home

TOMYUMZEX7FIX.exe

TOMYUMZEX7FIX

This is a setup program which is used to install the application. The file has been seen being downloaded from download1246.mediafire.com and multiple other hosts.
Product:
TOMYUMZEX7FIX

Version:
1.0.0.2

MD5:
6b854b1598127c4d5b0ae8f489ad9c0d

SHA-1:
facdf4b1ce1b917bcd08830c9f35f89586a5f33c

SHA-256:
e3e899c600bc1950d3555aa2f212149b4c5bd550a07b07e8a02bfd504072ef06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:30:45 AM UTC  (today)

File size:
1.3 MB (1,318,400 bytes)

Product version:
1.0.0.2

Copyright:
Copyright © 2015

Original file name:
TOMYUMZEX7FIX.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\tomyumzex7fix.exe

File PE Metadata
Compilation timestamp:
10/7/2014 4:43:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:/IgTA4qxSosHkxGvhkEVBrSUEIak4aKcKwf3n604jJoCRAy7cpX97WNe:AgMbHsHRv6gUIadatfK04doIcpX97Ae

Entry address:
0x43B5

Entry point:
55, 8B, EC, 83, C4, F0, B8, 00, 10, 40, 00, E8, 01, 00, 00, 00, 9A, 83, C4, 10, 8B, E5, 5D, E9, A7, E2, 3D, 00, 29, D7, 43, 82, 13, 74, 93, 10, 5A, 74, CC, BF, 89, FD, 20, 1C, FE, 38, 36, EC, 9D, 51, C4, AA, 07, 9F, EF, 8F, C3, 66, E2, 1F, 9D, 90, 6F, BA, 3A, C9, 89, 9F, C8, 2F, E6, DA, 15, 6C, D7, AF, 5D, 99, 62, 78, 79, 9D, 2B, 0A, 00, 74, 4F, 6C, 18, B1, 08, C6, A1, 8B, F1, A9, 29, 51, 14, 7F, E8, 29, 1B, 4F, 1C, DB, 7E, 7C, B9, 1C, 11, BE, 7A, D4, 4A, AA, C3, 3E, B2, D4, 6A, 8D, 99, A9, 0D, 1D, 4D, CB...
 
[+]

Entropy:
7.9770

Developed / compiled with:
Microsoft Visual C++

Code size:
34.5 KB (35,328 bytes)

The file TOMYUMZEX7FIX.exe has been seen being distributed by the following 3 URLs.

http://download1246.mediafire.com/xl9rljc4peeg/.../TOMYUMZEX7FIX.exe

http://download1246.mediafire.com/55f2dlmxafrg/.../TOMYUMZEX7FIX.exe

http://www.mediafire.com/download/.../TOMYUMZEX7FIX.exe

Scan TOMYUMZEX7FIX.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.