home

dir.exe

MD5:
9682b180fc5bf7dbcd0c540f024e3286

SHA-1:
4de240466f02c79a6b3fd1a5af205bc12c78da83

SHA-256:
27f23cc4184768a83484da39d6a3edd3daea7e6f2e46ee665b862ab3c2262eb6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:58:29 PM UTC  (today)

File size:
738.5 KB (756,224 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\digital image recovery\dir.exe

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:kPAui3jyDvMj7KqZk8aNSsRu68QBSu9dAR71oMmd64Hy:kPNiOAj7KqZ6L7BSGAR7B4Hy

Entry address:
0x81C14

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, F4, 19, 48, 00, E8, 77, 4C, F8, FF, 8B, 1D, 38, 33, 48, 00, 8B, 03, E8, 22, 9B, FD, FF, 8B, 03, BA, 8C, 1C, 48, 00, E8, 22, 97, FD, FF, 8B, 0D, 6C, 31, 48, 00, 8B, 03, 8B, 15, BC, F9, 47, 00, E8, 1B, 9B, FD, FF, 8B, 0D, 5C, 33, 48, 00, 8B, 03, 8B, 15, 64, ED, 47, 00, E8, 08, 9B, FD, FF, 8B, 0D, BC, 32, 48, 00, 8B, 03, 8B, 15, 44, F4, 47, 00, E8, F5, 9A, FD, FF, 8B, 03, E8, 6E, 9B, FD, FF, 5B, E8, 58, 26, F8, FF, FF, FF, FF, FF, 16, 00, 00, 00, 44, 69, 67, 69, 74, 61, 6C, 20...
 
[+]

Entropy:
6.5116

Developed / compiled with:
Microsoft Visual C++

Code size:
515.5 KB (527,872 bytes)

The file dir.exe has been discovered within the following program.

Digital Image Recovery 1.47  by Alexander Grau
home.nexgo.de/christian_grau/dir/index.html
About 1% of users remove it
 
Powered by Should I Remove It?

The file dir.exe has been seen being distributed by the following 5 URLs.

http://s10571.chomikuj.pl/File.aspx?e=baM6XvT1dbueo2JHT-2bhwSpd-Vw7t98jvlJ4sZRYIcI8yxxYPxozDgPtR-BrRbvmmH21QRzGSTBJ9sA-myfjeovXT-Q1FgTSotD-3pyYfjIdERL96d4nM0NGmnK35QZ&pv=2

http://s10571.chomikuj.pl/File.aspx?e=baM6XvT1dbueo2JHT-2bhwSpd-Vw7t98jvlJ4sZRYIcztHtf1aPfTo0vR2Ye_wZT0W05Sq1gIq-ugXHtDuJs-S-1g-tBf5ciAWD5nHPLqNJICeK2DFyKfHlC-Dc5Kxk7&pv=2

http://s6904.chomikuj.pl/File.aspx?e=baM6XvT1dbueo2JHT-2bh8F_X_-EhDX5tuAvmLKEo7v_dfT-0rkX1GWYZXdtAZ0Yp52Y6yUpqGdPGhRiiR9S22aJHEV11krjiIsbD5MYT68YyF7Qb0WTftGEhB8ufdsy&pv=2

http://s10571.chomikuj.pl/File.aspx?e=baM6XvT1dbueo2JHT-2bhxEnjUO9zwHPbj9BQkTcqtEQfu-t5DPGDtOsg1HKwEjYBlP6kmCIBH3Tm6HiZF0srasliud4tWeIU0eSOZM4onnc17rMDmubhaCsPPl90SqD&pv=2

http://zalacznik.wp.pl/0/.../DIR.exe

Scan dir.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.