home

תוכנת מנוי חינם.exe

WindowsApplication4

Product:
WindowsApplication4

Version:
1.0.0.0

MD5:
3d75ae7e27e37489346ea09b5a184ac7

SHA-1:
c6440c28be786f4b920715098b4dd52b09239b76

SHA-256:
48cbad740afc00e83d5c3cab1ce044b4d0ec38bae6587770b85aad8f3456f0c5

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/2/2024 8:30:34 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Gen
2.1.4+

IKARUS anti.virus
Win32.SuspectCrc
t3scan.2.0.9.0

File size:
43 KB (44,032 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
WindowsApplication4.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\תוכנת מנוי חינם.exe

File PE Metadata
Compilation timestamp:
5/12/2013 9:30:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:jr07vQHQ/TpJvje98YJnuDk2XPxx0HcUSX:n07QHop5CH/2fY4X

Entry address:
0x933E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6599

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
29 KB (29,696 bytes)

The file תוכנת מנוי חינם.exe has been seen being distributed by the following 3 URLs.

http://down.upf.co.il/downloadnew/file/.../e98f7759caf42c2fb89fe897cf8cdce4_i6lxxsOuR13371337t6z5bEVJYDAw==

http://down.upf.co.il/downloadnew/file/.../cd7190d39ceda836f4d672a0dc215966_Q5BrTcm4Bd1n198819881Wuv2DJAw==

http://www.upf.co.il/downloadnew/file/.../82d3010755c95e756e2010a70d25510e_MTQ1MDg5MDk4Ng==

Scan תוכנת מנוי חינם.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.