msdb405.exe

StuffIt

Smith Micro Software, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from register.cloud.wacom.eu and multiple other hosts.
Publisher:
Smith Micro Software, Inc.  (signed and verified)

Product:
StuffIt

Description:
StuffIt Resources DLL

Version:
12.0.1.23

MD5:
fe8b2637d5cb4b8d6ff815ea5c275f87

SHA-1:
96b09ed8113f81cad3897bbb96ae960edd7cea2d

SHA-256:
201e04af07c7cfbfd9febb046b593353dd2e52da26c07a01647a5d3c78d6e660

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:32:41 PM UTC  (a few moments ago)

File size:
197.9 MB (207,489,184 bytes)

Product version:
12.0.1.23

Copyright:
Copyright (C) 1995-2008 Smith Micro Software, Inc. All Rights Reserved.

Trademarks:
StuffIt

Original file name:
Resources.dll

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/7/2011 1:00:00 AM

Valid to:
1/16/2014 12:59:59 AM

Subject:
CN="Smith Micro Software, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Smith Micro Software, Inc.", L=Aliso Viejo, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
21A5C66CB44C62585DE9A2F13D4A8C1F

File PE Metadata
Compilation timestamp:
5/22/2008 10:26:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6291456:Qfi+XWbzV80UaSKGzVO84fgTTEpZAFuKuEn:SoV7lGBjTCouK5n

Entry address:
0x383C0

Entry point:
60, BE, 00, 60, 42, 00, 8D, BE, 00, B0, FD, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
76 KB (77,824 bytes)

The file msdb405.exe has been seen being distributed by the following 26 URLs.

http://register.cloud.wacom.eu/download.aspx?token=fca3fa63-9ab3-4478-aaf3-5e801ed6c8d7

http://register.cloud.wacom.eu/download.aspx?token=b4cadf30-bf16-4453-8d69-630579c1c7dd

http://register.cloud.wacom.eu/download.aspx?token=c363a492-79aa-4f85-abc2-ae74f4a34630

http://register.cloud.wacom.eu/download.aspx?token=c20de91a-7daf-42c5-a53d-b063de2baf1d

http://register.cloud.wacom.eu/download.aspx?token=0bb378c3-7dc5-4ddd-b17b-0c9400f2c58f

http://store.smithmicro.com/securedownload.aspx?key=6mqHcM3lpMaDHOMslqMJ4AdqUMSt4m8hs07k3bqrAuN11tFDZVneXPkyxioqHZZ3&p=download.php-customaction

http://register.cloud.wacom.eu/download.aspx?token=2339008d-0729-4e70-ac04-41d45ffd7dfb

http://register.cloud.wacom.eu/download.aspx?token=f99ad7e7-a585-4786-8232-8369dc411b26

Scan msdb405.exe - Powered by Reason Core Security