home

ctl8.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dosya.co and multiple other hosts.
MD5:
60dac6217600e0a8b8cfd31ef9415a16

SHA-1:
8fc708fe3b7245db2887e15e1ce93f19c84535e0

SHA-256:
e00b4038fecefa3b69e09ae742a5753c81f3fabbb12645dd6d872f4aa8c0e66c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:41:23 PM UTC  (today)

File size:
2.3 MB (2,439,248 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
10/28/2013 8:10:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
49152:zYjcMfXc/PU9mz0XPAduDmlxmPMg52jiKn1Jm+ggDGyUFvM5a7PDOBlQxhE4oLf5:zN6odvlmAWKHlgEPyoQxuU4

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 37, 40, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
18.5 KB (18,944 bytes)

The file ctl8.exe has been seen being distributed by the following 9 URLs.

http://dosya.co/.../ctl8.exe.html

http://download651.mediafire.com/qxl6wo8b6rhg/.../ctl8.exe

http://dla.uloz.to/Ps;Hs;fid=72294535;cid=28461506;rid=1266054866;up=1;uid=11345026;uip=89.102.62.118;tm=1466532207;ut=f;aff=uloz.to;did=uloz-to;He;ch=3d33f63c1e8356b22e933a2596331324;Pe/.../technick-launcher-exe?bD&u=11345026&c=28461506&De

http://dla.uloz.to/Ps;Hs;fid=39030130;cid=529980223;rid=1684018982;up=0;uip=109.81.208.251;tm=1461244075;ut=f;aff=uloz.to;did=uloz-to;He;ch=3ed1c9d471f01a852182d2897a2f7474;Pe/.../technic-launcher-latest-najnovsi-cracked-warez-by-racad-exe?bD&c=529980223&De

http://dla.uloz.to/Ps;Hs;fid=38900500;cid=843074508;rid=1257116878;up=0;uip=88.103.82.210;tm=1460472471;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=45020310fa8f5a4cf1fbeff7e19f5abb;Pe/.../moneyak-technic-launcher-warez-exe?bD&c=843074508&De

https://mega.nz/temporary/.../Xogwza7K

http://dla.uloz.to/Ps;Hs;fid=38902062;cid=1211413212;rid=1391958911;up=0;uip=193.165.79.10;tm=1428500217;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=a4c5dabcecebde16a517783f5f9b8bdc;Pe/.../minecraft-technic-launcher-automaticky-aktualizace.exe

http://dla.uloz.to/Ps;Hs;fid=62484860;cid=977170784;rid=1109748332;up=0;uip=88.103.252.38;tm=1419267021;ut=f;aff=uloz.to;did=uloz-to;He;ch=2bffb1edadf4ffa3603fd48871268fdc;Pe/.../crafting-dead.exe

http://download639.mediafire.com/a8oe8pp2jawg/.../ctl8.exe

Scan ctl8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.