home

oscdimg.exe

OSCDIMG

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
OSCDIMG

Description:
Microsoft CD/DVD Premastering Utility

Version:
2.54

MD5:
3fb17314d6e25c29173c7e373096927f

SHA-1:
c2698007c75db7818ee77a7081a8a85bbcb9f47c

SHA-256:
abb4a457efcd5a35249458ff9c1c69ff68343b0f08d30d6c8f9609262125b8fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 11:16:32 AM UTC  (today)

File size:
123.6 KB (126,528 bytes)

Product version:
2.54

Copyright:
Copyright (C) Microsoft Corporation, 1993-2007

Original file name:
TARGETNAMEWITHEXTENSION

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\oscdimg.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/22/2007 5:23:13 PM

Valid to:
2/22/2009 4:33:13 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
1/18/2008 9:34:03 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
3072:QiHHQG/FXN2Pl7tNNFK52wN9FnwLhZ+os8Cy/P:Q/aNcl7tNNFKolLhZIgP

Entry address:
0x171BA

Entry point:
E8, 16, 0D, 00, 00, E9, BA, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54...
 
[+]

Entropy:
6.8036

Code size:
102.5 KB (104,960 bytes)

The file oscdimg.exe has been seen being distributed by the following 5 URLs.

http://tinyurl.com/juy8rew

http://www.paulbetts.org/.../oscdimg.exe

about:internet

https://6e0ea168-a-62cb3a1a-s-sites.googlegroups.com/site/.../oscdimg.exe

https://sites.google.com/site/.../oscdimg.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.