home

mpcstar_5.3_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from download.yyzx.com.
MD5:
2959d3a234213e3cf9a2f2678966b603

SHA-1:
db621fab199e491e0f27b753f0b4d01719b0b02f

SHA-256:
24da3f1f6059b46789eecfd62dae3e123ece5a7107985574a1ea1aaa0235d70b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:42:06 PM UTC  (today)

File size:
20.9 MB (21,949,392 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\mpcstar_5.3_setup.exe

File PE Metadata
Compilation timestamp:
4/10/2010 7:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:mrzhDxPSUcYEpBq0vCwMWeNZJkr5e/FJMChB7ESmW1/nHHNMYTv73agdka3SB1:mrFBSUcYuvqkr5e5ISmW1/SCvTa2k3z

Entry address:
0x14D000

Entry point:
B9, A4, 1C, CE, 05, BA, 16, D0, 54, 00, 90, BE, 98, 05, 00, 00, 31, 0C, 32, 4E, 83, EE, 03, 75, F7, 90, 4C, 61, CF, 05, A4, 1C, CE, 05, A4, 1C, 8E, 05, EF, 29, CE, 05, AC, 29, 82, 04, 74, 27, 82, 04, A4, AC, CC, 05, A5, 1C, CE, 05, C4, 9C, 8E, 05, 8A, 93, 8E, 05, 98, 93, 8E, 05, 88, 6F, CE, 05, 88, 93, CE, 05, 9E, 93, CE, 05, C4, 74, CE, 05, 88, 93, CE, 05, 9E, 93, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C, CE, 05, A4, 1C...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
25 KB (25,600 bytes)

The file mpcstar_5.3_setup.exe has been seen being distributed by the following URL.

http://download.yyzx.com/.../mpcstar_5.3_setup.exe

Scan mpcstar_5.3_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.