home

embratoria.g1_v1.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1831.mediafire.com.
MD5:
01f8b97a5de322c0032fc2c6598b79e5

SHA-1:
3cacfb7c3c966f61628acf3474e2666754095e14

SHA-256:
73fdfc232b2c4f162c26f767f24383221958a92ba676e1b5d235376cbf7104b7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:15:23 PM UTC  (today)

File size:
8.3 MB (8,730,072 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\embratoria.g1_v1.1.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:46IGtgl0oj/QugAIPbH4fZF6GNIRsjeYqHBcwrSC9s6r1cOIrs3:46Dtgl0eg1HUZFMsVQPS4Enr8

Entry point:
7E, 29, 4A, C6, A2, 11, 77, 1E, FD, 52, 6F, A3, A4, F9, 45, 45, F1, 16, FD, 08, 14, 1B, 58, 11, 02, A7, 36, 38, 11, D6, 93, 16, BA, BE, CD, 8B, DC, 2D, B9, 52, E6, 57, B6, D6, 44, 8E, B0, AD, 38, 8F, C9, 95, 59, C9, DF, 3D, 0E, 92, 6D, 3E, 1B, AD, 39, 42, 5D, 2B, F3, AB, 3A, 54, DF, 2B, AB, 92, 34, F3, 06, D8, D9, 06, E3, 58, 8B, 96, 4E, 8B, 35, C1, BF, 4E, 7A, 6D, 4C, A0, A1, 63, 86, E5, 04, 28, 0D, EC, 9E, C1, 93, E1, 79, 64, 23, 7A, DB, 76, 37, FC, 32, 59, 13, 4B, 5D, FB, 1C, 07, 5E, 8D, CA, BA, 2B, 5A...
 
[+]

The file embratoria.g1_v1.1.exe has been seen being distributed by the following URL.

http://download1831.mediafire.com/zqwl6gzbi0yg/.../Embratoria.G1_v1.1.exe

Scan embratoria.g1_v1.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.