home

dropbox.exe

Dropbox

Dropbox

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.bitstagcontent.com and multiple other hosts.
Publisher:
Dropbox, Inc.  (signed by Dropbox)

Product:
Dropbox

Description:
Dropbox 2.2.13 Installer

Version:
2.2.13

MD5:
5a8dfc9991eeb43734198c48b6e8fad9

SHA-1:
26adfd5848ba96af80dadb36c6efe1a4cd76089f

SHA-256:
28e5087ace4b5ff56efe358fa437b4d70e5029efcb9a12c62e33c1803c6263df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 11:38:34 AM UTC  (today)

File size:
32.1 MB (33,641,960 bytes)

Copyright:
© Dropbox, Inc.

Trademarks:
Dropbox is a trademark of Dropbox, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads.exe

Digital Signature
Signed by:
Dropbox

Authority:
Thawte, Inc.

Valid from:
5/29/2013 5:00:00 PM

Valid to:
6/6/2014 4:59:59 PM

Subject:
CN=Dropbox, OU=Secure Application Development, O=Dropbox, L=San Francisco, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
565B4BF666AFCE227B5EA8974EE61667

File PE Metadata
Compilation timestamp:
12/20/2012 5:33:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:QMcnmCLmJijMvo60JJsLIObHWfEhFS228uBoknSHKfpu7p2tPdtZZ:MLm5w6aJoICHWfv228uBTGYtZZ

Entry address:
0x3AEA

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, DB, 5E, 89, 5C, 24, 18, C7, 44, 24, 10, 28, A1, 40, 00, 89, 5C, 24, 14, FF, 15, 34, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 90, 40, 00, 53, FF, 15, 30, 93, 40, 00, 6A, 08, A3, D8, F2, 42, 00, E8, FF, 29, 00, 00, 53, 68, B4, 02, 00, 00, A3, E0, F1, 42, 00, 8D, 44, 24, 38, 50, 53, 68, A0, 9A, 40, 00, FF, 15, C8, 91, 40, 00, 68, 48, A4, 40, 00, 68, E0, E1, 42, 00, E8, 63, 27, 00, 00, FF, 15, B4, 90, 40, 00, 50, BF, 00, A0, 43, 00, 57, E8, 51, 27, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
32 KB (32,768 bytes)

The file dropbox.exe has been seen being distributed by the following 18 URLs.

http://www.bitstagcontent.com/38eeEGQxgpf8XVye01HidhMbY0WhseNQQmWL5gYIcktoNOdK2F15rtgnkz1Ir_cQlpRWYZ1cLHSEpa75yJZgDNfKMhMqM4vWdDJeqoVfYm_qJl4ii9SO ubG EGVtlk4q9aI7XHhxG5s1Xv3aE5R6o5Bw4JVPvCqygsjkBkrx_s9Br9cNX Neg4ZRvPlD 8bnxfM75hC-GzYAAEQ3F5OTDYv9pR8OZs9f7EIMmUQifWEbiBsrylgj8b8zKPl6fU_PFoRETQE=

http://www.bitstagcontent.com/S0yTSueOSFHGnrFMdAKNyPuegiiSmNbIgVXgWEvSaLnb J9Rqc2u7FozlUFO7i_uTZEFrQRpJxrzj3wdXa8eyZHHLWsQPAUWAhgcjmoCNvLUMtsmb2nGG tnx0AvKbz lxDQ714 d5D1YKRgyev1jqa2YOXET4UPPHv97LKFcej2Y61Tm2NBU194RQKdEjRVsuVrbYVY-GzcAAETdFtN3thukW7ogPF 0vAsxZBKN9IVtIG6sKGONxPiuKQ5fr 6p3oLAQHYC

https://tmpfile10599.s3.amazonaws.com/download77/ic_trackings/4773/.../dropbox.exe

https://tmpfile10533.s3.amazonaws.com/download77/ic_trackings/4662/.../dropbox.exe

http://www.bitstagcontent.com/Nbq6LVDMu7Jqkyvrj90pfpaQ_4JwXpSFYSPJtYRXRK_h0qKMLXt3mVPoQmDO47mJwe9ofEtwR71OYTpnmJRz_ijBs5xIcZa8dHGFS5sGSHTrm4LVOYASfqyAFeXbopP7w2poYrKEYsIBtMio6IAWJkRKTiMkeRMnolnmMeEFnY9nceSrtRkmlJeu1BRNUfHHcZRVW6HT-GzcAAETdFtN3thukW7ogPF 0vAsxZBKN9IVtIG6sKGONxPiuKQ5fr 6p3oLAQHYC

http://download-1.com/softwares/.../Dropbox_2.2.13.exe

http://filehippo.com/download/file/.../

https://tmpfile4798.s3.amazonaws.com/download77/ic_trackings/25695/.../dropbox.exe

https://tmpfile3825.s3.amazonaws.com/download77/ic_trackings/21139/.../dropbox.exe

https://tmpfile967.s3.amazonaws.com/download77/ic_trackings/927/.../dropbox.exe

https://tmpfile2658.s3.amazonaws.com/download77/ic_trackings/1600923/.../dropbox.exe

https://tmpfile292.s3.amazonaws.com/download77/ic_trackings/866/.../dropbox.exe

https://tmpfile1005.s3.amazonaws.com/download77/ic_trackings/866/.../dropbox.exe

http://www.filepuma.com/file2/1378483854c3690/dropbox_2.2.13/.../

https://dl.dropboxusercontent.com/u/.../Dropbox 2.2.13.exe

https://dl-web.dropbox.com/u/.../Dropbox 2.2.13.exe

http://www.filepuma.com/file2/1377410323c3690/dropbox_2.2.13/.../

http://software-files-a.cnet.com/s/software/13/27/53/.../Dropbox 2.2.13.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.