home

launcher correwillycorre 4 - (v3.0).exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download876.mediafire.com and multiple other hosts.
MD5:
82715ae417217670e0e78027e70bb689

SHA-1:
2da273b9a9329d7866313778892665038fbac746

SHA-256:
33bb8198337c00698712264a555b55b831df490963f202a98bc4b08b6af58eeb

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/30/2024 3:35:09 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Malware.QVM06.Gen
1.0.0.1015

File size:
108.5 MB (113,722,526 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\launcher correwillycorre 4 - (v3.0).exe

File PE Metadata
Compilation timestamp:
1/23/2010 6:45:09 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:xiuVPTsnbdl6f3A3zGB0uZQZ32O2V5J0vbHjbi7JiGzQJY:BV7oW3xB0e9V5J0vbDbWcYQ2

Entry address:
0xA785

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, BE, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, F6, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, D5, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file launcher correwillycorre 4 - (v3.0).exe has been seen being distributed by the following 23 URLs.

http://download876.mediafire.com/oer0e2qxooeg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download4.mediafire.com/fu789flly4mg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1015.mediafire.com/qaohqdyo59hg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download854.mediafire.com/fcrv1zgo02zg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2213.mediafire.com/rrqp9p8eetsg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2057.mediafire.com/mgth6o93txag/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download876.mediafire.com/pppcmuh6twng/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download854.mediafire.com/98kok0qx4wzg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1902.mediafire.com/h08n47bpm54g/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1815.mediafire.com/2qsjs1nrg3hg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1858.mediafire.com/knbdv0ew5clg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2231.mediafire.com/2389bdbi84dg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1460.mediafire.com/882uhohbl1jg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1636.mediafire.com/r44t5q4ctytg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1728.mediafire.com/x4l1iw579hog/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1894.mediafire.com/7nmpikymxzog/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2136.mediafire.com/se3in00y04zg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1736.mediafire.com/bla79rc7f3rg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2081.mediafire.com/8vdbznmc1cig/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2082.mediafire.com/jk32ty9bgivg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1894.mediafire.com/v7l95g2bhtag/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download1902.mediafire.com/898pxjyf5aog/.../Launcher CorreWillyCorre 4 - (v3.0).exe

http://download2205.mediafire.com/bgdl119zk3zg/.../Launcher CorreWillyCorre 4 - (v3.0).exe

Scan launcher correwillycorre 4 - (v3.0).exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.