home

framework_35-45.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fileshare1080.dfiles.eu and multiple other hosts.
MD5:
edb526eebe175fdeae9875adb650c86c

SHA-1:
7ea4868831c5b12d5e590740d22a3227b7f4d874

SHA-256:
278eb317e37613812fd74ddbb82311e118976c96deae50a40040b9d62d7b6543

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:48:44 PM UTC  (today)

File size:
322.6 MB (338,282,190 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\framework_35-45.exe

File PE Metadata
Compilation timestamp:
6/10/2014 1:11:07 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6291456:Oam6+Ot+LFbpBaaAHaB2DibPHfae1xU/iV1JgmPyrDQssBhwe:5mLLLFRB2Diz1xEiV1WYyrD1s7we

Entry address:
0x1D41B

Entry point:
E8, 5D, 64, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 7A, FC, FF, FF, C7, 06, F0, B1, 42, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, F0, B1, 42, 00, E9, 2F, FD, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, F0, B1, 42, 00, E8, 1C, FD, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 86, C9, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08...
 
[+]

Code size:
161.5 KB (165,376 bytes)

The file framework_35-45.exe has been seen being distributed by the following 18 URLs.

http://fileshare1080.dfiles.eu/auth-1436630266afc9a3026c36b93683097a-79.116.36.143-2177582526-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.depositfiles.com/auth-142792665621044609779630451b02cc-70.75.196.11-2015319741-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.dfiles.eu/auth-14377470940038513c600678f4fb9c14-80.110.121.172-2197271116-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.dfiles.eu/auth-14444803960ca5c31505d1e102e53a82-81.233.166.177-2309701753-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.dfiles.eu/auth-14363672521f8f77837d02232b40d554-5.2.3.39-2172828094-157310624-guest/.../Framework_35-45.exe

http://s59.bitshare.com/download.php?d=46942480745435f09827bd3&g=0

http://fileshare1080.depositfiles.com/auth-1430943194fb2f0ed6ad9dfdeb301728-41.232.202.184-2060447576-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.depositfiles.com/auth-143289445124398fc51eb2cb05b974da-65.49.68.170-2087838651-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.depositfiles.com/auth-1435084571500666a856a087424e96cc-36.70.36.148-2148500119-157310624-guest/.../Framework_35-45.exe

http://fileshare1310.depositfiles.com/auth-1419111109a8e821da2b558e9a234ab7-67.166.236.148-1847992029-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.depositfiles.com/auth-1432152507064ddf0712b5372ad90707-121.222.99.244-2077615251-157310624-guest/.../Framework_35-45.exe

http://fileshare3650.dfiles.eu/auth-1418073026dc3f47a7cb655ed1f0db2f-87.95.224.142-1830433691-157310624-guest/.../Framework_35-45.exe

http://fileshare1080.depositfiles.com/auth-1427383882ba87175597cb74609e95a4-50.133.49.98-2005110054-157310624-guest/.../Framework_35-45.exe

http://fileshare1310.depositfiles.com/auth-142360222643de9b6a929b3f92d64bcf-182.19.131.112-1931806907-157310624-guest/.../Framework_35-45.exe

http://fileshare1310.depositfiles.org/auth-1422841380ab0ade42cfcb8bbbdd3e73-186.136.158.235-1918134583-157310624-guest/.../Framework_35-45.exe

http://s59.bitshare.com/download.php?d=7662981189540b1fb82a2d4&g=0

http://fileshare1310.depositfiles.com/auth-1419028868a4b96c0a4067fdb130cf05-72.53.102.62-1846535999-157310624-guest/.../Framework_35-45.exe

http://fileshare1310.depositfiles.com/auth-1418333658f06f0e272538cba2505fe5-122.29.26.88-1835121374-157310624-guest/.../Framework_35-45.exe

Scan framework_35-45.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.