home

penumbra_full_1.1.exe

Frictional Games

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.gamegratis33.com and multiple other hosts.
Publisher:
Frictional Games

Description:
Penumbra Setup

Version:
1.1

MD5:
2dbc9f7d35386931e71a2a53ca60c47e

SHA-1:
7b4a622bf98192cde9a757ac760b66144d3f5e65

SHA-256:
4df0e318110bbbb3e00891fb256de5f7617e07688e940e0eeceaa29987ac976c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:17:41 PM UTC  (today)

File size:
156.8 MB (164,462,080 bytes)

Copyright:
2006 Frictional Games

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\penumbra_full_1.1.exe

File PE Metadata
Compilation timestamp:
6/20/1992 7:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3145728:OETHSeD1z3SSrO4WQE0RmYCD15p2XZs1uIA0i+1Fv6jU3OJHjEULaa44tf:NTHz3SSrO4WM4Y6oJauVSFvwIcDEg4+f

Entry address:
0x97F0

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, D6, 98, FF, FF, E8, DD, AA, FF, FF, E8, 00, CD, FF, FF, E8, 47, CD, FF, FF, E8, 3E, F3, FF, FF, E8, A5, F4, FF, FF, 33, C0, 55, 68, 9A, 9E, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 50, 9E, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 5A, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C0, D1, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 87, 99, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
8.0000

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file penumbra_full_1.1.exe has been seen being distributed by the following 18 URLs.

http://www.gamegratis33.com/take_out.php/42c76ffd49d2fed3ac44ed924c599b59/5269385a6a483257317371674c552f6370662f7a4f6e2e7964352e7747432e337a/.../Penumbra_Full_1.1.exe

http://download1652.mediafire.com/1pnthupwejeg/.../Penumbra 1.1.exe

http://download2us.softpedia.com/dl/dc0675eb35b04b0918dc7aa97cade854/580a6ee1/200010556/games/.../Penumbra_Full_1.1.exe

http://indir.gezginler.net/i/33490/.../

http://www.gamegratis33.com/take_out.php/f32214d55a424094da95f6eb5b0d0e05/526938596a4f796730796f674e512f6370662f774f2e7a762e59456e2e473636/.../Penumbra_Full_1.1.exe

http://download2057.mediafire.com/hvcklwvt030g/.../Penumbra 1.1 by joão jogos.exe

http://indir.gezginler.net/i/33490/.../

http://download.softpedia.ro/dl/012987b701122a5c8c604d4087d7b61f/576a8a4c/200010556/games/.../Penumbra_Full_1.1.exe

http://www.gamegratis33.com/take_out.php/0c35c2e596ea58b88780ca5f62f34c54/526938596a4c796a33746f654c562f6370662f33562e79762e63342e764b43/.../Penumbra_Full_1.1.exe

http://download2us.softpedia.com/dl/9001c024c1ebf8187258cd89f029ebc1/57729b29/200010556/games/.../Penumbra_Full_1.1.exe

http://www.gamegratis33.com/take_out.php/739d89e05fa82c97957a25a0f003873b/526938596a4d7a6830706f684b4f2f6370662f7a4f6e2e7964352e7749312e34/.../Penumbra_Full_1.1.exe

https://docs.google.com/uc?export=download&confirm=6PKY&id=0B2H2_WfC2XI4U21pNVEzQ19WaEE

https://docs.google.com/uc?export=download&confirm=A_Ik&id=0B2H2_WfC2XI4U21pNVEzQ19WaEE

http://download.softpedia.ro/dl/50bc7e6adf119dceb0af26e722c089c3/563e0d97/200010556/games/.../Penumbra_Full_1.1.exe

http://download2057.mediafire.com/qywqij1ubt6g/.../Penumbra 1.1.exe

http://dl.cdn.chip.de/downloads/.../Penumbra_Full_1.1.exe

http://peliplaneetta.net/download/?id=5551&url=/pelidemot/.../Penumbra_Full_1.1.exe

http://penumbra.soft32.com/get/file/id/.../?no_download_manager=true

Scan penumbra_full_1.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.