home

myroom_7ai9mx-8zs-l.exe

Launch35

Hewlett-Packard Company

Publisher:
Hewlett-Packard Company  (signed and verified)

Product:
Launch35

Version:
1.0.0.0

MD5:
3fcd7b74b660dcd22d62a77d67601b21

SHA-1:
3e1f35bff5490292710618174045c122b13d9521

SHA-256:
09ea7ee3ca7ec88fc3767fab1a349ea14a5c82c97007775ce9448ba02fe26db3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:09:35 AM UTC  (today)

File size:
36.2 KB (37,064 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
Launch.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\myroom_7ai9mx-8zs-l.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
COMODO CA Limited

Valid from:
4/30/2015 3:00:00 AM

Valid to:
4/30/2016 2:59:59 AM

Subject:
CN=Hewlett-Packard Company, OU=HP Cyber Security, O=Hewlett-Packard Company, STREET=3000 Hanover Street, L=Palo Alto, S=CA, PostalCode=94304, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
50F7DCBC28D3D606376CA95DF9523B3B

File PE Metadata
Compilation timestamp:
6/20/2015 12:53:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:S2/tWMkwt1a7ux3ygeVkTm8Gg+5S8q1l2h5phlLZF99EfpL99n995acHDMlZ2JCT:H/ft1aixpeVBm6PpGI3T8+QGfBFribFq

Entry address:
0x86DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2475

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
26 KB (26,624 bytes)

The file myroom_7ai9mx-8zs-l.exe has been seen being distributed by the following 6 URLs.

https://www.myroom.hp.com/attend/.../gmdedk0b081-

https://www.myroom.hp.com/attend/.../yfgoe8vvhmw-

https://www.myroom.hp.com/attend/.../vjo0lsily7eg

https://www.myroom.hp.com/Attend/.../reo3nxnevzm2

https://www.myroom.hp.com/attend/.../dzmqqaf21e3l

https://www.myroom.hp.com/attend/.../qv-ykex0lpn8

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.