home

mameuifx64_0173.exe

7-Zip

Igor Pavlov

The program is a setup application that uses the 7z Setup installer. The file has been seen being downloaded from download892.mediafire.com.
Publisher:
Igor Pavlov

Product:
7-Zip

Description:
7z SFX

Version:
15.14

MD5:
95c52c7d45c67a559881582d8c2ea89c

SHA-1:
a0aeaa16d4485217d5cae2253181fed1529d2e82

SHA-256:
c495442f2655b2ee45640fd2f06220571dbd5cfe84e34b7f44d240b8622c29db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:24:20 AM UTC  (today)

File size:
19 MB (19,952,484 bytes)

Product version:
15.14

Copyright:
Copyright (c) 1999-2015 Igor Pavlov

Original file name:
7z.sfx.exe

File type:
Executable application (Win32 EXE)

Installer:
7z Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mameuifx64_0173.exe

File PE Metadata
Compilation timestamp:
12/31/2015 12:25:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:7xrkFg8dxmk9BjF1RxkEthJHFG0e0QScdgZw02mnVW778ga32vDMw:7xYFgSEk9BjFvmoHI0QScy1Zaaqow

Entry address:
0x245CA

Entry point:
60, 0F, B6, FB, 81, F6, 9C, C3, F4, 81, 8A, C0, 8A, C0, 74, 03, 42, 84, FA, 50, 68, 08, 5A, 8C, 00, C6, C1, 43, 0D, 26, B5, 69, 93, B4, 19, 86, CF, 0D, D3, 51, 3B, 68, 31, D6, E8, BD, 00, 00, 00, EB, 04, 0F, AF, D1, F3, 76, 01, F2, 72, 06, FF, C5, 89, FA, 09, EB, 81, C1, C9, B1, 00, 00, B8, 86, 63, BE, 5F, 81, C1, BC, 04, 00, 00, 80, C5, 21, 0F, B6, C7, F3, 3B, FB, 0F, B6, D7, B7, 08, 77, 06, B1, 36, 33, FB, 12, CE, 68, FD, 1C, 00, 00, 85, CE, FE, C1, 58, EB, 0B, BF, D1, B7, 84, 1E, 8D, 0D, F7, B9, 90, A8...
 
[+]

Code size:
152 KB (155,648 bytes)

The file mameuifx64_0173.exe has been seen being distributed by the following URL.

http://download892.mediafire.com/8vic83q5xvhg/.../mameuifx64_0173.exe

Scan mameuifx64_0173.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.