home

bomberman_ppc.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from bomber.fr.softonic.com and multiple other hosts.
MD5:
ce0f30ebe0a83cab95df5d75973696ad

SHA-1:
90478b79ed056ccd5202d432d2361f10bfd212d4

SHA-256:
47666d6464e6f4b61af13e7cc560337ec29eb621e9e34d743e9c32b2a0afa828

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:27:15 PM UTC  (today)

File size:
313.5 KB (321,024 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\bomberman_ppc.exe

File PE Metadata
Compilation timestamp:
6/11/1999 3:05:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:I9+DXgfO5VR6fPWfVywxHQX9v6KdfQVDKxfT9YaBbGm:Iw8O5VonW9RQ0Kdx79zdl

Entry address:
0x1404

Entry point:
55, 8B, EC, 81, EC, 0C, 02, 00, 00, 56, BE, 04, 01, 00, 00, 8D, 85, F8, FE, FF, FF, 56, 50, 6A, 00, FF, 15, 54, 10, 40, 00, 8A, 8D, F8, FE, FF, FF, 33, D2, 84, C9, 8D, 85, F8, FE, FF, FF, 74, 16, 80, F9, 5C, 75, 03, 8D, 50, 01, 8A, 48, 01, 40, 84, C9, 75, F0, 85, D2, 74, 02, 20, 0A, 8D, 45, FC, 50, 8D, 85, F8, FE, FF, FF, 50, E8, D0, FD, FF, FF, 59, 84, C0, 59, 75, 28, 8D, 85, F4, FD, FF, FF, 56, 50, FF, 15, 50, 10, 40, 00, 85, C0, 74, 1B, 8D, 45, FC, 50, 8D, 85, F4, FD, FF, FF, 50, E8, A8, FD, FF, FF, 59...
 
[+]

Entropy:
7.9850

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file bomberman_ppc.exe has been seen being distributed by the following 2 URLs.

http://bomber.fr.softonic.com/pocketpc/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAN5WtHDaXqP1bZH5gYbEjmybr/7MAzEC34gu mSqdoG/MOXrjtSnI4iE0gpjGH4/TwC1N Kb8AnxwkB OMWFpOQRjFatCXtcgGTNVPplWl jCbAKKJ5xXjZzBjLuqrn0 VzXkCVo GXxfER7EawKMBR8P3OJ7ftCJBo5/Q1MmVi8o7e7oWMgbG7DOBIGr7AqoX92lPZbUnra85mwCUEjEl t0U13wfoz5nYBznbRF6j61I2lvpZkjmJ0a9kQzOUp/Thggdn1uPZqJ0ptoyVopEF/kHYXCENXNyECY4VI7WtFS8dr4MXG6fSiQziG8/VQpxkUAFgDkJ6ACE5LDgCZNprExzNvfuBNZyd9UlLE KK ExBk9hHqTnaQVTP3h7B1eWF7gLTPNC/aGMUXKxvrQIjzmb 2MXUeQhxl1FDWiPrn2V84/SNjpT30e34BcDb2HNKitLxH1XdTuzxCY3w9uEXoMH4/IEECms1GS9ATKawXNYjr16sFgG/.../oeaKjcAe

http://www.mahamodo.com/.../hitsdownload.aspx?pfile=1&id=22

Scan bomberman_ppc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.