home

nc200_windows_setup_wizard-1.1.0.exe

TP-LINK

Publisher:
TP-LINK

Version:
1.0.0.1

MD5:
cff8d206335268ced98967c1cc0f302a

SHA-1:
795d65972b5fe333318fc2949ebbeb01818afcda

SHA-256:
3b521e3bd6fc425cf8466146f752ac98e8de4fc65e2c6e23c3a1f5df8335ab6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 4:59:59 AM UTC  (today)

File size:
5.1 MB (5,396,732 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C)TP-LINK 2014

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\downloads\nc200_windows_setup_wizard-1.1.0.exe

File PE Metadata
Compilation timestamp:
8/19/2014 10:10:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:cldJDzfNKpy1IBIbuo4ygbIjgvsiVBJumwPNu0qa:s5f0ku1dP0nr

Entry address:
0x511000

Entry point:
B9, 30, ED, FD, 03, 68, 16, 10, 91, 00, 5E, 68, C4, 06, 00, 00, 5F, 31, 0C, 3E, 83, EF, 04, 75, F8, 90, D8, 90, FC, 03, 30, ED, FD, 03, 30, ED, BD, 03, 2D, E8, F3, 03, D8, 4D, B2, 03, CC, 45, B2, 03, 30, 5D, FF, 03, 31, ED, FD, 03, 30, 2F, 91, 03, 2E, 47, 8A, 03, 1A, 47, 8A, 03, A4, 90, CA, 03, 2C, 47, CA, 03, 18, 47, CA, 03, 30, 47, D1, 03, 2C, 47, CA, 03, 18, 47, CA, 03, 30, ED, FD, 03, 30, ED, FD, 03, 30, ED, FD, 03, 30, ED, FD, 03, 9C, 2F, 91, 03, 30, ED, FD, 03, 30, ED, FD, 03, 30, ED, FD, 03, 30, ED...
 
[+]

Entropy:
7.0833

Code size:
2.8 MB (2,925,568 bytes)

The file nc200_windows_setup_wizard-1.1.0.exe has been seen being distributed by the following URL.

https://d2baw28zdve8g3.cloudfront.net/autorun/.../nc200_windows_setup_wizard-1.1.0.exe

Scan nc200_windows_setup_wizard-1.1.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.