home

hitman_absolution-v1.00[www.tribogamer.com].exe

Tradução do jogo: Hitman Absolution

Tribo Gamer Brasil®

The executable hitman_absolution-v1.00[www.tribogamer.com].exe, “Hitman Absolution Tradução BR 1.00” has been detected as malware by 2 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from download1484.mediafire.com and multiple other hosts.
Publisher:
Tribo Gamer Brasil®

Product:
Tradução do jogo: Hitman Absolution

Description:
Hitman Absolution Tradução BR 1.00

Version:
1.00

MD5:
42461e7a7bc4382f1dda194c145c4fac

SHA-1:
b3b384e67fc874537d00307b9c27a86ada2dc46a

SHA-256:
6c3d4ae4df4eedc3bea2bb92a81350ec671aee7fecb98efc680a5ff09865e0e6

Scanner detections:
2 / 68

Status:
Malware

Analysis date:
4/29/2024 2:05:40 PM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.Crypt
t3scan.1.6.1.0

Reason Heuristics
(M)
16.6.5.12

File size:
2.2 MB (2,333,404 bytes)

Product version:
1.00

Copyright:
2012 - Tribo Gamer Brasil® - Direitos Reservados

Trademarks:
Hitman Absolution é uma marca da Bethesda. Nós apenas traduzimos o jogo.

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:vAq7/A7PnjP2JYZT5eTHuQq6Fs2cOxyNALLE/4nomnuhzo:LEHP2JOJysa4sE/YomuhM

Entry address:
0x3E400

Entry point:
60, BE, 00, A0, 43, 00, 8D, BE, 00, 70, FC, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
20 KB (20,480 bytes)

The file hitman_absolution-v1.00[www.tribogamer.com].exe has been seen being distributed by the following 11 URLs.

http://download1484.mediafire.com/w53b9dr87tgg/.../hitman_absolution-v1.00[semprefreegames.blogspot.com.br].exe

http://download1484.mediafire.com/hva0vwp9vpbg/.../hitman_absolution-v1.00[semprefreegames.blogspot.com.br].exe

https://mega.nz/persistent/.../WN0FCDgJ

https://mega.nz/persistent/.../ME4yTBxY

temp:hitman_absolution-v1.00[ZAQGAMES].exe

http://download1192.mediafire.com/9lbckbcv7vjg/.../hitman_absolution-v1.00[semprefreegames.blogspot.com.br].exe

http://mmosgame.com/.../hitman-absolution-em-portugues.exe

https://mega.nz/temporary/.../WN0FCDgJ

http://www.farmupdatecity.com/c?x=wlTk7yB7L 1jDwIlRMTZ7pjQ8wPY7Ha51w5CxVIeNRw=&c=PQI5F1I4dMMnk2VP0jN3AJtchlqso7GAI 6nUsmC/g5MedqC7bQbxHr2s6c9yLiP3rVz8seu/rD5ioL0TbP TdWTo7CgJ5sD10L DITymoAxWHoOVkTgZWoWO/QN/95h7uhCpIkMvKBJR8CT/727HtRC6bTCW/7uZ56/9ZoXI9A=&e=0&downloadAs=hitman_absolution.exe&fallback_url=http://tribogamer.com/.../196_traducao-do-hitman-absolution-para-portugues-do-brasil.html

http://download1398.mediafire.com/xmc0e6y9yttg/.../hitman_absolution-v1.00[semprefreegames.blogspot.com.br].exe

https://mega.nz/temporary/.../ME4yTBxY

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.