home

nanumfontsetup_ttf_all_totalsearch.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.naver.com.
MD5:
7df690e27c090d761bbdd7c517c3ce9e

SHA-1:
10b11ea17fc10490a296a9a85a4e4c098efdc559

SHA-256:
4a5848b3b8973b72bb723afef403c3c8e513d06ec4a1ae9130d2f2afc039f148

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 1:47:56 AM UTC  (today)

File size:
10 MB (10,504,160 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nanumfontsetup_ttf_all_totalsearch.exe

File PE Metadata
Compilation timestamp:
12/6/2009 5:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:Nl+OE4Gfod1Tt09ugROS7JhkciLD2wK5TFbWUH2hJXJW7w6GmJXV:v+OEJfodL09vROS8cimwaxCUWhJ5WZGC

Entry address:
0x323C

Entry point:
60, 87, E8, D1, E8, F3, 68, C5, 21, 1C, 00, D2, E6, 0F, AB, D0, C6, C6, E1, 69, C8, 7B, BA, 5F, 2E, 0F, C1, FD, 84, E2, 0F, A4, D8, 80, 0F, A5, F7, D0, CC, F2, 0F, C1, CD, 8D, 12, 81, F9, B8, 41, 00, 00, 72, 02, 86, F9, 0F, BC, C0, 23, C6, 03, F2, 80, E7, D4, C1, C3, 8E, 8A, D9, 0F, AF, F9, 05, BC, BA, 37, A1, 57, 68, 77, B4, 4D, 00, 40, 1D, C8, AC, DC, 02, F7, C2, B7, 05, CA, 87, 81, FD, 71, 90, 00, 00, 78, 06, 0F, AF, C1, 0F, A3, C1, 55, 53, 84, DD, 13, E9, 0F, B6, C0, E8, 00, 00, 00, 00, 0F, BD, ED, F7...
 
[+]

Code size:
23 KB (23,552 bytes)

The file nanumfontsetup_ttf_all_totalsearch.exe has been seen being distributed by the following URL.

http://cdn.naver.com/naver/NanumFont/.../NanumFontSetup_TTF_ALL_totalsearch.exe

Scan nanumfontsetup_ttf_all_totalsearch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.