home

messengerreviver-2-4-8-1.exe

Messenger Reviver 2

Jonathan Kay

This is a setup program which is used to install the application. The file has been seen being downloaded from messenger.jonathankay.com.
Publisher:
Jonathan Kay

Product:
Messenger Reviver 2

Version:
2.4.8.1

MD5:
7951f2d897d1773cb8240a7661243c92

SHA-1:
01dd90d102e8a25a9f3a41cce6e6255596093729

SHA-256:
a784d48e6c4a58efe995abe0a9e882606e5a3fe6f65351a61d49d7cbd9b57211

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 5:30:42 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.16528

File size:
708.8 KB (725,775 bytes)

Product version:
2.4.8.1

Copyright:
Copyright ©2016 Jonathan Kay

Original file name:
MessengerReviver.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\messengerreviver-2-4-8-1.exe

File PE Metadata
Compilation timestamp:
5/10/2016 11:25:10 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
12288:WKUr5olvxEI2qZUNNNNNNNNNNNNUNNNNNNNNNNNNjNNNNNNNNNNNNNJNr7IKkPBc:0SzELqjHW11ip52TuIM

Entry address:
0x1CB95

Entry point:
E8, 57, 04, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, B8, A1, 43, 00, F2, 75, 02, F2, C3, F2, E9, CC, 05, 00, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 60, 0F, 43, 00, C7, 01, FC, 18, 43, 00, C3, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, 12, 38, FF, FF, C7, 06, 08, 19, 43, 00, 8B, C6, 5E, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 10, 19, 43, 00, C7, 01, 08, 19, 43, 00, C3, 55, 8B, EC, 83, EC, 0C, 8D, 4D, F4, E8, A7, FF, FF, FF, 68, 2C, 7C, 43, 00, 8D, 45, F4, 50, E8, 8D, 28...
 
[+]

Code size:
184.5 KB (188,928 bytes)

The file messengerreviver-2-4-8-1.exe has been seen being distributed by the following URL.

http://messenger.jonathankay.com/.../messengerreviver2dl.asp

Scan messengerreviver-2-4-8-1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.