flyff_fr.exe

AppCommander

CDNetworks

This is a setup program which is used to install the application. The file has been seen being downloaded from file.gpotato.eu.
Publisher:
CDNetworks

Product:
AppCommander

Version:
1, 3, 0, 0

MD5:
42609485545bf6c67c01a59d2c4504ce

SHA-1:
984bbfa565dbd60e141b4de9c1320ba159219078

SHA-256:
ac68e012af9959b17713cedf9a5894f71111a41e326494e10e1bfe7f38589815

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 7:38:13 AM UTC  (today)

File size:
376 KB (385,024 bytes)

Product version:
1, 3, 0, 0

Copyright:
(c) CDNetworks. All rights reserved.

Original file name:
AppCommander.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\flyff_fr.exe

File PE Metadata
Compilation timestamp:
11/8/2010 7:07:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:OipqZvygIedJZ94EFZkbbFEVXHG/aFBNFimvzNHKOwvXqqDL6DzbxfK:redL94EFObxEV3GYDzNHKOs6qn6vtC

Entry address:
0x1F3D9

Entry point:
E8, F9, 54, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, AC, 56, 44, 00, E8, 7C, 55, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, A2, 54, FE, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, C2, 55, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58...
 
[+]

Code size:
256 KB (262,144 bytes)

The file flyff_fr.exe has been seen being distributed by the following URL.

Scan flyff_fr.exe - Powered by Reason Core Security