home

פריצה למוגובי.exe

WindowsApplication1

Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
b09ab7ba90aa3987efa1984a25a9ff27

SHA-1:
abf569e10ecde0cb59fcdafd922af2b8eed61861

SHA-256:
4674432b9178de54190b45c620de8dbb5bb04a26132f2002124fe95f76c83c3a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:48:31 PM UTC  (today)

File size:
32.5 KB (33,280 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
WindowsApplication1.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\????? ???????.exe

File PE Metadata
Compilation timestamp:
4/27/2012 9:35:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:x/UWdGe0HkBTq7wbsePcGJA2XPkYIjAt:hUg2kBTq2lO2f3

Entry address:
0x8D4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4790

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
27.5 KB (28,160 bytes)

The file פריצה למוגובי.exe has been seen being distributed by the following 10 URLs.

http://f2h.nana10.co.il/.../qaxb879bx9rb|3525f2b75c5020ebdac1a68e0785e004|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|79a0c7811079a21171b9367d456392b1|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|5a46f11fc651b94d5ed57fcc7c069e85|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|cf95eab0d3cb9d11ed38952cba03cd3a|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|785766757f5c2adacd14f42815a4236a|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|5dda722f1ddc0ed1d576c057baf77a57|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|2ab360f58d275c8b7dc25fcdc1245e3f|.exe

http://f2h.nana10.co.il/.../qaxb879bx9rb|d0da3d0fca11cdeec627d6421f536b1d|.exe

http://serv33.f2h.co.il/.../qaxb879bx9rb|0d145f6ec9101c0fb57414bde87289b9

http://f2h.nana10.co.il/.../qaxb879bx9rb|8b73d57fbd12886a222155c61debad8f|.exe

Scan פריצה למוגובי.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.