home

mp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.results-hub.com.
Version:
1.0.5696.29103

MD5:
203dd1aed959c454a8e5e12cdab03d0a

SHA-1:
ae9984b9c926c8b6c47c013669211eaafb741f85

SHA-256:
0b73db5c9e7da4e12680495af47b6af4108eeaf9e81cdbccaa3857f548655de7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:41:01 AM UTC  (today)

File size:
165.1 KB (169,064 bytes)

Product version:
2015.08.06

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mp.exe

File PE Metadata
Compilation timestamp:
6/4/2014 4:58:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:an3AcIgRBSDCiE4VgVdE583aZHCtBrl4D4GAWdnWSW6aG/s1iWkNMc3ksek:aQ+FiE5I83yHC7ePAWdWSW6cnfkdek

Entry address:
0x31E4

Entry point:
F3, 69, FA, A0, EF, 13, 83, 51, B9, 52, D4, E5, 87, 0F, AF, FD, 85, F6, C7, C1, 73, 6B, 8A, D6, 84, F6, 18, F0, 89, CF, B9, 00, 53, D4, 66, 0F, BF, DA, 69, CD, 0D, 68, A6, 7F, 8B, EA, 78, 04, 33, D6, 84, F0, 87, FB, 69, CD, E8, F8, 05, E8, 85, FB, 33, F5, BB, 56, 36, EA, 35, FF, C1, 43, 85, CA, F3, F6, C4, 87, 0F, BE, FD, 0F, AF, FE, 8D, 2D, 00, 4E, 8D, A5, 11, F1, BB, 6E, A7, 38, D3, FE, CC, 20, EF, E8, 1B, 00, 00, 00, 89, C2, 69, D3, 17, 3E, AE, 14, 84, EE, C6, C0, DD, 34, FC, 89, C9, 3A, D2, 3B, C1, 81...
 
[+]

Entropy:
7.8477  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file mp.exe has been seen being distributed by the following URL.

http://cdn.results-hub.com/.../mp?mpt=8&v=1.0.5696.29103

Scan mp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.