home

uncensor.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download950.mediafire.com and multiple other hosts.
MD5:
81db0887a5a1f1236fd64c6b6b6cfa6f

SHA-1:
dfc75a34357660c97b9f2c9f3f42097ced41531c

SHA-256:
051aa1fb2764967373a510c24300e16aee7d6a7fe72701f1fd860c0e4611ca41

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:37:48 AM UTC  (today)

File size:
224.9 KB (230,308 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\uncensor.exe

File PE Metadata
Compilation timestamp:
4/12/2014 1:38:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:HFWyN1gdzn1bd8GpXvvgs6e9aWjEs5Dj38iyv/7AGndfLW071Wcj:lVN1gdzhd7osEsaR8wfLW071

Entry address:
0x3F93

Entry point:
E8, 80, 04, 00, 00, E9, 36, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, 61, 40, 00, 89, 0D, 74, 61, 40, 00, 89, 15, 70, 61, 40, 00, 89, 1D, 6C, 61, 40, 00, 89, 35, 68, 61, 40, 00, 89, 3D, 64, 61, 40, 00, 66, 8C, 15, 90, 61, 40, 00, 66, 8C, 0D, 84, 61, 40, 00, 66, 8C, 1D, 60, 61, 40, 00, 66, 8C, 05, 5C, 61, 40, 00, 66, 8C, 25, 58, 61, 40, 00, 66, 8C, 2D, 54, 61, 40, 00, 9C, 8F, 05, 88, 61, 40, 00, 8B, 45, 00, A3, 7C, 61, 40, 00, 8B, 45, 04, A3, 80, 61, 40, 00, 8D, 45, 08, A3, 8C, 61, 40...
 
[+]

Code size:
13.5 KB (13,824 bytes)

The file uncensor.exe has been seen being distributed by the following 4 URLs.

http://download950.mediafire.com/0khbonofwc2g/.../uncensor.exe

http://download1745.mediafire.com/l8rhbrjbk07g/.../uncensor.exe

http://download1745.mediafire.com/j5v77qzc261g/.../uncensor.exe

http://download950.mediafire.com/phcipcwbshzg/.../uncensor.exe

Scan uncensor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.