home

mswlogo65.exe

Microsoft Windows Logo

Softronic Inc.

The executable mswlogo65.exe has been detected as malware by 8 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from mswlogo.en.softonic.com.
Publisher:
Softronic Inc.

Product:
Microsoft Windows Logo

Version:
6.04.009

MD5:
f03e2cd22de8650348349f2892d74520

SHA-1:
adf37278f5cdc9e1045038a4c8764954c398304f

SHA-256:
43daef0dc2db7633e75141f351b2271950d0037438e71eccb94a8948e68374ba

Scanner detections:
8 / 68

Status:
Malware

Analysis date:
4/19/2024 10:57:32 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Sality
160216-0

Dr.Web
Win32.Sector.30
9.0.1.05190

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.E.gen
4.6.5.141

Kaspersky
Virus.Win32.Sality
15.0.0.562

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

VIPRE Antivirus
Threat.4721115
47848

File size:
1.8 MB (1,850,955 bytes)

Product version:
6.04.009

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mswlogo65.exe

File PE Metadata
Compilation timestamp:
6/16/2000 11:30:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:FVVy7HfjtkbQvXpPrXhSonl1NY2pGsAaK99v:ZsLKQjNHpev9v

Entry address:
0x84A7

Entry point:
69, EE, A1, 36, 94, 6D, 0F, B7, CF, F6, C4, 23, 0F, AF, D9, 31, DD, FF, C3, F3, C6, C7, 28, 31, E9, 25, 1F, 88, DE, 31, E8, 00, 00, 00, 00, FE, C3, 0F, BE, F1, 84, E4, 75, 02, FE, C0, 69, D9, CB, 38, 29, 7E, 2D, CB, DA, 55, 9F, 04, AB, BA, 4F, 39, 00, 00, 43, 8B, F3, F3, 81, F2, E9, 39, 00, 00, C6, C3, E6, 6B, D2, 13, 01, FF, 69, FE, D7, 3E, 16, 07, 09, EB, 2A, E3, 1B, C5, 68, EB, 06, 00, 00, 0F, B6, E9, 12, EB, 85, D9, 5B, 85, CB, 74, 09, 0F, AF, E9, 69, FD, 25, 9F, 7C, 8B, F3, B5, 9F, 2B, D3, 69, CB, C9...
 
[+]

Entropy:
7.9351  (probably packed)

Code size:
68 KB (69,632 bytes)

The file mswlogo65.exe has been seen being distributed by the following URL.

http://mswlogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPUU9aRSUDg 7v0hqvPNHkQ /Sm GK2tvkuj2NRBh8vkRur6AERICWZ0fTug gGEL/.../eH27sw5VTIQWfszx6Y8mXjnlDX3M9IlwfZpk=

Remove mswlogo65.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.