home

mcp d-00-04 disk 1 v_d0004a.exe

This is a setup program which is used to install the application.
MD5:
e9cabfa03fb9d9266e0d22ca823bf7d1

SHA-1:
b9accff4f5b2a777be533801c1f969aef0792f23

SHA-256:
1b6de355f6a95056c574d446b558e67b5c6012c1c180326d443acd20064c11b5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/26/2025 12:30:26 AM UTC  (today)

File size:
830.3 KB (850,221 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:vurBwd8s3hM+GhJ3Qi+3mf8eg6PehyC8h:v98sxgc20T6mhj8h

Entry point:
4D, 5A, 4D, 01, 04, 00, 00, 00, 02, 00, 6C, 06, FF, FF, F0, FF, 00, 01, 00, 00, 00, 01, F0, FF, 1E, 00, 00, 00, 00, 00, 00, 00, E9, 8C, 00, 20, 00, 4C, 48, 61, 72, 63, 27, 73, 20, 53, 46, 58, 20, 31, 2E, 31, 33, 4C, 20, 28, 63, 29, 20, 59, 6F, 73, 68, 69, 2C, 20, 31, 39, 38, 39, 0D, 0A, 0A, 00, 52, 65, 6E, 61, 6D, 65, 20, 74, 6F, 20, 56, 5F, 44, 30, 30, 30, 34, 41, 2E, 45, 58, 45, 00, 01, 04, 0C, 18, 30, 4F, 76, 65, 72, 77, 72, 69, 74, 65, 20, 00, 5B, 59, 2F, 4E, 5D, 20, 00, 42, 72, 6F, 6B, 65, 6E, 20, 66...
 
[+]

Entropy:
7.9916  (probably packed)

The file mcp d-00-04 disk 1 v_d0004a.exe has been seen being distributed by the following URL.

ftp://ftp.agilent.com/mpusup/pc/binfiles/old/.../v_d0004a.exe

Scan mcp d-00-04 disk 1 v_d0004a.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.