home

aomwin200ea24.exe

Canon Inc.

This is a setup program which is used to install the application. This is installed with multiple programs including Canon Utilities My Printer. The file has been seen being downloaded from pdisp01.c-wss.com and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

MD5:
743322167dd132e6ce084b29e7ef4567

SHA-1:
db93c57868e247e0e3c9815146736bfa1d9cac3b

SHA-256:
f5bf2b7ffe1685876fca3dd3d33c5949d4dcc8f3f5bcf67efaf56b68ff6994d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:09:47 PM UTC  (today)

File size:
29.7 MB (31,130,960 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\aomwin200ea24.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
5/17/2009 6:00:00 PM

Valid to:
5/18/2010 5:59:59 PM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
442F9C58B61E1D9833719F449E43668A

File PE Metadata
Compilation timestamp:
7/23/2007 11:30:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:ytz66F3e+crqk8ewDkK+F5WsZUKyt6cAHaN2XSirccdQsNEWXSrM9:ubc+ZN4K6W9Kyt6782XSirccdQCEyUM9

Entry address:
0x7EB8

Entry point:
E8, 19, 28, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 10, 75, 20, E8, A4, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 35, 15, 00, 00, 83, C4, 14, 83, C8, FF, E9, 80, 00, 00, 00, 8B, 4D, 0C, 3B, CB, 56, 8B, 75, 08, 74, 21, 3B, F3, 75, 1D, E8, 75, 15, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 06, 15, 00, 00, 83, C4, 14, 83, C8, FF, EB, 53, B8, FF, FF, FF, 7F, 3B, C8, 89, 45, E4, 77, 03, 89, 4D, E4, 57, FF, 75, 18, 8D, 45, E0, FF, 75, 14, C7, 45, EC...
 
[+]

Entropy:
7.9975  (probably packed)

Code size:
60 KB (61,440 bytes)

The file aomwin200ea24.exe has been discovered within the following programs.

Canon Utilities My Printer  by Canon Inc.
Publisher's description - “Canon My Printer is a useful program to help you operate your Cannon printer easily, can change the settings such as the paper source settings and provides you with information on how to solve problems such as ink smudging.”
www.usa.canon.com
8% remove it
ScanSoft OmniPage SE 4  by Nuance Communications Inc.
OmniPage is an optical character recognition application available from Nuance Communications. OmniPage supports more than 120 different languages.
www.nuance.com
6% remove it
 
Powered by Should I Remove It?

The file aomwin200ea24.exe has been seen being distributed by the following 12 URLs.

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjI2NTAx&cmp=ACM&lang=JA

http://static.letoltokozpont.hu/letoltokozpont.hu/driverek/.../aomwin200ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjI2NTAx&cmp=ACY&lang=FR

http://download2144.mediafire.com/a05aewg2re4g/.../ip1880 driver win7.exe

http://ec.ccm2.net/es.ccm.net/download/.../ip1900Win7Ea24.exe

http://www.afterdawn.com/software/.../download.cfm?version_id=22865&software_id=2526&mirror_id=8895&installer=0&perion=0&air_installer=0

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjI2NTAx&cmp=ARH&lang=ES

http://download1413.mediafire.com/347k8a23s3wg/.../ip1880 driver win7.exe

http://download998.mediafire.com/aon2g1cf7zmg/.../ip1880 driver win7.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjI2NTAx&cmp=ACB&lang=EN

http://gdlp01.c-wss.com/gds/5/0100002265/.../aomwin200ea24.exe

http://files.canon-europe.com/files/soft35869/.../aomwin200ea24.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.