» talkon10.exe
Overview
Analysis
File Details
Downloads (8)

talkon10.exe

토크온

SK Communications

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from software.naver.com and multiple other hosts.

File name:

talkon10.exe

Publisher:

Product:

토크온

Description:

토크온 설치 파일

Version:

1.1.1.0

MD5:

7190d1e9a16bf10c041eb1d2f9cf409c

SHA-1:

753c51f06a974f8e092b06ff07ca5823b84e36e2

SHA-256:

6b4c455f537551d6fc58f76e3a8f17b5941174729ff12aed5fb73c89c7e27e60

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

12/25/2024 5:14:57 PM UTC (today)

Scan engine

Detection

Engine version

Comodo Security

ApplicUnwnt

19867

Vba32 AntiVirus

Trojan.Genome.cu

3.12.26.3

File size:

16.3 MB (17,115,304 bytes)

Product version:

1.1.1.0

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\talkon10.exe

Digital Signature

Signed by:

SK Communications

Authority:

VeriSign, Inc.

Valid from:

8/29/2013 9:00:00 AM

Valid to:

9/29/2015 8:59:59 AM

Subject:

CN=SK Communications, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SK Communications, L=Seodaemun-gu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5EBA5C7F4F896549E6CAAAA17C6B9559

File PE Metadata

Compilation timestamp:

12/6/2009 7:50:46 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

393216:VfqERbtI+bzRSmNI2rRo6sDYfX+kPAe0Ida+YcCUNMrWCLgBV:VfbRbNbkmNE6LvldEcCHKCY

Entry address:

0x323C

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00... 
[+]

Entropy:

7.9998

Packer / compiler:

Nullsoft install system v2.x

Code size:

23 KB (23,552 bytes)

The file talkon10.exe has been seen being distributed by the following 8 URLs.

http://software.naver.com/api/.../httpDown.nhn?softwareId=GWS_000098|all|GWV_004358&key=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

http://software.naver.com/api/.../httpDown.nhn?softwareId=GWS_000098|all|GWV_004358&key=c3e883d563ac6dca37a13af4159a80e61a714662a65399f4a8b8ccb14c0ed3473829294f348a9094ef1635fec26408233dff458ef8aa5b9a851b7c249c32be76eb88eabd80a0872300c83786812d2c142e943365f84a12bae489f9fd6602ef6655350adef53bdbbf287345c111f876aa425235249f044cacb729cbac1d55732bb0a31c0f781ffa7317832a6985cf0e11dec260cb845018ba1ca64d40fd511ae668cd4aca305d8c61253322cea11dfe82d8325c274fdf338580a78a15147af263d4455db2fde4f6580c5fb73f892912ebf95666c5f2fab575304cf7f14a774e1a96e8e26e4db51bbe9c403da1359a349a17f3cb022837fd7ca1fc8c5628a49940

http://software.naver.com/api/.../httpDown.nhn?softwareId=GWS_000098|all|GWV_004358&key=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

http://low.software.dn.naver.com/f4b6ad4977ab8009690176bd4ebbf8c8/.../TALKON10.exe

http://high.software.dn.naver.com/f4b6ad4977ab8009690176bd4ebbf8c8/.../TALKON10.exe

http://software.naver.com/api/.../httpDown.nhn?softwareId=GWS_000098|all|GWV_004358&key=e65eb1c82b98a51f8359e0452618181f67255f5ace7917c4f9a24477cb83df977a6d4ad7bed33f65743c7effb4ba8af7757cabca05f53c36d031a974c8b728ac409152d24a3f9b434a4cf72af416d08515c8480fcaacee9b94eb152b36a3742cac0e06d53161507f486d612f1d85ef30927f5386940dfc503482fdabca25a201541903ef9c2696033dd0239795d9d9e6cbf4378c3599e8e6f5bc449311db1fadd6d61d0eac746f2283fc175eb60dddabbc045ef45dffe3f8ea6b84e11248d398e4aa56ece9e9909084130d28a9dc7c885c3e4ded6f5e988b031e3236ac1d39de3ae8cbcdc9f89db262c097161ef39446971547c04b100619e5c8317caea7c24c

http://software.naver.com/api/.../httpDown.nhn?softwareId=GWS_000098|all|GWV_004358&key=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

http://nateondownload.nate.com/.../TALKON10.exe

Scan talkon10.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.