home

almadia dmg.exe

Almadia.pl

Ymir Endertainment

This is a setup program which is used to install the application. The file has been seen being downloaded from www57.zippyshare.com.
Publisher:
Ymir Endertainment

Product:
Almadia.pl

Description:
Almadia.pl.

Version:
1.0.28249.2

MD5:
89728c144693dd12849f0976ffe55d38

SHA-1:
1fb9c1efaba11a7e50636d7424c0336ce6c19579

SHA-256:
07ef7ce9b6bfa48c2c13a21d7e97bee19238bc8777d32458f6ef9829f8becd14

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/16/2024 3:31:55 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoB
1.3.0.8108

Qihoo 360 Security
QVM18.1.Malware.Gen
1.0.0.1120

File size:
4.1 MB (4,272,451 bytes)

Product version:
1, 0, 0, 2

Copyright:
Copyright (C) 2014

Original file name:
Almadia.exe

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

Common path:
C:\users\{user}\downloads\almadia dmg.exe

File PE Metadata
Compilation timestamp:
5/15/2016 12:36:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:8PxZeHc690Q7GaBU6GoVLAF5puA8gqIc4kTItgfG6l3f5WA8gqIa4Rqgs:8e8Oa6GoU3uAQ/ItgfG6l3hWAeVgs

Entry address:
0x2B8B33

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 55, 79, 30, DC, DF, A5, 76, E3, BF, D2, 95, 77, D6, 8A, C3, D5, 49, 1A, E2, 9A, BA, 09, 9A, 79, D9, 7F, C7, 44, 57, 3E, 70, 0D, C6, EA, 82, 67, 74, 7B, D7, AB, 3D, 7A, 9E, AE, D0, CC, ED, AA, D9, 4A, E0, FB, BC, 5C, FE, E0, D9, 4A, E0, FB, BC, 5C, FE, E0, E9, 1A, 6D, 00, 00, E9, 2E, 6D, 00, 00, E9, 29, 6D, 00, 00, E8, 6E, FB, FF, FF, 6E, 00, 01, 00, 06, 99, 00, 00, E6, 85, 4E, E6, BC, 55, D1, 76, 96, DC, 74, B6, 71, 2E, 91, 8F, E8, D5, D0, 5D, 89, FD, 69, 85, 04...
 
[+]

Packer / compiler:
MoleBox v2.0

The file almadia dmg.exe has been seen being distributed by the following URL.

http://www57.zippyshare.com/d/NW8n7yfs/.../Almadia DMG.exe

Scan almadia dmg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.