home

mfastboot.exe

MD5:
040dc4c40ec07926288819b170d1b140

SHA-1:
6d93cb8e1f9c5af64c565d1807dbd7409c0d36e8

SHA-256:
6c84c316be9ab8fa4b50e3642fa074c07117f34f1e7a54d5ca13d1ac1940ac0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:41:57 PM UTC  (today)

File size:
181.8 KB (186,178 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mfastboot.exe

File PE Metadata
Compilation timestamp:
5/17/2012 1:16:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
3072:3utl0Lh9I9u4GMH63nnTBfLH0wmyaqluMzzcZLV4H90:+tlCzfMa3nnTBDH0wmyaCTzzcZLV4HW

Entry address:
0x1130

Entry point:
55, 89, E5, 83, EC, 14, 6A, 01, FF, 15, 30, 52, 41, 00, E8, DD, FE, FF, FF, 8D, B6, 00, 00, 00, 00, 8D, BC, 27, 00, 00, 00, 00, 55, 89, E5, 53, 83, EC, 04, 8B, 45, 08, 8B, 00, 8B, 00, 3D, 91, 00, 00, C0, 77, 3B, 3D, 8D, 00, 00, C0, 72, 4B, BB, 01, 00, 00, 00, 50, 50, 6A, 00, 6A, 08, E8, CC, BA, 00, 00, 83, C4, 10, 83, F8, 01, 0F, 84, D6, 00, 00, 00, 85, C0, 0F, 85, 90, 00, 00, 00, 31, C0, 8B, 5D, FC, C9, C2, 04, 00, 8D, B4, 26, 00, 00, 00, 00, 3D, 94, 00, 00, C0, 74, 49, 3D, 96, 00, 00, C0, 74, 17, 3D, 93...
 
[+]

Entropy:
5.9455

Packer / compiler:
Dev-C++ v5

Code size:
48.5 KB (49,664 bytes)

The file mfastboot.exe has been seen being distributed by the following 14 URLs.

https://mega.nz/persistent/.../xFRSSbiB

https://doc-0s-0s-docs.googleusercontent.com/docs/securesc/e24ibn38a0vc4ih96q48kudb8t1kaq4v/vft5lgvnhcs7e82v24mlbmt68k1kce33/1481479200000/.../16732581889617502692/0BzFB2EkQ9kZGYVpJTHJuSTJnenc?e=download

http://s6126.chomikuj.pl/File.aspx?e=_HD9UoQY6k_94ZRVXqvvTLSPoyyeTlMkHFKqhZzx5Kcwo3Z2qpzRwKPa8ooTORLQ8oMgiR0IAkLZAg7wI1gIjk2D1hUgYhKpmUXqAYBZrs8WpDhtUtIN0gLupOP6ScZqE9y9B5OfMWgGY__Xavy7Jw&pv=2

https://docs.google.com/uc?authuser=0&id=0B9qC3vvamytkSVp0NXhlSEhZVFU&export=download

http://download1345.mediafire.com/5xnodm3q61ug/.../mfastboot.exe

https://mega.nz/temporary/.../xFRSSbiB

https://doc-0k-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6opfep4al8kdfl04ij37s622ph8h1rud/1410818400000/09417174842469455435/.../0B6qEdneYAqAeTGVMSVRkdk5oRUU?h=16653014193614665626&e=download

http://download634.mediafire.com/uqlws7u9e2fg/.../mfastboot.exe

http://www.mediafire.com/?dpgyr88uvnc9hb8

https://doc-04-b0-docs.googleusercontent.com/docs/securesc/5ii9ujvl263vakmhbjtqr0cj6604b2f2/bq8ottgdoblj7o7qu33nj85d42bj3k74/1392948000000/09417174842469455435/.../0B6qEdneYAqAeTGVMSVRkdk5oRUU?e=download&h=16653014193614665626&nonce=h6rl1hqb9jvn6&user=13857340968918662533&hash=nauuol8vspqjsan90sftmj3qrhlk8l0r

https://docs.google.com/nonceSigner?nonce=h6rl1hqb9jvn6&continue=https://doc-04-b0-docs.googleusercontent.com/docs/securesc/5ii9ujvl263vakmhbjtqr0cj6604b2f2/bq8ottgdoblj7o7qu33nj85d42bj3k74/1392948000000/09417174842469455435/.../0B6qEdneYAqAeTGVMSVRkdk5oRUU?e=download&h=16653014193614665626&hash=g4km6dtjrh7b9qsd8g295baabpukd0su

https://doc-04-b0-docs.googleusercontent.com/docs/securesc/5ii9ujvl263vakmhbjtqr0cj6604b2f2/bq8ottgdoblj7o7qu33nj85d42bj3k74/1392948000000/09417174842469455435/.../0B6qEdneYAqAeTGVMSVRkdk5oRUU?h=16653014193614665626&e=download

https://docs.google.com/uc?id=0B6qEdneYAqAeTGVMSVRkdk5oRUU&export=download

https://docs.google.com/uc?authuser=0&id=0B6qEdneYAqAeTGVMSVRkdk5oRUU&export=download

Scan mfastboot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.