home

my_tank_setup.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1190.mediafire.com and multiple other hosts.
MD5:
4540d62090abf1a8975cc093a9eea90d

SHA-1:
6517b85e9a32b0402c26cf81903d4b2a617130ed

SHA-256:
9dcdf6115d601be3f536e2e09b598bf65ba59cd9c4d9da505c29f5d02229c8a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:16:12 AM UTC  (today)

File size:
203.6 KB (208,473 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\my_tank_setup.exe

File PE Metadata
Compilation timestamp:
12/6/2009 2:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:3QIURTXJvjYf7TAcahQlax3JyDCstyHQ1v3pfiIuefHoHjUcdAUC0o0zQGKlB:3s2f7TG2IJSCXwtZa1Hgyoy2lB

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.8825

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file my_tank_setup.exe has been seen being distributed by the following 45 URLs.

http://download1190.mediafire.com/0dx5r42fbelg/.../my_tank_setup.exe

http://download1605.mediafire.com/5r8zijszorvg/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/286fffe3a008f865fe0d9aca6ec46c8a0a57a7e3ccf2b350ca1d6489d608af53/57a198dd/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://rghost.net/download/52224276/.../my_tank_setup.exe

http://download1597.mediafire.com/7i7gphah0gng/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/9a6ed8057fd1c7e266ee62039196b4906d56269411f20623fd2de3ff2cfee62f/57a0f5ba/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/ea4e2e1398604cdb4a673e9360628438931383fda1c24c9d0766c545c04bef57/578725c6/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://download1605.mediafire.com/yd534pazy24g/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/b0cf233d9d84ac662d069e81044915667337c4571f9736e23a53decc3975a000/58036b5f/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.ru/disk/3b3bf992bd981d3dbec323f76fa6c0c3bfa8315f785bd563890682c0be5dfbd6/58371af2/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/efa93cad2b8eaed9f9bb954c3365e3176bc1fa69df7b4c75397e65a02052d82b/5808af0d/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.ru/disk/057c8ac7277ce342db4a6bb2b9b045a2cc36d240e002de6a05d88e7330809040/580e7e23/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/395845446706922c5c2682e5e7bc99fbc5d6a59bd5cbd4cc05c45e00a2262366/57e55b1c/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://download844.mediafire.com/xja8jphtwg3g/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/ec8a6b71f1b25601646febb816903f8a27a677418779e2ad1bad2a83139aa2b4/57cc24f8/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/ea43c533a57c54d6051367094f25dc7c/53d7ba8a/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable

https://downloader.disk.yandex.com/disk/019ed0b0f27e7263a4358372a958451824f4e8acdff829e249ef17807e49089a/575c22d9/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://download1204.mediafire.com/wb4qkc4zycbg/.../my_tank_setup.exe

http://download1597.mediafire.com/kotq9l9q62ug/.../my_tank_setup.exe

http://download1605.mediafire.com/4avyhgxi77cg/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/b623d50c3521bc02fc2811eaac789228c2cdc2411ade6a45d41b68bed2dad4b0/568aab37/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://download1204.mediafire.com/ucv0j3xx0ufg/.../my_tank_setup.exe

http://download1605.mediafire.com/ciu9qq9kutmg/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/300b978f2950932d354a98f2e89340e891191860430b7d083e49ba27689cd6d8/576c3a4b/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/4de8364aba68f0ab0090d6c59297b8fe6c8dcc6bb643e57dfee23b6f2670c345/57485ba1/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

http://download1204.mediafire.com/bh76272zxatg/.../my_tank_setup.exe

http://download1597.mediafire.com/3wwt0eabvong/.../my_tank_setup.exe

http://download1204.mediafire.com/2i9m4z5m4v6g/.../my_tank_setup.exe

https://downloader.disk.yandex.com/disk/0e684365a811d61c05207d0560b3e9ef0368f51ddcded102931ce048e6a2e630/572e4c7b/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/41803e725630e3d2afb13feef470232cf4dfab27d48b8810e5f7ca9bcf4ad7d5/570e53b0/.../x-msdownload&fsize=208473&hid=3f255b2cacccbfffcc9a06f1ae9eb0dd&media_type=executable&tknv=v2

Latest 30 of 45 download URLs

Scan my_tank_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.