home

dtlite4491-0356.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from asrock.pc.cdn.bitgravity.com.
MD5:
f71ebf19db22a90bfee40e5321ad83bf

SHA-1:
3ae1ef4f052496790aead4cfa8738b8dd24899cc

SHA-256:
243cac17a69fda07abae327774ca250cb16eaf8f0cdfd5e10587acf301ec6a08

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:06:45 AM UTC  (today)

File size:
5.2 MB (5,499,342 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:x1x3HrGUR8tdgHuZtFt4uG9bueQz0k+WF750hf/QLyR:dHrGUR8tdgwvt499TorFVovR

Entry point:
50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, 03, 7F, 22, 3B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 17, 00, 00, 00, 4C, 41, 4E, 5F, 57, 69, 6E, 37, 2D, 36, 34, 5F, 57, 69, 6E, 37, 28, 37, 30, 30, 35, 29, 2F, 50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, A1, 54, FE, 3A, 03, D4, C7, F5, 68, 25, 36, 00, 36, 4E, 36, 00, 20, 00, 00, 00, 4C, 41, 4E, 5F, 57, 69, 6E, 37, 2D, 36, 34, 5F, 57, 69, 6E, 37, 28, 37, 30, 30, 35, 29, 2F, 64, 61, 74, 61, 31, 2E, 63, 61, 62, EC, B7, 45, 54, 1C, 5C, 10, 26, 1A, DC, DD, 83, 43...
 
[+]

Entropy:
7.9985  (probably packed)

The file dtlite4491-0356.exe has been seen being distributed by the following URL.

http://asrock.pc.cdn.bitgravity.com/Drivers/Intel/.../LAN_Win7-64_Win7(7005).zip

Scan dtlite4491-0356.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.