home

atlantis_word_processor.exe.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
faf47443228744a0c24699966952ef9f

SHA-1:
405907ee1532cd516ab532fc65fbb0e27e3cd4ce

SHA-256:
b3dcb6bb5ad62426372910ac473349d075afd9d9c0b69930ab0c4b0896a2ae8a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:47:03 AM UTC  (today)

File size:
2.6 MB (2,693,632 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\atlantis_word_processor.exe.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:kUwYSBjQDKsOLsC64CwZ7WhJEQCbI8pU8SC1/4pZpqJRmoGLGrPpFVQGBNc7F08:kUEjQyr64fVWhHR6zj1/YpqmNLGrBFVC

Entry address:
0x23278

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, B8, 88, 31, 42, 00, E8, 05, 0B, FE, FF, 8B, 1D, 20, 47, 42, 00, A1, 34, 47, 42, 00, 80, 38, 00, 75, 15, 6A, 30, 6A, 00, 68, 54, 34, 42, 00, 6A, 00, E8, 91, 10, FE, FF, E9, 9A, 01, 00, 00, A1, 04, 1E, 41, 00, 89, 45, B8, A1, 88, E1, 40, 00, 89, 45, BC, A1, 78, E3, 40, 00, 89, 45, C0, A1, B4, 99, 41, 00, 89, 45, C4, A1, 08, B3, 41, 00, 89, 45, C8, A1, 60, B4, 41, 00, 89, 45, CC, A1, 24, DC, 40, 00, 89, 45, D0, A1, C8, 1C, 41, 00, 89, 45, D4, A1, F4, EB, 40, 00, 89, 45, D8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
137.5 KB (140,800 bytes)

The file atlantis_word_processor.exe.exe has been seen being distributed by the following 5 URLs.

https://dw.uptodown.com/dwn/BYODYydbwv1_1hBS2cs4UmQbgMYJbidQH23N7U9mSH-wuvEGrkfXecSM9J51O7ANddMNDY5BZSiHTCG6IqT6D9lBDH-k5yVEZu2mCs8htZ6GRf6jlzDu9XgfTta4aUmB/OvcoBpCMRciyw0nvKXm55bOpJm3bUodGhn_JqyDBLk9Z6Uzi5GfOIkst17rrqDoqk5vfOq8tnCHE1gGHcxmqjOiwDa6R08LWfxJ6dlw1y9cLn5l0pyuydkb9v-IOgc9s/UzjvPfl7NAFibolT5bXTjJ7uj5RHXgphYHD694ie-0B9z4nepq7PLRQwvKXL0tv9ftuoCpGM4TEZrBz2FxfblIwCCZZvINdwdXp5Kuep7RBml3IbM_wpV-0N02VpmDlL/.../

http://dw.uptodown.com/dwn/gpxQ5_5QA7j-Xr3F-RsHraOj0oJZWNaKMWLs-kKA0W2MbGbCmP9hqcdEu2ptUPYIwg1IsKs7PA3zbdfTf3ZobVPzSCphkh46kVH41lwHIp45BHtbkTEs7xNYIpURGD0z/j27tYvSQe6mDAEGs52OFZxXu_igWeG1cHFElJKq7J66KpIwEqNzMmHeCpDDRkC8EDlXgSsobmYtl4iGRKQGHCbD1fmsmIKkT4QBRzddy-RwKGACYZn5hynKz1etcTgqd/wrauIL45eHYr4UyDlzajqpomxWrVJAA6wyTu0lVM_oDcwFNHsTXYn9_tuC1o29A_-Fvtg5_atLRiuFEzy6FUkkluLpZDJMgfup6MC4dtLc7FLqY6V9v-UF_eUhZ_wpGp/.../

http://dw.uptodown.com/dwn/DlhI1oLzepq3JU8z0G_7QEdBrktxlhW-58GzID-Jx3qnmVIpZlE2oCYEuZHFpTpnyp24MVn0jh3JhtE287Eu6e80HtBlKwfAUIk1nr68K5sBAvRz4PjbUtZ9wuihov4r/64WvaHms36vSNgA9vYSHYXPLLe3z2iQaGC_4xXq8dr3IpVqGInhW89_dhRg2gVLLneqVA1NboN__S_B1HwqA6_7nP4WKYocdnoVQK0f4jMeosxT0fpg4UfCTFMetmyB7/5jfeetDG6b95ZlbL14RqwKavaLMXzO1GXrKd24QzVic9fhKELkN1f3FpELFpZ7gF7ROD-isAXvSebHdd9_UHEmDBQgccgQhpolMsB65-m5KpG494By8sCOZJefpS7UjB/.../

http://www.atlantiswordprocessor.com/.../atlantis2en.exe

http://www.atlantiswordprocessor.com/.../atlantis16en.exe

Scan atlantis_word_processor.exe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.