home

mpnex40.exe

MP Navigator EX

Canon Inc.

This is installed with Canon MP Navigator EX 4.0. The file has been seen being downloaded from webmail1p.orange.fr and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

Product:
MP Navigator EX

Description:
Canon MP Navigator EX

Version:
4, 0, 2, 0

MD5:
d76b925a2e51a17b21070f5fbf9329e7

SHA-1:
2ab687cf8d4c52bd92b5bfe96a28742efdf6e2e2

SHA-256:
560398ecc60b45bfaea616dac3329b5d9648d13b81c413b5cc0697a1aa4ac7f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 2:49:50 PM UTC  (today)

File size:
9.1 MB (9,522,296 bytes)

Product version:
4, 0, 2, 0

Copyright:
Copyright CANON INC. 2011 All Rights Reserved.

Original file name:
mpnex40.exe

File type:
Executable application (Win32 EXE)

Language:
Japanese (Japan)

Common path:
C:\Program Files\canon\mp navigator ex 4.0\mpnex40.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
4/17/2011 8:00:00 PM

Valid to:
4/17/2012 7:59:59 PM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
008981DDCE4837C76E0B37280542680A

File PE Metadata
Compilation timestamp:
6/16/2011 2:46:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:d3PAPnGyK0ztZrr3a/eEsXY8ytITWB+/WTHlSBbkIfn5kj9hzE:ZA+yK0ztxkeA8ytIaB+/68fnWj9hzE

Entry address:
0xDF271

Entry point:
E8, D6, 93, 00, 00, E9, 17, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE, 8B...
 
[+]

Entropy:
6.0648

Code size:
1004 KB (1,028,096 bytes)

Autoplay Handler
Display name:
CanonMPNEX40PictureOnArrival

CLSID name:
YouTubeUploaderLib.YouTubeUploaderLib


The file mpnex40.exe has been discovered within the following program.

Canon MP Navigator EX 4.0  by Canon Inc.
Canon MP Navigator EX 4.0 for Windows allows you to scan, save, and print photos and documents. You can also edit images, or attach images to email using this application software.
www.usa.canon.com
4% remove it
 
Powered by Should I Remove It?

The file mpnex40.exe has been seen being distributed by the following 2 URLs.

https://webmail1p.orange.fr/webmail/fr_FR/.../Download.html?CHECK_ATTACHEMENT=TRUE&NAME=mpnex40.exe

https://uk-mg42.mail.yahoo.com/.../download?mid=2_0_0_2_251770_AKYk5C4AAA9tUt0E3gAAAAxT7YA&fid=Sent&pid=2&clean=0&appid=YahooMailNeo

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.