home

888casino.exe

Random-Logic Installer

Random-Logic

This is a self-extracting archive and installer. The file has been seen being downloaded from www.888casino.com.
Publisher:
Random-Logic

Product:
Random-Logic Installer

Description:
Installer

Version:
3, 7, 0, 28

MD5:
3901ba99f70ce8b9b3730f061db2772a

SHA-1:
7f243d7bad533374becab35c94c548376e5720cb

SHA-256:
b3228cd0e549e2247873896e99beec5faa9981ffb1667354fa308a6edfb86678

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 5:36:55 PM UTC  (today)

File size:
393.3 KB (402,736 bytes)

Product version:
3, 7, 0, 28

Copyright:
Copyright © 2004

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\888casino.exe

File PE Metadata
Compilation timestamp:
10/10/2013 3:37:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:auY9m/1c3O1D3yg7bwxRO9123x+LgAmfi:xcmOCDfbDg3x+cti

Entry address:
0x16B23

Entry point:
60, 8D, 35, 95, 15, 64, 39, 80, C5, 1E, 8D, 2D, 2B, 29, BA, C9, FF, C6, F2, 80, DB, 71, 89, FA, 2B, D2, 73, 08, 69, D0, 47, 6A, FD, F8, 89, F3, 33, C5, 86, D9, 87, D7, F2, F3, 6B, C9, 00, F7, C5, 57, 61, 30, CE, F7, C6, C4, 27, D4, 8E, 85, C5, 85, F6, 8A, E6, 81, C1, 7F, F4, FF, FF, 3D, E8, 00, 00, 00, 77, 02, 88, C4, 81, C1, 82, 0B, 00, 00, EB, 07, 0F, AF, D0, 87, FB, 85, D6, C6, C4, 02, B7, 79, 85, DD, F3, 81, F9, CE, 05, 00, 00, 0F, 8C, BC, FF, FF, FF, 88, DE, 8B, F8, C6, C7, B4, E8, 10, 00, 00, 00, 84...
 
[+]

Code size:
232 KB (237,568 bytes)

The file 888casino.exe has been seen being distributed by the following URL.

http://www.888casino.com/downloadclient.htm?DownloadBrand=888casino&lang=fr&dl=12482&sr=1245987&anid=w0CR8M29SMABO79UGBLDU81I&ic=&mkw=&lang=fr&utm_source=aff&utm_medium=casap,casap&dl=13936&dlp=http://fr.888casino.com/download/download.htm&wtc=UA-12287920-5__15327174029570&referrer=http://toofy.tv/&mm_id=34177&country=dza&last-referrer=http://toofy.tv/&orig-lp=http://www.888casino.com/.../offer-1500-88.htm

Scan 888casino.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.