home

snippy.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1640.mediafire.com and multiple other hosts.
MD5:
d92fadb393e56e6725cfd993c6de6cbd

SHA-1:
79f6bd32ca6d091c3b90311c9b0c6838f102049d

SHA-256:
50e1797566525264ca27e163d437b91959d4b100cd7b603584480cea19b430a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 1:19:21 PM UTC  (today)

File size:
100 KB (102,400 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\snippy.exe

File PE Metadata
Compilation timestamp:
7/16/2007 6:30:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:SPpwYLsy0Ybm7e8vckXDzomIqBML/cd/kitQ8I6C7bxtJjbW:SPpwhfTzomgAxtQB7dt5W

Entry address:
0x597A

Entry point:
E8, B0, 60, 00, 00, E9, 16, FE, FF, FF, 6A, 0C, 68, 90, 47, 41, 00, E8, 80, 37, 00, 00, 6A, 0E, E8, 05, 4B, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, CC, 76, 41, 00, BA, C8, 76, 41, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, AC, F6, FF, FF, 59, FF, 76, 04, E8, A3, F6, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, 6F, 37, 00, 00, C3, 8B, D0, EB, C5, 6A, 0E, E8, D2, 49, 00, 00, 59, C3, CC, CC, CC, CC, CC, CC...
 
[+]

Code size:
68 KB (69,632 bytes)

The file snippy.exe has been seen being distributed by the following 12 URLs.

http://download1640.mediafire.com/j63vn0e0968g/.../Snippy.exe

http://dw.uptodown.com/dwn/c71SIG3d2VRv42cmZkHuCAW1_NeQyPQ8aEAMmexOOTjXTS5UqaHjXb49X7KkDp-dIwuTpxDhwTydEtPV33AT7U7pMLw3dSxIn2rg_d1XuJVZvnUQ8EsCTFxmECPNJJyS/XTzEGVUqzOdaiFV7BDisTReaAP4dzK9Ghgv3UogofiaiMVq_AWIGd1jSoBOMU87Lm7d9MY797JKjthKtHKbrteU7dECsjPa9HQC8V08OkT1QlV-VfpkoDjIfrcLP5crT/pZQ-ENjji1OyQKZF9MAeBUYlJYvtpHuQHBtHGEMYnmiyrnds4A1tiamEgBPhj5Pbn-DPNqHvmYtSsv-41AkBMeuBs4DZd2Jz3Mshz4j29ORaysVC_MP3rwltV10Qwg_J/.../

http://lb.cdn.m6web.fr/d/c/a/141e0b5b7fe260ff62791d168c20f811/57fe6c50/soft/.../snippy_snippy_0.41_anglais_15177.exe

http://e.ccm2.net/en.kioskea.net/download/.../Snippy.exe

http://ec.ccm2.net/es.ccm.net/download/.../Snippy.exe

http://download1640.mediafire.com/8z849twiifog/.../Snippy.exe

http://ec.ccm2.net/ccm.net/download/.../Snippy.exe

http://ec.ccm2.net/www.commentcamarche.net/download/.../Snippy.exe

http://download.softpedia.com/dl/67e8a2efab1fbe2f5af168d9bdc7f559/561af17a/100032741/software/multimedia/.../Snippy.exe

http://download.softpedia.com/dl/e15ff5bf8ca32d080c9944bd79f3bd45/564d07ac/100032741/software/multimedia/.../Snippy.exe

http://download.softpedia.com/dl/e82bd7115f729b846f2b52b29fb45b4f/558450b3/100032741/software/multimedia/.../Snippy.exe

http://www.bhelpuri.net/.../Snippy.exe

Scan snippy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.