home

windows__d43f6f6c-7185-4c98-ac67-9e9b41dab54e__.exe

AT&T

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from pattsmpii.att.motive.com and multiple other hosts.
Publisher:
AT&T  (signed and verified)

MD5:
6ae325722a62b426a156ba0c029b00d4

SHA-1:
3fb5165b8b84cd00f9dafcddcc2975fdc80d1717

SHA-256:
0bde6432a0248c038a0f7370ccfc65f2367ecb01575d3ef8cb79d783b6dad60f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:52:40 PM UTC  (today)

File size:
91.8 KB (94,016 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\windows__d43f6f6c-7185-4c98-ac67-9e9b41dab54e__.exe

Digital Signature
Signed by:
AT&T

Authority:
VeriSign, Inc.

Valid from:
10/10/2011 7:00:00 PM

Valid to:
10/10/2014 6:59:59 PM

Subject:
CN=AT&T, OU=AT&T Mass Market Care Application, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AT&T, L=Austin, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
450BA65F1A924BBA80F3ADFB4024A31A

File PE Metadata
Compilation timestamp:
12/5/2009 4:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:ppgpHzb9dZVX9fHMvG0D3XJIGOMbdpSOEoJEdGUZWBfndogf2FcrspFI7J:jgXdZt9P6D3XJ62dAOEo4/ZWBfigOCrb

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.0066

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file windows__d43f6f6c-7185-4c98-ac67-9e9b41dab54e__.exe has been seen being distributed by the following 50 URLs.

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__3053ed1f-bb15-44b1-84df-b7ebcf1a2f53__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__46d6c84a-4a80-4fb2-86ce-3f042665a83b__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__52ff126b-b319-4648-92bb-4593b8216464__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__31898310-33a7-435b-8d36-56ecdb7709af__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__9740da66-8d67-470d-8e29-13ef6a8cbfc7__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__068e0bd2-5deb-4d01-8341-d934a8dc916a__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__15a8b46e-180c-47ee-aa9a-a6416759d88f__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__80517b2a-7633-49b5-9f24-815999219dbe__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__35fb7318-b468-4e4a-ac8c-5db4eb3e77f6__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__82f5c39a-4b94-48da-bdb9-b539ef3a833c__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__999f9ecb-0477-4dce-88a4-d623f0a4f7d9__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__60f3c7fa-57e5-443a-ac3a-3d080561d9e6__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__9986bf64-5931-4e46-9d2e-d2922fccd195__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__7c9e32f5-a691-4f3b-b442-f6b1df636b2a__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__9af0ecf8-c8b4-453d-98cf-af8528149d86__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__b81bb53c-0d71-4c84-80b0-24cc9dcb0201__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__5bafe195-cf75-4398-809f-b072f8f6bf6d__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__9e79b25d-cdc2-4cd9-bbec-8d92ffc11cab__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__98dedc28-8220-4a54-b7bf-f74c08e42d47__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__a40cb1cf-fd90-499a-bfc8-7be2606b613a__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__d90c68fb-c2e4-4b60-ab30-e8017930b8a6__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__d6bf147c-5d49-4e10-b31a-f1b2ed87cd3f__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__fd6d38a2-c761-414a-8275-c623b80cefd3__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__786c2638-49b5-47ec-a6a2-219b0f055bb4__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__dbfd818c-36da-43bf-95c7-18d8606ca256__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__71019bb9-494e-48c0-90e6-f9192c525a54__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__59fad2a0-7994-499c-9f6f-a858af35b011__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__925cf4bf-5923-49ec-802a-3d0768f676bb__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__7b89a71b-2f8d-490e-a618-d00cef962849__.exe

https://pattsmpii.att.motive.com/homeview/activation/client/.../windows__89d5c26d-5cd6-4828-b5e4-f16388d30628__.exe

Latest 30 of 65 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.