home

withSIX-Play.exe

Play withSIX

Six Networks GmbH

This is installed with Play withSIX. The file has been seen being downloaded from www.armaholic.net and multiple other hosts.
Publisher:
SIX Networks  (signed by Six Networks GmbH)

Product:
Play withSIX

Version:
1.15.613.1

MD5:
43963e8d64c9e938346fcee79a573704

SHA-1:
23f818a985dd24784ac643f3cdcfde06a2a11b93

SHA-256:
8b60ddb3f3727fb97833bf9880f89231f26fcf017c17d000adbb8d86d569e1f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 11:03:17 PM UTC  (a few moments ago)

File size:
10.9 MB (11,388,240 bytes)

Product version:
1.15.613.1

Copyright:
Copyright © SIX Networks 2009-2013

Original file name:
withSIX-Play.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Six Networks GmbH

Authority:
COMODO CA Limited

Valid from:
1/13/2014 7:00:00 PM

Valid to:
1/14/2016 6:59:59 PM

Subject:
CN=Six Networks GmbH, O=Six Networks GmbH, STREET=Heimgartenstr.15, L=Starnberg, S=Bavaria, PostalCode=82319, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
60CC61BFBDAF460B6830D1C9D08A6F81

File PE Metadata
Compilation timestamp:
3/5/2014 7:33:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:t4c1wal5p1RyRXkREct0g1qWAC/zSTz2uo/GQldbvNpbIVd2DpHFTCs2aZ1dJ/xt:L1wal5pK1aa8ACOX3QNpEV2L3JJUCqP4

Entry address:
0xAD8215

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5435

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
10.8 MB (11,363,328 bytes)

The file withSIX-Play.exe has been discovered within the following program.

Play withSIX  by SIX Networks
Publisher's description - “Want to try out that new mod? Get it with one click & launch it right away. Enjoy all the updates the second they are released. Smart Sync saves you bandwidth and time. Easy access to over 4000 community servers. Configure your server browser, the way you like.”
play.withsix.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file withSIX-Play.exe has been seen being distributed by the following 5 URLs.

http://www.armaholic.net/chili/.../withSIX-Play.exe

http://armaholic.net/chili/.../withSIX-Play.exe

http://www.armaholic.com/page.php?id=18001&a=dl

http://cdn2.withsix.com/software/.../withSIX-Play.exe

http://withsix.com/.../latest

Scan withSIX-Play.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.