home

10_plan.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from nfsu2online.ucoz.com.
MD5:
4a5e5890e31c3e5f33115d11e719767e

SHA-1:
3a922f69fa9d059928e1a19f4eefc8600ce6b1db

SHA-256:
2867437a614e792ce1c7cdce43659f4d33df82c2482fbba62a97f62f3eaf9677

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:43:52 AM UTC  (today)

File size:
2.9 KB (2,988 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\10_plan.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:KmfzzLhh6XkioTvr3R7j2We3xYHkEmEfYrTImLqtmi1mWvsDxmumi3A4:BfXLhh3iEv712rh0QfLMmTpsMP

Entry point:
3C, 21, 2D, 2D, 0D, 0A, 09, 74, 6F, 70, 2E, 6C, 6F, 63, 61, 74, 69, 6F, 6E, 3D, 22, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2E, 73, 65, 65, 6B, 69, 6E, 73, 74, 61, 6E, 74, 6C, 79, 2E, 63, 6F, 6D, 2F, 3F, 64, 6E, 3D, 76, 6F, 6C, 69, 61, 2E, 6F, 72, 67, 26, 66, 70, 3D, 25, 32, 42, 25, 32, 46, 77, 78, 58, 47, 55, 35, 43, 73, 6C, 70, 47, 55, 73, 54, 25, 32, 46, 5A, 72, 4A, 31, 55, 6B, 6E, 51, 78, 45, 6A, 32, 33, 7A, 62, 47, 79, 72, 55, 6F, 74, 70, 4B, 37, 6D, 4A, 4B, 63, 49, 36, 39, 46, 6A, 47, 31, 65, 30, 34...
 
[+]

The file 10_plan.exe has been seen being distributed by the following URL.

http://nfsu2online.ucoz.com/_ld/.../10_pLan.exe

Scan 10_plan.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.