home

HashChanger.exe

HashChanger

This is a setup program which is used to install the application. The file has been seen being downloaded from download1513.mediafire.com and multiple other hosts.
Product:
HashChanger

Version:
1.2.0.0

MD5:
87540c065b2b7efbfc0ae60ee12ba030

SHA-1:
76599f7d05666227f5c5f76bd075a368ba6bc2e6

SHA-256:
b4bf760f17f47dec90b8290209bd92292ef8a79be4ee55853a41462e301e295d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 6:57:01 PM UTC  (today)

File size:
14.5 KB (14,848 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © 2014

Original file name:
HashChanger.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
5/10/2014 6:26:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:9AzMXZG3BfSG7X4LB0VI9uWrJuiO5pJs81UMQrExl:LJGxfSw+B0VoXrLO5ztiMQry

Entry address:
0x3D3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7.5 KB (7,680 bytes)

The file HashChanger.exe has been seen being distributed by the following 4 URLs.

http://download1513.mediafire.com/8ry3s7l175yg/.../HashChanger.exe

https://www.dropbox.com/scl/.../61qr2bhfoz9nnab?oref=e&r=AAO8XwV5ZksCYyR2Ys7gkYopUrrGOwXCaTzAKaa7xo32yahbEtSK8UMx1Cpe21Z0DbYcTWUglOYnRRDVmTa4YP8ORHJdgJlHN5KtBnX5b8nXfIlRdu5-bVCsExKQXAoiL-ZR1w-VmyqpRPdpcOt9MeuFxSj-UjL11Xv2ca6MTckt46Jl4AlHKvqKe74APAd6oA8&sm=1&dl=1&_download_id=926911209353683844425992165205197202023887145345924577906961515843&_notify_domain=www.dropbox.com

http://download1847.mediafire.com/32l57yyipbag/.../HashChanger.exe

http://www.iammaddog.ru/.../HashChanger.exe

Scan HashChanger.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.