home

الوثائق التربوية.exe

وثائق تربوية للمدرس بالمدرسة الابتدائية

facebook.com/tarbia.wataalim

This is a setup program which is used to install the application. The file has been seen being downloaded from download1825.mediafire.com and multiple other hosts.
Publisher:
facebook.com/tarbia.wataalim

Product:
وثائق تربوية للمدرس بالمدرسة الابتدائية

Description:
كل مايحتاجه مدرس الابتدائي

Version:
1.0.0.0

MD5:
d15a74f98a4e11c9d3a3051d3990b199

SHA-1:
69dbeb5dc431a0da3da5c631a5a8909251f9ea5d

SHA-256:
4b9fe91af0c088f5d400aad7b0c69bd8c538d4f88d860930f19d61e83768d66a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:13:55 AM UTC  (today)

File size:
52.5 MB (55,092,967 bytes)

Product version:
1.0.0.0

Copyright:
tarbia.wataalim Copyright © 2012

Trademarks:
https://www.facebook.com/tarbia.wataalim

Original file name:
الوثائق التربوية.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\??????? ????????.exe

File PE Metadata
Compilation timestamp:
11/6/2007 7:06:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:XaPUpZ+bDkHpvqNFYzinOAl1nkO/U29ZWeBhzQ:XaPUpZ+HISjYzinzznp9/do

Entry address:
0x173A6

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 2C, 43, 00, 68, 88, BE, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, AC, 01, 43, 00, 33, D2, 8A, D4, 89, 15, A0, 0A, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 9C, 0A, 44, 00, C1, E1, 08, 03, CA, 89, 0D, 98, 0A, 44, 00, C1, E8, 10, A3, 94, 0A, 44, 00, 6A, 01, E8, 08, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 86, 1A, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
188 KB (192,512 bytes)

The file الوثائق التربوية.exe has been seen being distributed by the following 33 URLs.

http://download1825.mediafire.com/os55b8m8cqfg/.../??????? ????????.exe

http://download1725.mediafire.com/t42cqqla5kkg/.../??????? ????????.exe

http://download1997.mediafire.com/39mgy3z4n2cg/.../??????? ????????.exe

http://download1660.mediafire.com/09rn51kw01hg/.../??????? ????????.exe

http://download2155.mediafire.com/4alu8hfy7dyg/.../??????? ????????.exe

http://download1570.mediafire.com/7aq7rah7tztg/.../??????? ????????.exe

http://download2097.mediafire.com/z7sxee3c0deg/.../??????? ????????.exe

http://download814.mediafire.com/oi5k4uiizt9g/.../??????? ????????.exe

http://download960.mediafire.com/adjza88na9bg/.../??????? ????????.exe

http://download1148.mediafire.com/0652s193ydjg/.../??????? ????????.exe

http://download1418.mediafire.com/1yzx4jfxy9ug/.../??????? ????????.exe

http://download1662.mediafire.com/85nkat2263jg/.../??????? ????????.exe

http://download1600.mediafire.com/h0h6i1w0ugeg/.../??????? ????????.exe

http://download1914.mediafire.com/xwgceag9fs4g/.../??????? ????????.exe

http://download974.mediafire.com/ng6o1qp8eblg/.../??????? ????????.exe

http://download1170.mediafire.com/lmy35urb62tg/.../??????? ????????.exe

http://download2097.mediafire.com/nn6u51o62ohg/.../??????? ????????.exe

temp:الوثائق التربوية.exe

http://download1617.mediafire.com/viy6fbxjxfsg/.../??????? ????????.exe

http://download684.mediafire.com/r64y1e2lz42g/.../??????? ????????.exe

http://download1894.mediafire.com/vel13bu2i23g/.../??????? ????????.exe

http://download733.mediafire.com/sohok9gf98qg/.../??????? ????????.exe

http://download1914.mediafire.com/y0ckv2b4fbag/.../??????? ????????.exe

http://download1418.mediafire.com/uqeob6xir9hg/.../??????? ????????.exe

http://download1824.mediafire.com/hrwzgfl3c7sg/.../??????? ????????.exe

http://download1611.mediafire.com/tfityieq8apg/.../??????? ????????.exe

http://download839.mediafire.com/tm9pqbiwfg6g/.../??????? ????????.exe

http://download1947.mediafire.com/4fahw7wu6x6g/.../??????? ????????.exe

http://download1611.mediafire.com/145625rpzn9g/.../??????? ????????.exe

http://download1617.mediafire.com/9ynow99hw5hg/.../??????? ????????.exe

Latest 30 of 33 download URLs

Scan الوثائق التربوية.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.