home

goofball_setup.exe

This is a setup and installation application. The file has been seen being downloaded from www.gravitysensation.com.
MD5:
f5b1b9bef7b271c20bdc988c17ad766e

SHA-1:
d8bb4e1b7cc980ad71ad84b899c4902041239336

SHA-256:
c699ec9d556854db6f9314072a2a002be453d822433b2618580da5991343b0e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 10:37:27 AM UTC  (today)

File size:
1.6 KB (1,627 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:06FzF3YNYOP82JobBw783PQbLOJDQgTU+jknQJ2u:H5tiT00ob8oInAQlfnQJn

Entry point:
3C, 48, 54, 4D, 4C, 3E, 3C, 48, 45, 41, 44, 3E, 3C, 54, 49, 54, 4C, 45, 3E, 44, 61, 6E, 73, 47, 75, 61, 72, 64, 69, 61, 6E, 20, 2D, 20, 41, 63, 63, 65, 73, 6F, 20, 44, 65, 6E, 65, 67, 61, 64, 6F, 3C, 2F, 54, 49, 54, 4C, 45, 3E, 3C, 2F, 48, 45, 41, 44, 3E, 0A, 3C, 42, 4F, 44, 59, 3E, 0A, 3C, 43, 45, 4E, 54, 45, 52, 3E, 3C, 48, 32, 3E, 45, 4C, 20, 41, 43, 43, 45, 53, 4F, 20, 48, 41, 20, 53, 49, 44, 4F, 20, 44, 45, 4E, 45, 47, 41, 44, 4F, 20, 2D, 3C, 2F, 48, 32, 3E, 0A, 3C, 62, 72, 3E, 45, 4C, 20, 41, 43, 43...
 
[+]

The file goofball_setup.exe has been seen being distributed by the following URL.

http://www.gravitysensation.com/.../Goofball_Setup.exe

Scan goofball_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.