» f2e77b96-491c-ffa2-ce79-1585f1d3d569_1d1ef7b2e507133
Overview
Analysis
File Details
Downloads (1)

f2e77b96-491c-ffa2-ce79-1585f1d3d569_1d1ef7b2e507133

File name:

MD5:

ec42590e358791e2601d41ccdb358625

SHA-1:

338fac834409936493352d413c92d454a2d7d98f

SHA-256:

b80965bed75abe86f6e88568f6e7376cc9e8c783fa39344ef8a9613e27463b57

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/13/2025 7:36:55 AM UTC (today)

File size:

105.8 KB (108,386 bytes)

Common path:

C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\f2e77b96-491c-ffa2-ce79-1585f1d3d569_1d1ef7b2e507133

File PE Metadata

Compilation timestamp:

9/3/2015 10:35:26 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:TZNgxy5NQr93EK9EszKZ78MR7sA6XRGhGS/F:vNQpEK9EXZ78Or6XIhGS/F

Entry address:

0x6659F

Code size:

489 KB (500,736 bytes)

The file f2e77b96-491c-ffa2-ce79-1585f1d3d569_1d1ef7b2e507133 has been seen being distributed by the following URL.

http://br.cfpatch.z8games.com/.../Crossfire_SA.exe

Scan f2e77b96-491c-ffa2-ce79-1585f1d3d569_1d1ef7b2e507133 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.