home

czm_fnaf4.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1819.mediafire.com and multiple other hosts.
MD5:
adfc0d9cfd9d56395ba52029da6dc4b0

SHA-1:
89a970e3cc097ccaedde61b6f501a95d4bfdea79

SHA-256:
1daa2fed04ab36f0728dfdd9ec8c87256a69fe842a359f6aef3f7af1a42ae519

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 5:37:52 AM UTC  (today)

File size:
210.9 MB (221,162,401 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\czm_fnaf4.exe

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:IqJJgdM1Dz6pJ6MtVMTxRyZFLAHcGr/rke4XTwO79F:vJ60DACKQqxn

Entry address:
0x30DE

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 27, 7A, 00, E8, F1, 2B, 00, 00, A3, A4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 68, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, A0, 1E, 7A, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9737

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file czm_fnaf4.exe has been seen being distributed by the following 25 URLs.

http://download1819.mediafire.com/znccblukktig/.../czm_fnaf4.exe

http://download940.mediafire.com/55knehsasgcg/.../czm_fnaf4.exe

http://download940.mediafire.com/owcqcnc7urzg/.../czm_fnaf4.exe

http://download2023.mediafire.com/o48u2nzujcug/.../czm_fnaf4.exe

http://download1819.mediafire.com/yqdgdh6rk9zg/.../czm_fnaf4.exe

http://download744.mediafire.com/qezibm5lj3yg/.../czm_fnaf4.exe

http://download940.mediafire.com/qrdjfjvkjyng/.../czm_fnaf4.exe

http://download609.mediafire.com/60a2op37sjzg/.../czm_fnaf4.exe

http://download1988.mediafire.com/1r2hes9blelg/.../czm_fnaf4.exe

http://download1801.mediafire.com/e5fb23fiw8bg/.../czm_fnaf4.exe

http://download940.mediafire.com/tllhk0162p0g/.../czm_fnaf4.exe

http://download722.mediafire.com/mfwme3nnmfrg/.../czm_fnaf4.exe

http://download1801.mediafire.com/9hdob9c3edzg/.../czm_fnaf4.exe

http://download940.mediafire.com/398c6p03t2og/.../czm_fnaf4.exe

http://download658.mediafire.com/tkzdz22pv6eg/.../czm_fnaf4.exe

http://download609.mediafire.com/fdd5713rlwzg/.../czm_fnaf4.exe

http://download1801.mediafire.com/09o16yi168xg/.../czm_fnaf4.exe

http://download940.mediafire.com/6ulffa1zf4qg/.../czm_fnaf4.exe

http://download1775.mediafire.com/otkfrp7h6omg/.../czm_fnaf4.exe

http://download940.mediafire.com/qf6m217sokig/.../czm_fnaf4.exe

http://download940.mediafire.com/jc6iha6emqng/.../czm_fnaf4.exe

http://download940.mediafire.com/p3an1uef2clg/.../czm_fnaf4.exe

http://download940.mediafire.com/2ls9aker4ztg/.../czm_fnaf4.exe

http://download1819.mediafire.com/3u2s4qh002ig/.../czm_fnaf4.exe

http://download940.mediafire.com/dslqlrir8n8g/.../czm_fnaf4.exe

Scan czm_fnaf4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.