home

gothic2cz_video_addon.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from downstream.bonusweb.cz.
MD5:
46b01c2b08149dbd49caaf1efc6762bf

SHA-1:
eafb82294e76bb6792a4d60a0ff5c914d47204a0

SHA-256:
f439b0e61cfa5843e7fada9a04922411d40c3c45817a1ad6fd988a4742fd5bb8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 6:56:50 PM UTC  (today)

File size:
54.9 MB (57,543,530 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\gothic2cz_video_addon.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1572864:b2/6/mlmLQuWirPs06brb8Tpr/x/9G7Idars:K/6/mSQus0i8Tpr/ss

Entry point:
3C, 68, 65, 61, 64, 3E, 3C, 74, 69, 74, 6C, 65, 3E, 4F, 62, 6A, 65, 63, 74, 20, 6D, 6F, 76, 65, 64, 3C, 2F, 74, 69, 74, 6C, 65, 3E, 3C, 2F, 68, 65, 61, 64, 3E, 0A, 3C, 62, 6F, 64, 79, 3E, 3C, 68, 31, 3E, 4F, 62, 6A, 65, 63, 74, 20, 4D, 6F, 76, 65, 64, 3C, 2F, 68, 31, 3E, 54, 68, 69, 73, 20, 6F, 62, 6A, 65, 63, 74, 20, 6D, 61, 79, 20, 62, 65, 20, 66, 6F, 75, 6E, 64, 20, 3C, 61, 20, 48, 52, 45, 46, 3D, 22, 64, 61, 74, 61, 30, 31, 2F, 47, 6F, 74, 68, 69, 63, 32, 43, 5A, 5F, 76, 69, 64, 65, 6F, 5F, 61, 64, 64...
 
[+]

The file gothic2cz_video_addon.exe has been seen being distributed by the following URL.

http://downstream.bonusweb.cz/b0f9b9cefe67dbd23e30f1429a17085c/2007-11/.../Gothic2CZ_video_addon.exe

Scan gothic2cz_video_addon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.