» mlcymon_2.0.0.0_build20110809.exe
Overview
Analysis
File Details

mlcymon_2.0.0.0_build20110809.exe

Windows Codename Longhorn DDK driver

MUSILAND Electronic Technology Co.,Ltd

This is a setup and installation application.

File name:

Publisher:

Windows® Codename Longhorn DDK provider (signed by MUSILAND Electronic Technology Co.,Ltd)

Product:

Windows® Codename Longhorn DDK driver

Description:

Windows Installer Internet Download Bootstrapper

Version:

6.0.6000.16384

MD5:

340ec8592b2e427ca891864db5665c92

SHA-1:

877213ce99714823b9a9f8fc4af194dd0466e1aa

SHA-256:

9c0ea343cb3219e5b8d021d724bc09dd37faacdde62f12cb70b2b2e148d2e286

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 9:01:46 AM UTC (today)

File size:

16.5 MB (17,311,856 bytes)

Product version:

6.0.6000.16384

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\Musicland 01\mlcymon_2.0.0.0_build20110809.exe

Digital Signature

Signed by:

MUSILAND Electronic Technology Co.,Ltd

Authority:

VeriSign, Inc.

Valid from:

10/26/2009 7:00:00 PM

Valid to:

11/25/2012 5:59:59 PM

Subject:

CN="MUSILAND Electronic Technology Co.,Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="MUSILAND Electronic Technology Co.,Ltd", L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

317EFDA241C94EFDB637DDF81122D0E7

File PE Metadata

Compilation timestamp:

4/20/2011 2:09:18 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

393216:MmRzx3VWgS11Ddoi8+Uq1ZHUvQLajATjV9dhJEMC0RpnCGxkn6jRABZ9NVY+hchP:n13GpH8qLUvQZ9rJEMC0RpCGxkn6WRtq

Entry address:

0x10BAD80

Entry point:

60, BE, 00, D0, 43, 00, 8D, BE, 00, 40, FC, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.7729

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

16.5 MB (17,293,312 bytes)

Scan mlcymon_2.0.0.0_build20110809.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.