home

strike7_firmware_v203.exe

Cyborg_Strike_7_Firmware_SD7_00000046_32And64Bits_Firmware

Madcatz Europe Ltd

This is a setup and installation application. The file has been seen being downloaded from drive.google.com and multiple other hosts.
Publisher:
Mad catz   (signed by Madcatz Europe Ltd)

Product:
Cyborg_Strike_7_Firmware_SD7_00000046_32And64Bits_Firmware

Description:
ST (SD7) 32And64Bitsbit Firmware webinstall

Version:
00000046

MD5:
d76d747de8633b70023471a55ea7ff1e

SHA-1:
7397b8505a50a0f93244d3865fbc8e31861e6d45

SHA-256:
d39a7d95ab8fffc2ab5d7aa599baf15beb4b8d4bce23f4ae79062be031e5d285

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:17:15 AM UTC  (today)

File size:
20.8 MB (21,760,688 bytes)

Product version:
00000046

Copyright:
Copyright (c) Mad Catz 2013

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\strike7_firmware_v203.exe

Digital Signature
Signed by:
Madcatz Europe Ltd

Authority:
VeriSign, Inc.

Valid from:
6/4/2012 1:00:00 AM

Valid to:
7/6/2014 12:59:59 AM

Subject:
CN=Madcatz Europe Ltd, OU=IT Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Madcatz Europe Ltd, L=Shenley, S=Milton Keynes, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
792B598B60EB8E2EC58B94C0400B0E81

File PE Metadata
Compilation timestamp:
9/5/2001 6:02:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:survT0ijXrFZ4i/5XkIBfzwjB5VEVzXJA3RmDcqgV:30iXJZ4ihHzwjLVEVzXShscd

Entry address:
0x8947

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 33, 41, 00, 68, 80, BA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 5C, 63, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 58, 63, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 54, 63, 41, 00, C1, E8, 10, A3, 50, 63, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 31, 41, 00, A3, 24, 8A, 41, 00, E8...
 
[+]

Entropy:
7.9989

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

The file strike7_firmware_v203.exe has been seen being distributed by the following 4 URLs.

https://drive.google.com/uc?id=0B2j0-fcyDfnHcDhwT3pjWE1ncFU&export=download

http://fichiers3.touslesdrivers.com/.../STRIKE7_Firmware_v203.exe

http://qd.baidupcs.com/.../892892e676e33593bb78be819c097d02?bkt=p2-nj-693&fid=1497791915-250528-956915804220429&time=1422642453&sign=FDTAXERLBH-DCb740ccc5511e5e8fedcff06b081203-WmSSnKOEb8sZAEFKWg KIgW19Os=&to=qb&fm=Qin,B,U,ny&newver=1&newfm=1&flow_ver=3&sl=81723468&expires=1422643053&rt=sh&r=342801840&mlogid=1247414034&sh=1&vuk=-&vbdid=967326002&fin=STRIKE7_Firmware_v203.exe&fn=STRIKE7_Firmware_v203.exe

http://d.pcs.baidu.com/file/892892e676e33593bb78be819c097d02?fid=1497791915-250528-956915804220429&time=1422642453&expires=1422643053&rt=sh&chkv=1&chkpc=et&sign=FDTERVYA-DCb740ccc5511e5e8fedcff06b081203-uA1h3OtUzR3Y1F39lRIjniLjdtQ=&r=342801840&sharesign=6 nJSjlIClvxpnZFQnpPokHeOZcUm6vEqeot516OcvTs4NpT9CxDb 9EW2wMEKGflX6vmt5wkBumV/DftXmC0cOvTlp7qaLv4o/XjGPSLluTY c8YfsPTi10d9SpjIKct/IBb5hHQWxhlAy7kze05elb3lsXtfRqRaTpuRWmHMck0oT5sWBIfxd2tRL6kVE8tjWUQoDLLWmyuD/DCMLHpPGKxiH5264UHfYX7cIdE/x7kcbRarYeknNyqTjyGL6vpMjJcz5VTlfbZe3i RkfXEu09mro3ixv OZ7dD56d6Qf70/0GRshG9vr9xOBG31CINJF6IDnhI7bwr8YQvmFMqsl6g01o0jczrQtztv/KStUpPvj2QG0m1z1TmSpiRcyfUUCCdp6G0WJHOX23jk/KPDbTxxtAYYeo1Ikduxgq5vIA/p8VXD WFlBTLhzlWqjtZw7fpSs318IgA4I yB29DTq8Ugw8YXtj9C1K1cD/g50sEvi3jhoqNWwCbhoijtM59 riC9dJxytE9o8gGAR1vNiygq0gn/.../03PcAb&sh=1

Scan strike7_firmware_v203.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.