home

m026_m030c_swl.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from autodesk-map-2004.software.informer.com.
MD5:
6b14a309934e0d36f9fe570be0e08f6c

SHA-1:
6f9b0480550be5d2c6ef2bbdf0183e9174a68188

SHA-256:
fe6f8d3d3efc6d6e945524f82d9652d230eec62c86162a0ed8a0425e6112c8ac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/11/2024 3:35:52 AM UTC  (today)

File size:
5.4 MB (5,673,366 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\m026_m030c_swl.exe

File PE Metadata
Compilation timestamp:
9/23/2003 7:33:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
49152:gUZdtTrI26omQpnm4N/Cv0o5WNtTy9Xhd9sh/0fDQj4valwMmM+qcg4VdowugeAB:78CmQXaEJEswTFg4tuUUP0R6scvvy

Entry address:
0x527000

Entry point:
60, E8, 00, 00, 00, 00, 5D, 8B, C5, 81, ED, A8, A6, 01, 20, 2B, 85, 0F, AE, 01, 20, 89, 85, 0B, AE, 01, 20, B0, 00, 86, 85, 40, B0, 01, 20, 3C, 01, 0F, 85, BC, 01, 00, 00, 83, BD, 3B, AF, 01, 20, 00, 74, 33, 83, BD, 3F, AF, 01, 20, 00, 74, 2A, 8B, 85, 0B, AE, 01, 20, 2B, 85, 3B, AF, 01, 20, 8B, 00, 89, 85, 78, AF, 01, 20, 8B, 85, 0B, AE, 01, 20, 2B, 85, 3F, AF, 01, 20, 8B, 00, 89, 85, 7C, AF, 01, 20, EB, 61, 83, BD, 43, AF, 01, 20, 00, 74, 58, 8B, 85, 0B, AE, 01, 20, 2B, 85, 43, AF, 01, 20, FF, 30, 8D, 85...
 
[+]

Entropy:
7.9633

Packer / compiler:
ASPack v1.08.04

Code size:
44 KB (45,056 bytes)

The file m026_m030c_swl.exe has been seen being distributed by the following URL.

http://autodesk-map-2004.software.informer.com/.../

Scan m026_m030c_swl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.