home

drakensang.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s10557.chomikuj.pl.
MD5:
01483b0932b0a277fdf4481d23eab709

SHA-1:
8b82ea0c4de471d89830cfb9c666746dafca4b36

SHA-256:
08f62db8ede5249f114565281b0d97ed52a73a3ce4aa8fff000e75c7603f866b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 9:41:13 AM UTC  (today)

File size:
10.8 MB (11,276,288 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\noviy disk\the dark eye. drakensang\drakensang.exe

File PE Metadata
Compilation timestamp:
10/14/2008 4:07:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:d8poQZBFdQk9M79nQqzxc/dB7YovPkFCfEVqTPSto+zslntwX8R9LBsMr7beKxw5:d8bKnQb3YfKT

Entry address:
0x164B6C

Entry point:
E8, F8, 8C, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 51, 51, 56, 8D, 45, FC, 33, F6, 50, 89, 75, FC, 89, 75, F8, E8, 6C, 34, 00, 00, 85, C0, 59, 74, 0D, 56, 56, 56, 56, 56, E8, 2B, 46, 00, 00, 83, C4, 14, 8D, 45, F8, 50, E8, 88, 34, 00, 00, 85, C0, 59, 74, 0D, 56, 56, 56, 56, 56, E8, 10, 46, 00, 00, 83, C4, 14, 83, 7D, FC, 02, 5E, 75, 0B, 83, 7D, F8, 05, 72, 05, 33, C0, 40, C9, C3, 6A, 03, 58, C9, C3, 33, C0, 39, 44, 24, 04, 6A, 00, 0F, 94, C0, 68, 00, 10, 00, 00, 50, FF, 15, 84, C1, A8, 00, 85, C0, A3, EC...
 
[+]

Code size:
6.5 MB (6,860,800 bytes)

The file drakensang.exe has been discovered within the following program.

Drakensang - The Dark Eye  by R.G. Mechanics
tapochek.net
8% remove it
 
Powered by Should I Remove It?

The file drakensang.exe has been seen being distributed by the following URL.

http://s10557.chomikuj.pl/File.aspx?e=QP2Asir0Zue-O4j-N28-ltj5aNHoLyCKWTwKfG6NUGqHdvmnWNC737YcSYxi_9uEFvyzS4WgR443f5f-8dESGf1Ipp7B0yEnFAXKIvRz09BFd18zedIVJknymmRcBF1ubgIrJVnpk4JeQBpEjjYeBg&pv=2

Scan drakensang.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.