home

sippoint.exe

MD5:
c128f630e71b965ccaf4f8e4029ca109

SHA-1:
49a99c70a295541eed3a9ba29bc58e9a1d682274

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/20/2024 1:00:10 AM UTC  (today)

Scan engine
Detection
Engine version

Sophos
Mal/Generic-S
4.91

File size:
6.7 MB (6,985,728 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\sippoint\sippoint.exe

File PE Metadata
Compilation timestamp:
6/17/2013 7:40:34 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:uX38OzlAYUpjsHt0Qs8x9yru4AGnHWrniUIYIn1PC0vZHujMeMRba:uX38TSHtlse34PaiUIYcC0M9MR2

Entry address:
0x1000

Entry point:
68, 01, F0, 55, 01, E8, 01, 00, 00, 00, C3, C3, 7C, 21, 5C, 74, FB, 71, A2, 21, BD, E0, FE, C6, 05, E6, 60, 58, 9A, A8, 22, EA, 69, E7, 41, 45, 55, 02, ED, CA, 06, 1D, 16, C4, 66, A7, 38, 6D, 6D, B6, AD, 22, B0, 64, 4D, 51, 5A, D8, B4, 55, 6D, 9F, 43, 97, DB, 60, 09, 6F, 7E, 44, 83, AA, BA, 53, 86, 97, DF, 3E, 41, FE, A0, F9, C5, 8C, 48, EB, C4, 41, D1, E8, 82, 1A, 49, 24, 30, B5, 98, D2, 76, CB, 6F, 9F, 58, 71, D2, F8, A8, B0, 28, 33, 4F, DF, FF, F9, 58, 6D, F9, CB, D9, A7, A2, E4, C9, BA, 23, 1A, AD, EE...
 
[+]

Code size:
8.5 MB (8,965,120 bytes)

2 Windows Firewall Allowed Programs
Name:
H:\Program Files\Sippoint\Sippoint.exe

Name:
C:\Program Files\Sippoint\Sippoint.exe


The executing file has been seen to make the following network communication in live environments.

TCP:
Connects to sipnet.ru  (212.53.40.40:11024)

Scan sippoint.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.