home

atfdemokit.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.
MD5:
ef5c77d68652fe3e01046355ad3523f2

SHA-1:
e134ab55b384584f7c5899466e992c35b4e71b38

SHA-256:
440fa3cf8371025ea18c8a0ac524b74235d309d0a125729d02d7604192085e24

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 7:49:19 AM UTC  (today)

File size:
2.4 MB (2,501,623 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/28/2001 10:46:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:k2cpTpDDG/XoJyoxPw29LITj8xiD7RuFdp6dDRW6fyhrouWz:k2cpTpDA4JD8Tj8xi0wVM6fyhrmz

Entry address:
0x93C0

Entry point:
60, BE, 00, 60, 40, 00, 8D, BE, 00, B0, FF, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 8A, 07, 72, EB, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 76, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01...
 
[+]

Code size:
16 KB (16,384 bytes)

The file atfdemokit.exe has been seen being distributed by the following 8 URLs.

http://ftp-stahuj.centrum.cz/dl/eee9fd6a9b4b3214f50a0c732a38b167/560d5905/stahuj/download/software/secured/a/atf-all-ten-fingers/85/.../AtfDemoKit.exe

http://ftp-stahuj.centrum.cz/dl/e02eb68875d2f535c9a75a9f714099a0/57e6b273/stahuj/download/software/secured/a/atf-all-ten-fingers/85/.../AtfDemoKit.exe

http://stiahnut.sk/download/ostatne-kancelarske-aplikacie/atf-all-ten-fingers/b7ugnvhi59e316rcm47vcutp84/.../atf-all-ten-fingers_8.5.exe

http://ftp-stahuj.centrum.cz/dl/a896247b2d9f132c5a4951bee46007f2/57d19e46/stahuj/download/software/secured/a/atf-all-ten-fingers/85/.../AtfDemoKit.exe

http://stiahnut.sk/download/ostatne-kancelarske-aplikacie/atf-all-ten-fingers/81btvb9tppsgarufjfeg8dr950/.../atf-all-ten-fingers_8.5.exe

http://ftp-stahuj.centrum.cz/dl/18e00d26ae2f34f88ab40265892eecad/5727786c/stahuj/download/software/secured/a/atf-all-ten-fingers/85/.../AtfDemoKit.exe

http://stiahnut.sk/download/ostatne-kancelarske-aplikacie/atf-all-ten-fingers/v72o84gu2r1gadh5tc7a0msaa7/.../atf-all-ten-fingers_8.5.exe

http://stiahnut.sk/download/ostatne-kancelarske-aplikacie/atf-all-ten-fingers/p0ccne3n5lvopkkeg4cg9lrqj7/.../atf-all-ten-fingers_8.5.exe

Scan atfdemokit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.