home

text.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1894.mediafire.com and multiple other hosts.
MD5:
31f7995f9fc55ec18fcc9d63b849f3a0

SHA-1:
88e06870782087ca79e6bb70d6a0fcbb64c565f7

SHA-256:
ccc59bdf673764ef2b2c3ca45ea73609ab13d92f0f4fdf2545961db658216937

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/27/2024 2:42:45 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.114.222

avast!
Win32:Malware-gen
2014.9-160114

File size:
2.6 MB (2,763,915 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\text.exe

File PE Metadata
Compilation timestamp:
6/9/2012 10:19:49 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:uUb8FP2Sn2cEnN1oEEB9EwISsMcMAYcb0OF4yaJQO8SQDBFh0xOeLLoG9G1urqB+:uUbiHEnN1oEEB9EwISsMcR0DoRFix5Q8

Entry address:
0xAC87

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 9F, 30, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 8F, AB, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 24, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 24, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 0E, B1, FF, FF, C3, 56, 8B, F1, 8B, 06, 85, C0, 74, 07, 50, FF, 15, C4, 40, 41, 00, 83, 26, 00, 83, 66, 08, 00, 83, 66, 0C, 00, 5E, C3, 56, 8B, F1, 80, 7E, 04, 00, 75, 34, 68, F4, 44, 41, 00...
 
[+]

Code size:
73 KB (74,752 bytes)

The file text.exe has been seen being distributed by the following 45 URLs.

http://download1894.mediafire.com/v3vebd2vh06g/.../text.exe

http://download1994.mediafire.com/pt2ptw9cbuog/.../text.exe

http://download1994.mediafire.com/kkw21h9iipwg/.../text.exe

http://download1994.mediafire.com/xw59iaoicmzg/.../text.exe

http://download1894.mediafire.com/yo4ck5b2w2qg/.../text.exe

http://download1065.mediafire.com/uk0mkt1vw8bg/.../text.exe

http://download1994.mediafire.com/wa3w2c155fyg/.../text.exe

http://download1065.mediafire.com/ubghyy1bzh7g/.../text.exe

http://download1994.mediafire.com/rpgr9w16fumg/.../text.exe

http://download1027.mediafire.com/0dj821aov6mg/.../text.exe

http://download1971.mediafire.com/vw0zj0kj06og/.../text.exe

http://download1994.mediafire.com/b6409wzsilog/.../text.exe

http://download1971.mediafire.com/v7rvr47abf9g/.../text.exe

http://download1894.mediafire.com/0yoqs814hh8g/.../text.exe

http://download1994.mediafire.com/zx6o798v1svg/.../text.exe

http://download1994.mediafire.com/b7phzz80vxcg/.../text.exe

http://download1994.mediafire.com/cccm8f51x4vg/.../text.exe

http://download1994.mediafire.com/ur19arkb8vfg/.../text.exe

http://download1994.mediafire.com/v2ck8vqn5ssg/.../text.exe

http://download1894.mediafire.com/pnajmrz649mg/.../text.exe

http://download1994.mediafire.com/swqbhrqw9wtg/.../text.exe

http://download1894.mediafire.com/p9cw4jg3m4ng/.../text.exe

http://download842.mediafire.com/g7reeqz3aeqg/.../text.exe

http://download1994.mediafire.com/3ed9pof2getg/.../text.exe

http://download1994.mediafire.com/3bghch3fy5eg/.../text.exe

http://download1994.mediafire.com/99sg3f1389og/.../text.exe

http://download1065.mediafire.com/h4s4y6z4l5dg/.../text.exe

http://download1994.mediafire.com/z6fi2l4qw21g/.../text.exe

http://download1994.mediafire.com/7r2zar5z8bxg/.../text.exe

http://download641.mediafire.com/710bf7t72d7g/.../text.exe

Latest 30 of 45 download URLs

Scan text.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.