home

realalt190.exe

Real Alternative

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.wwenglish.org and multiple other hosts.
Product:
Real Alternative

Description:
Real Alternative Setup

Version:
1.9.0.0

MD5:
c7eec41c4291bba5ccc72ba61fd0317e

SHA-1:
d61ff471d316acf47c7bf4d58fdf99aed8f19abc

SHA-256:
a061ad433d0911e62919e0fb416ccdac5386d0219d509f48ecf4165bf2f09769

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:46:57 AM UTC  (today)

File size:
6.3 MB (6,560,523 bytes)

Product version:
1.9.0.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\files\realalt190.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:JCV8GyyNGP5XtxkR85gGdqDWz3ETsnsGJvNY21nyUtqMoes38m7YdjM:kzyyNsddPduW7iQvNYztCm73

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9978

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file realalt190.exe has been discovered within the following programs.

Around the World in 80 Days  by Media Contact LLC
Around the World in 80 Days is a casual video games distributed through the GameTop.com download portal. The trial verison of the game in some cases drops an icon on the user's desktop 'Online Free Games' which links to a partner portal such as onlinefreegames.com.
www.gametop.com/download-free-games/80-days
8% remove it
Running Sheep  by Media Contact LLC
Running Sheep is a casual PC video game distributed through the Game Top download portal. The trial verison of the game includes an icon on the user's desktop 'Online Free Games' which links to a partner portal such as onlinefreegames.com.
www.GameTop.com
4% remove it
 
Powered by Should I Remove It?

The file realalt190.exe has been seen being distributed by the following 3 URLs.

http://www.wwenglish.org/realplayer.exe

https://onedrive.live.com/download.aspx?cid=733C6C787B29A288&authKey=!AuETU3ef-eORsvo&resid=733C6C787B29A288!461&canary=yCH6shGI3vqPlcV12gSQkXbFDRrOZm3qV7532m7QoOA=5&ithint=.exe

http://ftp.freenet.de/pub/filepilot/windows/multimedia/video/.../realalt190.exe

Scan realalt190.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.