home

opencodecsetup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from get.daum.net.
MD5:
2bac33f937e59194abc6f5d454093a94

SHA-1:
e338f809dcf61ea1e1f8e40af2dded42a80dfe90

SHA-256:
b5c7aac66f50ba26864fd00cfc573dd2b6dc2118459e11ceaf4eabe475619c11

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:02:00 PM UTC  (today)

File size:
5.9 MB (6,153,440 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\opencodecsetup.exe

File PE Metadata
Compilation timestamp:
2/25/2012 2:19:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:cILh4vb0pp3oFw7/5goQhYgOHnlOu+DJZV62F7ro75iRR9fmTQPDSJzDFsByEsWN:5h4wUFw7RGhYgZu+9z9siv+QLSJdoPTN

Entry address:
0x39E3

Entry point:
60, 8D, 05, BB, C5, AC, F0, 8B, D0, 0F, C1, EA, 69, C2, F2, 26, 8D, 55, 0F, BD, C5, 0F, BA, F9, 44, 89, D3, 10, CC, FE, CE, 0F, C0, CD, 8D, 0D, 15, 4B, CB, DE, E8, 24, 00, 00, 00, C0, CF, E1, C7, C3, DB, 50, 68, B7, 34, 21, FE, CD, C1, FD, 13, C1, DD, A4, 0F, A5, D3, 0F, CA, 81, F6, 38, F5, 00, 00, 33, D6, 0C, 56, 88, F7, 0F, AB, CB, F7, C3, D9, 43, 25, 43, C1, CD, E9, 81, CB, B0, BB, 50, 29, F7, C3, 7F, A9, 1B, 7D, B9, CD, 00, 00, 00, 0F, BD, DB, F7, DB, 81, C1, 36, 07, 00, 00, 1A, F0, 0F, CF, 8D, 3D, C1...
 
[+]

Entropy:
7.9979  (probably packed)

Code size:
28 KB (28,672 bytes)

The file opencodecsetup.exe has been seen being distributed by the following URL.

http://get.daum.net/PotPlayer/.../OpenCodecSetup.exe

Scan opencodecsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.