home

morgan_multimedia_mjpeg_codec_65247.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
d3a451b6318ae2033e0b6f308526c16c

SHA-1:
341685d84806581c2b9d9eec8cc6668002237158

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 12:03:11 AM UTC  (today)

File size:
437.3 KB (447,814 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
11/20/2001 5:29:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:C9JDYj/N09o2Jz/gWdQHXBFqyUjwQicLrCMBr2:CvMjC9o2VIjKFJicLeMp2

Entry address:
0x4E9A

Entry point:
83, EC, 5C, 53, 55, 56, 57, FF, 15, A4, 80, 40, 00, 8B, F0, FF, 15, A0, 80, 40, 00, 05, E8, 03, 00, 00, 89, 44, 24, 14, FF, 15, 28, 80, 40, 00, 8A, 06, 33, ED, 3C, 22, B3, 20, 75, 3F, 46, 8A, 06, 84, C0, 74, 09, 3C, 22, 75, F5, 84, C0, 74, 01, 46, 38, 1E, 74, FB, 80, 3E, 2F, 75, 7E, 46, 8A, 16, 80, FA, 53, 75, 24, 8D, 46, 01, 8A, 08, 3A, CB, 74, 04, 84, C9, 75, 17, FE, 05, 50, BB, 40, 00, 8B, F0, EB, 56, 3A, C3, 74, D3, 46, 8A, 06, 84, C0, 75, F5, EB, CB, 8B, 06, 3B, 05, 50, 83, 40, 00, 75, 15, 8D, 46, 04...
 
[+]

Entropy:
7.9533

Packer / compiler:
Nullsoft PIMP Install System v1.x

Code size:
27 KB (27,648 bytes)

The file morgan_multimedia_mjpeg_codec_65247.exe has been seen being distributed by the following 11 URLs.

http://gsf-cf.softonic.com/341/685/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11567&instance=softonic_es&type=PROGRAM&Expires=1439090356&Signature=S1hyGxMGWqK6iXXw7MRWw2255Fe6y18K3w5cg5u9PNtcCWKMqtO7cckS6PTBchcKOp9Uq0ZLScM~VVSmQRelRSaWcIpw5f8KcEvWjeLWpTgsD6ySd0CVmZtsuIiCNOoeItWBFLTa7Z0vOhpoB6Mff4DlEUyMijXt-iSqkGrjlWg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=m3jpegv3.exe

http://download907.mediafire.com/qotixi9u2rwg/.../m3jpegv3.exe

http://download1082.mediafire.com/qat6qz2gfxeg/.../m3jpegv3.exe

http://download1082.mediafire.com/ed5cide912zg/.../m3jpegv3.exe

http://download1082.mediafire.com/xumt7bnwbcug/.../m3jpegv3.exe

http://download1082.mediafire.com/dmznvvo5c9ig/.../m3jpegv3.exe

http://download1082.mediafire.com/z8ezcwjaxe5g/.../m3jpegv3.exe

http://download1082.mediafire.com/q3yrrvunvuhg/.../m3jpegv3.exe

http://download1082.mediafire.com/am46qt0fd6wg/.../m3jpegv3.exe

http://download951.mediafire.com/18228odondvg/.../m3jpegv3.exe

http://gsf-cf.softonic.com/341/685/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11567&instance=softonic_en&type=PROGRAM&Expires=1426456772&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=WJqWkdLus84E0aoBU7MoJk0BKFdOuxb4SgyvOKWiZ1UlhBHjEI0Anq0e1Oi0j2~LkI1cAyLR-Dc8vBqJRex2U67IYPd7R31tf9~uK0zAvKUiY-AQd0GbIh5R56ef1OcVbEghxU33vj8MSlg4ZbClB~lHZvUOo0zxRgpBE1HNnuo_&filename=m3jpegv3.exe

Scan morgan_multimedia_mjpeg_codec_65247.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.