home

228748-666828-resident-evil-4.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from i_mp3-es_resident-evil-4-parche-v1-1-0.firedlopbura.com.
MD5:
97ff1737c675fa61577ca45b41568451

SHA-1:
fdcf1b20e503d1b70ba56dac675b3fe6c6430a59

SHA-256:
69f21bc67e9f39ad8b0acc7d4f1e753446d7123b0b177898e7c25ba565961ff3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:41:05 AM UTC  (today)

File size:
3.3 MB (3,461,313 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:yNOd7gwFfp58SCgCLJgX3825DK3cYl40cn8b:gOd7g08SCgt382McYlrSC

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 61, 96, 8B, 36, 38, 3C, 96, 30, 29, B2, 70, 04, C2, 2D, 74, 04, 0E, 00, 00, 00, 75, 70, 64, 5F, 70, 61, 6C, 31, 31, 30, 2E, 65, 78, 65, EC, BD, 7D, 7C, 54, C5, D5, 38, 7E, 37, 7B, 03, 17, 12, D8, 45, 13, 1B, 25, D6, A8, 6B, 1B, 9B, A0, D1, A4, 9A, B0, A8, 1B, 48, 62, B4, 01, EF, EE, 26, BB, 41, 48, 82, 2D, 62, 8C, 11, 63, B2, 0B, 51, 11, 81, 4D, 6C, 36, 97, 58, 54, 5A, B5, B5, 4F, 41, A9, 55, 6B, 9F, 87, B6, A8, A0, A8, 09, 81, 24, BC, BF, A9, 20, F8, 82, 8A, 3A, 71...
 
[+]

The file 228748-666828-resident-evil-4.exe has been seen being distributed by the following URL.

http://i_mp3-es_resident-evil-4-parche-v1-1-0.firedlopbura.com/crawled_soft/2/2/.../228748-666828-resident-evil-4.exe

Scan 228748-666828-resident-evil-4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.