home

domainpark.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dp.g.doubleclick.net.
MD5:
f1ce3b859f689bc82a9ab39918359446

SHA-1:
7b12f029bd708e8bca3cd9f5bacf394dcc78ec9c

SHA-256:
6f39382cb41dd9939146ae574e6931a512b85a525f302f081690dcd34e5a9132

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 11:57:02 PM UTC  (a few moments ago)

File size:
7.6 KB (7,819 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\domainpark.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:ewPs+O7u9+2TAs1UHNxMPrOkb8Dd/10p0M+07PEPS8TbHKby:7IA1UHICVFGP+SoQy

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 20, 50, 55, 42, 4C, 49, 43, 20, 22, 2D, 2F, 2F, 57, 33, 43, 2F, 2F, 44, 54, 44, 20, 48, 54, 4D, 4C, 20, 34, 2E, 30, 31, 2F, 2F, 45, 4E, 22, 20, 22, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2E, 77, 33, 2E, 6F, 72, 67, 2F, 54, 52, 2F, 68, 74, 6D, 6C, 34, 2F, 73, 74, 72, 69, 63, 74, 2E, 64, 74, 64, 22, 3E, 0A, 3C, 68, 74, 6D, 6C, 3E, 3C, 68, 65, 61, 64, 3E, 3C, 6D, 65, 74, 61, 20, 68, 74, 74, 70, 2D, 65, 71, 75, 69, 76, 3D, 22, 43, 6F, 6E, 74, 65, 6E, 74...
 
[+]

The file domainpark.exe has been seen being distributed by the following URL.

http://dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?max_radlink_len=40&r=m&fexp=21404&client=dp-teaminternet01_3ph&channel=bucket011,bucket048&hl=ar&adtest=off&type=3&optimize_terms=on&drid=as-drid-2347195947241528&uiopt=false&oe=UTF-8&ie=UTF-8&format=r10|s&adrep=0&num=0&output=caf&domain_name=www.xaviware.com&v=3&allwcallad=1&adext=as1,sr1,ctc1&bsl=8&u_his=0&u_tz=60&dt=1463646368263&u_w=1440&u_h=900&biw=1430&bih=639&psw=1430&psh=639&frm=0&uio=uv3cs1ff2sa16fa2sl1sr1cc1-wi666st22sa14lt33-&jsv=62631&rurl=http://www.xaviware.com/.../pwdie.exe

Scan domainpark.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.