home

ongamestarthelper.exe

MD5:
bd596ca63edbb907fd8c1c90de8308bb

SHA-1:
ed1923f2643373a3abe0dac5dac0be83c4e5aa38

SHA-256:
99502ecf0a7e79463235cf975172b4c9624fa6ff76cbe10b9d12652bbfb0fd6a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:32:43 AM UTC  (today)

File size:
3.1 MB (3,229,112 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\ongamestarthelper.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:RTHc9lS1zWmdDxU+jXYyoV4Dajmn9NTHc9l4:RkSHMZyoV42jkk4

Entry point:
F9, 24, E0, E8, 46, 3E, D3, 89, 37, 32, DD, F5, 91, 86, FD, 81, 6B, C2, 29, 9B, 85, 78, 40, F6, DB, 81, 3F, E7, 7A, 89, B6, 10, 93, CE, 7E, 3B, CD, 25, A4, 88, E0, 3D, AA, CB, 60, 28, EE, 30, D6, 17, 6B, 21, 16, 64, 9F, 69, CB, D6, CC, 99, 57, 21, 64, AA, DA, AC, BE, E4, 91, 98, 0E, 00, 62, FD, 93, 8A, B4, 78, 12, 88, 85, E2, 84, 61, B6, 62, 0C, F7, A9, A5, 2B, 17, 0E, 6C, 37, 13, F9, 48, 0A, AD, 39, A1, F6, 38, E4, FD, 02, F8, 37, 7F, 50, D3, 9D, AE, DB, 24, 0E, 78, 6B, E9, 9A, 77, C3, 2A, 46, 73, 19, 91...
 
[+]

Entropy:
7.5607

The file ongamestarthelper.exe has been seen being distributed by the following URL.

http://ongame.vn/.../OngameStartHelper.exe

Scan ongamestarthelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.