home

Setup.exe

MU Gamethuvn.net (10.01.68 Full)

GameThuVN.net

This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser. The file has been seen being downloaded from download2044.mediafire.com and multiple other hosts.
Publisher:
GameThuVN.net

Product:
MU Gamethuvn.net (10.01.68 Full)

Description:
MU Gamethuvn.net (10.01.68 Full) Setup

MD5:
7f765a87f196a43d47dab124383565d9

SHA-1:
5cdbd2bef6c10e5e17eedda0d2ef024071c81529

SHA-256:
aa3d9ff0d4d37ee1d84d9047e07136a006cd5918bfb32f3c4297c459a9d9887e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:42:15 AM UTC  (today)

File size:
684.8 MB (718,079,380 bytes)

Product version:
10.2

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
7/16/2015 8:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12582912:SrUTRjt1qC/kQaY8pqGHlTM8KK7QhkEicX2PuS1WbjWXu/Bwc+L+fIApIRhxvv5Y:NfTkJHp/HlQU7+kEPmPuS1Wbj6upwjoh

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9999

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file Setup.exe has been seen being distributed by the following 3 URLs.

http://download2044.mediafire.com/d34fe5c070tg/.../MUGamethuVN_SSXv68_Full.exe

http://download1327.mediafire.com/y6jsznaij20g/.../MUGamethuVN_SSXv68_Full.exe

https://docs.google.com/uc?export=download&confirm=nrRM&id=0B-Ez2bK_5gUrOUJFZjlGN21OTjg

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.