NM30.EXE

WindowsR NetMeetingR

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from www.applicationconecptclean.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
WindowsR NetMeetingR

Description:
Windows NetMeeting Installation Program

Version:
4.4.3399

MD5:
50ccd022e499fe111d74d139f7e3d117

SHA-1:
ede6210a5eb75432c7623288e367e4e02468dc14

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 7:39:22 PM UTC  (today)

File size:
1.6 MB (1,662,248 bytes)

Product version:
3.01

Copyright:
Copyright c Microsoft Corporation 1996-2004

Original file name:
NM30.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\documents and settings\administrateur\mes documents\downloads\nm30.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
10/25/2003 7:59:14 AM

Valid to:
1/25/2005 7:09:14 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610E7DA7000000000048

File PE Metadata
Compilation timestamp:
3/25/2003 8:08:18 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:mQ1T8y4KVjbhmgmTBojpzxd6JGj0FqaQe5SY:mby4ijbMrTBojpdUJ7sap

Entry address:
0x5D3C

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 5C, 11, 00, 01, 8B, F0, 8A, 06, 3C, 22, 75, 12, 46, 8A, 06, 84, C0, 74, 04, 3C, 22, 75, F5, 80, 3E, 22, 75, 13, EB, 10, 3C, 20, 7E, 0D, 46, 80, 3E, 20, 7F, FA, EB, 05, 3C, 20, 7F, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 58, 11, 00, 01, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF, 15, 54, 11, 00, 01, 50, E8, 35, FF, FF, FF, 50, FF, 15, 04, 11, 00, 01, CC, 55, 8B, EC, 83, EC, 10, A1, CC, A2, 00, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
36 KB (36,864 bytes)

The file NM30.EXE has been seen being distributed by the following 13 URLs.

http://www.applicationconecptclean.com/qC0xhyN2 MpCR9jujrv1Bz9mRjLn0eaXuuS0fpDbhHxV6Wxpc1zIkfzlHmGA pbPY62vmdnx3HI8Kjw4XFFGrSmGo21feDQ s44T5BJNLj_kd_Q7cWWDZMgQHmEqwar_cFkq3dDargJhrlvwxAn8 uKgEUvnTEEriKIbxJAV08H45uhcxpKbbzcpeg1rzLpovPJLvx8C71EqztRooL BYeVJmxN3xG_dQTRjYqwS1gcASH077E8=-G1YAAETd9Lxq0Wqt36kQdYOVgTvmlEMNgNsSygLMLft22Bjz_EL6aY3XO8OA3_25FeC Tyg8HLNlPVQqwzmx8EuKrZCqWRUykvaFHF87ffkK AE=

https://dc395.4shared.com/download/.../netmeeting31.exe

http://www.brothersoft.com/d.php?soft_id=10546&url=http://files.brothersoft.com/business/.../NM30.EXE&name=Microsoft NetMeeting

http://down01.wxsrv.com/descargando/024/1290/microsoft-netmeeting/.../microsoft-netmeeting.exe

http://wn.com.pk/softwares/1/.../Microsoft NetMeeting 3.01.EXE

http://www.downloadpresentcity.com/2R0kGdPwNnxreIv3IVeGLafkhOygUw8zJjc 8W37F6_5ffOMMsEMUC50BcvWIV4pvfNqPXfzmP_E60ezqwLH6Y7oDbj_kd4DX6kViVx2at3gmask9MPAapd3z46lCELQ0v1XUY4M2usEn6dqmCKhqW7uY2caKv7bbQML3sJxCJktOUSeNqqsMtXJ1 257lFJFXxtPOcLjM_e3EJv8SjEyJu2KYOujQ==-GyEDAGSwTez5YAIN0m47AUqxYHqKiMJEDtjbYoj5JPbeOPBkjZGfRWAu8danbbZHW7viPRdlWvoIOH_DLeo_LXq0CgjcZEpkncVaAbCjV3KBFBLU9ipKYn9DdJlgchZp1D2iee6gdti9Sl083176Y_PW_b8jM7jmvx2MDmGnxqS5MeIPWhMbgXOs8SOoXwqo5ITJ0mQ6hI6jP2zUyghOg_AliucxiLnDCY68I6eDYcOCA4FIdVHM6kvI2o1Hnk6XxruWmfOj7XhQkr5zqfPYLHNmbaS o08DZ4JiC1dGciWOHSyXKngx85R8KexqDvL6xHKF9WROYj4ZcjMltH0yXZdHlOGN8VksXWqfKq2ORm4iqLWOvRrJ_VG7TCih qFAwzhQLzylQiIzl3z5130fKNtOXCEv62qoPb1y6jkDHCTyOvvOzZfE6ArczmYdlRNXDe0NsKU6NNUujAg98 H7cN61mky7hPtT0_SfmOQlW4yIDZQFlRnuy1Nc9LKCYE2wvqrrWmUJKsVFQBwTUmLxNn5I2dXy4ON2inau2X GW5eU4TgHuK8IaxhI6pQ9f1YoJXTGO9QVCTaXGYRzi6JV8TCaiRTGuz3sYA1znX6FugPCbGJ9ONmOTmL8Y7U2UWEFE3GjJoI5at7P_1jemRmrvIZcNdTYjszzxlNfpM2I07g 9HL_rNYRN5ZceUO7HmlfoBmta6EQPc9A0LzlCr_yWEDTnJ2 4DlNrrcC

http://files.downloadnow.com/s/software/10/74/21/.../NM30.EXE

http://www.ranchmetabits.com/G nYt751ju5ZbULc1DWtji6x2Q4ZNhlCHyBPK 2ZyL0L9wNUvzMX6NVLM_K6CEG9MR_5UKj_RACS F5aWcolKehf0NeGT6MpMiHi9HORQSvufUxfftGeCdzNhwyicY6e21PnZDmk3bwMiEFTA0kd89iey_wPOf1CvoEcnfHEySdVm0bcqao=-GyEDAGSwTfL54CZQKNkcETsDT1GFiRywt8UQ80nsvXHgyRojP4vAXLN9KLrySPduw3suUHKMBGUv04gSFTXgEuUe4IElXIZ_SLnmwMDTbsqQ2CA83Y3KPT1 z_kb9Z9OrxHYPGT4uH_8rtH axTlJlaZTeOI4gWym84cgevphupBfM7lnIfmuA P oeumLjnz2jPdXascvUFl1jiP0 Umw4buwvvkVdWotCNDSlq3P7rZU0fsFsfldXo1XSGfSPTgKMgAMVgieA YcmnmpfiIY2U3lJXr3U9XAy4SMYdDxqvudmzJhqhguO9ucrksej33 t4lFynjExRVHtwUoZwgj8ag4zutQ3CwiXXSjZGgRBK85ByRiIY2dRw3xK_ansQ0gesHPmJO RaHHrk_uBFql7gLY5_1Gv5juOp0rK3KFTjKxuHe2a3 iwxxbHESLz8PwaG8P_o5mWcbOzMx5tlTbzZwX06NY0raEP1VxbY6GuzQv3waQwx M2fH9eX9U7ou1yaScnmL3M474IdIZueImS3SuBWpSLbRw4oxXqU4SJUrIq8hS_fECfCeIaozCELHMm lR26VR5yexlhPQZ1R5AOL8r7uvQKc9ihH_JMczypyKJclkX9uLmeihbGMjKfOfo6N 5yKSSBbqSZYoi8WO4C6CZHU4KDTu86EIxZMynECjT_NbG Nvv9H1 3Ip9 V6bIEnndZyrHAOr7q8nzvwhoRFGahW0hd0c1Ma_j7xNGgfkTOmN03Wd4bhuF4Bj7yGsjdohUYfi1v4r7 ko8SB