home

pcd432-roadsigns-setup.exe

Driving Test Success ROAD SIGNS

Focus Multimedia Ltd

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dbdl.co.uk and multiple other hosts.
Publisher:
Focus Multimedia Ltd.   (signed by Focus Multimedia Ltd)

Product:
Driving Test Success ROAD SIGNS

Description:
Driving Test Success ROAD SIGNS Setup

MD5:
8f25ba985b5101259745f5059cc01d68

SHA-1:
e58b0b3fbc8728ee2c8e2b6b754f9950fdc27077

SHA-256:
82287e73bfb3eca639a614fef22708ac3b17c89b7293414da8fef50ea5169d52

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:01:25 AM UTC  (today)

File size:
365.1 MB (382,843,712 bytes)

Copyright:
Copyright © 2012 Focus Multimedia Ltd.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Focus Multimedia Ltd

Authority:
COMODO CA Limited

Valid from:
5/30/2012 1:00:00 AM

Valid to:
5/31/2013 12:59:59 AM

Subject:
CN=Focus Multimedia Ltd, O=Focus Multimedia Ltd, STREET=The Studios, STREET=Wheelhouse Road, STREET=Lea Hall business park, L=Rugeley, S=Staffs, PostalCode=WS15 1LH, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
78C614F87DFECD06543466D97852FD26

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6291456:mZNz532mYyUfLj+DJML4e4PsXs/BzHCqKbH/8JoEtPgZe9Uo/mQm2w8:3TyqWDJypJXGzHCqa8eEtPg6/vw8

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9995

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pcd432-roadsigns-setup.exe has been seen being distributed by the following 3 URLs.

http://dbdl.co.uk/.../4kmruxxv9

http://u179557.sendgrid.org/.../click?upn=JYjMFVr99GMozAS6rbdr1K-2F2fzCGCmyeosaOcqDB-2FE1ozClwgFfw3-2FjqQaqoDy3G_o8TEs-2Fvnu5i9gPFpzateKxM8vAfQBiPGqTlAxKuh4OxG-2FOoZpoQkHfjEiZNwokt7nYNmqQ-2Bt28pqO9WpJISp8xYD27OvuaoN2FUntlOB-2F9QIjacTFxGyZQLr51S6s1qO6h7HZ1euJvycjE57nR5py2iGSCyaB-2B8-2FyhWLtaZs-2FuXOCTlH1-2B7QN3p6fENrY-2BNUKfGjbwgparjXN7eLoPgejA-3D-3D

http://u179557.sendgrid.org/.../click?upn=JYjMFVr99GMozAS6rbdr1K6ID2veap1PD9naVL76cP31Svzj7852aSF4yCklcuNx_-2FxGe1oG9OQxM32YSf1LLJ095ryoLbGOpxB6da5VJ4a2IFeNlNezqZObrHJGpUcUd9eoYGKidGBxtgBiDfInWALLM3rPyxxuAww9Yc1xz81ZX7nnPDY-2Fj5a3dEp90sIrEY-2Fuht2jXTp5x-2BtZ0sHW48pKT6OWRmsYpJOeXe9EpoDzaO9dNxTm3RHTGaC0cZ0Um4C4uS7mOQzPDjpqFllkuMA-3D-3D

Scan pcd432-roadsigns-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.