» m5emissary.exe
Overview
Analysis
File Details
Downloads (4)

m5emissary.exe

InstallAWARE

MimarSinan International

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.

File name:

m5emissary.exe

Publisher:

MimarSinan International (signed and verified)

Product:

InstallAWARE

Description:

MimarSinan InstallAWARE Installation

Version:

3, 0, 0, 2005

MD5:

40f0415bff30314c72790c7300807952

SHA-1:

6654fb464371ef1a3abeae65acafebd23a407013

SHA-256:

a1c066e1a190a33936f6755a20c282953fa05be6b34a668f72bfff554bc2bd10

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

8/25/2025 1:46:01 AM UTC (today)

Scan engine

Detection

Engine version

NANO AntiVirus

Trojan.Win32.MulDrop.twgte

0.30.26.4751

File size:

1.7 MB (1,794,800 bytes)

Product version:

3, 0, 0, 2005

Trademarks:

MimarSinan and InstallAWARE are trademarks or registered trademarks of MimarSinan International.

Original file name:

dependent.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\m5emissary.exe

Digital Signature

Signed by:

MimarSinan International

Authority:

Comodo CA Limited

Valid from:

9/30/2004 7:00:00 PM

Valid to:

10/1/2005 6:59:59 PM

Subject:

CN=MimarSinan International, O=MimarSinan International, STREET=MeSa Koru Sitesi Lale Blok No: 72, L=Ankara, S=Cayyolu, PostalCode=06810, C=TR

Issuer:

CN=Comodo Code Signing CA, O=Comodo CA Limited, C=GB

Serial number:

00BCFB660F3EA042D90D854AFDBEFB8683

File PE Metadata

Compilation timestamp:

11/12/2004 3:08:47 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

49152:mrYicoafA2ifaLMoDS2JDqULCfvDBcJCaauflPykL:mrYicoT1mjDBJ2mqvmJAufv

Entry address:

0xF826

Entry point:

6A, 60, 68, 68, 62, 41, 00, E8, BE, 03, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, D2, 17, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 60, 61, 41, 00, 8B, 4E, 10, 89, 0D, E4, BC, 41, 00, 8B, 46, 04, A3, F0, BC, 41, 00, 8B, 56, 08, 89, 15, F4, BC, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, E8, BC, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, E8, BC, 41, 00, C1, E0, 08, 03, C2, A3, EC, BC, 41, 00, 33, F6, 56, 8B, 3D, 54, 61, 41, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

7.9684

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

83 KB (84,992 bytes)

The file m5emissary.exe has been seen being distributed by the following 4 URLs.

http://lb.cdn.m6web.fr/d/c/a/74dd9ea506b7db4a96928d5222139f3e/5890ea57/longtail/0169/.../m5emissary.exe

http://lb.cdn.m6web.fr/d/c/a/2e2f40b751bc633a1193ff622bef4011/58013d57/longtail/0169/.../m5emissary.exe

http://gsf-cf.softonic.com/665/4fb/.../file?SD_used=0&channel=WEB&fdh=no&id_file=5292&instance=softonic_en&type=PROGRAM&Expires=1477982731&Signature=EeMaEl4rgxsTLZpjRW9h7WmqBY~rwIjC31h1D5rFv9y~-QeFuWZLelwugqUVrD-JANtMq7lCZzTTlb9ubx1Wl7bCZCfEHAPuUaJEtpjboLwooZwKKRgQcvMuH8mNFPlWidjseSyZ0ayrx9ddsJagg68ZkrHcINcNdAL~gA-yuwA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=m5emissary.exe

http://www.mimarsinan.com/.../m5emissary.exe

Scan m5emissary.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.