home

f-d3100-v102w.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from crossgate.nikonimglib.com.
MD5:
4ef6770c527223b5e247024eedd88c30

SHA-1:
107602108ba245fda8046dbf270a5c58cd952733

SHA-256:
0823eaafb2a0a31e9cfc9c1e841652051459dcf4208fb123ab4e169bde6ae979

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:00:01 AM UTC  (today)

File size:
7.2 MB (7,566,496 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\f-d3100-v102w.exe

File PE Metadata
Compilation timestamp:
5/22/2007 11:59:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
196608:OdX7yP/BeZnluSwKWQ4fLeGn8YTyiLHW6Ap:IyXB4ljWPfLr82W6A

Entry address:
0x1000

Entry point:
EB, 02, 1C, 95, 8D, 15, AF, 73, 7A, 48, 2B, EE, F7, C5, 17, 56, 30, 07, C6, C3, F2, F3, 3B, E8, 0F, AF, D9, 2A, DD, 2D, 67, 88, 00, 00, FF, CD, 43, 8B, DE, 05, 49, 08, 00, 00, 8D, 35, D7, 2D, 25, 7F, 81, D7, E3, 46, 18, DE, 8A, D4, 41, 8A, CF, C7, C6, 7E, D0, 16, EE, B3, 3A, 89, C8, 57, 0F, AF, ED, 47, E8, 16, 00, 00, 00, 0F, AF, F9, 88, EB, B9, B3, 02, 95, AC, 0F, AF, CE, 70, 02, 8A, E9, 2B, C2, 0F, B6, DD, 5A, F2, F6, C7, 02, FE, C0, 85, EA, 78, 03, 0F, B7, F3, 14, 3D, 3D, CC, 1C, 19, C7, 0F, AF, FE, 6A...
 
[+]

Entropy:
7.9981

Packer / compiler:
FSG v1.10 (Microsoft Visual C++ 6.0 / 7.0)

Code size:
80 KB (81,920 bytes)

The file f-d3100-v102w.exe has been seen being distributed by the following URL.

http://crossgate.nikonimglib.com/.../redirect.do?P=Kvn0284&R=nnSP175&L=7llxE00&O=iMOan00

Scan f-d3100-v102w.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.