home

nbekfiiw.p4i

Description:
ACT Plugin for Final Fantasy XIV ARR

Version:
1.4.2.0

MD5:
bcde1aa7a4e50a6d0acf33eee3ee76af

SHA-1:
9c9d36b1a8af1a6c962e225af00957c9f158a8c2

SHA-256:
8c466a4988b02616413e9b05d5f00d5339212e05554f14dfa43b01d37968d8d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:38:22 AM UTC  (today)

File size:
994.5 KB (1,018,368 bytes)

Product version:
1.4.2.0

Copyright:
© 2015 Grayven

Original file name:
FFXIV_ACT_Plugin.dll

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\nbekfiiw.p4i

File PE Metadata
Compilation timestamp:
10/26/2015 6:57:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:kNdAO4tQ1CohHrwDd5M/R20D34HuWZ6a6TaP:k6ohHEDd5S20DmfP

Entry address:
0xFA1BE

Entry point:
FF, 25, 00, 20, 00, 10, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 30, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3505

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
992.5 KB (1,016,320 bytes)

The file nbekfiiw.p4i has been seen being distributed by the following URL.

http://advancedcombattracker.com/.../page-download.php?id=66

Scan nbekfiiw.p4i - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.