home

messengerreviver-2-4-8-5.exe

Messenger Reviver 2

Jonathan Kay

Publisher:
Jonathan Kay

Product:
Messenger Reviver 2

Version:
2.4.8.5

MD5:
d73684a9a4813c72e44ae35db3d0cc96

SHA-1:
f4a0a4f474c49cc66a5c2c716ecc93b5171051d8

SHA-256:
bd249842a97553bfdc6c54cb797cc829af455245d120c0cc506cdace88d9a5bf

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/26/2024 5:55:56 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.16623

Qihoo 360 Security
HEUR/QVM41.1.0000.Malware.Gen
1.0.0.1120

File size:
708.6 KB (725,635 bytes)

Product version:
2.4.8.5

Copyright:
Copyright ©2016 Jonathan Kay

Original file name:
MessengerReviver.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\messengerreviver-2-4-8-5.exe

File PE Metadata
Compilation timestamp:
5/30/2016 7:52:15 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
12288:G4nZVJNVNQjSYxF2qZUNNNNNNNNNNNNUNNNNNNNNNNNNjNNNNNNNNNNNNNJNr7Ip:JZV9NQRxMqjHKA9PDcr+QecRuujTNgTA

Entry address:
0x1CAD5

Entry point:
E8, 9C, 04, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, B8, A1, 43, 00, F2, 75, 02, F2, C3, F2, E9, 11, 06, 00, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 60, 0F, 43, 00, C7, 01, FC, 18, 43, 00, C3, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, E8, 0F, 38, FF, FF, C7, 06, 08, 19, 43, 00, 8B, C6, 5E, 5D, C2, 04, 00, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, 10, 19, 43, 00, C7, 01, 08, 19, 43, 00, C3, 55, 8B, EC, 83, EC, 0C, 8D, 4D, F4, E8, A7, FF, FF, FF, 68, 2C, 7C, 43, 00, 8D, 45, F4, 50, E8, CD, 28...
 
[+]

Entropy:
7.5310

Code size:
184.5 KB (188,928 bytes)

The file messengerreviver-2-4-8-5.exe has been seen being distributed by the following URL.

http://messenger.jonathankay.com/.../messengerreviver2dl.asp

Scan messengerreviver-2-4-8-5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.