3dp_chip_v1109.exe

3DP Chip

3DP

The application 3dp_chip_v1109.exe, “3DP Chip by 3DP(www.3dpchip.com)” has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from blogattach.naver.net and multiple other hosts.
Publisher:
3DP

Product:
3DP Chip

Description:
3DP Chip by 3DP(www.3dpchip.com)

Version:
1, 1, 0, 9

MD5:
523cd2b5075d50bd307bbbbc7e955ee7

SHA-1:
43257c513c1e9355252c2ff6ba8dc4bb986fb3f7

SHA-256:
d4f6ed4f131419e80610c899a008d5e18aff49bb8f3ad8197ad0dc7250104074

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
5/4/2024 10:41:35 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.CDB
1.3.0.4959

Reason Heuristics
PUP.3DP.Chip.Adload.Meta (M)
16.2.20.11

File size:
523 KB (535,552 bytes)

Product version:
1, 1, 0, 9

Copyright:
Copyright(c) 1999~2011 by 3DP

Original file name:
3DP_Chip.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
9/13/2011 2:33:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
12288:hPHuApAVowaUPHWxSIF5FXj+Qzhfcy3wT6/06H9q0mb/29StL:hPO8KowaGEiQzhfdw68D09StL

Entry address:
0x1000

Entry point:
68, 5A, C3, E7, E8, E8, 4E, 42, 46, 00, 66, 0F, AB, D8, 0F, 96, C0, 68, 94, CD, B8, A7, 66, 8B, 45, 00, 68, B8, 68, 37, 49, E8, ED, 4F, 46, 00, FB, D6, 00, 61, E9, 8E, D9, 45, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9106  (probably packed)

Code size:
4.4 MB (4,613,632 bytes)

The file 3dp_chip_v1109.exe has been seen being distributed by the following 2 URLs.

http://blogattach.naver.net/059019aabfe9e13d13f09fa79e7e027fdc89769978/20111004_155_blogfile/.../3DP_Chip_v1109.exe

Remove 3dp_chip_v1109.exe - Powered by Reason Core Security