home

sr2_pc.exe

MD5:
6a135bb4978f6f3b795416f5c23c8bae

SHA-1:
ac506d1344591fd597c93608c038318a79c501c1

SHA-256:
07762886b1a55cd9b24c73f96a64156b7ec609e698de398f9acd0335c3e380f7

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 7:27:03 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoB
1.3.0.4959

File size:
20.4 MB (21,401,600 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
2/9/2009 7:31:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:aSyB9C7PS4HOCHBtSuPZEz8HI6LyaAKeVQc9iWw5ZF+hpN3CJv3EBq5YuDlmB5rZ:DyB9C764HOCHBNhE4LyWc9iWw5ZF2pNF

Entry address:
0x3AD1B60

Entry point:
9C, 68, 57, 0D, 00, 00, 7E, 13, 81, 04, 24, DC, FA, AE, 03, 90, 81, 04, 24, C3, 13, 3E, 00, EB, FA, 74, E1, 83, EC, 18, C7, 44, 24, 14, 0A, 39, 68, F0, C7, 44, 24, 10, 79, 00, 00, 00, 89, 44, 24, 0C, B8, 48, 1B, ED, 03, C1, 4C, 24, 14, 10, 90, 89, 54, 24, 08, 0F, A4, DF, 00, 8B, 10, 01, 54, 24, 14, 90, 83, C0, 04, 66, FF, 4C, 24, 10, 90, 75, EA, 80, 4C, 24, 14, 01, 53, 5B, 81, 74, 24, 14, 42, A9, 0C, 00, 81, 7C, 24, 14, 03, A7, 0C, 00, 76, 03, EB, 32, 90, 90, 8B, 44, 24, 0C, 8B, 54, 24, 08, 90, 83, C4, 18...
 
[+]

Entropy:
7.5676

Code size:
22.6 MB (23,678,976 bytes)

The file sr2_pc.exe has been seen being distributed by the following 5 URLs.

http://download2226.mediafire.com/2f5rwuzop3gg/.../SR2_pc.exe

http://download1089.mediafire.com/ld6wf7dq4byg/.../SR2_pc.exe

http://download1209.mediafire.com/68olgtwb4wng/.../SR2_pc.exe

http://download1376.mediafire.com/ua9fasxxj7tg/.../SR2_pc.exe

http://download1376.mediafire.com/29eso52z3opg/.../SR2_pc.exe

Scan sr2_pc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.