wl movie maker portable 2011 15.4.3538.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dc618.4shared.com.
MD5:
3499773b9f88a719f459eae0809241c8

SHA-1:
92b92851eae1ec95872b5c491b108fe45ee2400d

SHA-256:
59be5797e6e2f54a8689202d63b011d6cc11ee2ffe30117f0277c392b2c9c54f

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/4/2024 5:13:37 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.PWS.Siggen1.44805
9.0.1.05190

File size:
1.2 MB (1,282,821 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wl movie maker portable 2011 15.4.3538.exe

File PE Metadata
Compilation timestamp:
8/27/2011 5:25:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:YAp60hoCMsSZjUIzURlmug3QjgHuCIOWzwU8HMsWJ+qTjo8up/S0P:c0hoCMsgJzU/gFHu7OzO+qTjo8up/S+

Entry address:
0x8B0F6

Entry point:
E8, 9C, 6D, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 64, AC, 4C, 00, 75, 02, F3, C3, E9, 1E, 6E, 00, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 56, 33, F6, 39, 75, 0C, 75, 1D, E8, 26, 58, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, C8, 07, 00, 00, 83, C4, 14, 83, C8, FF, EB, 27, FF, 75, 14, 8D, 45, E0, FF, 75, 10, C7, 45, E4, FF, FF, FF, 7F, FF, 75, 0C, C7, 45, EC, 42, 00, 00, 00, 50, 89, 75, E8, 89, 75, E0, FF, 55, 08, 83, C4, 10, 5E, C9, C3, 8B, FF, 55, 8B, EC, FF, 75, 0C, 6A, 00, FF, 75, 08, 68, 97, 21...
 
[+]

Code size:
673 KB (689,152 bytes)

The file wl movie maker portable 2011 15.4.3538.exe has been seen being distributed by the following URL.

Scan wl movie maker portable 2011 15.4.3538.exe - Powered by Reason Core Security