home

dro_setup.exe

MD5:
cd442461e0e50308d3980fcbcac72826

SHA-1:
3831125df490634e62a8d772e919c598a47f2712

SHA-256:
ece30ac4e89c2a516d8b63f90d8ed26ec119746e6add2282e56f04f98f26de67

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:46:34 AM UTC  (today)

File size:
1.3 KB (1,284 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\dro_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24:t5k0/5AkFXtm5D3jdLI5jY15xtt5qiHtG55nU5OkLid5a3sCU5825TS:t515Aig51k5E15xn5qug5a55Wd5qU587

Entry point:
0D, 0A, 2D, 2D, 35, 33, 37, 37, 62, 32, 32, 31, 64, 65, 35, 33, 66, 37, 31, 63, 38, 0D, 0A, 43, 6F, 6E, 74, 65, 6E, 74, 2D, 74, 79, 70, 65, 3A, 20, 61, 70, 70, 6C, 69, 63, 61, 74, 69, 6F, 6E, 2F, 78, 2D, 6D, 73, 64, 6F, 73, 2D, 70, 72, 6F, 67, 72, 61, 6D, 0D, 0A, 43, 6F, 6E, 74, 65, 6E, 74, 2D, 72, 61, 6E, 67, 65, 3A, 20, 62, 79, 74, 65, 73, 20, 30, 2D, 31, 30, 2F, 32, 32, 32, 37, 32, 38, 31, 36, 0D, 0A, 0D, 0A, 4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 0D, 0A, 2D, 2D, 35, 33, 37, 37, 62, 32, 32, 31, 64...
 
[+]

Entropy:
5.4041

The file dro_setup.exe has been seen being distributed by the following URL.

http://agathon.drakensang.com/.../dro_setup.exe

Scan dro_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.