home

sendspace wizard v1.3.4 windows installer.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.techtudo.com.br and multiple other hosts.
MD5:
dd1839cc2a9d665ca3e132c6509bcf99

SHA-1:
115c3f677567e94f044b4775301fc10a7b2665c0

SHA-256:
df5b7dbb8424804d2fae3ab4e12e2f14b54c6ea15cc5bafd3d073a1edf986733

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 1:28:55 AM UTC  (today)

File size:
3.4 MB (3,565,196 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\sendspace wizard v1.3.4 windows installer.exe

File PE Metadata
Compilation timestamp:
12/5/2009 8:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:EfeM4zVdAgBeePuLITxXafqI46+Rf66mLtojs2:Efqz7AgBDuLI9afqdTyVLtIs2

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file sendspace wizard v1.3.4 windows installer.exe has been discovered within the following program.

SendSpace Wizard  by SendSpace
SendSpace Wizard bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
sendspace.com/download_wizard.html
About 13% of users remove it
 
Powered by Should I Remove It?

The file sendspace wizard v1.3.4 windows installer.exe has been seen being distributed by the following 4 URLs.

http://www.techtudo.com.br/_/software/.../download

http://fs02n5.sendspace.com/dlpro/64a8d2a229d8f41619120bee1ff96ae0/5066aad4/.../SendSpace Wizard v1.3.4 Windows Installer.exe

http://fs02n5.sendspace.com/dlpro/7a160e01665e91c5d1ce222619a4ab05/51eda9e5/.../SendSpace Wizard v1.3.4 Windows Installer.exe

http://www.sendspace.com/pro/.../4g5jul

Scan sendspace wizard v1.3.4 windows installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.