Skip navigation.
Home

xxxjsc.info/mm.exe

|

I noticed it's a different file each time.. think it's nice..
does somebody know some other urls with such behavior? ;;)

(ps: don't know if it's the right place to post :( )

where did you pull this URL from ? malware?

I see what you mean ... I just pulled the link 8 times and got 8 different MD5's with about 3 different file sizes... see below
Also the files all appear to be UPX 2.03 packed...though I haven't looked yet to see if they are scrambled at all.

-rw-r--r-- 1 51712 Jan 11 11:47 mm.exe
-rw-r--r-- 1 52224 Jan 11 11:47 mm.exe.1
-rw-r--r-- 1 52224 Jan 11 11:48 mm.exe.2
-rw-r--r-- 1 51712 Jan 11 11:48 mm.exe.3
-rw-r--r-- 1 51712 Jan 11 11:49 mm.exe.4
-rw-r--r-- 1 51200 Jan 11 11:49 mm.exe.5
-rw-r--r-- 1 52224 Jan 11 11:51 mm.exe.6
-rw-r--r-- 1 51712 Jan 11 11:54 mm.exe.7
-rw-r--r-- 1 51712 Jan 11 11:54 mm.exe.8
-rw-r--r-- 1 51712 Jan 11 11:55 mm.exe.9

MD5 (mm.exe) = 7064a60b56e65adab6912441e070aae0
MD5 (mm.exe.1) = 2bf21081d2749a778da6e4e42b6e2fc1
MD5 (mm.exe.2) = 7bcf423c7837852ccdace10ce5c1b952
MD5 (mm.exe.3) = 13f92dc83fc0d33a4fe13a7b47b92b8a
MD5 (mm.exe.4) = 5d720ae1226050d9de14b8737d4772e4
MD5 (mm.exe.5) = d10e0c6b3c2484e830b7fa6184d5a151
MD5 (mm.exe.6) = 7ddd4fafb7ad089417096a3a1f85585f
MD5 (mm.exe.7) = b12b9a46890d19766345f0a2efb69928
MD5 (mm.exe.8) = de863cea24c90eddeefe92dd06501568
MD5 (mm.exe.9) = 3efb475badeef64da4cc1d688e0aaa0c