home

embratoria.g1_v1.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1991.mediafire.com.
MD5:
78c35663e08eea797ce9dabb0f70ad46

SHA-1:
6aaf905df6ad862c9bd6061b852670f530e2c1fb

SHA-256:
9380b6585e0537202627bb5f1042ed98fc2cb685dafcbabae37c93d02fc9706e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:59:58 PM UTC  (today)

File size:
8.4 MB (8,799,420 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\embratoria.g1_v1.1.exe

File PE Metadata
Compilation timestamp:
1/24/2015 8:14:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
196608:fFIGtgl0oj/QugAIPbH4fZF6GNIRsjeYqHBcwrSC9s6r1cOIrs3:fFDtgl0eg1HUZFMsVQPS4Enr8

Entry address:
0x1000

Entry point:
69, F5, FE, E0, 3A, 34, 49, 78, 0A, 84, F0, 24, B8, F7, C7, 66, E0, C9, 12, 0F, AF, D3, 8B, FE, 45, FE, C2, 0F, BE, DB, 4D, 0F, AF, F3, 84, C6, B9, 0D, 27, 07, 00, 85, CF, 70, 04, 86, FF, B7, 56, 81, F1, DC, 18, 0B, 00, 8A, FF, 8D, 11, 88, F3, 81, EA, 82, 5E, 0B, 00, BD, 68, CE, 96, 1A, 47, 33, C2, 69, DE, 9E, 55, 01, E3, FF, C9, 69, F5, FD, 43, 46, 7C, 75, 02, 87, D3, 72, 07, 88, CE, 0F, AF, CA, FE, C5, 87, EE, 8D, 35, FE, 16, 56, D1, 0F, AF, CB, 04, 01, E8, 7B, 00, 00, 00, 6A, 00, 5A, 0F, BF, DA, 87, F0...
 
[+]

Code size:
194.5 KB (199,168 bytes)

The file embratoria.g1_v1.1.exe has been seen being distributed by the following URL.

http://download1991.mediafire.com/gj5y76m50hjg/.../Embratoria.G1_v1.1.exe

Scan embratoria.g1_v1.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.