home

snipedit.exe

EbkReader Module

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com.
Product:
EbkReader Module

Description:
test1 Module

Version:
1, 0, 0, 1

MD5:
cccae0e816297e9429e4dc3d00b35eec

SHA-1:
7fb15a62dbad8f99da43fa09555ff468c5de31f2

SHA-256:
210644be2291a87d1cbd2ff5762bff3f013c52d95419fd59f70727ed0bb1be0f

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/7/2026 7:36:52 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
8.16.14.00

SUPERAntiSpyware
Trojan.Agent/Gen-Pasta
8968

Zillya! Antivirus
Trojan.Cryptodef.Win32.1847
2.0.0.2744

File size:
862.6 KB (883,294 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright 2001

Original file name:
EbkReader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\snipedit.exe

File PE Metadata
Compilation timestamp:
6/26/2002 12:20:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:Rr3rXLIODei2u1I5R4ygJEWiwoMV24hfxtHPrueSuuFbjsg6CqiafXtFoDtBnoJb:BX0A2u1I5RRg/oMV24hpIwXtFKZoJ6c

Entry address:
0x89130

Entry point:
60, BE, 00, A0, 45, 00, 8D, BE, 00, 70, FA, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
192 KB (196,608 bytes)

The file snipedit.exe has been seen being distributed by the following URL.

http://gsf-cf.softonic.com/7fb/15a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=50469&instance=softonic_es&type=PROGRAM&Expires=1463465785&Signature=A5TZ7eJqFhieVUXiQTKy-M23-RKHUfb6NeJNn-LXHL-bsPYb5WXbA1LpBXioRCGhlAlITA5xi7xY8dTHhuQJ5APndtsuD60fS0JdgMqay9o~d1phj8RL4wxmvzDRmakzgiib8eDrBcq75~8f0680R06HvVxCNsZzl-QfakitKys_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=SnipEdit.exe

Scan snipedit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.