home

superhot.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6044.chomikuj.pl and multiple other hosts.
Version:
4.2.0.76773

MD5:
0ed80aa38d2c86e813005b9395075858

SHA-1:
3ffe5318d55d8b9b811a7cd9592cbf5c8ceedc48

SHA-256:
bf56490e6504c3d3f85e32bae648137ebd10e983cc845e2a016fe107ac380099

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 12:46:00 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.RDM.31!5.25[F1]
23.00.65.16216

File size:
10 MB (10,514,432 bytes)

Product version:
4.2.0.76773

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
7/20/2013 4:40:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:TWzhxAi3F5X1EFCg77ierdMMNzO1GKBV4c16cibVowe+EQXCSbEERjP2QM/UQSQb:TWzhTF5X1EFCg77ierdMMNzO1GKBV4c/

Entry address:
0x409343

Entry point:
E8, D5, 12, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 57, 33, DB, 6A, 07, 33, C0, 59, 8D, 7D, E4, 89, 5D, E0, F3, AB, 39, 5D, 14, 75, 18, E8, 6C, EF, FF, FF, C7, 00, 16, 00, 00, 00, E8, 72, 62, 00, 00, 83, C8, FF, E9, BC, 00, 00, 00, 8B, 7D, 10, 56, 8B, 75, 0C, 3B, FB, 74, 1C, 3B, F3, 75, 18, E8, 45, EF, FF, FF, C7, 00, 16, 00, 00, 00, E8, 4B, 62, 00, 00, 83, C8, FF, E9, 94, 00, 00, 00, C7, 45, EC, 42, 00, 00, 00, 89, 75, E8, 89, 75, E0, 81, FF, FF, FF, FF, 3F, 76, 09, C7, 45, E4, FF...
 
[+]

Code size:
7.7 MB (8,120,320 bytes)

The file superhot.exe has been seen being distributed by the following 2 URLs.

http://s6044.chomikuj.pl/File.aspx?e=q_rMIoFzxbtQ2knz0sBEp-jtND_JizAj0QJsKfms2YB6DhkqCgyTk63Vdc3QzIw2HJZUauBYKeJC8dygce7C11GSODg7tI9e9oeUJWZHHKiGfC6oAmHVUk3nbbSU4G8ltpEiFFoRAvPcbcJFwd_hrw&pv=2

http://s6044.chomikuj.pl/File.aspx?e=q_rMIoFzxbtQ2knz0sBEp-jtND_JizAj0QJsKfms2YCpcp1i6HraX_NUfZBTqtDirl4fB7xCtYk03eg439BIL-0LZ7nrorQW1yEf5UBHMGfUNAUj1oDVG33DY2ijuCYp-MOAh2cJ6BlpzIa7Exg9EA&pv=2

Scan superhot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.