home

Shopping Suggestion.packed.exe

Shopping Suggestion

WW3, LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from downloads.shoppingsuggestion.com and multiple other hosts.
Publisher:
WW3, LLC  (signed and verified)

Product:
Shopping Suggestion

Version:
1.0.0.0

MD5:
0d9d88c61a5372e99839bdbb986361a0

SHA-1:
ae4e0708625fb9715c462ce7057db019c5803301

SHA-256:
905d9d4add2c4f791dfe42ff23e0f0ba2e07e260fe3a599bc1c9123a1ea7dd6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 9:58:25 PM UTC  (today)

File size:
8.6 MB (9,035,576 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Trademarks:
WW3, LLC

Original file name:
Shopping Suggestion.exe

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\shopping%20suggestion.packed.exe

Digital Signature
Signed by:
WW3, LLC

Authority:
Thawte, Inc.

Valid from:
11/7/2012 2:00:00 AM

Valid to:
11/8/2013 1:59:59 AM

Subject:
CN="WW3, LLC", O="WW3, LLC", L=WESTBURY, S=New York, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
711EA065226FFB87440FDD3337A36CFB

File PE Metadata
Compilation timestamp:
7/4/2013 4:38:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:2fn2R47DAB2HsdCjoZO/0Va7yMDudoP65kL2FA3CBcTeN4fKp0bm1QHSxsjO9Ivf:Kn2R47DAB2HsdCjoZO/0Va7yMDudoP62

Entry address:
0x88D5CE

Entry point:
FF, 25, DC, D5, C8, 00, 00, 00, 00, 00, 00, 00, 00, 00, B0, D5, 88, 00, 00, 00, 00, 00, 00, 00, 00, 00, C5, 7A, D5, 51, 00, 00, 00, 00, 02, 00, 00, 00, 97, 00, 00, 00, 00, D6, 88, 00, 00, B8, 88, 00, 52, 53, 44, 53, AC, 88, 2A, C7, B5, 67, EC, 44, BD, 43, 5D, 07, 26, 22, FD, C2, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 42, 6F, 75, 72, 61, 73, 73, 69, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 56, 69, 73, 75, 61, 6C, 20, 53, 74, 75, 64, 69, 6F, 20, 32, 30, 31, 32, 5C, 50, 72, 6F, 6A, 65, 63, 74...
 
[+]

Code size:
8.5 MB (8,960,000 bytes)

The file Shopping Suggestion.packed.exe has been seen being distributed by the following 2 URLs.

http://downloads.shoppingsuggestion.com/Shopping Suggestion.packed.exe

http://shoppingsuggestion.com/.../Shopping Suggestion.packed.exe

Scan Shopping Suggestion.packed.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.