home

da2_1.6_ro_full.exe

MD5:
5494bfea89c03c3ba2fd831c58580338

SHA-1:
e4936199cd3fc65420cf0385921eeb7e064f0ad1

SHA-256:
f7b524593496484e6c10e00d054b1c5db8c2109e4bf6d4f51f453f79698243a7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 3:37:32 PM UTC  (today)

File size:
1.6 KB (1,689 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\da2_1.6_ro_full.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:lBM4tOysvYvOv+p0OP2BJZ/3Olu5oWOHJZ/3Op6DW2:TNtvsvYvOv+m06JheQolHJhep6DW2

Entry point:
0A, 3C, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 65, 61, 64, 3E, 0A, 3C, 74, 69, 74, 6C, 65, 3E, 46, 69, 6C, 65, 46, 72, 6F, 6E, 74, 20, 44, 69, 73, 74, 72, 69, 62, 75, 74, 69, 6F, 6E, 20, 53, 65, 72, 76, 65, 72, 20, 76, 32, 2E, 30, 3C, 2F, 74, 69, 74, 6C, 65, 3E, 0A, 20, 20, 3C, 73, 74, 79, 6C, 65, 20, 74, 79, 70, 65, 3D, 22, 74, 65, 78, 74, 2F, 63, 73, 73, 22, 3E, 0A, 20, 20, 20, 20, 62, 6F, 64, 79, 20, 7B, 0A, 20, 20, 20, 20, 20, 6D, 61, 72, 67, 69, 6E, 20, 3A, 20, 32, 70, 78, 20, 32, 70, 78, 20, 32, 70, 78, 20...
 
[+]

Entropy:
5.2824

The file da2_1.6_ro_full.exe has been seen being distributed by the following URL.

http://uk2.strategyinformer.com/v2/download/92d0e56a/.../DA2_1.6_RO_Full.exe

Scan da2_1.6_ro_full.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.