home

vs.mcafeeasap.com_mc_60_0a0700090d0d0d0401000f05_7_0_bellcanada_1_enu_11_.exe

McAfee Security-as-a-Service

McAfee

This is a setup and installation application. The file has been seen being downloaded from vs.mcafeeasap.com.
Publisher:
McAfee

Product:
McAfee Security-as-a-Service

Description:
Agent Only Install

Version:
6.0.3.138

MD5:
f5425c3e071a9649451fefc5a51db147

SHA-1:
fcc83425e8378867272d251f39249431cc295602

SHA-256:
6a604539d826a44cf511ad7adee486b3f5e57d904d3d8152441e33c177158baa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 5:58:17 AM UTC  (today)

File size:
10.7 MB (11,191,400 bytes)

Product version:
6.0.3.138

Copyright:
©1995-2012 McAfee, Inc. All Rights Reserved.

Original file name:
ToPsBDM.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vs.mcafeeasap.com_mc_60_0a0700090d0d0d0401000f05_7_0_bellcanada_1_enu_11_.exe

File PE Metadata
Compilation timestamp:
9/23/1999 8:50:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
196608:oy/rAIwGWh6dUspv8xyg879YcC6Dksay+BWd5zEeXtkwn3:oy/VxJ7gC9k6osj++4eXt/

Entry address:
0x2792

Entry point:
60, D2, D6, 8B, C1, 8D, 3D, 4F, D9, F5, 8D, 88, F8, 43, 0F, C1, D7, 80, F3, B0, C0, EE, BB, 8D, 15, 7A, D6, 0E, 43, 0C, 4E, 68, 28, 10, BF, 00, 80, D3, 56, 0F, CE, E8, 00, 00, 00, 00, 0F, C9, F2, 0F, CA, 0F, AD, D3, F6, DB, 4A, 80, F6, 2A, 81, F5, 76, 85, 00, 00, 0F, AF, DD, D2, D9, 0F, BD, C7, BB, 00, 00, 00, 00, 88, C5, 3B, F7, 73, 02, 3C, EA, 0F, BA, E5, AF, 0F, BC, FE, 0F, BC, C8, 81, C3, A3, 1E, 0F, 00, C0, FE, 2D, C6, C1, B6, 0F, A5, C8, 81, EB, A2, 1E, 0F, 00, 0F, AC, F6, 73, 0F, AD, CD, 0F, AB, CA...
 
[+]

Entropy:
7.9989  (probably packed)

Code size:
36 KB (36,864 bytes)

The file vs.mcafeeasap.com_mc_60_0a0700090d0d0d0401000f05_7_0_bellcanada_1_enu_11_.exe has been seen being distributed by the following URL.

http://vs.mcafeeasap.com/MC/VS60/.../vs.mcafeeasap.com_MC_60_0a0700090d0d0d0401000f05_7_0_BellCanada_1_ENU_11_.aspx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.