home

f-d5100-v102w.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from crossgate.nikonimglib.com.
MD5:
e22a54976e1dde13b0086d74e31ce60e

SHA-1:
87bc5082522a3c17eb89e54e6d90a853d725a4a8

SHA-256:
9a38b660a8a0fba1a24ecb7774c74e40a2679c0e0482b8499cf0ba8222239796

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:16:43 PM UTC  (today)

File size:
8.4 MB (8,768,008 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\f-d5100-v102w.exe

File PE Metadata
Compilation timestamp:
5/22/2007 12:59:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
196608:U4+h+SR2CZEVqoAS0xFCvx3jpQ1O58m8N3do:U4hS2cxUxTG1Oqm8Ny

Entry address:
0x1000

Entry point:
8B, C9, F2, FF, C6, C7, C0, 0C, 26, F6, 51, 85, C8, 76, 04, 85, C8, 86, E4, 81, E7, E8, FA, D0, 76, F3, 0F, AF, CB, 8D, 05, 22, 94, 35, 4C, 2B, D2, 21, D8, 81, CA, 85, 09, 00, 00, 69, CA, 2F, DB, 93, 17, 89, C7, 81, F2, 62, 0C, 00, 00, 4A, 8B, F1, 8D, 2D, A0, 72, E2, 3A, 8D, 05, 6B, CE, CA, 00, FF, C3, 69, CF, D4, CA, 02, 27, 81, FA, B7, 02, 00, 00, 0F, 87, DD, FF, FF, FF, 87, DD, F3, C6, C4, 28, 0F, AF, CF, E8, 00, 00, 00, 00, 8D, 2D, B0, 4B, 9F, 65, C7, C1, 36, 5C, 2C, 3A, 69, F6, FB, 6C, C6, 89, 20, E8...
 
[+]

Entropy:
7.9985  (probably packed)

Code size:
80 KB (81,920 bytes)

The file f-d5100-v102w.exe has been seen being distributed by the following URL.

http://crossgate.nikonimglib.com/.../redirect.do?P=R6wsz88&R=rn7uS75&L=98COa00&O=42zhU00

Scan f-d5100-v102w.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.