home

تغيير مكان الدم والاسلحة مثل gta iv.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download2039.mediafire.com.
MD5:
e5cb70e0b6ceeb717302f13ea5979414

SHA-1:
d5901c20dfb5d0cb320ff77094ce900c0594a32c

SHA-256:
893a49ed5a1fa0b92d05e94dc48c8a9e8747eb4bb22bcd8691c6055aac80bc07

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:50:34 PM UTC  (today)

File size:
5 MB (5,286,022 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\تغيير مكان الدم والاسلحة مثل gta iv.exe

File PE Metadata
Compilation timestamp:
3/28/2006 9:23:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:ONZzVWRsAxFfQ1e2i+8556a6P6g9E6SK1k68LvPzVBH5EjBrZAxVU:ONqRXx5C1i+8b6a0XD1k6Cjj5EFr

Entry address:
0x1000

Entry point:
85, CE, 0F, AF, FD, B2, 27, 80, E5, 39, 89, F5, 69, D9, 94, 37, 9E, 1A, 89, D3, 1D, AE, 44, CA, 10, 0F, AF, C6, 56, 68, C1, A5, A8, 00, F6, C1, 9C, 31, D9, 8D, 2D, 9E, C0, B0, 46, E8, 21, 00, 00, 00, 86, C9, 8A, D9, 0F, AF, D2, 21, FA, 8D, 0D, B3, B6, 57, 40, F6, C5, B8, 84, F4, BF, AC, EB, 00, 00, B1, DC, 81, F7, AE, 05, 00, 00, 87, C9, FF, C9, 40, 87, C5, 8B, DB, C7, C3, 75, 4B, A5, D5, 25, DA, 67, BD, A9, C6, C7, 3C, 0F, B6, F4, F3, 57, 80, FF, 55, 59, 72, 06, 89, C8, FF, C3, 87, F6, 0F, AF, D2, 81, F6...
 
[+]

Entropy:
7.9868  (probably packed)

Code size:
76 KB (77,824 bytes)

The file تغيير مكان الدم والاسلحة مثل gta iv.exe has been seen being distributed by the following URL.

http://download2039.mediafire.com/9rpehf7bfefg/.../????? ???? ???? ???????? ??? gta iv.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.