home

maohawifisetup_269.exe.td

深圳市猫哈网络科技发展有限公司

The file maohawifisetup_269.exe.td has been detected as malware by 1 anti-virus scanner.
Publisher:
深圳市猫哈网络科技发展有限公司  (signed and verified)

MD5:
c5793bb3beda1bc9f330526c852dcdfb

SHA-1:
a7cf67dd7cf3dea5700e6111a015891caf26c0bc

SHA-256:
8b7cd35169d6f992981132fa3f9392986e14dbb9e175b52077e56036231bc50e

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/26/2024 3:17:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation (M)
17.3.14.17

File size:
7.9 MB (8,286,208 bytes)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\maohawifisetup_269.exe.td

Digital Signature
Signed by:
深圳市猫哈网络科技发展有限公司

Authority:
Symantec Corporation

Valid from:
8/3/2015 5:00:00 AM

Valid to:
8/3/2017 4:59:59 AM

Subject:
CN=深圳市猫哈网络科技发展有限公司, OU=IT Dept, O=深圳市猫哈网络科技发展有限公司, L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
589DAFF5A2E11006D30F250FCEB95B37

File PE Metadata
Compilation timestamp:
6/7/2016 5:05:57 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x3EDAB

Entry point:
AB, 8D, 3B, B8, 58, 6C, 99, 6D, 2F, C5, 68, 07, 00, 60, 88, 4C, EA, 53, 99, 12, C5, 2D, A1, 6D, 2F, 05, 65, 1B, 00, A6, 2F, 9E, 32, EC, CF, 80, 50, 2B, A2, 6D, 2F, 95, 9B, 05, 00, DA, 79, 48, 15, FC, EE, F4, 75, 33, BC, 6D, 2F, 05, 90, 49, 00, 9E, A7, 03, E1, 21, 01, 3A, 89, 7B, C2, 6D, 2F, 85, 64, 02, 00, F7, A9, AC, 83, 1C, D9, FB, 42, 7B, C2, 6D, 2F, 91, 94, 00, 00, 18, 28, 88, 14, 54, 11, 2B, 05, BA, C4, 6D, 2F, 05, C0, 02, 00, BA, 2E, 30, 1C, B5, 5A, 8A, A0, 17, D2, 6D, 2F, 80, CA, 00, 00, F7, 38, 37...
 
[+]

Entropy:
7.8913  (probably packed)

Code size:
418 KB (428,032 bytes)

Remove maohawifisetup_269.exe.td - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.