home

mcdonalds.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1371.mediafire.com and multiple other hosts.
MD5:
1fc8dd5d44dcca3ab15ef6f13ac8c421

SHA-1:
55f951c2777f15d4befba544dfc75e7db759c606

SHA-256:
769b5c479f5865135f02e2c86e720ae097ac280fb667f9f91538ed83dda49a21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:11:51 AM UTC  (today)

File size:
111.3 MB (116,742,260 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\mcdonalds.exe

File PE Metadata
Compilation timestamp:
12/5/2009 6:50:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:LtF1FHuisDROpyLQ2aoM+pNkpYcjunx6dxhD:Lt/wioOp2hd1ipYGhD

Entry address:
0x323F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 98, 27, 7A, 00, E8, 09, 2C, 00, 00, A3, E4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, E0, 1E, 7A, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file mcdonalds.exe has been seen being distributed by the following 50 URLs.

http://download1371.mediafire.com/a5vjilvzhr8g/.../McDonalds.exe

https://mega.nz/persistent/.../A5VB0CrR

http://www.zombiemodding.com/index.php?PHPSESSID=5dvrcvf9or5s4ue8hq5u05n0h6&action=downloads;sa=downfile&id=1843

http://download1212.mediafire.com/su30hczzq1ng/.../McDonalds.exe

http://download1723.mediafire.com/lwt8ct100yog/.../McDonalds.exe

http://download1906.mediafire.com/9ljfrfk2smag/.../McDonalds.exe

http://download2106.mediafire.com/nerzm8n9by0g/.../McDonalds.exe

http://download654.mediafire.com/a047x3v15tkg/.../McDonalds.exe

http://download1447.mediafire.com/e0p426a1761g/.../McDonald\'s.exe

http://download990.mediafire.com/pgd9r4zj58bg/.../McDonalds.exe

http://download2201.mediafire.com/dkqgq8u87vrg/.../McDonalds.exe

http://download1751.mediafire.com/w3yetn9p5svg/.../McDonalds.exe

http://download1844.mediafire.com/85qy5lw788xg/.../McDonalds.exe

http://download2162.mediafire.com/butus1xb9zgg/.../McDonald\'s.exe

http://download2089.mediafire.com/evbub163cg8g/.../McDonald\'s.exe

http://download2162.mediafire.com/80ms9sd1jrog/.../McDonalds.exe

http://download1998.mediafire.com/dv81w8c7klig/.../McDonald\'s.exe

http://download1146.mediafire.com/3k53611wcy0g/.../McDonalds.exe

http://download2160.mediafire.com/djpfbmhye91g/.../McDonalds.exe

http://download1021.mediafire.com/gqr4t9gl9olg/.../McDonald\'s.exe

http://download1459.mediafire.com/03eqh0rq406g/.../McDonalds.exe

http://download2162.mediafire.com/83i37yx7m7gg/.../McDonald\'s.exe

http://download864.mediafire.com/97mj7n1lddhg/.../McDonalds.exe

http://download1359.mediafire.com/ydr062optmsg/.../McDonald\'s.exe

http://download1628.mediafire.com/pm88pbwyfu0g/.../McDonalds.exe

http://download1951.mediafire.com/tlc8w8iswypg/.../McDonalds.exe

http://download1951.mediafire.com/09hukdm4buag/.../McDonalds.exe

http://download1069.mediafire.com/j5zc3uzllldg/.../McDonalds.exe

http://download1521.mediafire.com/nsxgqs9nhxfg/.../McDonalds.exe

http://download1368.mediafire.com/lt9io29et0xg/.../McDonalds.exe

Latest 30 of 125 download URLs

Scan mcdonalds.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.