home

lol - easy counter picks(portable).exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-08-3o-docs.googleusercontent.com.
Version:
1.0.0.0

MD5:
84fc04f7ecb99a096d96939d78754952

SHA-1:
cf279d1f47d8c3162e903e1acc9f22aa5794afab

SHA-256:
fee8190055bf1da1f5f6e986a78193c8828582bcdbdc04be58fc6d678d2b9778

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/6/2024 8:19:11 PM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM06.2.Malware.Gen
1.0.0.1077

File size:
6.3 MB (6,592,000 bytes)

Product version:
1.0.0.0

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\downloads\lol - easy counter picks(portable).exe

File PE Metadata
Compilation timestamp:
7/13/2009 8:42:43 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:7WEXkyiQNVfdvb2Ct2NMoWmckFLKrenSpuem2:7pXkrQNVpKtN6mckulRm2

Entry address:
0x6AF8

Entry point:
E8, 1C, 06, 00, 00, E9, 4D, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, C4, C2, 00, 01, 75, 03, C2, 00, 00, E9, 98, 06, 00, 00, CC, CC, CC, CC, CC, FF, 25, 74, 12, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, 70, 12, 00, 01, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, CC, CC, CC, CC, CC, 53, 56, 57, 8B, 54, 24, 10, 8B...
 
[+]

Code size:
43 KB (44,032 bytes)

The file lol - easy counter picks(portable).exe has been seen being distributed by the following URL.

https://doc-08-3o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/8b301jap2ae7s6c7nh42vr1645r0s3dp/1454774400000/09804811136337764991/.../0B9XbbpXz9TtsMHF0dWpWWHVGaEE?e=download

Scan lol - easy counter picks(portable).exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.