQOMa7QxXz43Bc28yzqeJO1aj7CISn wnKJPKUsArhYSj2qbKxlI2SDaaskwrgGrCFE 3IQesbuAOdCu3GEuhPfZ8SSHOnPLZWSqX7qoIo9pwlCPneCtLJrONo1L3tpat _YPMp4PNrtGSMRuCIQIvK6jX8uUtAqk_H q 8JjrUFJD_MFaumVjK0LsW5gSlWtiJ7veKj378laOXAByJb4h6X Ui1BlYCA5oEnWa7ULz5WYDOA8romnrG9zlG8AkYIHyjIDzd6s9eeGRuPI3xtqu6VAeQbAbs8nxk2jVvduYujF07tnJpHoYyeF5wlpS_CztWm9LYf8PC9SF8xJEzopxYbJW DLo7wR1UoRk7vVOTZ044do 79qpyuRbL90NvAYTY1cuGNQ_ViCvrBckTA__wCQB9TkdQ 4tPwMPgtkyc3icLEBKQXOqsn2A2SSpx8hN57Xomi_pA7mNEVw==-G1sAAMRcW2y33Z6xD0VBsyFuQQUNr6hjHNigcoMMuN2AMmyMOXYrECK9MY2MY9979vMdTn9midG7RA VyVvYwPwtV94wwoKSUE1xYi3AFtRf-e

https://docs.google.com/uc?export=download&confirm=mUBL&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=N5qg&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=6Ff-&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=LY2k&id=0B0Zrz_ejD0MTaTI3T0VJalA4ZUU

https://docs.google.com/uc?export=download&confirm=tke2&id=0B0Zrz_ejD0MTMXV0b2lJcV9EQ2s

Latest 30 of 82 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.