home

md5.exe

MD5:
e5a1a4a431c25a1d8b2428066487fc45

SHA-1:
96a32c2aa7e8e78f426349d3986881e55251b7eb

SHA-256:
00078b2c5f1bbf707940975faff3c752c95c275ad9667e37a7757e545c67fc67

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/17/2024 12:43:17 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoB
1.3.0.4959

File size:
99.3 KB (101,716 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
2/18/2007 5:14:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
1.0

CTPH (ssdeep):
768:dPMZhwaBJl0KUInNn3l1+GenaNK8owW1yycH7+SSUt6Q82U1UqB1d5pdthLZf35T:dPMZhwaBP3jZIftv4V1Hg

Entry address:
0x3000

Entry point:
9B, DB, E3, 9B, DB, E2, D9, 2D, 00, A0, 41, 00, 55, 89, E5, E8, 51, 56, 00, 00, 68, 00, 00, 00, 00, FF, 15, BC, 1D, 40, 00, A3, 07, 30, 42, 00, 60, 89, 25, 0B, 30, 42, 00, E9, 30, 00, 00, 00, 8B, 25, 0B, 30, 42, 00, 61, E8, 79, 13, 01, 00, E8, C9, 56, 00, 00, 89, EC, 5D, FF, 35, 04, 29, 46, 00, FF, 15, B0, 1D, 40, 00, 9B, DB, E2, D9, 2D, 00, A0, 41, 00, C3, 00, 00, 00, 00, 00, 00, E9, CC, 00, 00, 00, 55, 89, E5, 81, EC, 00, 00, 00, 00, 53, 57, 56, 8B, 45, 08, 05, 10, 00, 00, 00, 89, C2, 31, C0, 89, C6, C1...
 
[+]

Entropy:
5.7323

Code size:
384.8 KB (394,068 bytes)

The file md5.exe has been seen being distributed by the following 19 URLs.

http://download857.mediafire.com/sauayl76jy1g/.../md5.exe

http://download857.mediafire.com/hjnwcthjcdyg/.../md5.exe

http://rootjunkysdl.com/files/.../md5.exe

http://c236.y8top.net/2107tmp/cf/soft/2013/10/ba/.../md5-checker_231.exe

http://f51.x8top.net/2107tmp/cf/soft/2013/10/ba/.../md5-checker_231.exe

http://download857.mediafire.com/xm35if13kuag/.../md5.exe

http://f51.softwaretop.net/2107tmp/cf/soft/2013/10/ba/.../md5-checker_231.exe

http://f30.softwaretop.net/2107tmp/cf/soft/2013/10/ba/.../md5-checker_231.exe

http://update.bg.snailgame.com/USA_HJ/.../MD5_checker.exe

http://download3.megaxus.com/.../MD5.exe

http://dl.dropbox.com/u/.../md5.exe

http://rootjunkysdl.com/download.php?id=c96b5acf8960459dd8082ef301c7d0a1166845746bd748a75b3c97fd84c27b3447c62e31254418db7e72b0eff03ceaa62e56d8e75d372463310079

https://doc-0s-5g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/dbqktfoip0cifrd2jcbnf7kfbuci71g8/1408471200000/02658163702274671467/.../0B_nizg6yUZ0Nb0lsQjJGVmNHNUU?h=16653014193614665626&e=download

http://rootjunkysdl.com/download.php?id=c96b5acf8960459dd8082ef301c7d0a1109834191e6296460617da8745b9246ea66c98ee5536d50c94c5da8cef860a5ba9371739dfcc60f31cd802

https://doc-0k-24-docs.googleusercontent.com/docs/securesc/j6l2tl9lk9sohhn7dk3elrn85a4pama0/ob0u3s8fgrn303p9mqib0n61qhegdg6h/1399600800000/02658163702274671467/.../0B_nizg6yUZ0Nb0lsQjJGVmNHNUU?e=download&h=16653014193614665626&nonce=geum2p0r07hns&user=01124177085141558844&hash=onq31sqek1dvpv66r62e00is8n2tjsso

https://docs.google.com/nonceSigner?nonce=geum2p0r07hns&continue=https://doc-0k-24-docs.googleusercontent.com/docs/securesc/j6l2tl9lk9sohhn7dk3elrn85a4pama0/ob0u3s8fgrn303p9mqib0n61qhegdg6h/1399600800000/02658163702274671467/.../0B_nizg6yUZ0Nb0lsQjJGVmNHNUU?e=download&h=16653014193614665626&hash=9bips32r41h48e3o8de70ef8t79egefh

https://doc-0k-24-docs.googleusercontent.com/docs/securesc/j6l2tl9lk9sohhn7dk3elrn85a4pama0/ob0u3s8fgrn303p9mqib0n61qhegdg6h/1399600800000/02658163702274671467/.../0B_nizg6yUZ0Nb0lsQjJGVmNHNUU?h=16653014193614665626&e=download

https://docs.google.com/uc?authuser=0&id=0B_nizg6yUZ0Nb0lsQjJGVmNHNUU&export=download

https://docs.google.com/uc?id=0B_nizg6yUZ0Nb0lsQjJGVmNHNUU&export=download

Scan md5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.