home

necropolis.exe_1138049747550524138_154618435889039159

Version:
5.2.2.6805124

MD5:
46ecb554681921197e4219a5a3236664

SHA-1:
a4dd8bf5f878ceb9a2fe614814549cbfcbb7de40

SHA-256:
856d6bc90a33b6afa875b3e8ee881d3ab217743fb75135574e4b2c5db69c4d8f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/21/2024 12:49:51 AM UTC  (today)

File size:
15.8 MB (16,571,840 bytes)

Product version:
5.2.2.6805124

Language:
English (United States)

Common path:
C:\users\{user}\downloads\necropolis.exe_1138049747550524138_154618435889039159

File PE Metadata
Compilation timestamp:
10/28/2015 4:17:56 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
393216:P9Gn+Uj6bFa9wOOH8A00uXLcsMmz3GRMsLCLPq5fsIL:lGnzWbFEP0ELemz+MsLCoL

Entry address:
0x102F310

Entry point:
E8, 00, 00, 00, 00, 50, 53, 51, 52, 56, 57, 55, 8B, 44, 24, 1C, 2D, 05, 00, 00, 00, 8B, CC, 83, E4, F0, 51, 51, 51, 50, E8, 5D, 00, 00, 00, 83, C4, 04, 59, 59, 59, 8B, E1, 89, 44, 24, 1C, 5D, 5F, 5E, 5A, 59, 5B, 58, C3, E8, 00, 00, 00, 00, 50, 52, 8B, 44, 24, 08, 2D, 05, 00, 00, 00, 8B, D0, 81, EA, C4, 94, C8, 6E, 8B, 12, 81, F2, C0, 42, 0F, AF, 03, C2, 89, 44, 24, 08, 5A, 58, C3, 8B, 44, 24, 04, C2, 04, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, 33, C0, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
7.8092  (probably packed)

Code size:
12.2 MB (12,781,568 bytes)

The file necropolis.exe_1138049747550524138_154618435889039159 has been seen being distributed by the following URL.

https://partner.steamgames.com/drm/download/.../Necropolis.exe_1138049747550524138

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.