home

ulisesrc_108a68e8-475a-47dd-b2fb-cf52455e5129.exe

UlisesRCHostv2

Actualize S.L.

Publisher:
Actualize  (signed by Actualize S.L.)

Product:
UlisesRCHostv2

Description:
UlisesRCHostv2

Version:
2, 0, 1, 3

MD5:
c976c8541fbd0452681fcce706b7a2e8

SHA-1:
a31871737e3a694f72f4621a4483fb99c3b1ca04

SHA-256:
647af8cfe5a772d1eeaecf6435793a1f6b2cbe09e0206d9bd35eb67ff863cb53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:35:48 PM UTC  (today)

File size:
212.6 KB (217,736 bytes)

Product version:
2, 0, 1, 3

Copyright:
Copyright © 2009

Original file name:
UlisesRCHostv2.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\downloads\ulisesrc_108a68e8-475a-47dd-b2fb-cf52455e5129.exe

Digital Signature
Signed by:
Actualize S.L.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/3/2010 6:00:00 PM

Valid to:
3/4/2011 5:59:59 PM

Subject:
CN=Actualize S.L., OU=INVESTIGACION Y DESARROLLO, O=Actualize S.L., L=Alcobendas, S=Madrid, C=ES

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6EA88C4825CFDB6549323063FE67EC39

File PE Metadata
Compilation timestamp:
11/29/2010 1:24:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:CJ9A/wyVUDZU3J63x0ZKDjIE2ZgBFji9qTBftYwX6fLpR8CtjSQfty:CJ9SVVUDq6Vjn2GFOYTBlE9RPSQI

Entry address:
0x1C6E2

Entry point:
55, 8B, EC, 6A, FF, 68, C8, 9B, 42, 00, 68, A0, F4, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 54, 61, 42, 00, 33, D2, 8A, D4, 89, 15, F4, 18, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, F0, 18, 43, 00, C1, E1, 08, 03, CA, 89, 0D, EC, 18, 43, 00, C1, E8, 10, A3, E8, 18, 43, 00, 6A, 01, E8, E7, 1A, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C2, 00, 00, 00, 59, E8, EA, 0C, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B1, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.2475

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
148 KB (151,552 bytes)

The file ulisesrc_108a68e8-475a-47dd-b2fb-cf52455e5129.exe has been seen being distributed by the following 9 URLs.

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=2395fe95-1791-4345-bca3-ae12e4a4e338

http://www.acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=25799343-88e1-43b8-b200-e994e694d61d

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=d47b3f1e-6257-4257-8298-cb1c85704f33

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=e59e87ea-4cef-4e6a-92dc-8bff134afb14

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=ee297899-134d-48ae-ae7b-897cdf53415e

http://www.acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=fa05f621-8481-49dd-9aad-746acab48a2a

http://www.acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=20729bd0-0520-4b5d-8663-17207012fd5c

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=338b7151-2bdf-491c-b927-5db329b1a624

http://acsupport.es/WebPages/.../ClientRemoteControlExe.aspx?session=9649f8e9-b059-4a63-9fac-18813f55a13d

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.