home

xp68-win-mg3500-5_70-ejs.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from pdisp01.c-wss.com.
MD5:
377464aca59abb9e6bfaa014a9a36f76

SHA-1:
c227d0df491fc439701773e1846d9dea03cc58d9

SHA-256:
1726df35a6fd836473fe52c6bf5a1f3664bce6b31951ffb37d13d3e70018b26a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:36:41 AM UTC  (today)

File size:
13.2 MB (13,811,280 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\xp68-win-mg3500-5_70-ejs.exe

File PE Metadata
Compilation timestamp:
11/2/2009 9:24:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:yFl3qSxoCjk2gREdnE/lakCYFtJZkRJT1Pu:y/3HvgC4atYFrmQ

Entry address:
0xAF1E

Entry point:
85, D6, F6, C6, 3E, C6, C7, 9E, 53, 68, 67, 74, D1, 00, 89, F9, 8A, C8, FE, C5, C7, C3, C1, E5, 93, A6, 88, F3, C7, C0, F9, E3, DB, 63, 81, C2, 46, 0A, 0C, 00, FF, C3, 0F, AF, CA, 81, EA, 9B, FE, 0B, 00, 0F, BE, C6, 81, F8, 8E, 46, B2, 1A, 32, EC, 4E, 87, FB, 3B, C0, 71, 02, 13, D2, E8, 0E, 00, 00, 00, 80, E9, 2A, FE, C6, 85, D3, 0F, AF, CD, F3, 49, 3B, E8, F2, F6, C6, 46, FE, C4, 0F, AF, FD, F2, 89, F8, 84, CB, 85, E8, 77, 06, 09, C1, 89, ED, 13, CB, 49, 0F, BE, D1, F2, 8B, C8, 8D, 0D, FF, 9B, E8, 3E, 8B...
 
[+]

Code size:
76 KB (77,824 bytes)

The file xp68-win-mg3500-5_70-ejs.exe has been seen being distributed by the following URL.

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwNTM0MTAx&cmp=ABR&lang=EN

Scan xp68-win-mg3500-5_70-ejs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.