» atlantis_spellcheck_ru.exe
Overview
Analysis
File Details
Downloads (1)

atlantis_spellcheck_ru.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.atlantiswordprocessor.com.

File name:

MD5:

0e522a52c42769daff6b8176a0c9d6d7

SHA-1:

b7b7d145ab5c652d25ecaf4508880b8358ac7fbb

SHA-256:

24c6ff7a0ec6cb4586fa3fe703d7f07605a201753c6428bc8ce8b6c9fe7afae6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 7:54:56 PM UTC (today)

File size:

1 MB (1,096,704 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\atlantis_spellcheck_ru.exe

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:W0G/cDhXyExFVhFekyz8tFFSVuVCrXgMG0aQ38:W0VDlF9ekyz8jkuVCLJG0n3

Entry address:

0x21100

Entry point:

55, 8B, EC, 83, C4, BC, 53, B8, 18, 10, 42, 00, E8, 1B, 2B, FE, FF, 8B, 1D, 98, 26, 42, 00, A1, 28, 1B, 41, 00, 89, 45, BC, A1, 9C, DF, 40, 00, 89, 45, C0, A1, 8C, E1, 40, 00, 89, 45, C4, A1, 8C, A3, 41, 00, 89, 45, C8, A1, E4, A4, 41, 00, 89, 45, CC, A1, 38, DA, 40, 00, 89, 45, D0, A1, EC, 19, 41, 00, 89, 45, D4, A1, 08, EA, 40, 00, 89, 45, D8, A1, 88, E5, 40, 00, 89, 45, DC, A1, 9C, DB, 40, 00, 89, 45, E0, A1, 88, 1C, 41, 00, 89, 45, E4, A1, F8, D3, 40, 00, 89, 45, E8, A1, 10, D3, 40, 00, 89, 45, EC, A1... 
[+]

Entropy:

7.9282

Developed / compiled with:

Microsoft Visual C++

Code size:

129 KB (132,096 bytes)

The file atlantis_spellcheck_ru.exe has been seen being distributed by the following URL.

http://www.atlantiswordprocessor.com/download/.../atlantis_spellcheck_ru.exe

Scan atlantis_spellcheck_ru.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.