home

xp68-win-mp280-5_56a-ea24.exe

Canon Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from pdisp01.c-wss.com and multiple other hosts.
Publisher:
Canon Inc.  (signed and verified)

MD5:
124abb12adcbbf76c98d60230fe64eea

SHA-1:
821ee1bc3c13668f86d1d337c82e025d44dd6312

SHA-256:
2127438fab29f439d5bdb17704b76ab311ba7e9b61576ed2aeab35484e449e08

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:34:08 PM UTC  (today)

File size:
21.8 MB (22,834,768 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\xp68-win-mp280-5_56a-ea24.exe

Digital Signature
Signed by:
Canon Inc.

Authority:
VeriSign, Inc.

Valid from:
4/15/2012 8:00:00 PM

Valid to:
4/16/2013 7:59:59 PM

Subject:
CN=Canon Inc., OU=Inkjet System Development Center, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Canon Inc., L=Kawasaki-shi, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72ACD79546C6E0B523B123D763EFE617

File PE Metadata
Compilation timestamp:
11/2/2009 5:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:A9DtmS/sP4tSuxVdSIk3l38jSUbiLvGLqZ03bwNpGLgdErOMCKBL:AqSE6VIHQSUGLvJK3btdaU

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Entropy:
7.9986  (probably packed)

Code size:
144 KB (147,456 bytes)

The file xp68-win-mp280-5_56a-ea24.exe has been seen being distributed by the following 36 URLs.

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=DK

https://d2.driver.ru/1247ac980fae494c/72929109af378d26544df859642637f2b2bb9f8537289fa0d97aaa968cb3895834e4503c690d8596e46e294da60f0c7f57d6d4fc/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

temp:xp68-win-mp280-5_56a-ea24.exe

http://drivers.mydiv.net/dlfilec73e_252334/.../xp68-win-mp280-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABS&lang=EN

https://filedir.com/.../508472

http://d2.driverscollection.com/45137ac6598bd/b8892525e66d4864da69437b870e34df8261929ad443c811a020faa6e1f82d232870e7fe4e964b7b0f3671377e5542f152bc0a9e/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/4ac28eef06e00/8197756473f0221bb35a53aa41d7eda70d4c875c4a22878c66e5f2928e745cedbad4074e817ffed068a1a139fab5a82856923a99/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f7a786692cee/f5fcbdf57b46e9d16ea1460e6c147c64c05027ed34e16fd9c41445e247312e7b2b255cba2854d1c41da50871b136f3ac57c2bea9/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ACY&lang=FR

https://d2.driverscollection.com/1247ac89db7dc101/7f845083df0c5454d173e93f1c5090f3788574d7604171595195d0bb9f195491c5ec4413575cc9456344dd99dd3be0b855f3a0d9/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://download.driverscollection.com/2ecbf4f6c1c435/5e62e5d1020dd67d7509aef8385dd8349501deb373fe17f15572967d2aadeabd6cf4e15d6acc836c3c029af3acf610355254e1d5/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driver.ru/1b015b9ab022236/07d00e32b28d5af89371cdd7e70891e89c980676b27dda152145e1d164d8d45266a69523c02a5284c17d413a84965d9a56e9b2b4/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/6e85332de000/ed5512e8854e28309ec0c3c1362af21a52755e0b7a3f345cc809407e0084ea7e6a099e9cb62a78824fc76bda8eed1880554af516/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://d2.driverscollection.com/2ec2dcae959f97/3d12d4f60e5af892e825b996f0eca76212f4b629272b3b890d9b6df836be772f71a0312100b8aff632c8e9fd2e53e744530c21c8/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f79197df0404/70b71044ee62ad3c23b71a0b8bb1c5930929e4af557491999b87fd93ef54156b8a2092cfe35498e8707a3e38377fa3de5630e5b8/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/1d3f7900ea1dba7/9e2820f632411aa50f3ab48ddadd0dc871373f06dfe9c7bd1dcc5dd59024789d0f5ba0fb0d74e7310d28151f481cac06546238ae/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://drivers.mydiv.net/dlfile062c_252335/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/1d39c9e830a72ee/62d1b2580cd838ba9ec44eed0e59577c19ee8e20fbefd7c48874347203c8a6b6c80bdb4f83be2abe45062e89c11508cb54b52d81/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=NL

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=IT

https://d2.driverscollection.com/1d3f7a73f4a8486/26f13295f37dee814b03f96e5a10e5bd9dae1fb7133289a1a190dfc8f7f8faab64abf8796295459d59b54e6a9c96f989558d1850/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/6e858d6e3380/51008fc29c6cf82c69580efb62e56616f0dcc23a194a76efe16c9d4a0df20c92eeab7f138cec033bd77bb7d32d3d10a154d52ee5/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driver.ru/1b015b9e60470f1/766d36d963a76205fb6609447db3589633677ee3186dbb7b820d01f91397d1c3bdd96d36301cd4cdde45280c090e7df1568bb7c1/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driver.ru/4513657ee37e5/cf65fce4d843d97b7ae0a0414b64fcc10815a6b52ca7621dc594133866b1f9b0aadb9a0a92d9b6a5522a7b4fc430303f569e334f/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

https://d2.driverscollection.com/_6_14192142192202252a022f0e52bfffff4f707865/8da5eb3018971adfc1ddef765c3da1a17cdea05c5c5b20d4eaeb6bb339cf652ae8f0ba539d0c787ec7d2963edac74b7a56bc7daa/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=SE

https://d2.driver.ru/1d3f7a8e0dfe57c/31cebc4b6579253a5f6ad98df8137b976cda4f81d58d2dd4de13394aec59a17d0dca8e504865608efbba577823fb0ce654f2afb8/3/32/10/.../xp68-win-mp280-5_56a-ea24.exe

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=FR

http://pdisp01.c-wss.com/.../WWUFORedirectTarget.do?id=MDEwMDAwMjkwODA0&cmp=ABX&lang=NO

Latest 30 of 36 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.