home

xml viewer.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from nocache.mindfusion.org and multiple other hosts.
MD5:
6dfdce0dd146a535729420c32d852fb8

SHA-1:
de3f564559f1699cb5ae9f8ca003e55b160ac6b6

SHA-256:
c7a7d376ed1df555ce8564954511324021f72625e438342aeb099aeca3f0f557

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:36:30 AM UTC  (today)

File size:
1.8 MB (1,932,733 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\xml viewer.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:PUTrqbfZTdoqx9wV3xytgkVci4onAzTqZ4dQ+8154kdOxHJyM0Izfnz:PUef9uq4hxytgVZz2adm2kcxHw+/

Entry point:
50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, 72, 7B, E7, 3E, 49, 29, 53, 72, 41, 7D, 1D, 00, 00, E8, 1E, 00, 0D, 00, 00, 00, 58, 6D, 6C, 56, 69, 65, 77, 65, 72, 2E, 6D, 73, 69, EC, 5B, DD, 93, 24, C7, 51, 5F, 49, B6, 6C, 81, 8D, 65, 3E, 04, 98, AF, F2, 61, D0, AE, 99, 6B, ED, ED, DE, 9D, 4E, 6A, CB, BA, B9, 99, 59, DD, A0, BD, BD, 63, 77, EF, 24, 21, C4, D2, D3, 5D, 33, D3, DA, 9E, EE, 51, 77, CF, EC, 8E, 30, 88, 08, 08, F8, 3B, FC, CE, 8B, 1D, 44, C0, A3, 1F, 78, 24, 02, 9E, 78, 86, 08, 3D, 02, 06, F3, FD, 61...
 
[+]

Entropy:
7.9988  (probably packed)

The file xml viewer.exe has been seen being distributed by the following 3 URLs.

http://nocache.mindfusion.org/XMLViewer.zip

http://s02.mydiv-downloads.net/download/aHR0cDovL3NvZnQubXlkaXYubmV0L3dpbi9kb3dubG9hZC1YTUwtVmlld2VyLmh0bWw=/5deb6/570e6c7984184/soft/dfiles/ru/win/XML-Viewer/.../XMLViewer.zip

http://www.mindfusion.eu/XMLViewer.zip

Scan xml viewer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.