home

switch_off_2.3.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
MD5:
0362f584287c91780117c8d19d2a3d81

SHA-1:
d52605146cda987ce91d2071668e5b8c9274c37a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:50:53 PM UTC  (today)

File size:
63.5 KB (65,069 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\documents and settings\ns\bureau\les beaux logiciels\switch_off_2.3.exe

File PE Metadata
Compilation timestamp:
9/23/2002 7:49:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:Uqtj5s5Hh45l4OBErdbxQF4u2C2vDWRNmSBSTz:Pj5Yh45lnk7e4u2C2vDWPq

Entry address:
0x1BA70

Entry point:
60, BE, 00, 70, 41, 00, 8D, BE, 00, A0, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
20 KB (20,480 bytes)

The file switch_off_2.3.exe has been seen being distributed by the following 20 URLs.

http://lb.cdn.m6web.fr/d/c/a/bff0a0c64f10b918b64e991929deb086/56c3b0bd/soft/.../Switch_Off_2.3.exe

ftp://c61afc5b0deff24b8a313f7e9d005530:1277611812@ftpclubic22.clubic.com/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/6628a255814bd690621ae9ed69f474fe/582c70e8/soft/.../Switch_Off_2.3.exe

http://s8839.chomikuj.pl/File.aspx?e=XWmg3EwJmrK4eFp1X5epVdp80k64yJ4aKkrdgxzWG1hDW6FvPPdWmF-nFIi8tYZbjf8KaX5pQts8e6AiTrO_oY5P2JLrICuAJz_Y6xg89hJ98QNMEXeOf_Vk7Xqt7Yf8eubm70iq5DVA9oVnq0VHaw&pv=2

http://lb.cdn.m6web.fr/d/c/a/f8bc5bc1c1c18b79fd8b5808bdc8a568/583086e5/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/24f11e6b65d28749745d45e0a3c3c734/57b0a462/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/e1d0920c5dfbd3c017e6e881aa28bde6/5781a351/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/741665301c73c7e991c099aa68349f3d/571aac0f/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/6f600e4518b9d1510b17c9c500c7ed6d/5726aa33/soft/.../Switch_Off_2.3.exe

http://revpx6.chomikuj.pl/.../File.aspx?e=XWmg3EwJmrK4eFp1X5epVdp80k64yJ4aKkrdgxzWG1jXriXpC2pF9D3Hz5iU-dB51_DoRS9NdZsCxPxRUdfVSRibb4q3CwumMhbm1AO6VrqkIWwRsOclhEleVRWZddaMwfs1tHA3umNe6V0gPaS3dw&pv=2

http://csillagpor.org/.../swoff.exe

http://lb.cdn.m6web.fr/d/c/a/a99f8e1d1ce034ae8df3e8219ca55307/54aed9f7/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/7c5d4ee36b28e7eb1b5f5b12a329ab0a/56d63986/soft/.../Switch_Off_2.3.exe

http://1.csillagpor.hu/swoff.exe

http://lb.cdn.m6web.fr/d/c/a/9328965fc7a7df1308543701815045fe/56848215/soft/.../Switch_Off_2.3.exe

http://cdn.programlar.com/pf/files/000/483/.../switch_off.exe

http://www.programlar.com/.../?operation=download.complete&contentType=none&panel=client&module=prg&objectId=18OCQI4&random=20130907074145.akfm1rkrhjp0jedbead8joq2g3.531

http://d210.cdn.m6web.fr/soft/.../Switch_Off_2.3.exe

http://lb.cdn.m6web.fr/d/c/a/a335e631e66afadef6b9afc0ea006219/5365aaab/soft/.../Switch_Off_2.3.exe

http://soft.archive2.clubic.com/files/8042b2311d2f64912298c28112e10758/5215783d/.../Switch_Off_2.3.exe

Scan switch_off_2.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.