» multi-guns.v1.2.1.exe
Overview
Analysis
File Details
Downloads (64)

multi-guns.v1.2.1.exe

The application multi-guns.v1.2.1.exe has been detected as a potentially unwanted program by 7 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.com and multiple other hosts.

File name:

MD5:

b21afa137c2cea3bdcce73f78919085b

SHA-1:

fbf0c5c0b8792c1b94d7072c76e537f52cfe2cca

SHA-256:

0e4a231fe8d5dcb5854885aa1f09426c97764c09d59d66b4ae1d520daf7ad0d1

Scanner detections:

7 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 10:18:49 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Riskware.HackTool

7.1.1

Baidu Antivirus

HackTool.Win32.CheatEngine

4.0.3.15429

ESET NOD32

Win32/HackTool.CheatEngine.AF potentially unsafe (variant)

9.11474

F-Prot

W32/CheatEngine.B.gen

v6.4.7.1.166

McAfee

Artemis!B21AFA137C2C

5600.6780

Norman

Suspicious_Gen4.HCXVL

11.20150429

VIPRE Antivirus

Trojan.Win32.Generic

39346

File size:

3.3 MB (3,422,208 bytes)

File type:

Executable application (Win32 EXE)

File PE Metadata

Compilation timestamp:

4/28/2012 10:56:00 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:auB9EbS+RS236Dp4aEjk+Nk1PUmS+YNPpyur4:auB6s4jfN0IZPI84

Entry address:

0x15AD

Entry point:

E8, 1A, 1B, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, AA, 27, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, 6A, 03, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, 4F, 03, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B, 46, 0C, 83, E0, EF, 83, C8, 02, 89, 46, 0C, 89, 5E, 04, 89, 5D, FC, A9, 0C, 01, 00... 
[+]

Entropy:

7.9698 (probably packed)

Code size:

35.5 KB (36,352 bytes)

The file multi-guns.v1.2.1.exe has been seen being distributed by the following 50 URLs.

https://downloader.disk.yandex.com/disk/bda6271fc1d759dfedcece2dbe11f5a9df9b0669deab49ed58e6b3137b212e2a/57910c80/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=1582aee54cf&token=lLwoqA6pNpIhuMf1Nr8u0Q==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/4b46b2943ee32c341d897091f30f35419fe95e81599506a36c5678213ed65ee8/586c0fbe/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/14eab0532845d054fd4dbcfb6e73c92800cf274dcc59bace1a18d41a11cc0a53/5842295a/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/d6cf2087d5670fa6c93521ab279614fb0d964a9babaf882caa409751524cfefe/5830dd70/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=153d8380f6c&token=I7IjAW tWFMO9AfTZqd5Iw==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/a7cc902fa8c840c267fa6ecb00727ff8f9d5bda99a96c90ff973e303bda5759c/5835b295/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=155ad07a774&token=TAYAHpyQmwqLMdasBBG7OA==&name=Multi-guns.v1.2.1.zip

http://dc733.4shared.com/download/.../Multi-gunsv121__2_.EXE

http://dc304.4shared.com/download/.../Multi-gunsv121__2_.EXE

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=156404be7a9&token=yWwI5mgYMNYnTYfzkB59YA==&name=Multi-guns.v1.2.1.zip

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=1557c8a519d&token=5lriW32SGjG9nJW0q2LIFg==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/f8e2d9e1e8c1bd0cfe8afe534a569cf2881ab9e5723eb18def75d69a62b5b0b8/582014e6/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=15343180295&token= SpFMca8FcDjvHmsEsSvpA==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/05bc082cc7679f1f53d33134e2e63513a4dd2c45c65f2e35f28b87de8e79c003/57ba0337/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.ua/disk/49fafb141060426b19dd349a25a12deeb3f6326a2f030302ea547506dc5b087e/58332d1a/70WrRw6a4Wzc4Pu35jFlypCub48oEiSa0XI7zGur6n7rzhyPLWzWIH0kl0LjozF_h4wZw731P1TnFdh042zbFA==?uid=0&filename=Multi-guns.v1.2.1.EXE&disposition=attachment&hash=e3 hjO jfRv0dFjsAIg4j/oTtkPlaCUNP343v5Eu/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/36dc036dd482e840cf032fd84b460446c11e2c260058d2d621f5eebbaca71adb/56240fb8/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

http://dc304.4shared.com/download/.../Multi-gunsv121__2_.EXE

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=1589c653d32&token=gUy9PJTXsEqwNNnfVcl4gg==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/4a6de9974120cd5f9a4d91d7850841cfa0f652b7ad8cf9bf73685cf8b2555759/576d2761/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/3a2da0f0e1b000a9359183d02fc47e592b62f4aed5c3fbcfcd1f29e0ecfe7342/57b86cca/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=1527ec9c3bd&token=ZPALoqi1JJxq SzaS4tYuQ==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/3c1e44d68582dabd27351822d93613530c2a4ae96c98dcef13726b3f46ee51e1/569ea2cc/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=1540b6480ca&token=4e970448 TKxki65YzAERg==&name=Multi-guns.v1.2.1.zip

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=153c82fa967&token=1fMZNmh5rtIOWW0K5VjTYw==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/19a2ff8df7b8ceab12a5b60a73e30c28699cdc1f6b9bce29e0b218f2f016ec89/575f6af7/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://docviewer.yandex.ru/source?id=1vdl5-6zjwip8rxyrnf7yb2qt7n7kmks5gv5tg501lbxxq36w275j7vr2njzfz162g6c719vha65xrkq9aaa66df3qol3ax7z20fcq0ig&archive-path=//Multi-guns.v1.2.1.EXE&ts=154dc649fa8&token=ST5qLEIIVTilN5HnF39K Q==&name=Multi-guns.v1.2.1.zip

https://downloader.disk.yandex.com/disk/9c8d26a333e0cc9b128e2440c3bedceca70b9423b8f1740f66bd6e29f7ead0a0/57a6461c/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/8f545bbb50897933f0ca6a8a539f5a8955c6b805046c599cb5d7489423f0f203/57897d11/.../x-msdownload&fsize=3422208&hid=c1536175ff68298541007d34b7f710bf&media_type=executable&tknv=v2

Latest 30 of 64 download URLs

Remove multi-guns.v1.2.1.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.