home

g2mdk-2.6a.exe

Gothic II

Piranha Bytes

This is a setup program which is used to install the application. The file has been seen being downloaded from dl1.worldofplayers.de and multiple other hosts.
Publisher:
Piranha Bytes

Product:
Gothic II

Description:
G2MDK Update 2.6a

Version:
2.6a

MD5:
c5d2415e498cd8b2f36dadefb8331515

SHA-1:
2514857be2052a9c33e55a043af51321f8d509cd

SHA-256:
d6e9bb46fe9a09b907042f975dfe2c20d62f8f01da6fac5c4454b1c97ffb46be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:05:28 AM UTC  (today)

File size:
179.5 KB (183,790 bytes)

Copyright:
Copyright © 2002-2004 Pluto 13 GmbH

Original file name:
g2mdk-2.6a.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\g2mdk-2.6a.exe

File PE Metadata
Compilation timestamp:
2/11/2004 8:26:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
3072:5jP3WAUyJY19cYPHK/xTd/1tGe4egWG+orXQ+BU07Jk0iM68FFoI:ru15PHK/T/1tVvtOXQwU07JbiM685

Entry address:
0x33D5

Entry point:
83, EC, 0C, 53, 55, 56, 57, C7, 44, 24, 10, 20, 74, 40, 00, 33, DB, C6, 44, 24, 14, 20, FF, 15, 2C, 70, 40, 00, 53, FF, 15, 98, 72, 40, 00, BE, 00, A4, 42, 00, 56, BF, 00, 04, 00, 00, 57, A3, 28, 3C, 42, 00, FF, 15, DC, 70, 40, 00, E8, 50, FF, FF, FF, 85, C0, 8B, 2D, A4, 70, 40, 00, 75, 21, 68, FB, 03, 00, 00, 56, FF, 15, D8, 70, 40, 00, 68, E8, 74, 40, 00, 56, FF, D5, E8, 2D, FF, FF, FF, 85, C0, 0F, 84, 57, 01, 00, 00, BE, 80, 33, 42, 00, 56, FF, 15, 78, 70, 40, 00, 68, DC, 74, 40, 00, 56, E8, 56, 25, 00...
 
[+]

Code size:
23.5 KB (24,064 bytes)

The file g2mdk-2.6a.exe has been seen being distributed by the following 3 URLs.

http://dl1.worldofplayers.de:8080/dl/52aac9a832c0afdbb2f3587a7468f1a9/572266a9/wog/gothic2/.../g2mdk-2.6a.exe

http://s10347.chomikuj.pl/File.aspx?e=p6VDiDEYPJw-2JdGEpWZvIUJL4YyeqcSgwVr-St9KCNnvg6N1eLjELWNp1r-5WyypOKo7HLOtzwY5hNBmU7lr056jri7FlvhI3x0BK8Hxzv375IBJfdJa3Wby61yaKVi4OAsNunum12zHLrbfj5rqw&pv=2

http://www.worldofgothic.de/download.php?id=238

Scan g2mdk-2.6a.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.