home

xp68-win-ip2700-5_56a-ea24.exe

Canon Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

MD5:
28780b9732a0b2ce3a7550f62894483b

SHA-1:
f10c756d266e6d2867f2810f19cb193ae294eb56

SHA-256:
276f69f4f0920db855c676c9e35d0a542865d1028d6babab753808c953595b91

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:05:24 AM UTC  (today)

File size:
22.4 MB (23,440,976 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\xp68-win-ip2700-5_56a-ea24.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
4/15/2012 6:00:00 PM

Valid to:
4/16/2013 5:59:59 PM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72ACD79546C6E0B523B123D763EFE617

File PE Metadata
Compilation timestamp:
11/2/2009 2:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:Ka4qbutavaCcIMsVp4gIlREMOmgdA9S3xaBkF2IDhUfaqbPSqlDypRPuy5AQu5Yk:Ka4v8iCcpkCdU7AI3xG02IDCfaqLS9l4

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Entropy:
7.9988  (probably packed)

Code size:
144 KB (147,456 bytes)

The file xp68-win-ip2700-5_56a-ea24.exe has been seen being distributed by the following 24 URLs.

http://d2.driverscollection.com/4ad11cdc22eed/15f00a96927ea09fe1c5e4b79ef660b30ba4d105034c3923f67ca6f7a7d37ed8e88864ab9a1a99dfaa7077ade66f1da5531dd92b/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/4ad119ffa1ad8/6006f872ffd97bb0fa31a8c0ddb9196e6a51048ec56515877b0ba8d46610d69f6a8f6e82218ae47b2408ab83fae36591566ecaee/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f791a40f9f5b/97bc129e9e0d99992efa87e462b2df937a31dd3fe5f0acff73255286e5db07b9006a41cb71cea5c355cdc2cf2a5b6c8b56fbf945/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABX&lang=IT

http://d2.driverscollection.com/2ecbf4f6c1814b/cb69334464d6fdc6fd692c37e8f8aa102f97597ffa4ce7f708c58465c3135ccc892cc48e15377191eea3b8aefa217b59534df935/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/4adfee53d76cd/29884bb775cbb5e65bd600c5904456fbe393d2ce8685351fb53b1b6dfbc7eb62ec8e05b554d98360cae915c81758d06856eaaf20/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f791a3b9bb0e/6008eb44d22fc646c83f34e2005bb2bb2cb65f668f24a868873218a189a72c46ae24bcc369fc51ed1ee49be8b5666ae3559efbf3/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f7a762a5db33/45bf12569460231ab5ccd820fa822f0a691e592fcfdeb2942b9ce44010e23f1031f4d0f390e27900bd7f3bf7c798f7c6547adb5f/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/1247ac8d5dcce328/a62c96f97536dcc5a1434ae01908c98c40c47b92739b0329c9c347a0020e886368d298785235d14e225a373aab6aca4356eeba43/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABX&lang=ES

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ACY&lang=EN

https://d2.driverscollection.com/2ec2dcafe0b002/d609f0fb01363ad8fbc76a21b6d173c98d65a8187d77baf17c9d0c6368520a8ddf7ed8e83621810dafcbab224529d16656a82eac/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/1247ac99402297f8/f57ee9063bd1e2a53020dfcf0aa1a085855b0e963f8902512845dc7dd9ab316944769273db3479eaf679e8711b781c3354c07d22/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABX&lang=FR

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABR&lang=ES

https://d2.driver.ru/452206c7fd35b/11c5d1fdc28fb224f0744104981c505f3e5df3fb09564a4dfeac27e9ecb511c42f625e10bb98a37c53fe3ee4dc02502055b4bd6a/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

https://d2.driverscollection.com/4ac28db9ef6ea/c766d2983646fface2c6a9007885a42336525fd28edfeffe212d105f763a4915a6a6c01cea676c3a38c6ff9ef4b8192d5515eb45/3/32/10/.../xp68-win-ip2700-5_56a-ea24.exe

temp:xp68-win-ip2700-5_56a-ea24.exe

http://gdlp01.c-wss.com/gds/1/0100002541/.../xp68-win-ip2700-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABX&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABX&lang=SE

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ACB&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ABR&lang=EN

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjU0MTAz&cmp=ARH&lang=ES

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.