home

r33_22_0.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from marc.chutet.free.fr.
MD5:
3fa158a5cd7137d1ad89c8664613695f

SHA-1:
a0dd004b56f522c8a2204fb53288b08a68e86213

SHA-256:
73c47da36b8a0126e4689105e7a58a5d4cdfc8d89d7b39aee9ce09b2f06c9c49

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 4:23:25 PM UTC  (today)

File size:
5 MB (5,232,688 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\programs\r33_22_0.exe

File PE Metadata
OS version:
8826.11401

OS bitness:
Win16

Linker version:
3.0

CTPH (ssdeep):
98304:+TmXVE5bSs40LQ/SW16Tp/usKe3KtSsGQV5Zk3m785abHbjSsGZZYrs:OwExShsHoIusKe3KtSsdh3785aTvnGIg

Entry address:
0x6C0064

Entry point:
4D, 5A, 15, 00, 23, 00, 12, 00, 09, 00, 35, 01, FF, FF, B2, 04, B8, 0B, 00, 00, 5A, 1C, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 20, 44, 00, 00, 44, 02, 00, 00, 51, 02, 00, 00, B7, 09, 00, 00, 2A, 0A, 00, 00, 5A, 0A, 00, 00, 16, 0C, 00, 00, 7C, 0C, 00, 00, 3D, 0D, 00, 00, 50, 0D, 00, 00, 4F, 0E, 00, 00, 49, 10, 00, 00, F4, 11, 00, 00, 54, 1D, 00, 00, 36, 1D, 00, 00, 68, 1C, 00, 00, 50, 36, 00, 00...
 
[+]

Code size:
256 KB (262,147 bytes)

The file r33_22_0.exe has been seen being distributed by the following URL.

http://marc.chutet.free.fr/3/.../r33_22_0.exe

Scan r33_22_0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.