home

agar.exe

Agar [Windows Edition]

This is a setup program which is used to install the application. The file has been seen being downloaded from download1770.mediafire.com and multiple other hosts.
Product:
Agar [Windows Edition]

Description:
by Mati Godoy

Version:
1.0.0.0

MD5:
80657bd2d99668fa74807e60644fc882

SHA-1:
8d489adbccf923b51a9153ab00b74bf6b5cd0e0c

SHA-256:
876c53abaefb29f63be8a975ba1b643d11e412d520e0c2747be8d142b970757e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 7:43:46 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.FrauDrop.dtacfb
0.30.24.2668

File size:
9.5 MB (9,959,647 bytes)

Product version:
1.0.0.0

Original file name:
agar v1-7.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
2/10/2015 4:10:02 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:CmY+x1eZiTIqRO+HrjGsMhNas2/XbsO9c7IJA9Dty3K0qXT/OS4nG:uwIwO+LasMSsoXoF7IG9BDV4G

Entry address:
0x2CBBC

Entry point:
E8, 15, C6, 00, 00, E9, 78, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 0C, 06, 45, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 0C, 06, 45, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
7.9924  (probably packed)

Code size:
253.5 KB (259,584 bytes)

The file agar.exe has been seen being distributed by the following 23 URLs.

http://download1770.mediafire.com/j7dk3zl8pvzg/.../Agar.exe

http://download2184.mediafire.com/m7yp16o6fvzg/.../Agar.exe

http://download1995.mediafire.com/yfjwog7n1s0g/.../Agar.exe

http://download1770.mediafire.com/a44idyc5c42g/.../Agar.exe

http://download1723.mediafire.com/vraicb7rbvgg/.../Agar.exe

http://download1770.mediafire.com/4zj4p7a8mw5g/.../Agar.exe

http://download1770.mediafire.com/rxhkrrgwq0vg/.../Agar.exe

http://download2184.mediafire.com/iw9776b93bgg/.../Agar.exe

http://download1723.mediafire.com/hax15dtuv4jg/.../Agar.exe

http://download1723.mediafire.com/7psb7291uqtg/.../Agar.exe

http://download2184.mediafire.com/ns9tpasks90g/.../Agar.exe

http://download1995.mediafire.com/t98o83w52qpg/.../Agar.exe

http://download1995.mediafire.com/tgo2sxzga3sg/.../Agar.exe

http://download1770.mediafire.com/l1udrk46qa7g/.../Agar.exe

http://download1995.mediafire.com/li3po1c07x0g/.../Agar.exe

http://download1770.mediafire.com/35a3q08en34g/.../Agar.exe

http://download1040.mediafire.com/623keu1fnlog/.../Agar.exe

http://download876.mediafire.com/2n47iw48gakg/.../Agar.exe

http://download2184.mediafire.com/d448dzwkcldg/.../Agar.exe

http://download2066.mediafire.com/841z4zodbipg/.../Agar.exe

http://download2184.mediafire.com/b9qa0hybv9vg/.../Agar.exe

http://download1723.mediafire.com/pznz6fxc3hhg/.../Agar.exe

http://download2184.mediafire.com/pdree7bkta9g/.../Agar.exe

Scan agar.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.