home

r252544.exe

Dell Inc

This is a setup program which is used to install the application. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Dell Inc  (signed and verified)

Version:
1.3.1.12

MD5:
08d73be35ff8cffd0efab9c6b4f2652d

SHA-1:
766bece0f2175d239b35357fa80c341b63ecfcb1

SHA-256:
03d48663e98a42647a9bf5f323f9fa5cc775af259d07fabf5a2be8f3b490c41b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:23:15 AM UTC  (today)

File size:
81.3 MB (85,261,112 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\r252544.exe

Digital Signature
Signed by:
Dell Inc

Authority:
Dell Inc.

Valid from:
6/20/2008 1:22:49 PM

Valid to:
6/20/2011 1:22:49 PM

Subject:
CN=Dell Inc, OU=IT, O=Dell Inc, L=Round Rock, S=TX, C=US

Issuer:
CN=Dell Inc. Enterprise Issuing CA2, O=Dell Inc.

Serial number:
25058A2E000000000135

File PE Metadata
Compilation timestamp:
10/17/2003 3:35:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:o6fULfMvzcg/ottmOPneUh5mE2VIKkTjrmJew9S8C0Q0nRUI:76fMvzV/of7PeuvKhp95CA2I

Entry address:
0xEDB2

Entry point:
55, 8B, EC, 6A, FF, 68, B8, 43, 41, 00, 68, F8, 17, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 8C, 41, 41, 00, 33, D2, 8A, D4, 89, 15, B0, 88, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, AC, 88, 41, 00, C1, E1, 08, 03, CA, 89, 0D, A8, 88, 41, 00, C1, E8, 10, A3, A4, 88, 41, 00, 6A, 01, E8, 41, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 49, 0E, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9978

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
76 KB (77,824 bytes)

The file r252544.exe has been seen being distributed by the following 18 URLs.

https://d2.driverscollection.com/1d3f7a8d4e04ef4/239771cdf7b58d669100cdbf3ea96033017599bfd6189d9f10b97cf879cdd42bbcccd0d0396394cd389c8cf9acf83b5258852b50/2/51/43/.../R252544.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=08d73be35ff8cffd0efab9c6b4f2652d,1811570_1306395496&time=1481071431&auth=cad23218b48eb77a450f1f50a844737a&file=R252544.exe

https://d2.driverscollection.com/4adfee53d2f97/0c8ce012831075b66ddabbf7c0ee18f434bbc2d7e23c85441c37ecb65598c9aca027feefae4534379ccc8004a4447dd6582a50eb/2/51/43/.../R252544.exe

https://d2.driverscollection.com/1b015aef7381994/2f08f574cbb60155c279ff11984842652da8356019eb5538e361573f3b45d126a357ebaa065d9daf779e8baf383cd59158138cca/2/51/43/.../R252544.exe

https://d2.driverscollection.com/1d3f791e5a56ae0/82871445ae63eb076484ef3ed2f56818478cffaf26d4c63e20d607f656628456efc07a994a244c9ec96d46ea787af20c57244c35/2/51/43/.../R252544.exe

https://d2.driverscollection.com/a247e267ff2/62e680f149b86d5b0a1d476e0e9416c2855fc3791d6082eb792c572537f273f018c9a07edd6a96f454af860435bb3dc6582070ed/2/51/43/.../R252544.exe

https://d2.driverscollection.com/1b015b0601ffa3d/f655d25d79da98ae955d6b92855d43bfc1ae8ecffddd07314d127a8c1bdecd81a524d7a27e639f72ad0f1c0726366d1b57fa9756/2/51/43/.../R252544.exe

https://d2.driverscollection.com/1d3f7a71b4a35cd/6f0a4628dbba6bbf49f2f671e32a712dc0421e6292bcff84b89ba2b07bd55fb62897b76770d9fe8da205d8079e426de057fde34c/2/51/43/.../R252544.exe

https://d2.driverscollection.com/6e8554a3e27b/acebc9b2c105b82b0448874adc3703a65f4ba38909feb0c3519c3cbfb9ee0801e4bbbd45142400306c7829ac94db5742578a4da6/2/51/43/.../R252544.exe

https://d2.driverscollection.com/6e8574902e63/ef6b6c462f0a0fdbac7fc15f2478e3eb9f040e06a11e4f7922da3ef8bbca981bc2e96c43e697c29c7cc0b5b6095368a35763efc9/2/51/43/.../R252544.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=08d73be35ff8cffd0efab9c6b4f2652d,1811570_1306395496&time=1464715451&auth=5babf9fff0c5d6be34f9c7b8d271f1b1&file=R252544.exe

http://downloads.dell.com/FOLDER98653M/.../R252544.exe

https://d2.driverscollection.com/1247ac97258b8955/7ddb43c6c791b858e888f57904075dfcfab393b693ecf10edf5972d80bae55f619e496ec79dfe0e9b8b8012f9f8c7d4e56ae7a02/2/51/43/.../R252544.exe

https://d2.driverscollection.com/1d39c9e762a36f8/87c81ee4cfb8d3b335393593ba570a33cc226c0e9e8535e6183a3d708a83e0a88cef992d5050a8a49ca94e4035bef40556ba2156/2/51/43/.../R252544.exe

http://members.driverguide.com/.../dispatch_cache_get.php?msl=08d73be35ff8cffd0efab9c6b4f2652d,1811570_1306395496&time=1456835616&auth=c789de45cb5b3cd1a9075cacc2cde7cf&file=R252544.exe

https://d2.driverscollection.com/1d3f7a8b66f9cf4/964f999b88c7340c09376a13e0daf8d115f346033b30f589e1cb010329585bec3f785b15c053a2dc68a87d9432a7a0bc56c9f118/2/51/43/.../R252544.exe

ftp://ftp.us.dell.com/.../R252544.exe

http://ftp.us.dell.com/.../R252544.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.