dirt3.exe threat report

MD5 45e2445d825e3a559cebaaddc55bbf86
Latest seen 2024-05-30 23:01:11 (2 years ago)
First seen 2024-05-30 23:01:11 (2 years ago)
Size 8 MB
Product DSS Launcher

GridinSoft Anti-Malware detection

Detected by GridinSoft before you download

The current ThreatInfo record shows this exact file hash detected as Trojan.Heur!. Download GridinSoft Anti-Malware to scan the device, confirm whether this file is present, and remove the detected object if it is found.

Detection name
Trojan.Heur!
Recommended action
Scan and remove
Last analysis
2024-05-30 23:01:11 (2 years ago)
File hash
45e2445d825e3a559cebaaddc55bbf86
Download Anti-Malware

Why it matters

Why GridinSoft flags this file

Detection

GridinSoft identifies the sample as Trojan.Heur!.

Timeline

First seen 2024-05-30 23:01:11 (2 years ago); latest analysis 2024-05-30 23:01:11 (2 years ago).

Publisher context

Company metadata: Sony DADC Austria AG. Product metadata: DSS Launcher.

Digital signature

Signed by Sony DADC Austria AG. The signature is not reported as trusted and valid, which can indicate tampering, repackaging, or copied publisher data.

Observed locations

ThreatInfo has seen this file in user or system paths listed below. Unexpected locations increase the need for local verification.

Recommended action

What to do next

  1. Compare the MD5 above with the file found on the device.
  2. Check whether the file appears in the observed locations or under one of the alternate names.
  3. Run GridinSoft Anti-Malware to confirm the detection and remove the file if it is present.

dirt3.exe is a Windows file recorded in the ThreatInfo database. It is associated with DSS Launcher. The reported company name is Sony DADC Austria AG. The current detection status is Trojan.Heur!, based on the latest analysis from 2024-05-30 23:01:11 (2 years ago).

If dirt3.exe appears on your computer unexpectedly, treat it as suspicious. Check its location, digital signature, and recent system changes before allowing it to run. A full anti-malware scan is recommended when this file is detected as Trojan.Heur!.

Product Name: DSS Launcher
Company Name: Sony DADC Austria AG
MD5: 45e2445d825e3a559cebaaddc55bbf86
Size: 8 MB
First Published: 2024-05-30 23:01:11 (2 years ago)
Latest Published: 2024-05-30 23:01:11 (2 years ago)
Status: Trojan.Heur! (on last analysis)
Analysis Date: 2024-05-30 23:01:11 (2 years ago)
dirt3.exe detection screenshot

The screenshot is a visual record of a GridinSoft Anti-Malware detection for this sample. Use the hash and metadata above as the primary identifiers when comparing the file on your system.

Signed By: Sony DADC Austria AG
Status: Invalid (digital signature could be stolen or file could be patched)

The signature on dirt3.exe is not reported as trusted and valid. Invalid or suspicious signature data can indicate tampering, repackaging, or an unrelated file using copied publisher information.

%temp%\wze8ed7.tmp

ThreatInfo has observed dirt3.exe in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Argentina with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for dirt3.exe is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

dirt3.exe is identified as pe for 32 systems. The subsystem is Windows GUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00ae9000

PE Sections:

Name Size of data MD5
.text 36864 b36d0df7b6e181827630c2f4b30d8658
.rdata 12288 894680c483b431b2c1d75c59c335d7ad
.data 12288 43eae334a88b5aa936b218d29f353ab8
.rsrc 479232 2680a5b013565f5a836a291d0afc838f
Stext 5287936 0015652101eae9acdbbebeda4f2f7a06
Sitext 32768 b1da347691277938cb7f741aad07e563
Srdata 552960 d513d407efa5d2285f89a28a5e886fb6
Sdata 1150976 8e72ba992ddfd9d1aa46b4079914f74b
Sidata 28672 cc968d44deb1b771cb12f3106690c960
.securom 1638400 96634b9a1db328e7a633a25ab644b1ec

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: