home

eset_t1201974236509568t_.exe

Facebook Malware Scanner

Facebook Inc.

The executable eset_t1201974236509568t_.exe has been detected as malware by 5 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fbcdn-dragon-a.akamaihd.net.
Publisher:
Facebook Inc.

Product:
Facebook Malware Scanner

Version:
0.06

MD5:
a730eb845c4c799e1f28b4a34cfde88c

SHA-1:
3968437982be514f27ce6783442dc05e2a2c1ebe

SHA-256:
c6ad3fc1396c9a58fcac491232806c6488a7724c3ac2e5f467d3bf188048ad88

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
4/25/2024 5:51:07 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:SaliCode
160518-2

AVG
Win32/Sality
2015.0.4604

Emsisoft Anti-Malware
Win32.Sality
11.5.0.6191

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

VIPRE Antivirus
Threat.4721115
50674

File size:
4.8 MB (4,984,352 bytes)

Product version:
0.06

Copyright:
2004-present Facebook. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\eset_t1201974236509568t_.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
49152:rsmzTc50LqueHQlhq3oHHkB+rqmPNinmWAA0Mi7uM4SX/V:AmzT8ueHQlhq3oHHRrnPNhF7hX

Entry address:
0x4F5E0

Entry point:
8A, D3, 01, D3, 40, FE, CC, F6, C6, E8, 8A, FF, 0F, AF, F1, 0F, B7, EF, 0F, B7, F5, 84, CA, F3, 85, D0, 8D, 15, 0C, C4, 00, 00, 30, D0, 19, F1, 81, C2, C2, 06, 00, 00, 15, 96, 03, 54, 73, 87, D1, FF, C1, 74, 06, C7, C7, 40, 19, D4, BD, 01, D3, 89, FE, 68, D6, 04, 8C, 00, 68, ED, B4, 52, 00, 0F, AF, CA, 0F, AF, D0, 8D, 0D, DF, 0C, E6, 37, E8, 4C, 00, 00, 00, 2B, D2, 74, 02, 85, D1, C6, C3, 15, 69, FE, D2, D9, AF, 5A, 84, F4, 2B, F7, 81, C2, 01, 00, 00, 00, 11, F5, 8D, 1D, E4, 91, 5D, 7D, 0F, B7, F9, 89, D3...
 
[+]

Code size:
4.5 MB (4,738,048 bytes)

The file eset_t1201974236509568t_.exe has been seen being distributed by the following URL.

https://fbcdn-dragon-a.akamaihd.net/hphotos-ak-xpt1/t39.2507-6/.../ESET_T1201974236509568T_.exe

Remove eset_t1201974236509568t_.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.