home

26_april_bhavcopy_client.exe

This is a setup program which is used to install the application.
MD5:
91b92c550183e2579c22ebdfaf841e5c

SHA-1:
2a4c618212fb13a51338394aa78dfb60327da25c

SHA-256:
16d555320f6020f9a04aa9b1c5cb7ff06b6f3e8fa248a7f22c69031e5537d075

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:26:33 PM UTC  (today)

File size:
4.2 MB (4,372,600 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\26_april_bhavcopy_client.exe

File PE Metadata
Compilation timestamp:
4/11/2007 7:36:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:l5eb/albF7gl8sycr3ywZGVpbKIlFwBGAHHORCT5adXX:/ebKF7gl8sJbg/lWQAHuRCT5+n

Entry address:
0x6360

Entry point:
60, 85, C0, F3, 68, 89, 39, BA, 00, 0F, AF, E9, 81, FD, B1, 82, 84, 13, F6, C5, AD, 8B, DD, 88, C6, 4D, B1, E6, 0F, BE, C1, 81, F9, 8B, A6, 00, 00, 72, 03, C6, C7, E3, 69, DD, 10, 2F, E1, BB, 87, C5, E8, 15, 00, 00, 00, 88, ED, 69, F3, 6A, CC, F2, 7E, EB, 09, F2, 0F, BF, C9, 2D, 1B, 34, 7E, 99, 3B, FF, 74, 0A, F6, C4, FB, F3, 8D, 15, D7, FE, 45, 0B, F7, C6, 63, F7, 14, 78, 4A, 69, EF, B4, A3, D3, F3, 52, EB, 02, FE, C4, 5E, F7, C6, FF, 8E, C8, 5B, C7, C1, 0F, 27, B2, CE, FF, C7, 58, 86, FE, 8B, D9, 4A, 4F...
 
[+]

Entropy:
7.9858  (probably packed)

Code size:
44 KB (45,056 bytes)

The file 26_april_bhavcopy_client.exe has been seen being distributed by the following URL.

ftp://infoeq.religare.in/.../26_April_BhavCopy_Client.exe

Scan 26_april_bhavcopy_client.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.