home

dyinglight-enhanced.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from am4-r1f1-stor10.uploaded.net and multiple other hosts.
MD5:
8ec89b6a0d0c620f3318f36bb22b11fb

SHA-1:
baf21a6c4daec1ad26bb8e6301affb3146e5be4c

SHA-256:
5d96fdcdf80bb35e0916058b97d308e53e513d2b8c2bd6e0055e8fcb42e0e3ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 10:45:48 PM UTC  (today)

File size:
4.5 MB (4,717,778 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/1/2013 9:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:lHZL/SIftE/qD68wauJHI8hrgzHX7zfrX9ZL:DL/SIfiqD68wautL837nz

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file dyinglight-enhanced.exe has been seen being distributed by the following 17 URLs.

http://am4-r1f1-stor10.uploaded.net/.../77df7ecb-3c16-4fa3-afa7-aa6e87eb962c

http://am4-r1f1-stor10.uploaded.net/.../d0c77125-3a2e-4837-be4e-6083bbf3aef8

http://am4-r1f1-stor10.uploaded.net/.../87f7ae8f-c9cf-4165-83a6-7846ec7a2417

http://am4-r1f1-stor10.uploaded.net/.../0600f68d-379b-410e-9350-d93d98ca305e

http://am4-r1f1-stor10.uploaded.net/.../437f56b2-93b8-4224-a5eb-d447e1a63674

http://am4-r1f1-stor10.uploaded.net/.../4a9a3c57-abe9-4bb7-8a26-12c61e5357f5

http://am4-r1f1-stor10.uploaded.net/.../e1f3caaa-c94c-4cca-bb96-2747a32cc9dc

http://am4-r1f1-stor10.uploaded.net/.../f6e11818-6384-4267-b02b-801e91c770a4

http://am4-r1f1-stor10.uploaded.net/.../7110d92b-556c-4265-9a88-cf5432390da5

http://am4-r1f1-stor10.uploaded.net/.../473ad956-7a75-47b0-bf3e-ca031f0176d0

http://am4-r1f1-stor10.uploaded.net/.../f7eec2a9-63c9-4f8a-8912-e42daeb69879

http://am4-r1f1-stor10.uploaded.net/.../f4bbc18e-ad94-4fa5-a44b-0e21b904de98

http://am4-r1f1-stor10.uploaded.net/.../7a5cf1cf-8343-48aa-bb95-ec4e0dbd1235

http://am4-r1f1-stor10.uploaded.net/.../51dfe5e2-9a02-4773-9a72-49979fb236df

http://am4-r1f1-stor10.uploaded.net/.../cc982422-99e7-4176-8cd6-c406b8f52f2f

http://am4-r1f1-stor10.uploaded.net/.../db28e90d-ac18-4435-b34b-394f7173c53e

https://1fgm8kh.oloadcdn.net/dl/l/VX_PN7fYT1U/.../DyingLight-Enhanced.exe

Scan dyinglight-enhanced.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.