home

rainbowsixsiege.exe

MD5:
aa43a7174fa522b0b8a784898bb4ac91

SHA-1:
39017461f3f019fa7e68c6a9a52a40abab3823b3

SHA-256:
d3bd2d2edf54e99c23d11944a5b3fbd51a7f57a5742cd160861e3a2fc4ea0613

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 8:51:06 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1077

File size:
4.5 MB (4,690,937 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\rainbowsixsiege.exe

File PE Metadata
Compilation timestamp:
12/1/2013 10:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:lHZL/SIftE/qD68waC47BnmTZjZikDX7zfrX9ZqM:DL/SIfiqD68waC47kZQkj7nSM

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Entropy:
0.9118

Code size:
98 KB (100,352 bytes)

The file rainbowsixsiege.exe has been seen being distributed by the following 27 URLs.

http://fra-7m20-stor01.uploaded.net/.../4145c64b-51ef-47a7-b8c5-2ef6503384fd

http://fra-7m20-stor01.uploaded.net/.../35553f5c-c2ad-4e93-aa30-7ae175ab1a3e

http://fra-7m20-stor01.uploaded.net/.../e90b3aaa-a4e7-42a8-96ee-53f6c038706a

http://fra-7m20-stor01.uploaded.net/.../afce63ca-0470-443e-8c10-39f10c256147

http://fra-7m20-stor01.uploaded.net/.../58e1a9d9-5893-41fd-ae78-efd8f5f34d3e

http://fra-7m20-stor01.uploaded.net/.../f585700d-504c-485f-b071-b89e03dfaedb

http://fra-7m20-stor01.uploaded.net/.../3bb995e3-abb2-43bb-84fb-b14f5bebb0e5

http://fra-7m20-stor01.uploaded.net/.../89a2b01d-7ed4-4b45-bdc1-302841c4ca0d

http://fra-7m20-stor01.uploaded.net/.../7e753e07-6d39-4bba-bf98-6a5a9d208efd

http://fra-7m20-stor01.uploaded.net/.../f96b6d0e-a62f-42cf-8465-0a322fe9e694

http://fra-7m20-stor01.uploaded.net/.../8b5c6cab-b9f1-4245-b318-afde1f0ea7ec

http://fra-7m20-stor01.uploaded.net/.../2a9d6e43-ad77-4579-aea5-8cd458d3af93

http://fra-7m20-stor01.uploaded.net/.../9ef43966-bb20-4128-9180-a61b0bdb6f29

http://fra-7m20-stor01.uploaded.net/.../f1757250-a1d9-443e-99b7-e23b41675eab

http://fra-7m20-stor01.uploaded.net/.../7ca185e3-7ab0-41f4-a742-40dac124c002

http://fra-7m20-stor01.uploaded.net/.../0c697283-df27-44f5-855b-4eeef80830ef

http://fra-7m20-stor01.uploaded.net/.../79ff9d2b-0212-470a-b40d-9141f1363035

http://fra-7m20-stor01.uploaded.net/.../ae27db82-c198-4f0e-9bf1-9806994b9e6a

http://fra-7m20-stor01.uploaded.net/.../c0786801-af00-41fc-9f18-c8e1ce892d3f

http://fra-7m20-stor01.uploaded.net/.../999460c2-b7d5-4469-b8ba-0555b4fbcd09

http://fra-7m20-stor01.uploaded.net/.../27cac551-d3d5-4e6f-a063-3e42291657ee

https://pgli2x.oloadcdn.net/dl/l/BsUdFSipSXc/.../RainbowSixSiege.exe

http://fra-7m20-stor01.uploaded.net/.../879c2499-60dd-445c-bb02-e2c84d9194de

http://fra-7m20-stor01.uploaded.net/.../9a9a0b47-91ec-45b0-b458-6ceb4e4d108e

http://fra-7m20-stor01.uploaded.net/.../587fcc76-dc94-4dde-9d2e-9a0b6e161db0

http://fra-7m20-stor01.uploaded.net/.../7f505771-b1a2-46b2-84bd-a9935f797e52

http://fra-7m20-stor01.uploaded.net/.../3f6d7037-0099-4033-a764-518e7f40e36e

Scan rainbowsixsiege.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.