home

ospw32.exe

IBM Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from w3-01.ibm.com.
Publisher:
IBM Corp.  (signed by IBM Corporation)

Description:
ISSI Setup

Version:
4.01

MD5:
2aa34cbc6cd71e4c00dbf12c06b1afdd

SHA-1:
eac1c708e167c50a2531cdeaa44080d35516b269

SHA-256:
633b3307fd01d8cf32a4eab704d61c6cb7e19fac718495b7656d5a6fd8adf17c

Scanner detections:
9 / 68

Status:
Clean  (9 possible false positive detections)

Analysis date:
11/15/2024 12:30:12 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Symmi.25923
1047

Bkav FE
HW32.CDB
1.3.0.4959

Comodo Security
Heur.Packed.Unknown
17946

Dr.Web
DLOADER.Trojan
9.0.1.084

F-Secure
Gen:Variant.Symmi.25923
11.2014-25-03_3

IKARUS anti.virus
Win32.SuspectCrc
t3scan.2.2.29

McAfee
Artemis!4108971CED46
5600.7181

MicroWorld eScan
Gen:Variant.Symmi.25923
15.0.0.252

Trend Micro House Call
TROJ_GEN.F47V0219
7.2.84

File size:
1.6 MB (1,687,248 bytes)

Product version:
4.01

Copyright:
© IBM Corp. 2009

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ospw32.exe

Digital Signature
Signed by:
IBM Corporation

Authority:
IBM Corporation Root Certificate Authority

Valid from:
8/16/2007 5:01:08 PM

Valid to:
1/1/2040 2:59:59 AM

Subject:
CN=IBM Corporation

Issuer:
CN=IBM Corporation Root Certificate Authority

Serial number:
064DF3E901C972B94BFF3CBCC9A7BA54

File PE Metadata
Compilation timestamp:
1/15/2013 8:35:07 PM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.18

CTPH (ssdeep):
49152:L61neHzZVAE6rNhUGUITjFqyJfFCB8ZnrFkK3MU:+1n0ZVjFGUITBq+oBArFZ3MU

Entry address:
0x35F2

Entry point:
E9, 09, 19, 00, 00, 03, 10, 40, 00, 57, 41, 54, 43, 4F, 4D, 20, 43, 2F, 43, 2B, 2B, 33, 32, 20, 52, 75, 6E, 2D, 54, 69, 6D, 65, 20, 73, 79, 73, 74, 65, 6D, 2E, 20, 28, 63, 29, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 62, 79, 20, 53, 79, 62, 61, 73, 65, 2C, 20, 49, 6E, 63, 2E, 20, 31, 39, 38, 38, 2D, 32, 30, 30, 30, 2E, 20, 41, 6C, 6C, 20, 72, 69, 67, 68, 74, 73, 20, 72, 65, 73, 65, 72, 76, 65, 64, 2E, C3, 00, 00, 00, 00, 00, 00, 00, 53, 51, 89, C3, 39, D0, 74, 6C, 8B, 03, 8B, 0A, 39, C1, 75, 69, F7, D1...
 
[+]

Entropy:
7.9696

Packer / compiler:
WATCOM C/C++, 0x32 Run-Time System, 0x1988-1995

Code size:
40 KB (40,960 bytes)

The file ospw32.exe has been discovered within the following program.

IBM Standard Software Installer  by IBM
Publisher's description - “IBM Standard Software Installer (ISSI) is the deployment of a single software delivery process that minimizes the number of software delivery tools and processes required to support standard client platforms across the enterprise including all geographies and business divisions.”
ibm.com/download/standardsoftware/?
9% remove it
 
Powered by Should I Remove It?

The file ospw32.exe has been seen being distributed by the following URL.

http://w3-01.ibm.com/download/standardsoftware/.../ospw32.exe

Scan ospw32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.