home

chimera.exe

Chimera tool

Euro-Server s.r.o.

This is a setup program which is used to install the application. The file has been seen being downloaded from s7.picofile.com and multiple other hosts.
Publisher:
Euroserver Sro.  (signed by Euro-Server s.r.o.)

Product:
Chimera tool

Description:
Chimera mobile tool

Version:
10, 06, 1236, 0

MD5:
d7f12ff272668a47afba73764269794e

SHA-1:
078c758aa0a0d419fcdfe69fa9fe9145cd13f9d7

SHA-256:
f01e8ffffa31c5f2d1822b443aec6b10799b5c0c6d3bb2688b45fb7aa94264ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:03:48 PM UTC  (today)

File size:
43.8 MB (45,959,512 bytes)

Copyright:
Copyright (C) 2016 Euroserver Sro.

Original file name:
chimera.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Euro-Server s.r.o.

Authority:
Starfield Technologies, Inc.

Valid from:
12/4/2015 1:30:38 PM

Valid to:
9/28/2018 11:55:42 PM

Subject:
CN=Euro-Server s.r.o., O=Euro-Server s.r.o., L=Dunajska Streda, C=SK

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00B9A5E5882CA0467A

File PE Metadata
Compilation timestamp:
5/3/2016 4:16:20 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
786432:JMVLe1TYaHmnOZHrGNBpV4Lpvu9lMreVZk7ZxxAON6vD4DstQFkHjpDr/7W:J+ijHmnW43O0Zk7xFNuDJtfBr/y

Entry address:
0x2AEB000

Entry point:
EB, 08, 0F, 6E, EB, 00, 00, 00, 00, 00, E9, 00, 20, 00, 00, 54, 41, 47, 47, 00, 20, 00, 00, 0E, 1B, 00, 00, 01, 00, 30, 82, 1B, 0A, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 82, 1A, FB, 30, 82, 1A, F7, 02, 01, 01, 31, 09, 30, 07, 06, 05, 2B, 0E, 03, 02, 1A, 30, 82, 0F, 20, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 01, A0, 82, 0F, 11, 04, 82, 0F, 0D, D0, 00, 01, 00, 01, C1, B1, A1, 02, 00, 04, 00, 02, 00, 00, 00, 26, 00, 00, 00, 01, 00, 80, E1, 77, EE, D5, 5B, 33, 45, F0, 17, 08, 45, 03, 12, AA, 4E, 07...
 
[+]

Entropy:
7.9978  (probably packed)

Code size:
15.9 MB (16,716,800 bytes)

The file chimera.exe has been seen being distributed by the following 2 URLs.

http://s7.picofile.com/d/.../New_ch1.exe

https://chimeratool.com/.../latest

Scan chimera.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.