home

stockfish_15011815_x64_bmi2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from abrok.eu.
MD5:
f8dcbc49ecd18dec533b1b21b8d2bcbd

SHA-1:
862cbbdcb550a6d7ed9f541f9a882cc8911bf982

SHA-256:
79254c51be56e89738ae519f8d62f57fe0b30aab90ffcee830cbd36225e9aeec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:08:26 PM UTC  (today)

File size:
935 KB (957,440 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\stockfish_15011815_x64_bmi2.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
12288:srkCBsZqfhCpbpgPY00HMcKURcKZTvGTR+Xn6o+mPk9t/:RECp+g00HMhKZTvQR+Xn6oSN

Entry address:
0x1500

Entry point:
48, 83, EC, 28, 48, 8B, 05, C5, CA, 0C, 00, C7, 00, 00, 00, 00, 00, E8, AA, 6B, 04, 00, E8, 95, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 41, 57, 41, 56, 41, 55, 41, 54, 55, 57, 56, 53, 48, 83, EC, 18, 4C, 8B, 15, C9, B6, 0C, 00, 45, 31, F6, 48, 8B, 2D, AF, B6, 0C, 00, 48, 8B, 84, 24, 80, 00, 00, 00, 48, 89, 54, 24, 68, 4C, 8D, 78, 10, 4C, 89, 44, 24, 70, 4C, 89, 4C, 24, 78, 48, 89, 0A, 48, 8B, 0D, CA, B5, 0C, 00, 4C, 89, F0, 49, 63, F6, 83, E0, 07, 49...
 
[+]

Code size:
695 KB (711,680 bytes)

The file stockfish_15011815_x64_bmi2.exe has been seen being distributed by the following URL.

http://abrok.eu/stockfish/builds/97a034ad3e8b25f0e8e1dd03d31f4689180f7547/.../stockfish_15011815_x64_bmi2.exe

Scan stockfish_15011815_x64_bmi2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.