home

mupen64 0.5.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
392ee60d6389fe755ddb8664dc30e1da

SHA-1:
a0e5e9df08481b7a255be212caac55df7166e8f1

SHA-256:
e0f9e7673b06de2c9354d3e4aa27d1182b8b32482f5ad1fe3e6b1c7d43af3b2e

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/25/2024 5:15:03 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Swizzor.cgzdn
0.28.0.59826

Rising Antivirus
PE:Trojan.Win32.Generic.1268AFE9!308850665
23.00.65.14514

Trend Micro House Call
PAK_Generic.005
7.2.136

Trend Micro
PAK_Generic.005
10.465.16

ViRobot
Trojan.Win32.A.Inject.2131716
2011.4.7.4223

File size:
2 MB (2,131,716 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\mupen64 0.5.1.exe

File PE Metadata
Compilation timestamp:
7/27/2004 1:28:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
49152:XyaxWWYT054iksE0O5qZjx3S2WJvyZ3CJEpAUF9WCUpcTr:X3x1lVE0+qt9SXyhiUF9WPG

Entry address:
0x21BC0

Entry point:
60, BE, 00, 70, 41, 00, 8D, BE, 00, A0, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
44 KB (45,056 bytes)

The file mupen64 0.5.1.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_br&type=PROGRAM&Expires=1482985089&Signature=NuYRwWnIqijHBFvJ74Z~HpAa6eD5AAEFBcvUAm9wP6ZF2WteYncN5LDuNv5YG-bR3NekvXI8UPfGHYaIG0I0pwI6w1onGCRNWOM~e7npSU1oLFsMWgI2o330HdPH8Xgi~mMhwSv8yK-ZI5VHuzdAGhbkphlFqEGmimV3gyEP1PQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://ec.ccm2.net/es.ccm.net/download/.../mupen64 0.5.1.exe

http://www.jetelecharge.com/tel.php?id=5988

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_es&type=PROGRAM&Expires=1469342157&Signature=L1-XDFfQ~hFdA~0alHcsRO0m4zPl7W222WonleSNwJ1wKpQhpf-3um3tEJ-Z4ViXGuQe~Dhd-QKTbXIvAkXMreLhzkp4~6suPnBniHh1tV6g6dfLcp3wUDrd4uQzrYIXg67ErpVcoMSVx-x2tLCQr-jkjsixDoPTAIqbDjShUzk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://bowser.doperoms.com:8080/files/emulators/.../Mupen64_0.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_es&type=PROGRAM&Expires=1441003101&Signature=PYeJzNPxqix-w6Cfw2CtkfvHGsWpovflPTgEX2xNcJeXcODVak1Zlp2joz4OamZzmJFdqyEIOeReShLrRoOWpzFvON~0S4N02xV0Rcz3AOEvM0hwSnJuy8IGFuSwFdl3TMMpXhwONi43CHY5Rr6~~vNnsEJEaDe-vLbtaereIhs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://www.jetelecharge.com/.../tel.php?id=5988

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71979&instance=softonic_en&type=PROGRAM&Expires=1454443536&Signature=RLB4cx9i5kRHc4fXlGXSYJS5EHb20HYki0c2NQ32hTtM2mCaszewW291JHAFUkJ7WgUK~ICMao6eIchnjk30KCcWCGmwIcAKFKE5DIR~F5GGYRPTJctEqGrSWuG3ICB519MhMTdCukbVok6GWXtwNXKRp2VH1a31nN3Afs--YSk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://mupen64.softonic.com.br/download-tracker?th=1/.../1hqVlQuIH5OeYvhuXCDi5SYA0Vd5PMlylEAoo98eJs8P4WY AW 18e0jtfBLkwjgZ92coJAhvoixZokfBASQmG3LyyMnPKWE=

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=71979&instance=softonic_en&type=PROGRAM&Expires=1465977215&Signature=JO-3cDjz37U1eeAdt4mvtbSyM0zep-y9GgK9~Yr8AT8~HUWQ9mP9MPjkX3e0ClPKchmbKnMe8TMPQz8dkDr8rA2n8c~5YAjfPMxcKueH~geBZqBsRHSiezl9NdkrWi8KFGUu4mkLo7NuvYO6S5-tzabo6M0TNMH~RGrajQOfjM0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_br&type=PROGRAM&Expires=1463313830&Signature=UfGCAp7t1m7xu-CF9W1LWCUgp7Et3QGMmjySyFoOqQEH3worc3NALGhWa7YLvzGZ-evF~l4PfMxNJhZPmOQjcovGqVbhbuz2xc8M4woDfofHmpfWga7WAmzPupCFB7NOOeSlubA~~zjtz6DI1J~gib1sfItA0SDf5FMrAk9Eqag_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_en&type=PROGRAM&Expires=1462767642&Signature=ZMFsKwvsSPQsrqUu3zEtavnzIog9ITFWJqMtTPpU-8RdFAQezKqI5OhQiOTyAmvTJCYnX7lyXUsh4~S2AHFfxaf-AKvk36955FmNd8Y-9NZRZPY8DoPWnU5fH~qoJneNkMxsLNF7xCg6WF7oVN09HeL46Yl8n4BTyRO4PsSZ8To_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46874&instance=softonic_fr&type=PROGRAM&Expires=1461402345&Signature=AE8YgyOsHsy5NW34GzUCrHdO10qWyR3TbP62jRfJmODK9sqxiOlKjGHp-fnZpd6L2yka~SI~2Ae096NK1hGnwezrBw8Blzx~fWwl7oFVIuGx6x-s6xZqVXN3a7tsCpUWEH3mRAdW7RN8hxGRGtLmrAXD8Xl2FCy13BxFrBQcCfg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://www.emulanium.com/emulators/.../mupen64_0.5.1.exe

http://doperoms.com/files/emulators/.../GETFILE_Mupen64_0.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_br&type=PROGRAM&Expires=1454471083&Signature=G~Ov0Q3Tqsq8FPDZcD4j0kL10k0Baq5-1RVprQEQFYopuACIWuWOSKSmI6S0o14mTJDRJ9P1M7GyKhUck6topLMTYqne5LD0snPXJwQ8SdiJfG3aI~GPlilitjZyyPjLHOiNzzP-kqFIm0-pezQTURTGyfIzxybTcBsoz9Yb6i8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_br&type=PROGRAM&Expires=1454839910&Signature=UpKhg4MaCD4I4AcUIMRKx2DRuRZbtmjLfD183WDVhjOWIONh2lUeMPqepTd9RMhs9Z3x727nRugECg2bkFHiqo69yDOUpp6FtuZViOV9srn~nVO-2aXddW7weRLNDNJA2oFTr9oRwDL8EQ-lEMRqF6NrW~g7hLpTfiCcEAGQ8EE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://gsf-cf.softonic.com/a0e/5e9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=46901&instance=softonic_br&type=PROGRAM&Expires=1447230789&Signature=hfEG8CIFGns5jg8B2XnoDtXzatHENayzSgIJK5-dctTV5J9XxSMv2-215Lm38aU6WkvEOdNrhcj2vMU9Onetwq381AQdo~5EvBEUaiKaZT-lregcsNzIMgLwVVdMBuFPsDcweGBezBtwv4j8je-GzU3xXG-EDyrBaSHLjBxYdxA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mupen640.5.1.exe

http://www.emulator-zone.com/files/emulators/n64/.../mupen64_0.5.1.exe

http://www.emulator-zone.com/download.php/emulators/n64/.../mupen64_0.5.1.exe

http://www.doperoms.com/files/emulators/.../GETFILE_Mupen64_0.5.1.exe

http://www.freeemulator.com/emulators/.../mupen64_051.exe

http://mupen64.emulation64.com/files/.../mupen64 0.5.1.exe

Scan mupen64 0.5.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.