home

shoppy mart 1.1.exe

@Pezomi

This is a setup program which is used to install the application. The file has been seen being downloaded from w3g3a5v6.ssl.hwcdn.net and multiple other hosts.
Publisher:
@Pezomi

Description:
Shoppy Mart 1.1

Version:
1.1.0.0

MD5:
890e4c26f1b5f15e35b4802372277628

SHA-1:
b588b093f042832fa70853273051cfc3f0757a76

SHA-256:
444ba97323144b9077b36d59d4da8bf1e1e05824a5255c1e3dc23324eaa61197

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:50:07 PM UTC  (today)

File size:
38.2 MB (40,083,968 bytes)

Product version:
1.1.0.0

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\shoppy mart 1.1.exe

File PE Metadata
Compilation timestamp:
7/13/2009 7:42:43 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:J+CH2L7ZiJIZfpDVzLa3HP2yyR+DReVszVN3bFFab8nKcvhlGsYWKedVU:J+CHUFraXP2yySeyhh6cZlGrWLU

Entry address:
0x6AF8

Entry point:
E8, 1C, 06, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, C4, C2, 00, 01, 75, 03, C2, 00, 00, E9, 98, 06, 00, 00, CC, CC, CC, CC, CC, FF, 25, 74, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 70, 12, 00, 01, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, CC, CC, CC, CC, CC, 53, 56, 57, 8B, 54, 24, 10, 8B...
 
[+]

Entropy:
7.9963  (probably packed)

Code size:
43 KB (44,032 bytes)

The file shoppy mart 1.1.exe has been seen being distributed by the following 12 URLs.

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481716897&Signature=QuVq9IS8KUz2cgavw6PPUwL1u9Yjt2SZPPHkXKM163nWUH/.../2M7HDBYCeLVnDCdgcKQ6Vo0jjSN RR1 LvLAy0JKkRf1xFOPKJgpdKWW6uqfGzMg=&hwexp=1481716897&hwsig=f2785df1625ee842e92c6baf49fd7251

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1482413992&Signature=dFbfqt0h260vA2VO9tOrsRcHY8amNLL2Su2m6KpqXl XqbP30ORwfYfw5a3oRixEddvBFa1CULzYhYx1SMubO2D22u/by/.../qj1hGBnLOGewtbEHHo pYTqeQ=&hwexp=1482413992&hwsig=8d2969d8397f018ead4e934f7d0170d0

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/.../70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1482864056&Signature=oed9lQQTWqmStWaDdG2ASK4lS6ikXUM1NlIFzNm6GYTdzofN7Z3nGQMy0DoTiDMYXEJIawuMHH5 9ONkYcA9IC32RS3oihn27KZ gC3Uw7Pi atfU6HoDIMN2W9WMhGmXtu9ODXCHxZQTRB23r2WIRqQ910xmmqs0EbdbdamMsM=&hwexp=1482864056&hwsig=28d4fa4f02f2959e2fad45a584f7c5ab

https://w3g3a5v6.ssl.hwcdn.net/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1481730416&Signature=GUC4Is6uN7JIj5eOpmXahlcvypiVbfBU93/umKNDY03ctOzHXHeg3v/.../ZASk fauTbhLwVoUaTU6vhwruly4Puvij1xSC11N56Tm51tt6 8Jx FPeoJZpRWG5xBJ8UoFRhn2qlaU=&hwexp=1481730416&hwsig=3df6da1dd1ab9b912b6d6ded67dfb474

https://itch.zone/itchio/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1474745146&Signature=Uk/QS9HwkUmPhku8w/ruG001FgJAXh0B5wHe0JMWlM1YhBo cdQRVAyhrTnGQUCxp4vAjKqd0S5IbLWNOyN7yZUR4mQdmitFjsYeN3WonM0RIJ0blOEFrunC/.../HVj70dV58CttySw=

https://itch.zone/itchio/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1460655408&Signature=NZmqpP3A3E8tpFCwIF14reviKxeSz6994t n otnZix8gOIIC xeFGcTjTrz9PkhMe2h66iGvgYcfpuuiQB4CkghttS/.../a9fOoQYIpUFsfaIN52yMqhuUr9JNtaGbssRMkfdG6R1fCDpvnmBmbQsmwetQU=

http://itch.zone/itchio/upload2/game/19596/.../Q3qs4PWgNLlJxtfihnVYDicFdBT4fu03DpD3ipAa5Sk=

https://itch.zone/itchio/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1466685011&Signature=PGelEVvYYxQYP2L6wjirBmmUHHT/.../f uNiLBmhRHG5s8uI9TNSZOLkFtxYh6o81jDafyNB k8LQ1hk9XZGc rlScmR7HSDw7aNK5h1dpZr8B70pz64DIUGxmpQt7qxnVD7XXbm3lyeEYmzcJoO9h3DyDs0aMgsLvjJEs=

http://itch.zone/itchio/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1451170274&Signature=wWs6j//.../sXlnxDnzHobH6t39UBIJVMlk8gPzyqf8iEwFawLohfNLefBl0eWZzRgKZb7mgaqXNzwGFtZEaBJX2ABn6FQIBh83ffnvNQDTIcQNJ4EKzxdxEeK9M8=

https://itch.zone/itchio/upload2/game/19596/.../Dl2py7bYYuUz35teQ9eAtZZmk=

https://itch.zone/itchio/upload2/game/19596/.../OnMliId5Bnpi355hlw1i3uJE tixZ93C5zFVmfblaho9G4ZkpmQkCB2bCvNQ3S8pNu9k=

http://commondatastorage.googleapis.com/itchio/upload2/game/19596/70180?GoogleAccessId=507810471102@developer.gserviceaccount.com&Expires=1451933902&Signature=rHHDgf02QDfla0AWPW302JtQvmWU9pQYgkGfsx0FQwnaljBAaTpTa/.../dg36XEhjSqgmGENwMkZCP2K7gAAkyctSzD6YNIFCXXbM8d5XTG0LivG5wyjFTl9 zW07XGY=

Scan shoppy mart 1.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.