home

moborobo(moborobo_en_official).exe

Setup

Baidu Online Network Technology (Beijing) Co.,Ltd.

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Mobo, Inc.  (signed by Baidu Online Network Technology (Beijing) Co.,Ltd.)

Product:
Setup

Version:
5.1.9.566

MD5:
817004993878ec4003b2fa3e57e2551b

SHA-1:
d1d60fae8fcf6a48fbe11884b213277744924c32

SHA-256:
7b2dcbffeb0707343c2157e0173d64cc1cb13a62bf96500f5fa2e11ee2c94f26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:57:24 PM UTC  (today)

File size:
25.7 MB (26,965,304 bytes)

Product version:
5.1.9.566

Copyright:
Copyright (c) 2014 - 2015 Mobo, Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\moborobo(moborobo_en_official).exe

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing) Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/17/2016 7:00:00 AM

Valid to:
3/27/2017 6:59:59 AM

Subject:
CN=" Baidu Online Network Technology (Beijing) Co.,Ltd.", OU=Baidu security, O=" Baidu Online Network Technology (Beijing) Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3E28595049B0AABBCD7F30836248A51C

File PE Metadata
Compilation timestamp:
4/12/2016 4:08:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:+ww/sfkqwdiYyoZIEGTxIqtkLPy6f9pLzeI5EQ+Bo5Nn4qntBsdEfXEKDiePEkJJ:q2kDiYp8/kry2zdEHEnDsCX1iM1Jlf

Entry address:
0x1D2A1

Entry point:
E8, 77, 93, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 44, 24, 0C, 53, 85, C0, 74, 52, 8B, 54, 24, 08, 33, DB, 8A, 5C, 24, 0C, F7, C2, 03, 00, 00, 00, 74, 16, 8A, 0A, 83, C2, 01, 32, CB, 74, 72, 83, E8, 01, 74, 32, F7, C2, 03, 00, 00, 00, 75, EA, 83, E8, 04, 72, 12, 57, 8B, FB, C1, E3, 08, 03, DF, 8B, FB, C1, E3, 10, 03, DF, EB, 1B, 5F, 83, C0, 04, 74, 0E, 8A, 0A, 83, C2, 01, 32, CB, 74, 40, 83, E8, 01, 75, F2, 5B, C3, 83, E8, 04, 72, E5, 8B, 0A, 33, CB, BF, FF, FE, FE, 7E, 03, F9, 83, F1, FF, 33...
 
[+]

Entropy:
7.9944  (probably packed)

Code size:
201.5 KB (206,336 bytes)

The file moborobo(moborobo_en_official).exe has been seen being distributed by the following 12 URLs.

http://lb.cdn.m6web.fr/d/c/a/3664cef0f0e396969e786161871e1fa2/58162ea0/soft/.../moborobo_5-1-9-575_en_432907.exe

http://lb.cdn.m6web.fr/d/c/a/105aeec8ac854cd8fa58455b0692108d/585402af/soft/.../moborobo_5-1-9-575_en_432907.exe

http://lb.cdn.m6web.fr/d/c/a/7a578e1486f691efb0663c1da5a68bfc/57f4f498/soft/.../moborobo_5-1-9-575_en_432907.exe

http://www.downloadcrew.com/?act=software.download&id=32808&t=1467619641&c=7b8adddf97bf06cc496f5f6ebde942d7bee9bf86

http://www.filehorse.com/download/file/.../

http://api.256file.com/.../11461_directui.dll

http://coolbar.pro/tracker/go?url=http://download.moborobo.com/download/.../Moborobo(Moborobo_En_official).exe&cid=22

http://downloads.pcauthority.com.au/?act=software.download&id=32808&t=1466435220&c=02c7d64ed8c6c1368a29610b9f6fe9ecfef921cb

http://www.downloadcrew.com/?act=software.download&id=32808&t=1463516956&c=e7c7215010e95fbe56948296fc62afbeefee8cc8

http://www.downloadcrew.com/?act=software.download&id=32808&t=1466069035&c=487c56ae8459f8944017ae6d30097fd3b741b8ba

http://www.downloadcrew.com/?act=software.download&id=32808&t=1465439697&c=3b22658df9697d68ef7bc58b92b9bb3f81d55338

http://download.moborobo.com/download/.../Moborobo(Moborobo_En_official).exe

Scan moborobo(moborobo_en_official).exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.