home

SkinConvertingSheep.exe

SkinConvertingSheep2

Product:
SkinConvertingSheep2

Version:
1.0.0.0

MD5:
16fbd81ebf4a20c96eeee50593db738e

SHA-1:
55d62f74328e8c5e80c05387f22b34b18cdbdcca

SHA-256:
32e3b372e725a23d9a170f38b42a62789a98e42d819fe5ef1fcbfb5972c53670

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:03:10 AM UTC  (today)

File size:
39 KB (39,936 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Noto 2014

Original file name:
SkinConvertingSheep.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\skinconvertingsheep.exe

File PE Metadata
Compilation timestamp:
9/22/2014 5:25:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:8H2+z9wngY9t/uVVhYKUK8KjPzQcFlwjXwjvwkaw37qYrr3jwfpwqCwq6uihSkC9:8H0t/sPtr77386PMsEXD4d/1pBwF1e

Entry address:
0xAB2E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.4521

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
35 KB (35,840 bytes)

The file SkinConvertingSheep.exe has been seen being distributed by the following 13 URLs.

http://download848.mediafire.com/zddi77dlv5cg/.../SkinConvertingSheep.exe

http://download959.mediafire.com/7p0obfzcmwcg/.../SkinConvertingSheep.exe

http://download848.mediafire.com/8m059ibizs0g/.../SkinConvertingSheep.exe

http://download959.mediafire.com/hh1zaccedhfg/.../SkinConvertingSheep.exe

http://download959.mediafire.com/1c8b1jh7vh1g/.../SkinConvertingSheep.exe

https://docviewer.yandex.ru/source?id=4yy0i-49cg6tunajomqwtsyqf8em8f23jhtbg9hf87fh1n8qoc1aztbg8wbjk51jltgppewd24t8onzvrwszyziaqznh90on9kezlljge&archive-path=//.../SkinConvertingSheep [ByClarity].exe&ts=1556d9926f9&token=sXoTLuJesGFH9Myv9FOwlA==&name=??? ??? ????? [ByClarity].rar&uid=351409945

http://download959.mediafire.com/4fybxf4ovwjg/.../SkinConvertingSheep.exe

http://download959.mediafire.com/cobb8bdk583g/.../SkinConvertingSheep.exe

http://download746.mediafire.com/n7kw3vam3x2g/.../SkinConvertingSheep.exe

http://download746.mediafire.com/gudk2r0g54zg/.../SkinConvertingSheep.exe

http://download848.mediafire.com/z0emywjfy3tg/.../SkinConvertingSheep.exe

http://download746.mediafire.com/nf0jus3xjudg/.../SkinConvertingSheep.exe

http://download746.mediafire.com/eprgnibx8btg/.../SkinConvertingSheep.exe

Scan SkinConvertingSheep.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.