home

download-facebookmessengersetup.exe

Setup

Facebook, Inc.

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Facebook Inc.  (signed by Facebook, Inc.)

Product:
Setup

Version:
1.2.203.0

MD5:
bf24ad166b5e9a55d53b8582aa675a90

SHA-1:
b559451d199b4911c8f2755f7dc12ac105e6f78b

SHA-256:
536c74768c167d39001e1df06c1d7c2efd87474e4b557c073e5e21f48517e032

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/23/2024 7:34:06 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clodd88.Trojan
1.3.0.4613

Rising Antivirus
PE:Trojan.Win32.Generic.12B3F302!313783042
23.00.65.131224

File size:
481.9 KB (493,512 bytes)

Product version:
1.2.203.0

Copyright:
Copyright 2011 Facebook, Inc.

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\download-facebookmessengersetup.exe

Digital Signature
Signed by:
Facebook, Inc.

Authority:
VeriSign, Inc.

Valid from:
7/22/2009 1:00:00 AM

Valid to:
7/22/2012 12:59:59 AM

Subject:
CN="Facebook, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Facebook, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
195EF72FAD5B09219ECB160A77DD2395

File PE Metadata
Compilation timestamp:
7/14/2011 2:36:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:/M+HFwtnysCJIlRfgfjCJLl4XfU85SNALN+1i:hlwtnnCJI824X88EALNqi

Entry address:
0x1000

Entry point:
55, 8B, EC, 83, EC, 44, 53, 56, 57, FF, 15, 04, 50, 40, 00, 8B, F0, 8A, 06, 6A, 20, 5B, 3C, 22, 74, 0F, 3A, C3, 76, 1D, 46, 38, 1E, 77, FB, EB, 16, 3C, 22, 74, 11, 46, 8A, 06, 84, C0, 75, F5, 3C, 22, 75, 07, EB, 04, 3A, C3, 77, 07, 46, 8A, 06, 84, C0, 75, F5, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 08, 50, 40, 00, 68, 80, 00, 00, 00, 6A, 08, 89, 1D, D4, 61, 40, 00, FF, 15, 18, 50, 40, 00, 50, FF, 15, 14, 50, 40, 00, A3, D0, 61, 40, 00, B8, 00, 60, 40, 00, BF, 14, 60, 40, 00, 8B, D8, 3B, C7, 73, 0F, 8B, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
13.5 KB (13,824 bytes)

The file download-facebookmessengersetup.exe has been discovered within the following program.

BECTA Home Access Activation Tool  by Texthelp Systems
About 9% of users remove it
 
Powered by Should I Remove It?

The file download-facebookmessengersetup.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/a9cb2b4c39d36e96614f323c612768a9/58610035/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

https://dw.uptodown.com/dwn/t8VCt-YXMTG-OaYWM2Hw6SEy53eOAuWguouuaCGyN4zsqtG2XuLysei1Xl3IeILEjr9Ws_EvRswJB9N6utcDq57nI76R-sbWgx_UShG8hAunIhhbBpGj6SxTlsUrfayc/RmObVRuacmIZAEb5EfYv-a1F9xMoxYUZMKH6nZz1vr8iOMAMN979eY9ErIHgrnrj9YE8wFJUX_RB9dlRZ5mXqEvZLhqWDVsLT6rEK7tz7B2OlezzpxNAEZcs1jH4EAG2/6aMi6y1AwY5VTtGMVf06qkS2Y86xMnQeqJI365TpifeHZ8zIn2oT274tae5WgruTdJJ7PACO-7JF9AMZ_5HSqsLgbtS1wMlvaCccxnuAnomFqy0s6DH9BrbQh2JgLyaL/.../

http://windows.indir.com/kaydet.php?x=TVRjelFFQkFJU0VoTGtGemJpczBaaVZ0TlUwPXx8fDlhNmJhNmQ3MTViOTM4ZmRjNWJiNGZhZjI0YzIyMDdh&m=1

http://lb.cdn.m6web.fr/d/c/a/8bd45f39d7c3509e5ebea57b5c6012e1/5899f3d3/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

http://dw.uptodown.com/dwn/-U3PiT55L0q6nAKacSVwfN4S50VJ8ZxDqsZ-RrxdOln4mg_VEr4MNhx6K9eij1C0zVYhPeIaD4Su9SXAOpiXMGbc_jC_hl8OHcgNVriPJyhSnZ8F3wxHLqBBk0VtJh7W/T962y0OmttBCxoHFQEendZmKqqH5dgrm_P4GfE_z2XM5z_0JZkXLjRgBtRB10-QVB3tflWZXqRUErQnZmEW7IEeNf0BH_pcjIPnwVi--ybSQNMRTAa9RdE8GHAfS-dk2/xQfWugAWc9xn6dBzNrM4j73IYn5tHNCXphedp5KJz7LZ96EW7H_n8M1bd2tVS84EvcBacgwL2BySA_0sFcbSDfXe9AfirPGMok9mHT8uhpuUCXC6_a6nE7KLRODZ4X5g/.../

http://lb.cdn.m6web.fr/d/c/a/35a67726cd1722072bc6ce145c12ed4c/587562e5/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

https://dw.uptodown.com/dwn/9sH4GvQamlT1brvFDcSPTmLlYL1Lh18ujfixg7bmXAKCCd37gM6cGCML4d07pFuUe-rYc1-r8ndR2eMg1hacMJPPf8uiGY8LwTKwGH2nyp573HICN9oyi_AbvK-7Iy-1/oOOxkU-QvJ4Ef35V_72OKN651bCtFuRGxpt4rxdHXykd1x7tn4rhPMTnp3rjWzq1nmxQKkvpLNjcZ2UqezalyKRLyIJ7x8pARHRhxw9cZP9JHQEcLxKDQncSdknyO19b/cfzg0u4-a91XyptZYFhkTX2JQM_NG-E7LEcrXircWKFY41C51XnjYcmha3tS984ITLYx6fVKK3TCfIRzBh-qLKWJjJOM0DhQE3MaZOP_PEbs-ZNDV6NrcehNda8OEy4A/.../

https://dw.uptodown.com/dwn/PRLHxZVwZxexNaOhMraVAWjfoEVtdw3y0Ms2wkTlxsKOQAIAkM76oqszRz9a_oyEKR2tL1Y1E-6nSFZ1unDbrmfsCpZfyOf7xkqfVpDYOQA19lrsvr9g0W9A6hyN0FOP/yikA9xiFuHE9CH5EqVcKB5ZcbzVMvWsTW4cMRT-TvcKAVmN40X1wc_AEIKg0f4ulArKv2KZ3F-3iMx5XKVTWrGynfFT6CBvhndkDazpqwb3E0d9poDo7YMpUk5V-C_1L/bdfJpmiptF7s8DPtVjvmImd_98hqVl7vrmrK0kkTUjLyYWaoJpHJSjC93Jnr95K2xwOVkYT0php4j_WFoiUDEBKbefJogKlQxm41MG_fj--MfvPwaWSfm91cWoLVh6n-/.../

https://dw.uptodown.com/dwn/xSjw7-CyDMHRYNpEtAO57tXf2oV2HV4bcca_VJpLn79jea9fx7ZViwEDHEmLcgY5CJmjlh20arKLtByBdeyy9rXE7B1maIjxLGzYh7RrpLlQ5Py9cCx5k4I4MfnczCl8/DVqNejJ1e7Jaz21hk2s2-Wl67Ycp5EEzL8mTsii3sv7uoRpzMqGPbC7_2n7LL6LizhGVsbgKuNBEwAjtA8xE0qhdrFvKIb-wx9zZiFQs6Stw5Bb6ylwNiaHlZcENNK1Q/PjTHHPM4pIqTujrmfEZsQkbtjaMUJPeS1A706Pz_hzxqYCtPu-tFWwPbgP4nN0hdbOI3xJ_WSyrobZm9B3gzA7go_Be_P_iZv1i9W4rtzAd5Ut5cdTH8bBE_JqgFLNte/.../

https://dw.uptodown.com/dwn/HrCl5utEqRZNUWYr6tNexufD58myORigrlG7h6AGgxeE8wx0G6atvR_3MB9CRXZEvd7eHaLnFbsKqxo903mxlrK3fNjDypID35fKLS_yTjOmuJYVqy-YkA94XnA9yz1h/Zuk6sOa-F5vYygQrzr8JR4JVd56qPntOPwm7p1WHIoSPWecVoo9QUllMyjBV15ZuJ5NxPYf1UmmVFnqzzSWUN0PADg1P8WK7JOsCdo9K61b-9u4_pKgj_2zCz4vGenO7/WBl6LSksEwBBEu5BdJUiYjstK7JDgFpeTOsTd_njXUpKTInG12qnK5E3KxHqLfL2rFmyqrcxyYzM_AHMg-YkyIpMqlwMHkar7rO21JZCcYPUkV6sguChrdv6iGqBb6uy/.../

http://lb.cdn.m6web.fr/d/c/a/262ae66a04cbf347868b64b3333c5e1e/5780ad43/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

http://dw2.uptodown.com/dwn/1Ql33BwFoNqUxKxQ6Kx5CK8ZF5KISgrfjX2bzjtSDVTV-UMiwRDirfDuEj8oiUju1vzmduhd6gQgvVoiJzSOkxStKBhSUOe0r3n3lNWfEdpjHGlGPfOpvHY5tQxKxqfA/4bWuQSTkVdVzv6OOzrREKVqtTH8NILUKMNqxuQIlP9e-LiOMH9dLPlp5s_fK9J9QGpdvHqD9q9GLwl1uiuHURzn4dedtK4DMsIfj0tGPE_t2UX5YF6hxuPya92S_U147/8x2dn2QW6bC4isYd7yIA4Ez7rR2WZFOS6kNGzfILaU8b4_wHhmrXEaKrHKovDM3_oydIRuoWeg80ngvBn7d-8MeIUGAwFDuvmJqcVLLdOCVGFz9vKZS8uBTcvzEvL0Va/.../facebook-messenger-for-windows-7-2-1-4623-en-win.exe

https://dw.uptodown.com/dwn/mS-MehN05t4wiWE-XtFElPgobfDInedz0uzJZ82zEtolj7xhoFGpWiBdN0kEmePY_OyRTJQH7XYHYECJ2v32_pEJhi1yOyroBzbgdBQ_5It5oygbnWNQEyN1cK2yLetK/ZszDDUHkW7FYzYw3HhKMLylBJIcMycMMsOrsw3oU7I4Kg5qPkrpQPA0Mxy5Hfy7mNeszO-INXtkUp1lDgNPlftbmHlK_L6_x1gCPJQGypDLnTYaV_nhBbtLKXdz1Uz3x/bgi5-5Ye6Lx0cZuktMuv_d4Xwipva2udcYZrXw58uqq0c58GXl53SH62vipQMSaPzkhy-qMt6zN4-ELnM3Xvnd5X7Jk-WImao_bNS22nF6LPkSO-n7p2A_lBaadxjj71/.../

http://dw.uptodown.com/dwn/UyBl8Db18Razs9HBMbHhJAgUP-XKKZeJEEtjN66yUfZyullB67Y3TxaE5Do8VwrwTdvu73iQ8PiVoKwslQR4BCFlBm3oCIiI4-wBZQ-GUMr4D0UyaM2oOf8H4LvAB2o3/Y_FTxua4UG8S-L3mTCV8o4wSiTLoflZkVP1KeJRfw9a4Akn3GK_EOss82H-JQ_TqHHfv0EtAAnZQlD61ySXXt-D5oupqmktPfng5nTHPcgCiDbHw81_5xScun1CtknT2/0n0iHDUnUMPSDopzjyoLJDkGjXoB93UuvrP8vZW9EB02vfhzrOET-nVK5I3F2dVqbzkj9w4H2fxfWYF2Z6kYboYLcN9km2fJ8Xw_rGneIjqcMvbXfAF9dKp_y936fLfZ/.../

https://dw.uptodown.com/dwn/tXXz5qZSGcgF0NAB6Dwkcz5h6317w1dAs37GKWhvezWhDTE83USrel440dpO594G7DoEqeCwHwfxyjB0i-d1vIAT1RKKVm_3cDr9SGV4drC22Ys3saqwkf_fcaBzst1y/4f55eeTmvLfeS_Rg8AlsAnB6IczY-2X9hSVjmpG1h2BI5ucN2rakwS5HZaFXxuciqR0Jmh74YK3ShBihG7cij-woQpx5h6SbfvGNxQdxMZfO5sjsGw0juQ7S4aSVkIXO/BWjKAQcYZma05zsNF-K0w9MZIHjp6QrjqFczBfiLyGIaB1QQDAisC-vymrNyCxVl1JgSMvXzs-ka7bcZJUhM56srr4-AMpboMts86W7Zyj15Of3PvZnXA1Nr76uwFyQX/.../

https://dw.uptodown.com/dwn/uIJ07sryWO0ZalXH6_WQSk_60OBQ1Xkn2liobZEvIsixUO5UbGsLPn-Z_dtSVnIavIPXcRQ-yiDlYvPtGS9Bhp1u_q7mH4WBAi_H-wKU7Q-X-kqYsfc_wn-sWyfSH95q/utX-G5cWqPoxumWIcE43ONz-S5Wv35ZofsTnAmVYQaldgf3YJNrlc2NXdFuCrQckms5x5v9Lb2bgwVOVKQLMCn3gu8NqXSQLjwAouRTQFHxy0JiVlk741tQuJVyEihUo/LhTOwoensJkeIM-PrSQ43BfDoCv6miFDuv74QUHqMVFjC8JnI5TeQWZcEjdkBA1svYQ7Ealzx6SRPqIAHAww5_c4Sl6OpD2Sj13UUA_BADdI5r7XiWlmKoh7TnCwwCQX/.../

https://dw.uptodown.com/dwn/1J-VTvJ-FbTzgXF62gkJJiIiMA3_CXdZ39kFbhEfGUJ8e9oIXv0Scs75J8kxrQkoC1fOqC_fnWWHFGRJGrO5qBBgyWKdtun9Zem9PxEwmVPVJyt71xrbp7xsMHWZYFhF/bQ78ObDcOJJmJoM1Ucd5L0iee8wq9K5EvVpRhCK_o0BsyhXfgfDvFiQ4gezrJQPLweQLXKENHgnoLUZEtOl3KYY_gx5aVwA77zhA7DIbf6PjpHYEIR_GsuyVffKdDH5w/BQXddCw7smUIiM72hDa9rNdyc4GYabI-0IJdXQXI-Tz1z5GxWOvMs_bH4hdS8kJqiutxu-MW083j_6VigmRsBrADGPDyybhuSkc0VKb0VqCD7aeUBD9HeJCGQ2mlsmJ7/.../

http://lb.cdn.m6web.fr/d/c/a/d8f8c75d208501d87c95055521e14bfc/588c48c5/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

http://lb.cdn.m6web.fr/d/c/a/47bae53cf0bde9cdabe236f10b107f91/581bb59d/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

https://dw.uptodown.com/dwn/OmwezQV3JlhkGY9B-Nmfn7GbuACwerCS_3RVYQoq6puScl-kUp_SH-FSowzpyF2UkQc11vMjSwIsSWHlyZGqYrQVoij3RVPVXcJOVEvbyU_DEwR-NwuDBtm5cMnh2OYy/eWUsQDmH2T13Bvf-ApkRy3sG5QVKpZcfSylZqA6gijfVJZmANFTR3qJMR4JjPZjSyLs0qiaNsSf_cAaon5xyarKkjUtrAefEmboCKkiJq18EhlT1hlE4F2yp8eSpMTIc/RjUYA02M1a5RKrRHxh6HthMrJM18gzTXjShcISaFvd61j1dQSrPTDgUppoVipCL86Lgdh8KLHu3hLAjRoWj4BYADkB0fb4LjDoPBipsr1eEW_pPmXbmemaz12jycdDzf/.../

http://dw.uptodown.com/dwn/LsTXzBrkjYFkCLBsXRbqSjOjERH8GwFdoumqDVaiADhqanHpX8aPsFeUdlOAHZy72r1F-yrx9aat2zLyFPIrXDDlCuc6-fkj80RhPZh6tk39cA_6pgDgXJJmj4XRVqjk/fql9oDo0IeUVfxRnwvBSAWgivkKZkpBdVGLJHnsciLGGlC6-2GqjEfDMw7C4_lBzz2mkCdmQNfNizSL2bfCZIa5SD4BSoRL8h14J-dXFdOcnC7ZEqFmH4I25AWg99Srk/MmieXNFa7F4jAqNP6yS8yoo6zuEpnln6oZtD8emm1UOfTT67l80KVZvarD03ECrjw1Lvn2PjKXbNACwDJgT2rL1qN81j1Hk4Yoyp6nQGrnSGkCpLVJ-sfl63tpMx6peL/.../

http://lb.cdn.m6web.fr/d/c/a/39dcebfefd48ea119092d801e7cf8d08/583b37d2/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

https://dw.uptodown.com/dwn/hhrPvICpsudpAVZivn23_7ZM9WYPZngsjJm5163joCAWcRZNp-7KA9BOQSLOp09bKGqlKhTK9W4W_zZ8t255_-k6LPbF4CFjEcoOSlWN8ynSphk7J801pJ2cxXte2aBt/GgeKJ0HkFe8UHCTXqCMs6-k58PcFzZe4W3XE2czPuX-pyPPMdW_im5NHGW1h3BEgu5dCWcdTnTrFSTKTgBWXwdZ59Zb3mYgZW6djkKq1ojvjaIFwXHm7i3cIHlGx9EcV/vc5plwgVYvUMWP0OWM8VwfiDmzXzswDQG0ZN2mNlIOJCaDnicCvh77kRjuHGINjdM34IhwRNkONv9vlItRHiA4AGantTU4k5ems2_R-TFKpBi1TIExhMJ0rnPy6D51yT/.../

temp:facebook_messenger_francais.exe

https://dw14.uptodown.com/dwn/Jd_bddTsnkXN8pghQmLZ44Sn-K-6f-cS6yWMRkOwDvj-LPmD5J0FVVTfvohgggKSB4B06Y7BAJogEY5CykovTaqcmwYecyre9LBBLitxRSXFWa2oO_bPQB3rfXyxxK6-/IdxASNC2bbmFiQIAB11Fa6ghEtF7MTTYCAPxWEWpkHvOf_ntyMaiooEqZ680v0ULS6kV0mPID8SlVLqP2T74arYinEkM8KKwApvXL4cNb7qJG7YlxUMHUe1jM-dhuanp/0TypoJka4oKRsxHHK80JXg66aYdHSsJh2xK22MkEft27jvjXz43nFZDuum_zCQAPwvXcmF-tjCIeQdcPcxo3y8ewr4MT4wOH2dmFwdkJebCscbtZstEcZ5aWG4tESvu3/.../facebook-messenger-for-windows-7-2-1-4623-en-win.exe

https://dw.uptodown.com/dwn/KQxs9LMWZuUlHpg7norUNx64pipQMiH32xbc7wfnv_yg23OOCrLFhfpichBaAy3iW0Q_a-euc7LZJDoT1SGw4vdF8xcJjs7s5iA4pU6p1G4dUeq0zr9X8MLuhfVpQ8eK/KdokmOFIlhqD8ps_iRhEGu3hoEjx8obMw_ueUTJWHZHEPR8u3ZAg_Z3n__xdT6spZoFPNj_CIBFT50cDSklK8zZHc4ydAlnEyWLkbsRg27x-0IAkfZAbgCDEAU9ufiYG/30MZkqElGM7bvq-BIhAFpje-xKQ-vSxyuUWc_IkUg9jPB9CqtXRMqHl44jbrc6xz1GY8aXvENKFgnqkzWxOfvCvkveapVVJACNBjNmBPz132HeG3RTsO_KB3VjFC5LeJ/.../

http://dw.uptodown.com/dwn/jU2rCgxMuK2n7yZ4dyyndyvTl9l-us0nX68HeNzgUXQZIK9c-AySgO1kqLSKCMqrHoisc0AXO8yESr_h7s68gK2jqcvT3TzLCHOWUFv9fDn1R7gKowB_dQXIrzEBbr71/7LLLNT4qa2dyjqD1Sda3xMwNn3GNxVRi4LFS-dVf3PWmEb__fyCd2_aGEEslddF0SNRHLuPIRh_y3ehCJALLV9hRt5pvTz4NRNPIFZysckUgC-nZoAu-vFRhSXL8y32g/6mZy4mo-MICRtqakJ1lYMzXxRoUYX7sGSp4AcOQ0narwrZKfP4ONlq1lRBfgPLB1NNA4OZu-AIWUJihlQPv_wvMI8fPgPIAlJFxBja9L6R7pbH_ZCJXD_t0ql0xbmFHb/.../

http://dw.uptodown.com/dwn/wDISC4EVyf8y5a78P0B6ixqmfaa2SQdtR1ysf2Qv-jU32nOLnGoEA7ZuZPYGMVPauHTqxQuipFlJPjPVzLbc_1dpryP-QsPij2yUjWzXj7iytEfiOkX3FQTf3mj50AXe/ePaY8GKTOv3zumJwUW6ddfoJlNRz8hE41QOFBNcJYNmvnoR74bFhVR032tGpSvXYytKjhR524fCukcKd4BKKqZA362WV6TdYcUqdNE-xE2tuzHkIUubwGkB05l9cP7ED/0BaiVBbVQZPPw3PoBgxz5gPdku6f7BNRYxe6PJdy4l7vyPmKL51w9dyT0ET7ebuqm759eS27YA3kWtC8BlQt_DUj_Rmpu0gofsnLB75AoWX_gR8LcPTCdmoU0QplT9hx/.../

https://dw.uptodown.com/dwn/W0EaKgTGgF27qH9ZAgQt5q-RZ_tJK9nkKe4KgdbeH0xqxT8O4NJpIQuRsesfezHBKsjSUMgcxbQdD19mdUxS1113PfwaMC72VKhl4xzbnka8oOwUIdiDTDlBAmGTf_2R/etNepJ_HMVHr8A4QQLT986rj0ny-T3ECxe2qC51Zd4osFlAac-hWhUxeeUk4duxMECp37Nzcfn0KG1EKfL9ciBAn_aiOtDa_aMvCB7Y0JZvJZfCatrlFuzrMk3ANAPeT/76l8vIk5WxQv2wTFRWk6ShivuHGbM8ne-pUIyVUQChUYoTZ8Rz4TJUWaNVBUhJcSlXeivLNYlOyVblrjH0Hn-qD1a1fLwPi7uAlx8AX3YZ2wP7XH-PCILgf_El0xLXGO/.../

http://lb.cdn.m6web.fr/d/c/a/a93e1f3bbb1520b49b07fa9e90e35695/584885a9/soft/.../facebook-messenger_facebook_messenger_francais_427630.exe

Latest 30 of 1,017 download URLs

Scan download-facebookmessengersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.