opryzelp_setup.exe

OPryzeLP MC360 Mod Tool Install Program

This is a setup and installation application. The file has been seen being downloaded from download1277.mediafire.com and multiple other hosts.
Product:
OPryzeLP MC360 Mod Tool Install Program

Version:
2, 0, 0, 28

MD5:
ec06aae1340ccf4027a0c74e57d8fffc

SHA-1:
f303945473057856b1dd63a1653fb9ce71f36b53

SHA-256:
fd139bd37a6e7a152a0030fe0703cd709402770f71ebe93efd8f9bb61cf5a398

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 7:26:35 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/Malware.QVM07.Gen
1.0.0.1015

File size:
25.5 MB (26,747,527 bytes)

Product version:
2, 0, 0, 28

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\opryzelp_setup.exe

File PE Metadata
Compilation timestamp:
3/1/2007 3:15:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:JxR2Y+fnqRMVA3mX5jqGg3vHq0c+paLnD83H1S:HR2lnqREYs5fovK0cM0DEHo

Entry address:
0x1396C

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 87, 41, 00, 68, 90, 66, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F4, 80, 41, 00, 33, D2, 8A, D4, 89, 15, F8, F1, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, F4, F1, 41, 00, C1, E1, 08, 03, CA, 89, 0D, F0, F1, 41, 00, C1, E8, 10, A3, EC, F1, 41, 00, 33, F6, 56, E8, BB, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FD, 2A, 00, 00, FF, 15, 0C, 81, 41, 00, A3, 0C, F7, 41, 00, E8...
 
[+]

Entropy:
7.9976

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
92 KB (94,208 bytes)

The file opryzelp_setup.exe has been seen being distributed by the following 50 URLs.

http://download1277.mediafire.com/mckhl9clv5hg/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1484840702~189.78.0.0~HHdqpu7_

http://download1904.mediafire.com/dey6juiuzxlg/.../oPryzeLP_setup.exe

http://download1904.mediafire.com/e3smb7daqdcg/.../oPryzeLP_setup.exe

http://download1981.mediafire.com/926nry7h85dg/.../oPryzeLP_setup.exe

http://download1968.mediafire.com/n5577dweui4g/.../oPryzeLP_setup.exe

http://download1904.mediafire.com/ugp22uoe84pg/.../oPryzeLP_setup.exe

http://download2205.mediafire.com/behn7b5mtvig/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1477262918~186.226.0.0~DhixbCON

http://download1981.mediafire.com/v6uww5dkynrg/.../oPryzeLP_setup.exe

http://download2036.mediafire.com/yd195we4o90g/.../oPryzeLP_setup.exe

http://download2013.mediafire.com/f9yz58efuotg/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1477291632~177.101.0.0~OP6DNwAb

https://openload.co/.../uSyWj3QdKkU~1483140914~2804:431::~tGaxKs2N

http://download1697.mediafire.com/4f5vjkte8ezg/.../oPryzeLP_setup.exe

http://download1904.mediafire.com/b7qe8a84n33g/.../oPryzeLP_setup.exe

http://download2057.mediafire.com/kbkjarsbda3g/.../oPryzeLP_setup.exe

http://download1712.mediafire.com/4dmz7wz6r1ag/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1471967270~177.205.0.0~iMg4989X

http://download2057.mediafire.com/47ibw56ye7cg/.../oPryzeLP_setup.exe

http://download1836.mediafire.com/mxhv9k7f14rg/.../oPryzeLP_setup.exe

http://download1766.mediafire.com/whvs43v0ky4g/.../oPryzeLP_setup.exe

http://download905.mediafire.com/dhpbv8qs4z0g/.../oPryzeLP_setup.exe

http://download1251.mediafire.com/h3eehdlnzwwg/.../oPryzeLP_setup.exe

http://download2057.mediafire.com/8e4mnet5eepg/.../oPryzeLP_setup.exe

http://download2182.mediafire.com/5k44z6yjqirg/.../oPryzeLP_setup.exe

http://download1190.mediafire.com/wjrw1zc3owxg/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1473299342~189.31.0.0~U6z5sPVa

http://download2057.mediafire.com/29v3yrcxuikg/.../oPryzeLP_setup.exe

https://openload.co/.../uSyWj3QdKkU~1479944235~201.162.0.0~UETaW_LH

Latest 30 of 235 download URLs

Scan opryzelp_setup.exe - Powered by Reason Core Security