home

hole cleaning monitoring overpull and drag.exe

HMV

EC Software

This is a setup program which is used to install the application. The file has been seen being downloaded from ird-attach.ymail.com.
Publisher:
EC Software

Product:
HMV

Description:
Help & Manual Multimedia Viewer

Version:
1.0.1.0

MD5:
c434fd2e29f0bdf0467b376ef96a1dce

SHA-1:
9ffe0a5f874e2e8e120b2ee669c6387f6039567f

SHA-256:
59c7e1236f878a7c3643068dd2649c38490be70dc6f57420138c3576f39ff045

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:02:00 AM UTC  (today)

File size:
3.5 MB (3,645,762 bytes)

Product version:
1.0.0.0

Copyright:
© 2001 EC Software

Trademarks:
HelpAndManual®

Original file name:
hmv.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\hole cleaning monitoring overpull and drag.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:I/ZlRy9nBWSnxNnyakMEZuBf8EHstL8InZ1XnYmYSbuuLfyfJm3GpR6fUVul5pzx:4py9pyauRE0LDZWobJfD2pR67pgMb

Entry address:
0x1031B8

Entry point:
55, 8B, EC, 83, C4, F4, B8, 28, 2E, 50, 00, E8, 40, 40, F0, FF, A1, 78, B2, 50, 00, 8B, 00, E8, C4, 33, F5, FF, 8B, 0D, A0, B1, 50, 00, A1, 78, B2, 50, 00, 8B, 00, 8B, 15, 48, E8, 4F, 00, E8, C4, 33, F5, FF, A1, 78, B2, 50, 00, 8B, 00, E8, 38, 34, F5, FF, E8, B7, 09, F0, FF, 8D, 40, 00, 32, 13, 8B, C0, 02, 00, 8B, C0, 00, 8D, 40, 00, 00, 8D, 40, 00, 00, 8D, 40, 00, F8, 4F, 40, 00, F8, 4F, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, C4, 21, 40, 00, 4C, 23, 40, 00, C0, 26, 40, 00, 32, 1F, 8B, C0, 52, 75, 6E, 74...
 
[+]

Entropy:
7.7501

Developed / compiled with:
Microsoft Visual C++

Code size:
1 MB (1,057,280 bytes)

The file hole cleaning monitoring overpull and drag.exe has been seen being distributed by the following URL.

http://ird-attach.ymail.com/fr.f1321.mail.yahoo.com/ya/securedownload?clean=0&fid=Inbox&mid=2_0_0_1_1336736_AE5n FcAAVXVUPeQkgNc8GMnQHY&pid=2&tnef=&prefFilename=Hole Cleaning Monitoring Overpull and Drag.exe&redirectURL=http://fr.mc1321.mail.yahoo.com/.../showMessage?cmd=download.failure&fid=Inbox&mid=2_0_0_1_1336736_AE5n FcAAVXVUPeQkgNc8GMnQHY&pid=2&tnef=&prefFilename=Hole Cleaning Monitoring Overpull and Drag.exe&cred=g8C7AM1.95qzsSHLWqVllQedZGkhkFK8kyJ3w4sas6lK6Q--&ts=1358643272&partner=ymail&sig=j1mMXo_OgfqZSq97LYdfnw--

Scan hole cleaning monitoring overpull and drag.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.