home

x12-30107.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from dnplus3.simfile.uplusbox.co.kr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.4518.1014

MD5:
d835add67c55e54c94324c911fccf087

SHA-1:
d3807164e6c3dc6d3fceb99eb68b213ed53dddb9

SHA-256:
3c7a06d331422b950f20cc6855fb101921d8debbd140e7d12164e1a4dda25eee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/15/2024 12:38:45 AM UTC  (today)

File size:
298.3 MB (312,820,720 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\x12-30107.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 12:43:46 PM

Valid to:
10/4/2007 12:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/26/2006 2:02:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6291456:G7dnaA8iwO6OHgI1XP5kcSTGtGGakfV+gKvy:GFaATuOAI1Wca20yq6

Entry address:
0x56405

Entry point:
E8, 26, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 70, B9, 00, 30, E8, A9, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, EA, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Entropy:
7.9997  (probably packed)

Code size:
510.5 KB (522,752 bytes)

The file x12-30107.exe has been seen being distributed by the following 50 URLs.

http://dnplus3.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuS2VIdEtTRSxLaEY4

http://dnlimit2.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuTD9Ac0t5QSxNQlY4

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp4dV9Dqu1LLGe_TQ9Gy9eCKgKG3mdSd02jSMblTMI7aT7z8zdw2LtHv0IxmUEOAIdteRow5PvCOHx2iSrB2l-RmRBcQwD-UyBS60Nr9Wg4oHO2BM7C5cqC2QaM2uU7g8U8GzcyYlqorxWdIfCqrmbG_yDQ6VwIvU3Q0XPA3zVrsB&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenpyLLpreHS_1-L4NWKpAFaC5AQx8tDSwBi7AA-n6qMqHFMklZGSd_00PDYgD1jx_aa0b77d-wwFZ1JGhxlVcVm2sC6C4pTOJ_rP_t7yqZeDGlYyHv8ItsIIc8Gi1IDPedhVJHZAqYUYCbzDEWw8m25Jw&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7jlfVHEEyTlJL38anbLBJUzW9z4xiUwHI2Gom8CC-2nVXg8r1-YHruPKQqF-WPgE_dfGcWtk0610pLG_l919GK0gfFBCUbqINe0BoMr22wDqpZIaFJ34Hh4UUWVjdTjNIEfJ4mFxB5bZ5yJpO-wfbM&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7-c95QbFZMwpZe6-8lvYZJfKN2nPscyNIy6PGNZwzwpA-W8ZELQeTvlpGNFxcxmY9Kvw1G1l8R0PBGchUVVRRdmziBrBOUP0lSOk0U-oiXWTf0hTmuYNhLzYilPeQjsJ6HKBA4qyKcW7FYBWslUvt0&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp0MPr_sKuIPDIjG8Pz0z19dBUeHEDi5Y407IDsxhoRrseLZplhMFgvwmEZqGBL-f4dsiW8dPvkft-OdywgHSz_o4IMjw-ivqcwp_ZUJhhHed0tX1Sxu-Cbd8Q8Lt79aF90VLdJUYqELA21vE13Z65aw&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp2S0-qXu13dw-wnL_9lI0TwNL0AEJHpLgllUvGqAlJP70LIvl_knxtCrnS4AtALg7yaBqQcaKs0z0EZH6bdjuimPUtRuFOMIPkiNhV2b1oigtrzp2-i_tApy4jD9VQcylA&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp-rR02MjOJKanGptUfJ0btNhc-eA-cbI3QgQVfELMMLBP3Hsw-VO27FXFdhSfG1hkLqgA8xkFR_zis5p0xg2DlQW9w0NLlY2BuSt2ToQ-o1f6u-Yx8UTDEEZFhmepCeFib4wx90zvLLiBDQY590Jqm_tAl0_Ku_5sv7xrnfNithz&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7jlfVHEEyTlJL38anbLBJWXtPZC8kFPXQOdQqPqNIWiJMAC-aZKQwkCWbVsyARQy1K8sKJ_OlnBUFi82ZwYtzZOOBkTj46BDnshtmnkBv9Iwf_vMncIYgsDjaaijbMwztlnbaSahp_o6HHjbm6k5jw&pv=2

http://s8903.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7jlfVHEEyTlJL38anbLBJW7ZkaX-OFEvbiHPfWD_LG2QWNIhdxPfgHxUhIADym0vg6hGdPqZiWFIj_cHIuK-sgN5bT7v58OXAguvthhgJ-Ji8OyWpJjt3tGUZ2D4tc8bv6JZbUecG7BZOlqQuqKNB0&pv=2

http://s8903.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7-c95QbFZMwpZe6-8lvYZKjGXd-kJC4fEwt6OUOp59NkrCVkVF9Pp-PLwqkjs7F9hZTSQG44T8fgrbQPd82ZU9NaVdGdjBvVFRv8Aoh8LLLgDEfb33t55jnerP0ZVWRm7nCPaazK6zVPBLz-Aqdve0&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp-K9W6uPsVUFJyfks78Vc3l2dA-UnMs_lwWEvasm8BXPYI7V0fPurPqntR4MEPr7k6SO9zcEaQJxRkRLdK578LvRO6YmG50JkyravY_N8Myg8p7wutgWptifT0hUa_36ewbVsFYhaDtXOI93Z6yy5Xo&pv=2

http://dnlimit2.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuS3VmLUxTSS9NUj44

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp-K9W6uPsVUFJyfks78Vc3lZbCM23Q7vlcHmhnl0LBDW0dymIPCv0h2s87YxahbplB4oWgLd6u_GdviMo0yDrnm7T0wbPpUquFT-eDlw3qDvw6FEQZ2R2wexj4JM9j8YoHEdF0HvY0_Wk9ER4Me5CHk&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenpzHhIKdZ1ekbto8mUdWYZAzfssm546n_0cR6OFCnY-8dwRLGUybhOTHm5E1-pPmVsmW1v8hvrWxtWoWadA8pwV47wfAQDTl3G3Wdy0nvHq-utwy4IPPFdNuqQ4z3NHdh8x3I8OlADPqQwAQ21jyNJw0&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7jlfVHEEyTlJL38anbLBJWbORVBex1lQkWH1RX9Pr0FKOLBK3Gr3fhPIwzd4Xz8oGte6XRLHyhbvEPhSo5VbymyJmNLJqD1wpt9XDzWqz0wyg3EVVC9TA2FUsNaiW2xdgerPpgJsk_p5AWxFkj8N9w&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7-c95QbFZMwpZe6-8lvYZKVeTqYFYD41yheOJlKUDYXz4WMTuSTwhQmw0f_ddEGBFsjROG-5Ul4H0tk83jO9yQAeBiIyUhh5k-8w9xK5gQhCmeosDximPdjBRnAPXMuNoPbWvLrVFRQ5OIX_q4qfEA&pv=2

http://secure.download.windowsupdate.com/v7/secure/private/applications/2007/08/.../X12-30107.exe

http://www.freedownloadsplace.com/Transfer/File-1/.../31574

http://s8903.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenpxbANFFrvJ9BA80Nk003JD2BkUs2G-TzrvwOFbREfKdxiBQKv5ozK4lIf-u3JSptT3fkGmDZ_WbOBqLXCI0cj3dVMEMaiEcCgV_mmnAJL9KD1tHcKrJ4f3XRUW5TMJsEGIx6capjsI8hk8lBjPABqWQ&pv=2

http://dnplus3.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuTD9AMEpTXy5MaD44

http://dnlimit2.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuS3Vqc0p5VS1LaEI4

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp__ZyeVNU-ec_stYrH3EYlLHmCUU7a7rBtkTIYI-QItHxiv-1FzI72iPuzDzpTI4JFUjLMZdG4LtaZD0Yz2f3AzcXaK6w9NaCNuxFe4fEdqbklfQHwVGYnfGCp6Pi2hBo9iBjYCebX6IN5Fpmyohv0s&pv=2

https://web.archive.org/web/20121031232255/http:/msft-dnl.digitalrivercontent.net/msoffice/pub/.../X12-30107.exe

http://dnlimit3.simfile.uplusbox.co.kr/cgi-bin/.../YUxPLmVIT0MuS3VQLkxDRSxMUlY4

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp93hzedSYR_7lMfqB5K1uhgwICvwVh0uGuTrrU4dldljyK8rar2T2UQLWN31Goz3X7MyRjRDR-l_grT91J2P_k_KeoZw-LaAZOJM-N9In-rK5Bl-9ERQgdTFNOfXx5C1HyNMEuxUsgW-fFa8umKWS9E&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenpzHhIKdZ1ekbto8mUdWYZAx2wuTE25xoaKrg3FYffkJhcc_LadZVTSyuABb7-930cNG6Lcqr5wzd3P6gMNfSlKuJZ54eXMcLLoUvGjVlsivnI1ovGkpRjwgoTXmfhV8SwIB6EpjW1r6BPNuzzikvENWiFr6Gc1_wSBNu_Qvua1J6&pv=2

http://s10729.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenp7-c95QbFZMwpZe6-8lvYZIHz9VJ4-fQD7FeWOKkUXEQUNU9GcllTnEXSRbpWqKiP87QVLJXgk8dOup6rcTwjBzGpG_GzI_TePtQsbU1u6Xn9HAKGKAv6qfMhht2xvBq3xbQVaxFnVEuYkDzPMjNINE&pv=2

http://s6524.chomikuj.pl/File.aspx?e=0HYhU7lNQm99pUscTMenpx2SmpD-oFuwdzc7n86MuuzdYxf8mV_BrnEJpKstSm3McpXJzj24BFdp3wV2YRbDhNclvkszOZhCGMtFEPI77t8Zvaz-1Ndu0EVVJQsuS0rdufERPK9dfTHJzYZG19ka2-S747a6ZoSQrkgC9XRXmQw&pv=2

Latest 30 of 78 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.