home

freecoinsapp.exe

FreeCoins App

MauDau

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from cdn.freecoins.co.
Publisher:
MauDau

Product:
FreeCoins App

Description:
Offering game players free virtual currency for the hottest social games on Facebook

Version:
1.2.5.0

MD5:
6a6d208075489a1a201d06aa5666dfa2

SHA-1:
c3106040df9cf688b0376297b655f7f52115f892

SHA-256:
f341bd4f8baf26f15335f7926a5474bd7b350c0dc7db80a1626665c94dbe40c8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:38:11 PM UTC  (today)

File size:
19.1 MB (19,985,048 bytes)

Product version:
1.2.5.0

Copyright:
© MauDau

Trademarks:
FreeCoins App

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freecoinsapp.exe

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:nadMZC3fkpOTItC3MhmLwF6n5IfO9cjSBgn2FUraJYv+NMzCRw3mVE7KZo/ud8Dd:nadMZC3fkpOTItC3MhmLwF6n5IfO9cjd

Entry address:
0x30FA

Entry point:
69, EA, 48, 9F, 62, BF, 8A, F0, 21, F6, F6, C4, 51, 28, FC, 0D, DF, B3, 97, 6B, 76, 02, 85, D0, 2B, DB, F7, C0, 08, 30, 27, 5F, 86, C9, 8B, FD, 69, EB, 7B, B5, 79, 4F, C7, C1, EE, 84, 6B, 05, F2, 8D, 0D, 36, A8, 3A, 80, 19, E9, 81, C3, C3, 9F, F9, FF, F6, C2, 67, 69, EA, 84, 85, FE, CB, 0F, BE, D4, 81, C3, 3E, 60, 06, 00, 0F, AF, EA, 69, D1, AE, 84, 8F, 03, B5, E9, 81, FE, 33, C5, 26, BC, 69, E8, 59, 9F, AA, 2A, 87, CF, 01, F5, 81, FB, 18, 00, 00, 00, 0F, 8C, A2, FF, FF, FF, 84, DB, 0F, AF, C7, F2, 89, C0...
 
[+]

Entropy:
6.4734

Code size:
23.5 KB (24,064 bytes)

The file freecoinsapp.exe has been seen being distributed by the following URL.

http://cdn.freecoins.co/.../FreeCoinsApp.exe

Scan freecoinsapp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.