home

myroom_w-2no1iokcti.exe

Launch35

Hewlett-Packard Company

Publisher:
Hewlett-Packard Company  (signed and verified)

Product:
Launch35

Version:
10.3.0.9019

MD5:
86f35a3790d1e30dce7ee12f45bfe31c

SHA-1:
a4e585a1fb014b7fc369d0dd5724ef175c9363a7

SHA-256:
3c75d86fe802d68260a614453b1d52598a057f698a5ac5060234e6990dd41b02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/16/2024 5:15:47 PM UTC  (today)

File size:
45.5 KB (46,608 bytes)

Product version:
10.3.0.9019

Copyright:
Copyright © 2012

Original file name:
Launch.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\myroom_w-2no1iokcti.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
COMODO CA Limited

Valid from:
4/30/2015 5:30:00 AM

Valid to:
4/30/2016 5:29:59 AM

Subject:
CN=Hewlett-Packard Company, OU=HP Cyber Security, O=Hewlett-Packard Company, STREET=3000 Hanover Street, L=Palo Alto, S=CA, PostalCode=94304, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
50F7DCBC28D3D606376CA95DF9523B3B

File PE Metadata
Compilation timestamp:
10/14/2015 2:24:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:rGIR97StX+36wbAeVBm6SNW3DwlleLEMjQjuxJm+TpBFriAj:rGIR97StX+36wbfVBjSNW3e84ELx/tLZ

Entry address:
0xAD3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1165

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
35.5 KB (36,352 bytes)

The file myroom_w-2no1iokcti.exe has been seen being distributed by the following 43 URLs.

https://www.myroom.hpe.com/Attend/.../2wvp45a7c-r7

https://www.myroom.hpe.com/Attend/.../z-fszmivjf88

https://www.myroom.hpe.com/Attend/.../si0ny20ij6kt

https://www.myroom.hpe.com/attend/.../5edmib99d0lc

https://www.myroom.hpe.com/Attend/.../bkflz-vtbaot

https://www.myroom.hpe.com/attend/.../itknv7so442t

https://www.myroom.hpe.com/attend/.../snwj6ckfjff2

https://www.myroom.hpe.com/Attend/.../e8worw5ct2jq

https://www.myroom.hpe.com/attend/.../r5vk9mpoea5u

https://www.myroom.hpe.com/Attend/.../gewcctwo9guc

https://www.myroom.hpe.com/attend/.../htxk13ydnvci

https://www.myroom.hpe.com/Attend/.../wsfygnak8nk2

https://myroom.hpe.com/Attend/.../4khs8wjff71u

https://myroom.hpe.com/Attend/.../gcrc5-z3ym5t

https://www.myroom.hpe.com/attend/.../k7eeq90f20d8

https://www.myroom.hpe.com/attend/.../pvbbbtfic1jo

https://www.myroom.hpe.com/Attend/.../i-lbu1j8qe8y

https://www.myroom.hpe.com/attend/.../vsew95su79xd

https://www.myroom.hpe.com/Attend/.../y88vbhhvruom

https://www.myroom.hpe.com/attend/.../0jg41dj77sls

https://www.myroom.hpe.com/attend/.../2sead2abdndf

https://www.myroom.hpe.com/attend/.../3v0k99j219vw

https://www.myroom.hpe.com/attend/.../0lk4un2m43hy

https://www.myroom.hpe.com/attend/.../f07dmj7n0988

https://www.myroom.hpe.com/Attend/.../j2tvuhnju4f1

https://www.myroom.hpe.com/attend/.../-3xgan9o18m5

https://www.myroom.hpe.com/Attend/.../anp4hz0y1p-z

https://www.myroom.hpe.com/attend/.../d8y09vbulglr

https://myroom.hpe.com/Attend/.../roc6qglasiyx

https://www.myroom.hpe.com/Attend/.../q541o0kkhqvq

Latest 30 of 43 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.