» pro617-3_int.exe
Overview
Analysis
File Details
Downloads (10)

pro617-3_int.exe

Wacom Technology Corp.

This is a setup program which is used to install the application.

File name:

pro617-3_int.exe

Publisher:

Wacom Technology Corp. (signed and verified)

MD5:

c1eef068525f8fe3e02af7483ae82c69

SHA-1:

c901c12e7741ea8ab55174a25d16ba4f79a28e59

SHA-256:

fcb141bdc4e87c65d0db1794b85149f2bf690e7323c86bcb594a15a1d64c79d0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 9:36:07 PM UTC (today)

File size:

19.3 MB (20,187,000 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\pro617-3_int.exe

Digital Signature

Signed by:

Wacom Technology Corp.

Authority:

VeriSign, Inc.

Valid from:

2/1/2011 1:00:00 AM

Valid to:

3/1/2012 12:59:59 AM

Subject:

CN=Wacom Technology Corp., OU=Technical Services/QA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Wacom Technology Corp., L=Vancouver, S=Washington, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

495DF7F6735C3795EBEFFE03EC39C1B3

File PE Metadata

Compilation timestamp:

11/2/2009 9:24:15 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

393216:hYkles7zAzCT41MLdfkcdxAPM/f7eagbp2R3U6xY+GpMMKMLrxlYlGig/JkUQHmi:/r78zCk1MLdfZdeA7zCpI3NY+GpRKML4

Entry address:

0xAF1E

Entry point:

E8, 6E, 4A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, D0, 4B, 42, 00, 89, 0D, CC, 4B, 42, 00, 89, 15, C8, 4B, 42, 00, 89, 1D, C4, 4B, 42, 00, 89, 35, C0, 4B, 42, 00, 89, 3D, BC, 4B, 42, 00, 66, 8C, 15, E8, 4B, 42, 00, 66, 8C, 0D, DC, 4B, 42, 00, 66, 8C, 1D, B8, 4B, 42, 00, 66, 8C, 05, B4, 4B, 42, 00, 66, 8C, 25, B0, 4B, 42, 00, 66, 8C, 2D, AC, 4B, 42, 00, 9C, 8F, 05, E0, 4B, 42, 00, 8B, 45, 00, A3, D4, 4B, 42, 00, 8B, 45, 04, A3, D8, 4B, 42, 00, 8D, 45, 08, A3, E4, 4B, 42, 00, 8B... 
[+]

Code size:

76 KB (77,824 bytes)

The file pro617-3_int.exe has been seen being distributed by the following 10 URLs.

ftp://ftp.wacom-europe.com/pub/.../pro617-3_int.exe

https://d2.driverscollection.com/6e8583803290/a0b6d29a927008f1bd84aa9242932780b7451875e6db6268d05323a25b14e7ae2bc6ff66a01d0ac5be4a7a236a6bbdfd573406e3/2/174/40/.../pro617-3_int.exe

https://d2.driverscollection.com/2ecbf4c85415d5/de337de23336a4b0a56d8629f6569f2258e15e9a4af4c88ec1e6edeff8b489104bd983b49b72a9c55ca66329661d246657f715e2/2/174/40/.../pro617-3_int.exe

https://d2.driverscollection.com/45220964d3d83/7e0aa123c0515114fd3896ff901b9f7fdace280938fc1bec224d6d6aca1dda3980825f56ee99a497bb6b856cab7a9116568f2213/2/174/40/.../pro617-3_int.exe

https://d2.driverscollection.com/_7_14192142192242292342a0023c3870e5e00841aca2a32eea148/3d75c8da53fb25f36cd87ec1cdd7c1fdc69fe5285f10fc8e2b8be118d43c289e8ca2a563deb011b97cc7a8b1a687a3575829e474/2/174/40/.../pro617-3_int.exe

https://d2.driverscollection.com/1b015b808865faf/825b6f08d2710a9f6086d079aa40b5d8ae03604a1a14c89353baeccc2c1a6c6b6d0401ba1e46f0ac65fe54a43bfcccde57b7bcdc/2/174/40/.../pro617-3_int.exe

https://d2.driver.ru/1d39c9f191fbe53/a0a0ca2940ca22bd03c4bec48077162b8bb21304514bedbbf16bf1265549c7f9a31db9082b903f1e3547b5f54df319e75759c201/2/174/40/.../pro617-3_int.exe

http://downloadeu.wacom.com/pub/.../pro617-3_int.exe

https://dl.dropboxusercontent.com/.../0G6AYoGCQPuaBCbgQdGYAOQ1ijkCYpNJtHtDn4THqakE1lLeNa1inJczvr0rd28S?dl=1

https://www.dropbox.com/s/.../pro617-3_int.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.