home

{blocked}.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6748.chomikuj.pl and multiple other hosts.
MD5:
2eaa8d135fc627bf623b36b47656baef

SHA-1:
0452c294de86c022bd739c4ad003a990fc74acfb

SHA-256:
eb7a886f6e6bd4afc587d3e68e64aea2023757643c612028cee118cfa4f7aa74

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:52:46 AM UTC  (today)

File size:
3.6 MB (3,794,225 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ffoty\worms world party - crack no cd.exe

File PE Metadata
Compilation timestamp:
3/28/2006 9:23:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:pVNlNEIuNm8Z2osgJ4Z5fuYnco7QCVplfYfGEg889hGyR:nKmdos5RcUMGScFR

Entry address:
0x1000

Entry point:
E8, D7, 24, 00, 00, 50, E8, 67, 9E, 00, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, C0, 40, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 62, 40, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, BC, A0, 00, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, E0, D4, 40, 00, 6A, 65, 56, E8, 02, A0, 00, 00, 6A, 01, 56, E8, DC, 9F, 00, 00...
 
[+]

Code size:
44 KB (45,056 bytes)

The file {blocked}.exe has been seen being distributed by the following 5 URLs.

http://s6748.chomikuj.pl/File.aspx?e=pNBKrHXVNJTsoUFekM8gJ4NaaSl5B5ukPhjnysEYNu183kIO1JS68eYwhMjA-_W1xDY3L2Wke7mLTLyWkWFYK2QQJ_9n-K86CMH2r7Cpv_e26AQjoVyQnrAKKKcPV1BadRkLo4L5gQo53xM7cc4h_7By7_ytRdYI9YB-ptSMBV0&pv=2

http://s6748.chomikuj.pl/File.aspx?e=pNBKrHXVNJTsoUFekM8gJ4NaaSl5B5ukPhjnysEYNu3cVadbqruJT7RlJyj6D5DHPWonIi_s_bgbNezmuo1jD2fiPBJbTtCmInZcvtlEQEpfFAxvitU4G92hKJK6sMNikdZeh0QB6I1tq-n-4_5kqgMvZOqam2z0Wk4JcLlIoQY&pv=2

http://s6748.chomikuj.pl/File.aspx?e=pNBKrHXVNJTsoUFekM8gJ6Tw-Vno0xRqQhcUVCKbD0xT8kuMG4uS2jz_ZGjUbkXL4LbebQjOhamkJ7IAzwMDfvqhDhzVQqG8iebLywpspnVv1Ai35ucz9ftUsN-9O_rUwCT8owrnQHYV4Qc8U9LClWH9bMmVl1zfype2mhVXtJI&pv=2

http://s10201.chomikuj.pl/File.aspx?e=pNBKrHXVNJTsoUFekM8gJ4NaaSl5B5ukPhjnysEYNu0kyajFKN6KcRHG3aMnYeMhLY5htJXLdOorWFxvK-M2qJiGPV-G28SHEdQ0PTt1sIem91KeCIPdXwACXUjbwGHwa5WXQCsas6PNAIrii8ZYulhCxEci2dWfJ2uVzZxLF1E&pv=2

http://s10201.chomikuj.pl/File.aspx?e=pNBKrHXVNJTsoUFekM8gJ6Tw-Vno0xRqQhcUVCKbD0wwoaC-ahBfFjOUiDLGojZUvom9dZZlEB3D3rkS9zVXfp7pVwgULI5CZtKBaw5I9St0uHwTgvEoC4pHqpA-fea5PSn-rgV77GeqgtMIXiZjqY4gVr67EdJyR6C8k7rciZc&pv=2

Scan {blocked}.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.