home

withSIX-Play.exe

Play withSIX

Six Networks GmbH

This is installed with Play withSIX. The file has been seen being downloaded from arma3.fr and multiple other hosts.
Publisher:
SIX Networks  (signed by Six Networks GmbH)

Product:
Play withSIX

Version:
1.50.732.6

MD5:
d28d806ad36189c11e0b2b7a58bc89ea

SHA-1:
aef106d13a5d72129a54b0d5e1341f5d106aed63

SHA-256:
fec9091b30ba89510e659f613445832900c2ea8482c79fd54377bf367cf2fe04

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:51:05 PM UTC  (today)

File size:
11.5 MB (12,074,320 bytes)

Product version:
1.50.732.6

Copyright:
Copyright © SIX Networks 2009-2013

Original file name:
withSIX-Play.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\six networks\play withsix\withsix-play.exe

Digital Signature
Signed by:
Six Networks GmbH

Authority:
COMODO CA Limited

Valid from:
1/13/2014 4:00:00 PM

Valid to:
1/14/2016 3:59:59 PM

Subject:
CN=Six Networks GmbH, O=Six Networks GmbH, STREET=Heimgartenstr.15, L=Starnberg, S=Bavaria, PostalCode=82319, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
60CC61BFBDAF460B6830D1C9D08A6F81

File PE Metadata
Compilation timestamp:
7/3/2014 3:47:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:Cx6x6HoANFpceqr1QtOYK8OFWw8y2J9RA6E7LBCI3u12erRrjNQGVV:HuoAN8eqryEYCFWXy2zuvLcUMrRrj6Gf

Entry address:
0xB7FAA4

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5462

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
11.5 MB (12,049,408 bytes)

The file withSIX-Play.exe has been discovered within the following program.

Play withSIX  by SIX Networks
Publisher's description - “Want to try out that new mod? Get it with one click & launch it right away. Enjoy all the updates the second they are released. Smart Sync saves you bandwidth and time. Easy access to over 4000 community servers. Configure your server browser, the way you like.”
play.withsix.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file withSIX-Play.exe has been seen being distributed by the following 3 URLs.

http://arma3.fr/files/get/arma_3/.../withSIX-Play.exe

http://cdn2.withsix.com/software/.../withSIX-Play.exe

http://withsix.com/.../latest

Scan withSIX-Play.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.