home

halo.exe

H4L0

Colin's H4L0 Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0s-38-docs.googleusercontent.com and multiple other hosts.
Publisher:
Colin's H4L0 Inc.

Product:
H4L0

Version:
2.0.0.0

MD5:
7f43847a3e8d81a91b71cd1af9fa90ed

SHA-1:
36c5ebf6d815e71eec2ebd8129b1bd4c88d1ba0d

SHA-256:
81a01ad532a3495bcd1e2b748b6e4a7671b23de4c74000cc3d8287ed05c9a78f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:47:07 PM UTC  (today)

File size:
246.4 MB (258,334,214 bytes)

Product version:
2.0.0.0

Copyright:
©2008 Colin's H4L0 Inc.

Original file name:
H4L0.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
11/6/2007 11:06:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:Ec6bKrgq2Y81YbMqqr5bBO54AfImRZbbhFQAhtU/xbNmpHvL:oK32nYber5kHDbbaxN8j

Entry address:
0x173A6

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 2C, 43, 00, 68, 88, BE, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, AC, 01, 43, 00, 33, D2, 8A, D4, 89, 15, A0, 0A, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 9C, 0A, 44, 00, C1, E1, 08, 03, CA, 89, 0D, 98, 0A, 44, 00, C1, E8, 10, A3, 94, 0A, 44, 00, 6A, 01, E8, 08, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 86, 1A, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9891

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
188 KB (192,512 bytes)

The file halo.exe has been seen being distributed by the following 10 URLs.

https://doc-0s-38-docs.googleusercontent.com/docs/securesc/2blqjr54aqchs8181pdtgrotfcaur8g0/qt2rvh9jhle3paec82hgf3mhulsgo27i/1441332000000/10961286155365026316/.../0B3rje5C6gZGwQUFSNVRvUGk0ZXc?h=07373979226639794764&e=download

http://download1584.mediafire.com/v7ycjq7nbtfg/.../H4L0.exe

https://mega.nz/persistent/.../V0lxkLbY

https://doc-08-3o-docs.googleusercontent.com/docs/securesc/3307i8dfph4bmm34qfil69u1vjsqpb5g/m43qq6r1q8qoq25ncgnm8qtb8dumunjd/1479067200000/14040143681963516815/.../0B13QfX8_bedQTWNDaS1JVXNwV2M?h=07373979226639794764&e=download

https://doc-04-5c-docs.googleusercontent.com/docs/securesc/oeu8rg46b02lqubo3npve72amlqm15v8/d6irtr552olbpc1vmnnuoq6tbtphl4lq/1477072800000/09040777605867818061/.../0BwFIsovExWfoY29SMkk3eHRwLWM?e=download

http://download1636.mediafire.com/sv49n2z0v9ig/.../H4L0.exe

http://download1584.mediafire.com/1daj5wr5ao5g/.../H4L0.exe

https://doc-14-9o-docs.googleusercontent.com/docs/securesc/pts9sp2q5tsm8tde1tmuvmpiicklorhm/jb7msd97a5q0viqqg664t37u3lkf28ro/1461535200000/09253884187189189721/.../0B9jfHjqqdYkqYzk5Wm4yaWRkUDg?h=04672345921205899362&e=download

https://doc-14-24-docs.googleusercontent.com/docs/securesc/2ar0t03tv9le7o4mihj6no9cshb1pn20/ajnid4vdhgq1cp6c5qdauthi0rrj0at7/1458928800000/.../17712480295976687675/0B4oZNpFxFIPWM2NIQXBYSDVnakU?e=download

http://download1584.mediafire.com/ijfnc1uboxsg/.../Halo CE.exe

Scan halo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.