home

md5sum.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.tux-planet.fr.
MD5:
5be1175b43c09574731dd51d42f2a814

SHA-1:
6522a157bddfb9da5edc6a686c7c60b714473dbd

SHA-256:
0687b8ba5b775871dad2ea263ff826d98974705e65353f7b5359f7996f893611

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 6:43:22 AM UTC  (today)

File size:
35 KB (35,840 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\md5sum.exe

File PE Metadata
Compilation timestamp:
4/7/2007 9:33:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
768:hJBMUBJGHgT+eRfXENEmB/0wnCtXNQo3bwZ6/osVon/x72zrJlkPdPhyqVS:xMUBgHgT+eRfQto3kVsOkzdlkPU

Entry address:
0x1280

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, F8, C1, 40, 00, E8, B8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, F8, C1, 40, 00, E8, 98, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, 3C, C2, 40, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, 2C, C2, 40, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 5D, E9, 47, 56, 00, 00, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 53, 83, EC, 14, 8B, 5D, 08, 85, DB, 74, 2A, A1, A0...
 
[+]

Packer / compiler:
MingWin32 - Dev C++ v4.x (h)

Code size:
27 KB (27,648 bytes)

The file md5sum.exe has been seen being distributed by the following URL.

http://www.tux-planet.fr/public/software/windows/.../md5sum.exe

Scan md5sum.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.