widgetsus.exe

Yahoo! Inc.

This is a setup and installation application. The file has been seen being downloaded from desktopwidgets.zenfs.com.
Publisher:
Yahoo! Inc.

Description:
Yahoo! Widgets Setup

Version:
2008.04.28.01

MD5:
8689bc3b32c92e1f0b1a3851872a76b2

SHA-1:
4f1d149ab16eba18ccf5f097fea18c53b42c8444

SHA-256:
cbdf897abac566509caf765d8d081589493565303e3f5f8a785d16e2d6de26af

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:49:31 AM UTC  (today)

File size:
15.2 MB (15,926,168 bytes)

Copyright:
Copyright (c) 2008 Yahoo! Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\widgetsus.exe

File PE Metadata
Compilation timestamp:
11/27/2006 11:36:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:tdNv+88fwyg1nbnH4++2Q1cH4Z3sVRfcLEI:t3DIwxz4+GGXHI

Entry address:
0x3132

Entry point:
88, E3, FE, C1, 32, E5, 71, 09, 8D, 05, 48, 2B, 1F, FF, 0F, AF, D9, 80, DE, 2C, 8A, F7, B4, 8D, 78, 03, F6, C5, A5, 8D, 5D, 00, B1, E3, 8D, 15, B6, 7E, 73, D7, B3, 25, C7, C0, FB, 06, 44, 35, 8B, D8, C7, C6, 0A, C4, 7F, 0B, 8A, F2, 48, E8, 00, 00, 00, 00, F7, C5, A2, 54, A1, 34, B0, B9, F6, C5, 07, 23, CF, 81, EE, E6, B4, 00, 00, 3B, D9, 81, EE, 6E, 12, 00, 00, 5B, F2, 8D, 2D, 5F, 0D, B4, 76, 0F, B6, C0, 87, CF, 81, F0, 87, 58, A5, 7C, C6, C6, 74, 39, E9, 80, ED, D0, 28, E4, 4A, 69, D0, A9, 78, 58, 50, 8B...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file widgetsus.exe has been seen being distributed by the following URL.

Scan widgetsus.exe - Powered by Reason Core Security