home

îé÷î÷ ÷éáåì ðãéøéí.exe

מיקמק קיבול נדירים

Sally

Publisher:
Sally

Product:
מיקמק קיבול נדירים

Version:
1.0.0.0

MD5:
6a426ada94d56cef44bf44ddedb0ff52

SHA-1:
98427ebe5209b514775d017b7461d2f18f877896

SHA-256:
3c12da40a563d4e86becd58e30d6dd5215bb37e76823b865f4c3b949e145c7e4

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 7:58:59 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/PSW.Agent.OBA (variant)
9.9288

File size:
865 KB (885,760 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Sally 2012

Original file name:
מיקמק קיבול נדירים.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\îé÷î÷ ÷éáåì ðãéøéí.exe

File PE Metadata
Compilation timestamp:
4/19/2012 8:24:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:bqNUUguJ06MFO0snGufmz+G0yKzcS2OUfFakg:emUK6MFO0aL+aKS

Entry address:
0xD8F7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5644

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
860 KB (880,640 bytes)

The file îé÷î÷ ÷éáåì ðãéøéí.exe has been seen being distributed by the following 5 URLs.

http://f2h.nana10.co.il/.../097a217346u5|0527510724e51e0efc067289bf7e685c|.exe

http://serv33.f2h.co.il/.../097a217346u5|b4e0a49157b9958f6aba0512d15e3f0e

http://f2h.nana10.co.il/.../097a217346u5|5c56c843168e8f84e7d027a99c1264c6|.exe

http://serv33.f2h.co.il/.../097a217346u5|cf4c6fa663cd651d5533c5ad5691cd27

http://serv33.f2h.co.il/.../097a217346u5|8a750dce0666322b56170c557c2d9e02

Scan îé÷î÷ ÷éáåì ðãéøéí.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.