home

omatic.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1587.mediafire.com and multiple other hosts.
MD5:
c8dc863c8d6e3a7c7873d785e9f33eb3

SHA-1:
a0a36a783e4df7edfecc50e653561027409d982e

SHA-256:
5e4480ec2f4bd88e6786a084a2002f1deee3714161e22eabbf7b407a7f675524

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/19/2024 8:55:30 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Malware.Win32.GameThief
4.0.3.131226

Bkav FE
W32.OnGameFUCKSAXS.Trojan
1.3.0.4613

File size:
292 KB (299,008 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
3/8/2071 9:27:30 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:jkBndgHYBBhlxYcJRW3cFsMh8TamNkQRvS6LeHyUyvMC:jqdgHYBXlxIEh8TamNkQRvS6Le80

Entry address:
0x1000

Entry point:
A1, 63, 70, 43, 00, C1, E0, 02, A3, 67, 70, 43, 00, 57, 51, 33, C0, BF, 4C, C7, 43, 00, B9, AC, 07, 44, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 6A, 00, E8, 5F, 95, 02, 00, 59, 68, 2C, 70, 43, 00, 6A, 00, E8, 92, 53, 03, 00, A3, 6B, 70, 43, 00, 6A, 00, E9, B2, 41, 03, 00, E9, 64, 95, 02, 00, 33, C0, A0, 58, 70, 43, 00, C3, A1, 6B, 70, 43, 00, C3, CC, B9, AC, 00, 00, 00, 0B, C9, 74, 39, 83, 3D, 63, 70, 43, 00, 00, 73, 0A, B8, E2, 00, 00, 00, E8, E3, FF, FF, FF, 68, AC, 00, 00, 00, 6A, 40, E8, E8, 51...
 
[+]

Code size:
215 KB (220,160 bytes)

The file omatic.exe has been seen being distributed by the following 7 URLs.

http://download1587.mediafire.com/8zku9ax3yv9g/.../OMATIC.EXE

http://dc619.4shared.com/download/.../cheat_o_matic.exe

https://mg.mail.yahoo.com/ya/.../HjkQAAUulRkCx0w1Y1xvvEWM&fid=files for stuff&pid=2&clean=0&appid=YahooMailNeo&ymreqid=cd4c3715-1fd5-d8ea-0141-d80013010000

http://dc383.4shared.com/download/.../omatic.exe

http://dc383.4shared.com/download/.../Cheat_Omatic.exe

https://app.boxcloud.com/bc/2/c1264501dd8b34089158faf93b397d6a/oxsr6n5bVQhyic6N7TfrMf0sVTkQUOBIH0HsZBGRDI0si84Chpt_3ZjzaZYMPOwbyyATOQjCMtuz5i34lvwOPzn6vqjPIlTrSc5QsrWM9azon8_U4LjbzhWHmhk5Jz40E9L2kFWHtSdtuLT1BX4MbfVgUcmXL2YRkHmJrcahVWQmWcessuyM3Zl7ohw37iZ7aoSYSdaWpWb5Ed3aA7RPMPGzKS2Qawpciqw-mkGtCYN0MliMYAXZOW4LDhJVdp930NkP3OOokmDu4LCJsoX_Y-eXrsQRx-xjshtxFZ9CRdqYnolqxv3w0ornhs8YuUoLk7jFBfzLW7uZXloMWzzb-VYViJRFDrZ_fsulfe3C865zw_-IswOOk3zmxEkVpfSzg8fBXjxBgjSHBfaqlv2CaXsiR8bPYKJ0s6g_TMJNX6R1VZXHZeei7A3ckEFFn3lLWOaQVzhMewT_mbVLjl9EskUZiI34hrl6AlXQxaw0FdsPRRz8OYyEHkcw8zRBDDoxKXqr0PDW505WT-xwCMOCF-8Zlb9NdpUM7irwhVwB0XVOF18r4YQSG2-C8FB10MBO0ITXzRcQPYdAfTd4Ih-d8gdrAbKZlJ05iuzlukXfhkotJ3Z7129al9RLOZpW5Di8ChTP51QdaMaklXq4fvVG4s37-YglYI7WhWxJcT0mlCYwStIt3c6n0Pv9tVr0NOlN_MaZw-g8RGdMXpxbu71bsiL0UY5ltnqAZALrTBLLd2JLgp9hLZw4DJdaFeryrNt4KVlekIKPuWD_e1XX23VWzbhC0UE4SO8mCnqxFZQ3Z8o,/.../

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=8ykmr7n4s8&file_id=f_127283183

Scan omatic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.