home

hans_zimmer_-_10._finale_ost-hd_odinokij_rejndzher_the_lone_ranger_official_2013_(get-tune.net).exe

This is a setup program which is used to install the application. The file has been seen being downloaded from getfile.eu.
Version:
1.0.0.0

MD5:
7a88b90dc75c82e79a9b4d27d6ded101

SHA-1:
5990f80af26a1cd0042bba05825d5353299d6e19

SHA-256:
7f9df281bce61eb72843692f32a272d4d176bd330882815aba9dbde6bcb22162

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/28/2024 10:55:40 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Adware.Strictor.40958
11.5.0.6191

ESET NOD32
Win32/InstallMonstr.H potentially unwanted application
8.0.319.0

File size:
1.7 MB (1,792,722 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\hans_zimmer_-_10._finale_ost-hd_odinokij_rejndzher_the_lone_ranger_official_2013_(get-tune.net).exe

File PE Metadata
Compilation timestamp:
7/18/2013 3:48:27 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Z27Zc8ZvkCQKS9EgkRAniuHb2Ic3iyX79aLA3eLzd8MT7prXcwYa4nyVbN9F2R2K:E7u8ZvkC29ExR+pfBT0dnyVB9F2oyo9G

Entry address:
0x57FB80

Entry point:
60, BE, 00, 10, 80, 00, 8D, BE, 00, 00, C0, FF, C7, 87, 18, EC, 44, 00, 62, DF, 49, 58, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
1.5 MB (1,568,768 bytes)

The file hans_zimmer_-_10._finale_ost-hd_odinokij_rejndzher_the_lone_ranger_official_2013_(get-tune.net).exe has been seen being distributed by the following URL.

http://getfile.eu/get_file/?sid=23&url=http://stream.get-tune.net/listen/215732642/-38834713/1841881456/.../Hans_Zimmer_-_10._Finale_OST-HD_Odinokij_Rejndzher_The_Lone_Ranger_Official_2013_(get-tune.net).mp3&name=Hans_Zimmer_-_10._Finale_OST-HD_Odinokij_Rejndzher_The_Lone_Ranger_Official_2013_(get-tune.net).mp3&type=mp3&size=5255608

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.