home

karanlik_isik-liyata.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from admin-dol.gamesdom.com.
MD5:
893814a7121c1c825c8e9309236b5f6a

SHA-1:
4f75b58febb0904a723dd8469ec30c73760c55d0

SHA-256:
32b501d2c199e09b04a9f41d705b517c1b08d7ddca3f1108dc803e7c3e69c767

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:52:30 PM UTC  (today)

File size:
2.4 MB (2,567,408 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\karanlik_isik-liyata.exe

File PE Metadata
Compilation timestamp:
10/26/2015 4:17:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:b+E+8XJnSAewPlbGtqb8E6Wsathk6IyGcn+Sw20hi8+X1XmmRiiv+9PfWboR5Pd6:bltBP5GtbmD8KGhy88V9+pZQ

Entry address:
0x334C70

Entry point:
75, 10, 57, 58, E8, 14, 88, 4A, C9, 18, 60, 54, 9E, 04, A8, 52, FC, 72, 4A, F6, 8E, 53, 1F, ED, FE, 76, 73, 3D, 92, B9, 1C, 2D, 82, FF, 9B, A2, 19, BB, 93, C4, 19, 58, 5D, 4D, FE, AB, 57, DF, 95, 56, 2E, A0, 56, E2, 1E, 31, 9B, B4, 9D, C8, 7E, A1, 9C, 17, 12, ED, 08, 3B, B5, A1, EE, 69, B1, B9, AE, D8, C7, 8B, D9, 4C, 5C, 02, 27, 28, EB, 42, BA, 8D, 1D, 25, 69, 06, 6B, 66, F7, 9B, 0E, 7D, 70, C7, DA, 64, 9F, 29, 32, 50, A8, C7, B9, 11, F1, 43, 3C, 16, D5, 3A, C2, BA, 01, A9, D7, EE, 79, C3, 87, 64, 9D, D9...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
2.4 MB (2,486,272 bytes)

The file karanlik_isik-liyata.exe has been seen being distributed by the following URL.

http://.../dl?t=dl&s=https://.../27.html?uid=8582664&gw=1&time=1462249041&sid=27&uf=0_0_0&sign=e5aac13103e0697172edecedde691e10&op=gamesdom

Scan karanlik_isik-liyata.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.