home

gigabyte_38409382713449.exe

7-Zip

Igor Pavlov

The program is a setup application that uses the 7z Setup installer. The file has been seen being downloaded from dd2.devicedoctor.com.
Publisher:
Igor Pavlov

Product:
7-Zip

Description:
7z SFX

Version:
4.42

MD5:
8a90942e71b69001325552d9cc409b0d

SHA-1:
0bbc4791bc4c256b5884f097d7a1a2c5b269195c

SHA-256:
3b24a876a8c208661eb8633494fc1ef1a54f3ee6e4d4a14b670eecd0162bd846

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 5:47:39 AM UTC  (today)

File size:
17.9 MB (18,718,265 bytes)

Product version:
4.42

Copyright:
Copyright (c) 1999-2006 Igor Pavlov

Original file name:
7z.sfx.exe

File type:
Executable application (Win32 EXE)

Installer:
7z Setup

Language:
English (United States)

File PE Metadata
Compilation timestamp:
5/14/2006 6:24:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:KCftcO0z6Ium3LsG1y3wAMnlMu6LV88tlTlPfzPHoNsmENhSw1fiAzqzDL98:N90z663LsG1yg5nSLVttlhj65ENhSwBf

Entry address:
0x18136

Entry point:
21, C5, 0F, B7, ED, 84, E0, 4F, 52, 25, 5D, 2B, 90, 26, B2, D4, 32, CF, B8, E8, BB, 0C, D9, F6, C5, 95, 8D, 0D, 57, 79, 07, 62, E8, 26, 00, 00, 00, C6, C6, EA, 41, 48, 0F, B7, CF, F6, C3, DC, B7, 52, 0F, AF, FF, 89, DF, 83, E0, 00, 18, D3, 03, C0, 88, C2, 0F, AF, DF, F6, C0, A6, 03, E8, 41, 11, CE, F7, C5, 77, 25, D1, F2, B3, C8, 0F, AF, D3, 77, 02, 8A, D1, 8A, EC, 8B, EE, 03, C2, BD, 81, E6, C7, 10, 5D, 81, E2, E5, 27, 57, 5D, 80, CD, 4C, 18, D4, 42, 48, 0F, AF, F7, 8D, 15, B6, 2B, C1, 3E, 6A, 00, 59, EB...
 
[+]

Code size:
101.5 KB (103,936 bytes)

The file gigabyte_38409382713449.exe has been seen being distributed by the following URL.

http://dd2.devicedoctor.com/.../gigabyte_38409382713449.exe

Scan gigabyte_38409382713449.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.