home

ufrii_v2.70_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from downloads.canon.com and multiple other hosts.
MD5:
1d163a401f22960a919f7d5832c729b7

SHA-1:
4fede6146bf056470a7cd9efc22f775a37ed4e28

SHA-256:
ce36d8b7ef14be5fcaa72ce734cddcd7a4e1b1baa5c30e3e7491671ee399961c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:42:01 PM UTC  (today)

File size:
22.8 MB (23,945,728 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ufrii_v2.70_setup.exe

File PE Metadata
Compilation timestamp:
4/19/2000 2:39:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
393216:TSB4lX4AbVsedfkTCVBakldcZwCkI77rNwvmQFtiUP13XZLz:uMX4yNdfJBakldowCV776ma1R

Entry address:
0x38F8

Entry point:
53, FF, 15, 60, 70, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 8A, 48, 01, 40, 33, D2, 3A, CA, 74, 0A, 3A, CB, 74, 06, 8A, 48, 01, 40, EB, F2, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 64, 70, 40, 00, 50, E8, 38, F8, FF, FF, 50, FF, 15, 68, 70, 40, 00, 5B, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 55, 8B, EC, 51, A1, 08, B6, 40, 00, 83, 0D, A0, B4, 40, 00, FF, 56, 33, F6, 39, 35, D4, AF, 40, 00, 89, 35, CC, B5, 40, 00, 89, 35, 04, B6, 40, 00, A3, 84, B7, 40, 00, 75, 05, E8, 47, D9, FF, FF...
 
[+]

Packer / compiler:
WinZip, 0x32-bit SFX v8.x module

Code size:
20.5 KB (20,992 bytes)

The file ufrii_v2.70_setup.exe has been seen being distributed by the following 10 URLs.

http://downloads.canon.com/cpr/software/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/132728e171f/d4e6b10d2080cf91a5d834a71284883b50f7565ae35e84060f0c21a7827c7c1a323d7a071b6a30a86c9c00a3b40e19695830bd3d/1/32/36/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/1247ac856dfe1044/78b69e98024df76fb3def1edb8e6b3efceb362ac613324b17e2350999bd299ec68844ee64fc5a8d2129bba37dbfbf81d57fcb2ef/1/32/36/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/1247ac99408d3d0e/7c0e57876075d72dad42d53732f924768be9dcd1521d49fb3fe708f6f55e0df1571859004270292a27143cf710bf0ca7581e1c0b/1/32/36/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/1d39c9e95d2a90e/0650960943c2dee8b102a9009a77a0da3c85d392a3ce8e7f46adb27a309ee2eb3ebae98526f7b263907814fd71e4de72582f41af/1/32/36/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/1d3f7904a2e1ef8/b78891735eb31885e281379b838cf81fb493cbcf127aa9ce5334e5c1bfa082f546be02ba60254ee139920201de40a660584ac2f5/1/32/36/.../UFRII_v2.70_Setup.exe

http://downloads.canon.com/bisg2016//drivers/.../UFRII_v2.70_Setup.exe

https://d2.driverscollection.com/2ecbf4f466a43c/95a43c9c71baa71b10b1bd34305f4b8c3f3b2be6d842a354cc9ffc365b3039b67e1bc087f252b30d45c24693c73f752d5728c174/1/32/36/.../UFRII_v2.70_Setup.exe

http://www.usa.canon.com/cpr/software/.../UFRII_v2.70_Setup.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=1d163a401f22960a919f7d5832c729b7,1749391_1286357723&time=1417251103&auth=c613a56a99df88b3dd7e757ac7aeb134&file=UFRII_v2.70_Setup.exe

Scan ufrii_v2.70_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.