home

mp68-win-mp280-1_03-ea24.exe

Canon Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from download1277.mediafire.com and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

MD5:
ee4e89210eb551f52582d3c5cc99d8e5

SHA-1:
0122a7cd2487f41f3fee9fa3239bce44c78eed7d

SHA-256:
c78424ec65461e8bad9e68f2746de36f51b083c732f123826334d054c9d991f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 12:32:52 PM UTC  (today)

File size:
22 MB (23,055,944 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mp68-win-mp280-1_03-ea24.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
4/15/2012 8:00:00 PM

Valid to:
4/16/2013 7:59:59 PM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72ACD79546C6E0B523B123D763EFE617

File PE Metadata
Compilation timestamp:
11/2/2009 5:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:uULJrJUNvV8wQR6ylH0qKSJBpq+98g+xUc9N5NpSBFlVOtCuJp:uUlkvVrG0ZG389UwhpSBF1S

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Entropy:
7.9987  (probably packed)

Code size:
144 KB (147,456 bytes)

The file mp68-win-mp280-1_03-ea24.exe has been seen being distributed by the following 40 URLs.

http://download1277.mediafire.com/rdttwy5pp3rg/.../mp68-win-mp280-1_03-ea24.exe

http://www.driverlib.ru/drivers/.../2015-mp68-win-mp280-1_03-ea24.exe

http://www.driver-indir.com/yuklet.php?id=704

temp:mp68-win-mp280-1_03-ea24 (1).exe

https://doc-0s-b0-docs.googleusercontent.com/docs/securesc/9umo8jll2i2rruv28skink46ugiilolj/p3vfagqsbikg0fmpa99tr89gefl3q8uq/1475121600000/11971679362385876464/.../0Bx-H8HcLr9NdNkFFWnhlTkxqV28?h=13506719421678520915&e=download

https://d2.driverscollection.com/6e856eb5cebb/b8f5db54e8f1e59e700622c2ce13c3bb599e4f6e9a771fe865bb2f22ff800a227a61b31468850e620232878e7e8ab30c55c16aa3/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ARH&lang=ES

https://filedir.com/.../516972t

http://drivers.mydiv.net/dlfiled6b4_252472/.../mp68-win-mp280-1_03-ea24.exe

https://mail.google.com/mail/u/.../?ui=2&ik=bdfd1128a2&view=att&th=155a443f58299b47&attid=0.1&disp=safe&realattid=f_iq34usga0&zw

http://d2.driverscollection.com/1d39c9e9471b94c/0430ebc377846f395153e78e8c6e70f7ab5f5467cbac99ad3a31f1a4a10eadb4bfe244777e979f096ffa87a95f1428eb530d0569/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

http://es.kioskea.net/download/.../descargar-28588-driver-de-la-impresora-multifuncion-canon-pixma-mp280

https://doc-04-60-docs.googleusercontent.com/docs/securesc/81mt15lkggugsbekk37otdgjl7n1bl7v/3hr0302395in3317f1ul6daj6n98s1cq/1448942400000/.../17117513807820381805/0B7CXElngO_7ZdjVJNW5oY0N1T2M?e=download

https://d2.driverscollection.com/6e855286eddc/b1eeb959a02517cb2dbfaaa94ec4cff214a7ce817f9ef4291e11039ad2a1c3f9806e484cd1cb530f8d343c0ac4d32e0254b903f6/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

http://www.driver-indir.com/yuklet.php?id=862

http://120.52.73.80/gdlp01.c-wss.com/gds/7/0100002907/.../mp68-win-mp280-1_03-ea24.exe

https://d2.driver.ru/4522071f82f2c/443b2d2885627df33b0136d9bd5cbdef3179e691f0c2bd2b27193906ab8c698d88d64ab0c4e90a39c84027d1deb49de056225d59/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

http://es.kioskea.net/download/.../download-28588-

http://103.7.57.78/dekdev/.../mp68-win-mp280-1_03-ea24.exe

http://download1022.mediafire.com/ef2ipvrlh2jg/.../mp68-win-mp280-1_03-ea24.exe

https://d2.driverscollection.com/1032e2b5c8b/c68c159e3e58b26d0051b7d25a96d7a4bf77876b7cdfcb85baa0786103f0f249610cba2af7a9c1c7ac3de34fbc779648566c36e7/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

https://d2.driverscollection.com/6e8551d5ba5c/f0430ad80eab93279b252c773d340c3e4e6ca19de1d6bc280371a5bfba0128a3a623aea74c4a3b3ad764b2d428d7ed13543ee194/3/32/10/.../mp68-win-mp280-1_03-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ABX&lang=IT

http://drivers.mydiv.net/dlfile0295_252473/.../mp68-win-mp280-1_03-ea24.exe

temp:mp68-win-mp280-1_03-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ABX&lang=NO

http://files.getdrivers.net/printers/.../mp68-win-mp280-1_03-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ABS&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ABX&lang=DE

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwNzA0&cmp=ACY&lang=FR

Latest 30 of 40 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.