home

dosbox0.72-win32-installer.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dnr.duke4.net and multiple other hosts.
MD5:
14e5d3cf6b015066e6c9b04df8556e7c

SHA-1:
60faf34c9672abfbe1bb1512e0118bd7f9d64b53

SHA-256:
ffa4023d00faef42fc20c3938e99672869f46cd803a308ab489ece91ebdbf45f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 5:56:13 PM UTC  (today)

File size:
1.2 MB (1,258,638 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\dosbox0.72-win32-installer.exe

File PE Metadata
Compilation timestamp:
6/8/2007 5:48:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:Nqozb7P/dSD/yJgHRMBIxtJB8Ag0t4z26GUNVq7JO380+tzQW:B/dSDa63X8It3zItW

Entry address:
0x32FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 70, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 78, 72, 40, 00, A3, D4, 3F, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, E8, F4, 41, 00, FF, 15, 54, 71, 40, 00, 68, 2C, 92, 40, 00, 68, 20, 37, 42, 00, E8, A3, 27, 00, 00, FF, 15, B4, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 91, 27, 00, 00, 53, FF, 15, 08, 71, 40, 00, 80, 3D, 00, 90, 42, 00, 22, A3, 20, 3F, 42, 00, 8B, C7, 75, 0A...
 
[+]

Entropy:
7.9942

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file dosbox0.72-win32-installer.exe has been discovered within the following programs.

Master of Orion II  by Stardock Corporation
This software utilizes the Impulse digital distribution platform. Impulse provides users the ability to purchase and download software that are tied to an account on GameStop's servers, and can be downloaded from anywhere that allows the use of the Impulse client.
www.stardock.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file dosbox0.72-win32-installer.exe has been seen being distributed by the following 10 URLs.

http://dnr.duke4.net/dl/.../DOSBox0.72-win32-installer.exe

http://download1634.mediafire.com/bydy934y93sg/.../DOSBox0.72-win32-installer.exe

http://sourceforge.mirrorservice.org/d/do/dosbox/dosbox/.../DOSBox0.72-win32-installer.exe

http://downloads.sourceforge.net/project/dosbox/dosbox/.../DOSBox0.72-win32-installer.exe

http://i.download.idg.pl/fannef/d921cde215cc2876a3b56bf5d09be81b/5776a340//zx/vol2/w95/utils/dosbox/.../DOSBox0.72-win32-installer.exe

http://www.classic-pc-games.com/cgi-bin/.../DOSBox-Installer.exe

https://tqnyjq.dm2301.livefilestore.com/.../DOSBox0.72-win32-installer.exe

http://tiedostot.pelikulma.net/.../DOSBox0.72-win32-installer.exe

http://www.jogosantigos.com.br/DOSBox0.72-win32-installer.exe

http://download1239.mediafire.com/286qdp2ryjsg/.../DOSBox0.72-win32-installer.exe

Scan dosbox0.72-win32-installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.