home

39615-660128-bing-maps-3d.exe

Virtual Earth

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from d1ob5g40gc5b6g.cloudfront.net and multiple other hosts.
Publisher:
Microsoft Corporation.  (signed by Microsoft Corporation)

Product:
Virtual Earth

Description:
Virtual Earth 3D Install

Version:
4, 0, 1003, 8008

MD5:
1daf1dc5da52a6e015f0ef2f9f239bc9

SHA-1:
f2e9d7662c8a20eee27d40d41df55682460a5262

SHA-256:
196edf3f82d8bc6b4a9ce829a2b165f84f5044a6b29ee1cb5087ea7e1e8af2c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/27/2024 1:05:39 AM UTC  (today)

File size:
1.2 MB (1,234,768 bytes)

Product version:
4, 0, 1003, 8008

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\39615-660128-bing-maps-3d.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 11:40:29 PM

Valid to:
3/7/2011 11:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
3/9/2010 10:57:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:AMy0ktcMsFMAHhN40ARHFpILVxaspyiZuMC/pR9aOBz+:Av0kuDFMc80uF2asSMMpR91c

Entry address:
0x2154D

Entry point:
E8, E5, 5F, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, CE, 1A, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 4E, F5, FF, FF, 83, C4, 14, 83, C8, FF, E9, 99, 00, 00, 00, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 3B, FB, 74, 21, 3B, F3, 75, 1D, E8, 9E, 1A, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 1E, F5, FF, FF, 83, C4, 14, 83, C8, FF, EB, 6A, B8, FF, FF, FF, 7F, 89, 45, E4, 3B, F8, 77, 03, 89, 7D, E4, FF, 75, 1C, 8D, 45, E0, FF, 75, 18, C7...
 
[+]

Code size:
231.5 KB (237,056 bytes)

The file 39615-660128-bing-maps-3d.exe has been seen being distributed by the following 32 URLs.

https://d1ob5g40gc5b6g.cloudfront.net/34/337432/.../Setup.exe

http://install2.optimum-installer.com/o/.../Setup.exe

http://it.win-install.info/adobe-audition/download/.../93

http://www.official-drivers.com/setup.exe

http://indir.gezginler.net/i/10740/.../

http://cdn.airdlr.com/downloads/bundles/ads/new/.../setup.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_glo7

http://get1.ddlmedia.info/.../Get?p=7302&d=24543&l=1694&n=0&clickid=2015942949&d1=16538&d2=-1&d3=-1&d4=-1&d5=-1&filename=setup

http://bi.sciagnij.pl/0/.../Setup.exe

http://pf.vitplatform.com/crawled_soft/3/.../39615-660128-bing-maps-3d.exe

http://cdn.airdlr.com/downloads/bundles/ads/new/flash/.../setup.exe

http://flv.softpzivrubajjui.net/n/3.1.13/.../Setup.exe

http://flv.softpzivrubajjui.net/n/.../Setup.exe

http://2.track342ut.com/d/.../MjAzNnw0NDI4fEFFfDN8MXx8|1abca9f3a62dcf5a68068d827db66d21|f8a691a1-f33c-11e3-8cb8-002590f00f96

http://xqhcpf4.r0kr3xkbix.com/Mw6ZuN-D8aTFtNkN4Gkqn4yqpjfuhk4Tad-IRsMC6mv9ogVJd0g6RTNoHL6otp_aekU6QpkaFeTDyLvFS8rMvAciAvM9MwRnwMXZKRkaQcROZ_hK3cqbljgGdJ2H64H3?sbb=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

http://dlp.nicdls.com/lv1/151/Setup/560/.../B9s9Dp8G

http://ttb.mediaplayerinstaller.com/download/request/.../UD79NFnL?PubID=[VALUE]&subid=2059725849

http://a.cloudfiftyfive.com/NCIC/20121020191253494E434647493034_f4f0bec7-651f-4e08-b68d-9243eca021cc/.../Setup.exe

http://pf.toggle.com/s/3/.../39615-93660-microsoft-virtual-earth-3d.exe

http://ttb.bwnopz4r0r.com/download/request/.../dEJqsMxb?__tc=1412220393.197&lpsl=4474d6672978090a32d177b570e9a201&expire=1412306741&PubID=5744_1514_1392&tgu_src_lp_domain=www.newallsoft.com&ClickID=7362765529&fileName=Setup

http://go.microsoft.com/.../?LinkId=72623

http://www.srv2trking.com/LTSanitizer.aspx?u=http://.../aff_c?offer_id=44&aff_id=1024&url_id=98&aff_sub=09_6249590_d99492f5-4ec3-45d4-b8aa-27ddc9886736&step=2

http://dl.cdn.chip.eu/downloads/.../Bing-Maps-40_10.exe

http://install.oinstaller6.com/o/.../Setup.exe

http://dl.cdn.chip.de/downloads/.../Setup_40_10.exe

https://go.microsoft.com/.../?LinkId=136695&CLCID=0x409

http://go.microsoft.com/.../?LinkId=136695&CLCID=0x409

http://tamindir.com/indir/MjAxMy0wNS0xOCAyMjo1ODoyOA==/virtual-earth-3d/.../4.0-beta

http://www.tamindir.com/indir/MjAxMy0wNS0xOCAyMjo1ODoyOA==/virtual-earth-3d/.../4.0-beta

http://download.microsoft.com/download/A/D/E/.../Setup.exe

Latest 30 of 32 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.