home

POS_SEL.EXE

POS

sss

Publisher:
sss

Product:
POS

Version:
1.02

MD5:
9a9bce9135c07df7258172f2ebe46027

SHA-1:
4f3a0faf802838ea366bac4d3cb3705d6a2da11c

SHA-256:
b197e3dff47619571ba17e5f18172a0eae827e224f009fcb0f234a5dc8572064

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:39:11 AM UTC  (today)

File size:
2.3 MB (2,445,312 bytes)

Product version:
1.02

Original file name:
POS_SEL.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pos_sel.exe

File PE Metadata
Compilation timestamp:
6/29/2014 4:28:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:60BWRie8dh+a8FM0MpFPNWSZtVyXje+sL01zIFzChij2qn4a3:RBWRp8dh+bFMHpdNW0tVyXje+sL01zIN

Entry address:
0x124C

Entry point:
68, E0, 13, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, B7, C2, 2F, 78, 15, 41, 2A, 48, A1, 80, 37, B6, FC, E1, DB, 05, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 50, 4F, 53, 5F, 41, 4E, 53, 41, 4E, 00, 34, 36, 7D, 23, 32, 2E, 00, 00, 00, 00, 01, 00, 10, 00, E4, 56, 42, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 38, 5A, 42, 00, D0, 3A, 65, 00, 00, 00, 00, 00, C0, 56, 9C, 13, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7681

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.3 MB (2,433,024 bytes)

The file POS_SEL.EXE has been seen being distributed by the following URL.

http://wwl1581.daum.net/Mail-bin/view_submsg3.cgi?TM=jOi5o GuQw2PQfx3GhmtosVPAvd sUz9d3Z/VPq2SKzyy6upQtZAO1bm1DZg7/vXuLGD4yFZHot5mWpg3 T 1b8gltprRhF53dOg9yspGYeMP4utw151l5z6PekFDT5iQsrkilFUFH6Vi3kLJZC44Tm307BWdy0QFKUdh1Uh 1ylwI/o FmaJtSn7HRYz37ilF09YuZK0zSZxVnlvtL vIk3t0u4pXqvKSQmrtG 3k682ioenSessOhmG6jYOe0kMApOW HODZERLwqmVEMj94lG/hTur5R3GDtwZMwEADftDy0zln/3ReOCXnn1iO8zOWB TjpBXM/QV7eJxcY iQTRYel86VkskgIhxTa3yiGp3dTwgZYpCJE7zLdyQ1WLcVfehajrSp/JBk0LlgxIcslhoD9qBmWIHvmc9OwUKwnnZkCV6qJpPIlXyFtQZ5M0azqEklKA47uPzUv0uj1PUQ7ELAheQpEb0zReqdfBFCNmFxP5u1i/mh4UfC7KuFEWVthxEU4q0SixkIlkvOXDE EOCOQX L9VBAVpXhQrpcDPmmVk91rhJlEr0G11S hE0/QhFQGGdUqXlzHoHOcQBPpx4fA9sq51z4Rz4ogLqDW GULbZXRPbO1GGgn8x98vhBFMCKrIChQjcXtfKCA3sQny5sGhUzuI/.../x-msdownload&attnum=2&attid=0.2

Scan POS_SEL.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.