home

ds115e.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.helpdrivers.com and multiple other hosts.
MD5:
ee508b34369a506f864622209e9e50ff

SHA-1:
a8f073676eeb716fe80dfc93e69f7e32cb74c278

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:57:35 AM UTC  (today)

File size:
6.4 MB (6,727,444 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\ds115e.exe

File PE Metadata
Compilation timestamp:
7/4/2001 5:27:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:ZThsa6/Y/vtaxQY5Y0ohj2Rf2/omvae7ZI:1hF6ivtE5YVN2d2/zI

Entry address:
0x1394

Entry point:
55, 8B, EC, 83, EC, 50, FF, 15, 34, 60, 40, 00, A3, C8, 71, 40, 00, A1, C8, 71, 40, 00, C1, E8, 08, 25, FF, 00, 00, 00, A3, D4, 71, 40, 00, A1, C8, 71, 40, 00, 25, FF, 00, 00, 00, A3, D0, 71, 40, 00, A1, D0, 71, 40, 00, C1, E0, 08, 03, 05, D4, 71, 40, 00, A3, CC, 71, 40, 00, A1, C8, 71, 40, 00, C1, E8, 10, 25, FF, FF, 00, 00, A3, C8, 71, 40, 00, E8, 2E, FC, FF, FF, FF, 15, 30, 60, 40, 00, A3, CC, 72, 40, 00, E8, BA, FC, FF, FF, A3, B0, 71, 40, 00, 83, 3D, B0, 71, 40, 00, 00, 74, 09, 83, 3D, CC, 72, 40, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
20 KB (20,480 bytes)

The file ds115e.exe has been seen being distributed by the following 3 URLs.

http://www.helpdrivers.com/english/.../

http://download2.konicaminoltaeurope.com/openmind/technic/swfw/mswdipho.nsf/4221BBBECC4691F249256EAD003BEFD2/.../DS115E.EXE

http://download2.konicaminoltaeurope.com/C1256AE800480E96/LogDwl?OpenAgent&4221BBBECC4691F249256EAD003BEFD2/.../ds115e.exe

Scan ds115e.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.