home

f1fa-14.exe

MD5:
3cacb06ed358ac9036b6dcfb8e96d31c

SHA-1:
09dea5a7205d1ecca91c01b40279347051110b5e

SHA-256:
5e0053c1d6c736a9af7c3ef0d981c534d93de46a306b639ef7b78a122bebe38b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:21:45 AM UTC  (today)

File size:
53.3 MB (55,877,977 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\f1fa-14.exe

File PE Metadata
Compilation timestamp:
12/1/2013 10:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:HITwTfdd//SGhEHnerzmVMDcx+SY+QJcBssqtYyb:vrD/K7HnerOLP6yqtB

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
7.3666

Code size:
98 KB (100,352 bytes)

The file f1fa-14.exe has been seen being distributed by the following 49 URLs.

http://am4-r1f9-stor05.uploaded.net/.../766459e0-5d18-423b-bf8c-3184797347c9

http://fileshare1240.depositfiles.org/auth-146506799140bb5f8b0785ecb3d1fb33-186.23.91.121-2583948997-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-14847502079f927ba2e312b54320f5fe-82.210.185.40-91618372-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1464002000b5b5dbbe13fd5ea162a6ad-77.31.213.119-2571770050-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1466523727114b2a0fdc01a03d59560c-94.248.182.170-2600344795-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-14784103534a51afbf7cef37f3adc2f8-37.210.184.116-31507929-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-14603948121c111b54b61fe7f5308804-81.218.104.69-2529547255-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-147773661967c328ee5a34ed1db255d1-112.211.72.116-24290260-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1476041567284df0edb1de0e07120f19-65.48.212.18-7306875-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-14602940046596b3369ede84e35e794f-89.45.15.15-2528241877-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1476520608cb614e09e43686293da451-185.143.116.8-11932583-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1476441433b6268ac203ff86c5b4c4e7-197.48.6.163-11116784-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1478365183e8b2bb259734c6bae37c2a-46.121.24.110-31052295-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-147001339224ae1763e88f3cd3ec70a8-184.170.33.136-2637308666-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1449249525cb66b88954283d7a55c25a-81.183.116.114-2379834330-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1480666845b03349cf4a44c9f8f93c32-86.120.82.118-53682741-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-148235451667e53cdd9f27c266c658b3-185.21.93.148-70014766-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-14433115134dfe01a3ae73abab550c60-94.159.220.58-2292426559-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1481633561a3549551144a327e431497-89.103.185.176-63165213-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1480856776aed7c712cac45b2a808353-79.182.129.101-55639519-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-146193893227685b875fa2e11a9c6b9c-95.40.222.165-2547950642-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-147898121739694e1bfb3a830fc012cb-79.114.175.37-37127676-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.org/auth-1477351811385da564fcde0b1702b1cc-138.186.234.158-20348338-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1476443892689e59a4e73d853d7f5eb1-84.117.15.67-11143469-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.org/auth-1478879877dc4c5e00094cce17a59604-201.23.135.225-36033120-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-14712689086544af2e895aa8e3216d09-188.124.218.46-2651765410-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1466271534ca78872fc577f4d5988e8a-92.86.150.32-2597495343-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-14468210610919a196e54bc7e67ef7aa-84.108.51.45-2343743507-163757514-guest/.../F1FA-14.exe

http://fileshare1240.dfiles.eu/auth-1479981545efd5c119b63c4e95bb5998-85.243.39.241-47165892-163757514-guest/.../F1FA-14.exe

http://fileshare1240.depositfiles.com/auth-1472754125503ce620db09064b18652b-86.12.84.141-2668560172-163757514-guest/.../F1FA-14.exe

Latest 30 of 49 download URLs

Scan f1fa-14.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.