home

rebirthro.exe

MD5:
e38faf7e5a1ca399678086847d9d9961

SHA-1:
65111629dfff4af6acd8a8cc34335e1e9f73a91e

SHA-256:
a865307926e2bfcc5fc648f3ea6bb84b1ba9a2c0895ed5573e35228cd376e010

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:28:17 AM UTC  (today)

File size:
15.8 MB (16,523,264 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
5/11/2015 11:30:22 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
196608:dqwzjaPCY138AF6zx+1QlNG2Ev5owZRqQ:dqfPLivzx+Cr25v3q

Entry address:
0x1B21600

Entry point:
60, BD, F8, 15, F2, 01, BF, 00, 00, 40, 00, 55, 6A, 04, 68, 00, 10, 00, 00, 57, FF, 15, 00, 2F, F2, 01, B9, 00, 10, 00, 00, BE, 00, 00, F2, 01, F3, A4, 61, BD, 14, A0, 27, F3, E9, C0, 9F, 2F, FF, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.2328

Code size:
6.5 MB (6,831,616 bytes)

The file rebirthro.exe has been seen being distributed by the following URL.

http://rebirthro.com/web-dl/.../RebirthRO.exe

Scan rebirthro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.