home

snoopy.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.publispain.com.
MD5:
aafce87c61a31f5f86f405cba95d938d

SHA-1:
11cd4b193021cf9bad6caaaab579d087b1d81496

SHA-256:
16983b4f9e14a501dade4a0de0ac0fc241c7d375f1517aeb13d3f59440400be5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:56:09 AM UTC  (today)

File size:
1000.6 KB (1,024,615 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\snoopy.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:52:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:B+5nCreAS8m0VWqO4ltalHmqqZ2hA+y80qZDhlVP4Ww6YSyp:cVCNS8m0VNX8kH+Iqp7h4W9YS

Entry address:
0x12001

Entry point:
60, E9, 3D, 04, 00, 00, 29, E5, C5, C1, C1, 2A, C1, 7A, F1, F8, 85, C1, C2, 1C, EA, 5C, 11, FE, 85, C1, 42, 7C, 3D, 88, 85, C1, C1, 48, 5C, 3D, 88, 85, C1, CE, 44, A7, C2, C1, C1, 06, 44, F2, F8, 85, C1, C1, C1, C1, C1, 4C, 44, C5, 8B, 85, C1, 91, 3E, 54, C1, 8A, 85, C1, 48, 44, C1, 8B, 85, C1, 4A, 39, 4C, 5C, D0, 8B, 85, C1, 92, 91, 3E, 54, 3D, 8B, 85, C1, 48, 44, 3D, FE, 85, C1, 4C, 5C, DF, 8B, 85, C1, 92, 96, 3E, 54, 3D, 8B, 85, C1, 48, 44, C1, 81, 85, C1, 4C, 44, 74, F8, 85, C1, 3E, 21, D5, 53, C1, C1...
 
[+]

Packer / compiler:
ASPack v2.11

Code size:
34 KB (34,816 bytes)

The file snoopy.exe has been seen being distributed by the following URL.

http://www.publispain.com/snoopy/.../snoopy.exe

Scan snoopy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.