home

Xbl 1month.exe

Xbl 1month

This is a setup program which is used to install the application. The file has been seen being downloaded from download727.mediafire.com and multiple other hosts.
Product:
Xbl 1month

Version:
1.00

MD5:
cfe4ec0637023c8116fb9581f8eead88

SHA-1:
1d2b5c75b3ce1598e1ac3162d54386c5931daaa2

SHA-256:
23f2086933ccc3a687e91140177bf06cd8c15d0a23956e0676a873735e06207a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 7:10:20 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
23.00.65.16105

File size:
84 KB (86,016 bytes)

Product version:
1.00

Original file name:
Xbl 1month.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\xbl 1month.exe

File PE Metadata
Compilation timestamp:
1/2/2009 3:03:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:/mhBMWHkM1XVNOmt+1HGD/DeA3HkM1Xygrh:OrMWEKNR+1Hq/Db3Edgr

Entry address:
0x1240

Entry point:
68, 64, B4, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 7D, D0, DC, 00, D0, 47, E4, 41, 9D, 30, 93, 55, 27, FD, DA, 07, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 41, 00, 06, 50, 83, 02, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 00, 00, 00, AC, FC, FB, 00, 00, 00, 00, 00, FF, CC, 31, 00, 0B, CE, AC, 01, 54, A0, BA, 24, 49, 87, 7C, 24, FA, 89, E3, 4E, 78, E5, 48, 4F, BA, 9A, 19, F8, 43, B4, EB, BA, 2D, 7E, F5, 1A, 07, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
52 KB (53,248 bytes)

The file Xbl 1month.exe has been seen being distributed by the following 43 URLs.

http://download727.mediafire.com/4ucvvanlpyyg/.../Xbl 1month.exe

http://download1121.mediafire.com/cxbd8mnaziyg/.../Xbl 1month.exe

http://download727.mediafire.com/1hszdarm0fkg/.../Xbl 1month.exe

http://download727.mediafire.com/y7ii7x6xwjig/.../Xbl 1month.exe

http://download828.mediafire.com/7a2shhxy79ig/.../Xbl 1month.exe

http://download727.mediafire.com/ewwqw6gb62lg/.../Xbl 1month.exe

http://download1457.mediafire.com/q19q1qv8xn2g/.../Xbl 1month.exe

http://download828.mediafire.com/dazbai5jbzjg/.../Xbl 1month.exe

http://download828.mediafire.com/ap9d2bknabxg/.../Xbl 1month.exe

http://download628.mediafire.com/mgdn3u12myqg/.../Xbl 1month.exe

http://download1121.mediafire.com/n2uigo1082ug/.../Xbl 1month.exe

http://download727.mediafire.com/8h1e0ckj7c5g/.../Xbl 1month.exe

http://download1991.mediafire.com/o1y0ve5b90gg/.../Xbl 1month.exe

http://download727.mediafire.com/76b5rxzdm71g/.../Xbl 1month.exe

http://download1075.mediafire.com/v43khvt7y7dg/.../Xbl 1month.exe

http://download727.mediafire.com/wbn90ju4z7dg/.../Xbl 1month.exe

http://download727.mediafire.com/yi90ba0arlbg/.../Xbl 1month.exe

http://download628.mediafire.com/8mimb262trng/.../Xbl 1month.exe

http://download727.mediafire.com/t5o8oihbt94g/.../Xbl 1month.exe

http://download628.mediafire.com/6xankb2pr0ng/.../Xbl 1month.exe

http://download727.mediafire.com/8r4gtz8nljcg/.../Xbl 1month.exe

http://download828.mediafire.com/ll8jm4e5m3yg/.../Xbl 1month.exe

http://download727.mediafire.com/x92eedqzxswg/.../Xbl 1month.exe

http://download727.mediafire.com/awlufqs5gmbg/.../Xbl 1month.exe

http://download727.mediafire.com/xk68avgbv76g/.../Xbl 1month.exe

http://download727.mediafire.com/mmmmc4z784og/.../Xbl 1month.exe

http://download1457.mediafire.com/kuk87j1i49fg/.../Xbl 1month.exe

http://download1121.mediafire.com/9kii38l38rng/.../Xbl 1month.exe

http://download727.mediafire.com/v7gd7k9s6sog/.../Xbl 1month.exe

http://download727.mediafire.com/htesylglwkgg/.../Xbl 1month.exe

Latest 30 of 43 download URLs

Scan Xbl 1month.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.