home

netfabb-basic_5.2.1_win32.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.netfabb.com and multiple other hosts.
MD5:
a4c2f1042009be68db8c51cbcd585e19

SHA-1:
bdf9e1f7d3344cfafd83407486df82e01e92b193

SHA-256:
f7aab37f770b34b3a5e10bbed898d56bc677dc29d3f82b3e2547458120abe90f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:03:56 PM UTC  (today)

File size:
10 MB (10,442,752 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/21/2014 2:36:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
196608:pNgPVVPyX2dk6ajciTrkfL2lGyaB5Yje1JFur2EdlK7zJk25hpjopQckiwPS:pNgtVPymdkHjc4kalVWeezQrbK7Nk2fW

Entry address:
0x181890

Entry point:
C6, 05, D0, 2A, 58, 00, 00, E8, B4, FF, FF, FF, B8, 80, 32, 5F, 00, E8, EA, F8, E8, FF, C3, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8576  (probably packed)

Code size:
1.5 MB (1,575,424 bytes)

The file netfabb-basic_5.2.1_win32.exe has been seen being distributed by the following 8 URLs.

http://www.netfabb.com/download.php?pikey=9P1I78srW4nw5FK

http://www.netfabb.com/download.php?pikey=7xdfMQH03hYQE4w

http://www.netfabb.com/download.php?pikey=IPNVkRgj1g7LYQL

http://www.netfabb.com/download.php?pikey=Tr6bUaDQhqCUJKN

http://www.netfabb.com/download.php?pikey=STAaIzxIO8lPrnX

http://www.netfabb.com/download.php?pikey=WafgxZQB1RKaFNa

http://www.netfabb.com/download.php?pikey=PwnzXTYP0T5lQaU

http://www.netfabb.com/download.php?pikey=D7Ytktfy4UEI6kE

Scan netfabb-basic_5.2.1_win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.