home

mit_app_inventor_tools_2.3.0_win_setup.exe

MIT App Inventor

Massachusetts Institute of Technology

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from doc-00-2k-docs.googleusercontent.com and multiple other hosts.
Publisher:
Massachusetts Institute of Technology

Product:
MIT App Inventor

Description:
MIT App Inventor Tools

Version:
2.3.0

MD5:
d9e95df1eda01fcc9bede4650e197d5d

SHA-1:
f3c1d660ca350c15566905874f023c9ab437a31e

SHA-256:
98326a80c0b46b900701540a87849327b02f6b43a301bdac7f4e1e6b5522fb11

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/27/2024 12:56:15 AM UTC  (today)

Scan engine
Detection
Engine version

K7 AntiVirus
Trojan
13.198.15065

NANO AntiVirus
Trojan.Win32.Agent.djebgp
0.30.0.296

Trend Micro House Call
Suspici.C3D6FB26
7.2.58

File size:
79.9 MB (83,753,282 bytes)

Product version:
2.3.0

Copyright:
Massachusetts Institute of Technology

Original file name:
MIT_App_Inventor_Tools_2.3.0_win_setup_.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mit_app_inventor_tools_2.3.0_win_setup.exe

File PE Metadata
Compilation timestamp:
7/15/2013 6:09:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:fp9KN9ExQ30Z5S+9wwuhkCBa692HNOsBGcM5cjP+W6iT3xUY7JsECQYKAo16:BNxQGB9wwupc82HNOsBGzcKW6idJsECf

Entry address:
0x324D

Entry point:
81, EC, 84, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 8C, 72, 40, 00, 6A, 08, A3, 98, 3F, 42, 00, E8, 8B, 2D, 00, 00, A3, E4, 3E, 42, 00, 53, 8D, 44, 24, 38, 68, 60, 01, 00, 00, 50, 53, 68, A0, F4, 41, 00, FF, 15, 64, 71, 40, 00, 68, E4, 91, 40, 00, 68, E0, 36, 42, 00, E8, 35, 2A, 00, 00, FF, 15, B0, 70, 40, 00, BD, 00, 90, 42, 00, 50, 55, E8, 23, 2A...
 
[+]

Entropy:
8.0000

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file mit_app_inventor_tools_2.3.0_win_setup.exe has been seen being distributed by the following 15 URLs.

https://doc-00-2k-docs.googleusercontent.com/docs/securesc/8cmenpupdi7foiqekp5o9cpo47hpodc9/7k610ruf0m8jme26c7q542rledtohc5v/1486411200000/.../03398252525897873031/0BzR0mCwlfonxQWVZaFlyekdqaXM?e=download

http://210.240.179.211:7000/MIT_App_Inventor_Tools_2.3.0_win_setup.exe

https://doc-10-b0-docs.googleusercontent.com/docs/securesc/0fit29n2ndccgql90cd5hiqmrtms5qqp/7dhb2gbasr1k6nnoeuorckou1o1dt455/1477922400000/.../03330422112339243262/0BxuW7LjdPYsSZzZFVzV4enZrRVU?e=download

https://docs.google.com/uc?export=download&confirm=QpKE&id=0B2oVeWq78WBcNGpTUE9OR0pQUGc

http://coolbar.pro/tracker/go-new?url=http://.../aisetup_windows&cid=17

http://www.facebook.com/l.php?u=http://.../aisetup_windows&h=PAQEsYv6t

http://lms.hust.edu.tw/.../read_attach.php?id=1452475

http://pub.fileniko.com//f/2016/.../MIT_App_Inventor_Tools_2.3.0_win_setup.www.fileniko.com.exe

https://asuncionsv-my.sharepoint.com/.../default.aspx?apr=1&wa=wsignin1.0

http://dc716.4shared.com/download/.../MIT_App_Inventor_Tools_230_win.exe

https://docs.google.com/uc?export=download&confirm=SYNV&id=0B2C8GRXSrE4fQ1JsM2wxSkdvUVE

http://up.bav.baidu.com/?rh=5F14FE6CBD6D696910B0ED876670E751&baidusign=26277159&baidurand=7525

http://128.52.184.65/MIT_App_Inventor_Tools_2.3.0_win_setup.exe

http://128.52.180.87/MIT_App_Inventor_Tools_2.3.0_win_setup.exe

http://appinv.us/aisetup_windows

Scan mit_app_inventor_tools_2.3.0_win_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.