home

minisebran.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
f5312853666b53e3db183cc1c22a947c

SHA-1:
7b45a36de3674d824d8146de0ff1aee48635d593

SHA-256:
6c8f2a1679931dd9b47127a569d24a3ccf8b3f97db40ffafc1e7bdeb3c6d903a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:18:05 AM UTC  (today)

File size:
5.5 MB (5,745,506 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/16/1997 5:43:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
98304:rBSZpBDbmXM9pdsGLCghVP1mvpEPIpO7o84Vw+ajOQbGYGg:dS/BmwpMqV8RKsOM84VmKoV

Entry address:
0x31E0

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 00, 50, 40, 00, 68, 80, 48, 40, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 74, 82, 40, 00, A3, BC, 62, 40, 00, 33, C0, A0, BD, 62, 40, 00, A3, C8, 62, 40, 00, A1, BC, 62, 40, 00, C1, 2D, BC, 62, 40, 00, 10, 25, FF, 00, 00, 00, A3, C4, 62, 40, 00, C1, E0, 08, 03, 05, C8, 62, 40, 00, A3, C0, 62, 40, 00, E8, 9A, 01, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 2F, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, 40, 14, 00, 00...
 
[+]

Entropy:
7.9947

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
15.5 KB (15,872 bytes)

The file minisebran.exe has been seen being distributed by the following 7 URLs.

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_es&type=PROGRAM&Expires=1423621793&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gC4znxFpGRSTi8qa0qK4ty-6mx5nsVMIk5rXWrtvL4wQSQ74HUDO29PmnjDE4pTXEnls7MPxlY93djGFH3ocDZotD3Pl0Ucv2BfrYUSqbA-VzKBm~ddwkLV~O-EJyAnByOOt93aCgGSjHvgERTELw7tSc2sVZ~xfLmI1ssP-FL8_&filename=minisebran.exe

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_es&type=PROGRAM&Expires=1471484534&Signature=Fo8yobL4mteNJlAflTUtjapdUHhGrZklly~PpeSgmj3c4ZprdqqGJWx73815Ey8o2i2ShERCm9VzhZaB8P9hMi8CxrJVJ9HYubz6mT3b4vlmdRUJsaPKTfqRdHrGRsw3cmk1rqZfQs8mOzSqGnFUjREQCVbxOAh3gY-NSgzz8M0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=minisebran.exe

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_es&type=PROGRAM&Expires=1462514862&Signature=ds5dEEHUXZpd0FNJRMJOCugtZY06drwq7FS8UuoiTmDmaOIWTKGWdQR8eyhdG1U1ACf3b2l7xI7mEP9XU3yazSZak7R5cqOlIsxQzwZxhRX1pX8IqlDA6w8ZJsjJiahuZkJD29J4V4VyPWaebMKrn3vxotS680INNfdoy7Khyzs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=minisebran.exe

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_pl&type=PROGRAM&Expires=1446760666&Signature=ixIDFZvP8jp7v-oj1XgvFVig9LSPVsZMQh91tccHF3LguaUSJPGdhnnOKmqfCjN2r-Mwu6T770PWFEYniP3-UcJW8iLpbXpCQRmOPM8jfW7z~KaIC1H~4YyHcKVZ9-GPRRrBubReH~tJekxupGSSq~tka4YmRV8A~zYeuyxRAVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=minisebran.exe

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_es&type=PROGRAM&Expires=1443428446&Signature=gktLf2LCwyq6ViTUD5bkPPecdox01VYNWx9OTs7mTlfJ-fG8QGLOWivGUHQ7hWYZZHScU~MStd-6LFPCNQfC1X1WK3lxt5szdDfJQU3FM8SJgPMkZykIq5iQImgOwcylGQmlM2MNCYmij5ya89IluKfJgVMQIKiTmda03ahgG10_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=minisebran.exe

http://d2lbsxh0uh3t5t.cloudfront.net/2.1.575/.../MiniSebran.exe

http://gsf-cf.softonic.com/7b4/5a3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=55533&instance=softonic_es&type=PROGRAM&Expires=1456640871&Signature=SFMz6WRzyhmBY0N~aTFEjUZ5nqcwyPatCKqfk5U95ZrbEo1POW4kyWbNWA68lV5RNQcjZkYiqwA4jDzg-Yh-s85stnLdK5YQ90TMcabie27NQHSP2JGoxvE8-G-MvZ9J-TgDdvsQimJRyJmWAvTa3kR7bzJQr45GbI0P546AOFc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=minisebran.exe

Scan minisebran.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.