home

unbantool.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download627.mediafire.com and multiple other hosts.
MD5:
cecdedcfe7cb9debcbe9eb2ed924ec77

SHA-1:
457926eb5c1f3759f3b9b7d97b5e2c90742eb49d

SHA-256:
f256c0016b3aaa50f318310d7232a29516cb832c1416f6b7667c5dbbb0f011ed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:11:16 AM UTC  (today)

File size:
222 KB (227,328 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
4/27/2014 7:45:25 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:oLj1LPVKF4x7O39kQUE6hb0fhPu38HXp57Vz44JiYdAnqZblUQeW0Ou:sjSeAmQUhhwfhPuMHZ55wolUQeTOu

Entry address:
0x4BEC

Entry point:
FF, 25, E4, 51, 40, 00, CC, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 4E, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 44, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 49, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 51, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 4C, 00, 00, 04, 2A, CC, 03, 30, 01, 00, 07, 00, 00, 00, 00, 00, 00, 00, 16, 80, 55, 00, 00, 04, 2A, CC...
 
[+]

Code size:
15.5 KB (15,872 bytes)

The file unbantool.exe has been seen being distributed by the following 43 URLs.

http://download627.mediafire.com/99ff7yqy69gg/.../UnbanTool.exe

http://download1570.mediafire.com/6q06s6rym0dg/.../UnbanTool.exe

http://download1570.mediafire.com/41b33v3323ug/.../UnbanTool.exe

http://dosya.co/.../UnbanTool.exe.html

http://download1570.mediafire.com/eaozds8ugawg/.../UnbanTool.exe

http://download1687.mediafire.com/vmywv9jvx6yg/.../UnbanTool.exe

http://download863.mediafire.com/9l16n8evudeg/.../Unban Tool.exe

http://download1687.mediafire.com/0kefrzecytmg/.../Unban Tool.exe

http://download627.mediafire.com/c0kd2p7kuw8g/.../UnbanTool.exe

http://download627.mediafire.com/h4nkfe5h8bsg/.../UnbanTool.exe

http://download1511.mediafire.com/01r3d5tt11qg/.../Unban Tool.exe

http://download1119.mediafire.com/4e7s08t3f9jg/.../UnbanTool.exe

http://download1687.mediafire.com/yql24ddf68xg/.../Unban Tool.exe

http://download1185.mediafire.com/vcuduuet6srg/.../UnbanTool.exe

http://download1511.mediafire.com/3h8xnhlpn8vg/.../UnbanTool.exe

http://download627.mediafire.com/uzw2u0xjf2vg/.../UnbanTool.exe

http://download627.mediafire.com/h0ox75a7ab2g/.../Unban Tool.exe

http://download1511.mediafire.com/no02i35q4oqg/.../UnbanTool.exe

http://download627.mediafire.com/cx398c76a00g/.../UnbanTool.exe

http://download1125.mediafire.com/81d2c80k8stg/.../UnbanTool.exe

https://docviewer.yandex.com/source?id=2p6g-kaym9losfp3rutz5n6uwe5fomi6v0zsctg613874qubfdmypgimv5c0h0r4nijp0cm7bygsym7ufmzid2mmd11rx45j0rz6qtb5&archive-path=//UnbanTool.exe&ts=157199edbe2&token=CZaRbDFnv8B5M tEhUClmg==&name=UnbanToolUPDATEDl__.rar

https://mega.co.nz/temporary/.../5MIViQYQ

http://download627.mediafire.com/lx9dxqe8vazg/.../UnbanTool.exe

http://download627.mediafire.com/epdguuu57e1g/.../UnbanTool.exe

http://download627.mediafire.com/w9n1gdjn24pg/.../UnbanTool.exe

https://docviewer.yandex.com/source?id=2p6g-kaym9losfp3rutz5n6uwe5fomi6v0zsctg613874qubfdmypgimv5c0h0r4nijp0cm7bygsym7ufmzid2mmd11rx45j0rz6qtb5&archive-path=//.../XhVdSvAtsNZwig==&name=UnbanToolUPDATEDl__.rar

http://download627.mediafire.com/s935sqp8ling/.../UnbanTool.exe

http://download1125.mediafire.com/9mgd0pae2vxg/.../Unban Tool.exe

http://download627.mediafire.com/s3mr9m4y5hng/.../Unban Tool.exe

http://download627.mediafire.com/kpaiej93r6dg/.../Unban Tool.exe

Latest 30 of 43 download URLs

Scan unbantool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.