home

attribute tweaker.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.initdll.de.
MD5:
d04d19045e3bb66dd359ec7dacbf9e0a

SHA-1:
a92a3405b6d5cf55d944f0423a41d1b75393b633

SHA-256:
ac4af3afabdb20127e526c943fde9a1b389658581c2f90a9c97070b96d06bc30

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 2:24:27 AM UTC  (today)

File size:
30.5 KB (31,249 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\attribute tweaker.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:z900xwjPUPTnq7Scy4adQMQT4fybBA2sE+BUOrzIk69:204enq77yhyM7DUOrzHe

Entry point:
52, 61, 72, 21, 1A, 07, 00, CF, 90, 73, 00, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 7F, A2, 74, 20, 90, 4C, 00, 68, 49, 00, 00, 00, C2, 00, 00, 02, D0, B7, 4F, 57, 17, 77, 43, 44, 1D, 35, 27, 00, 20, 00, 00, 00, 41, 74, 74, 72, 69, 62, 75, 74, 65, 20, 54, 77, 65, 61, 6B, 65, 72, 5C, 41, 74, 74, 72, 69, 62, 75, 74, 65, 20, 54, 77, 65, 61, 6B, 65, 72, 2E, 65, 78, 65, 00, B0, 46, C3, 23, 14, 21, 50, D1, 0C, 8D, A2, 18, 11, 82, 2F, 31, FC, 04, 66, 87, A0, 18, 3C, 80, 40, 66, 86, C6, C6, 6B, 81, 08, C0, 66, C6, 68...
 
[+]

Entropy:
7.9906  (probably packed)

The file attribute tweaker.exe has been seen being distributed by the following URL.

http://www.initdll.de/.../24182_attribute tweaker.exe

Scan attribute tweaker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.