home

scratch-448.exe

MIT Media Lab

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-08-98-docs.googleusercontent.com and multiple other hosts.
Publisher:
MIT Media Lab  (signed and verified)

MD5:
50f37f780737fcddfc789f1c52b4e73f

SHA-1:
ac9b63b2152b34f200b972cbb64cf5bb1306a18c

SHA-256:
50edc799639971747d1b82264a49c9079c4de26414e2d4c7d685c69a6642bbca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:21:29 PM UTC  (today)

File size:
69.9 MB (73,264,384 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\scratch-448.exe

Digital Signature
Signed by:
MIT Media Lab

Authority:
DigiCert Inc

Valid from:
7/17/2014 7:00:00 PM

Valid to:
7/22/2016 7:00:00 AM

Subject:
CN=MIT Media Lab, O=MIT Media Lab, L=Cambridge, S=Massachusetts, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0ACF41AB4DAF1EACFBB5BD7BF8AB3770

File PE Metadata
Compilation timestamp:
11/22/2015 1:43:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:F4kn/BfWSbTKM/2Nl1rHiR1j4OVTtkpjfLmKLeN3eg5Crg:T/JWSqNjrHiR18STt0jfLlLO3DI

Entry address:
0x12D4

Entry point:
E8, C6, 22, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 08, 70, 41, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 0C, 70, 41, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 2B, 1F, 00, 00, 85, C0, 75, 06, B8, 70, 71, 41, 00, C3, 83, C0, 08, C3, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 08, 6A, 00, 0F, 94, C0, 68, 00, 10, 00, 00, 50, FF, 15, 68, 10, 41, 00, A3, EC, 7C, 41, 00, 85...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
62 KB (63,488 bytes)

The file scratch-448.exe has been seen being distributed by the following 14 URLs.

https://doc-08-98-docs.googleusercontent.com/docs/securesc/74ovjjkt2elpschbelfa31486cv1rf2n/rgoqnanf1k4n2i450c7a4ade5k3lul84/1477720800000/15498997037631268456/.../0BxlD4IjkmVkrRE42ZXByaEZtY1k?h=03510661454732223247&e=download

https://www.portaleargo.it/argoweb/.../objgeneratorservlet

https://docs.google.com/a/.../uc?export=download&confirm=4TjF&id=0B7hKFNgv0caJM1huc0xLNjVZMVE

https://doc-0c-30-docs.googleusercontent.com/docs/securesc/rs0fuvdtqd3b76ggm13olfi8jd5kc4a5/8m6s76rr15o2hsr1hktnl7gdfui77oqu/1471860000000/.../17370676272436035485/0B6-e6LpAwEgDX0xJc2ExaDB6TTA?e=download

https://doc-14-4o-docs.googleusercontent.com/docs/securesc/miijqerra817vo7pl4h4useit4e4f7ig/t26u4nj9phkbvj0djsdrrb6mf8smrin7/1473141600000/.../07430017117525018838/0B3sqLYX-wOsEcFFqUGxzQTRpRGM?e=download

http://d-cdn.gamejolt.net/data/games/3/224/192474/protected-files-cdn/.../Scratch-448.exe

http://www.indirbak.com/downloading_manuel.php?file_id=21755&v=

http://soft.mydiv.net/win/dlfile7fa0d_307131/.../Scratch-448.exe

https://drive.google.com/uc?export=download&confirm=sLC3&id=0ByA8-6agT3yTQzMtR1BlM09KOG8

http://www.ffjh.tyc.edu.tw/.../ShareFileDownload.aspx?share_id=960

http://d-cdn.gamejolt.net/data/games/2/13/175763/protected-files-cdn/.../Scratch-448.exe

https://download.scratch.mit.edu/scratch2download/.../Scratch-448.exe

https://scratch.mit.edu/scratchr2/static/.../Scratch-448.exe

http://cdn.scratch.mit.edu/scratchr2/static/.../Scratch-448.exe

Scan scratch-448.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.