home

opsvoice setup.exe

meridionali

Luna Kayla

This is a self-extracting archive and installer. The file has been seen being downloaded from copy.com.
Publisher:
Luna Kayla

Product:
meridionali

Version:
2.3236.22.1

MD5:
a0cfb46bd921911e4d5ce711236e5b0a

SHA-1:
44efe3f0009b45b654fc942d82c7c478743279c5

SHA-256:
c224eabfecb723f2d96c652df0aaee88a76bd1db00ac524a22b5bf38bb749d5e

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/26/2024 11:29:42 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/Injector.NWB trojan
8.0.319.0

File size:
462 KB (473,088 bytes)

Product version:
2.3236.22.1

Copyright:
Copyright © 2016

Original file name:
meridionali.exe

File type:
Executable application (Win32 EXE)

Language:
Swedish (Sweden)

Common path:
C:\users\{user}\downloads\opsvoice setup.exe

File PE Metadata
Compilation timestamp:
2/1/2016 7:15:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:o03nKhH3H/L6Onr1sJk6CcxBSunFzAWKfEfJhgtAxk5CBXS0j3fhxPg:o0X6PL689cmwe1fygCxUmX1b

Entry address:
0x5EF7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
372 KB (380,928 bytes)

The file opsvoice setup.exe has been seen being distributed by the following URL.

https://copy.com/.../OpsVoice Setup.exe

Scan opsvoice setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.