home

mp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.results-hub.com.
Version:
1.0.5696.29103

MD5:
f7fc4b5b2d370aad848969361ddf57f4

SHA-1:
e7fa8c7970b58e7d3a3bc04b30a46ab28237cd18

SHA-256:
e9c905e0d7ea3bdcee75970b7e9d8b81d3e76248f77e8abefb0dee29c87082db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:25:55 AM UTC  (today)

File size:
169.1 KB (173,160 bytes)

Product version:
2015.08.06

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\mp.exe

File PE Metadata
Compilation timestamp:
6/5/2014 6:58:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:in3AcIUeRBSDCf69aqftf2gOS7UPncbqIZ2vwaw0NXIDuSW6aG/s1iWkNMc3ksek:CQjFbqf0ZS7N2I8vuFuSW6cnfkdek

Entry address:
0x31E4

Entry point:
60, 69, D3, 79, C0, F2, 40, 0F, BE, F9, C7, C1, 9C, 56, AA, 88, 70, 02, 86, DC, 84, F0, EB, 08, 0D, BB, D0, 04, 3D, 0F, BF, C3, 8B, D6, 89, D9, 85, EB, 69, F3, D0, 84, 1B, 34, 8D, 05, E3, C6, B1, 05, 33, EA, 69, DB, 13, 64, D8, 0F, 74, 06, 69, E9, 83, 0E, A4, 76, 74, 07, 80, F5, 17, 85, F2, FF, CE, F2, 68, 5D, 25, 45, 00, 68, 1D, F3, 83, 00, 0F, B6, DC, E8, 56, 00, 00, 00, 69, CE, 1D, 54, 4F, 66, 0F, AF, CD, 81, FF, 50, 11, 00, 00, 77, 05, 0F, BF, CF, 8A, F1, C6, C2, 84, 8A, CC, F2, 4E, FE, CB, C6, C2, 38...
 
[+]

Code size:
22.5 KB (23,040 bytes)

The file mp.exe has been seen being distributed by the following URL.

http://cdn.results-hub.com/.../mp?mpt=8&v=1.0.5696.29103

Scan mp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.