home

mediapembelajaran.exe

TreePad

Freebyte! http://www.freebyte.com

This is a setup program which is used to install the application. The file has been seen being downloaded from download1330.mediafire.com.
Publisher:
Freebyte! http://www.freebyte.com

Product:
TreePad

Version:
7.3.7.0

MD5:
7230a322f10cc511d3914130dbab7749

SHA-1:
ae7c9592a45db26ec8ef5d66f5a37f550e03ebbf

SHA-256:
8be28ee205bd9a4cb882a9425554c675435d74e542b37385bc12ff1dfd7fe53b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:59:42 AM UTC  (today)

File size:
1.3 MB (1,335,064 bytes)

Product version:
7

Copyright:
Copyright Freebyte.com 1995-2006, all rights reserved

Trademarks:
TreePad TM

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mediapembelajaran.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1X7spNh9cBEU/F0n3DRJdKm3SpGQDpXT3B7cRaZcs+Ri1yu2i5EsrJ4DqwYA4YLA:1X7s3h9cX/F03DRJDSUQFT3B7Bcsfoui

Entry address:
0x1000

Entry point:
68, 01, 00, 80, 00, E8, 01, 00, 00, 00, C3, C3, 43, A1, E0, 88, CA, 52, A7, 6D, 62, B4, BD, A3, A7, A3, 17, F3, C9, D2, 02, D1, 91, 1F, 47, BD, 59, C8, 09, FD, C0, C0, C8, DB, 68, 8F, FE, 83, F5, 70, A3, BD, 6E, B8, 7F, 6E, 6D, 10, D7, 80, 37, F8, 7A, 85, 94, F5, 6B, 37, 0A, 87, F6, CC, D2, 2C, FF, EE, C9, 22, B1, 5C, DC, B9, ED, B0, 7C, DA, 9A, 2F, 62, 2F, 66, 72, 3A, 06, A8, BE, 5D, 24, C3, E7, 6E, 12, B6, BE, 11, AB, A9, 0B, 07, C7, 2D, B9, 94, 30, 06, A1, C2, A3, 86, 42, 63, 3E, FD, A8, C6, 45, 27, 81...
 
[+]

Entropy:
7.8675

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2.8 MB (2,905,088 bytes)

The file mediapembelajaran.exe has been seen being distributed by the following URL.

http://download1330.mediafire.com/myd11bxte8gg/.../mediapembelajaran.EXE

Scan mediapembelajaran.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.