home

feedsplus.exe

MD5:
fa2b9f93ab0bfa9e04cc1aae754fa9df

SHA-1:
8d0550095b4f2889a1ca579e10a5e09f5dce6d24

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:28:43 AM UTC  (today)

File size:
1.6 MB (1,676,288 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\feedsplus.exe

File PE Metadata
OS version:
1407.0

OS bitness:
Win16

CTPH (ssdeep):
24576:gFRYYynUC62E3sCVx9xf0ahCcPy2G5PulZlysC0I1I:gFRYYyUIE5r7f0aciwBurlysCf

Entry address:
0x27E

Entry point:
D0, CF, 11, E0, A1, B1, 1A, E1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 03, 00, FE, FF, 09, 00, 06, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1A, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 10, 00, 00, 38, 00, 00, 00, 04, 00, 00, 00, FE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 7F, 00, 00, 00, FF, 00, 00, 00, 7F, 01, 00, 00, 00, 02, 00, 00, 7E, 02, 00, 00, FF, 02, 00, 00, 80, 03, 00, 00, 00, 04, 00, 00, 7F, 04, 00, 00, 00, 05, 00, 00, 7F, 05, 00, 00, FB, 05, 00, 00...
 
[+]

Entropy:
7.2030

Code size:
255 Bytes (255 bytes)

The file feedsplus.exe has been seen being distributed by the following URL.

http://dc507.4shared.com/download/.../feedsplus.exe

Scan feedsplus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.