home

3916a0c7-acc3-2735-c465-b758dd3cd016_1d1f22d3044e877

MD5:
796da6ac33acb0ce497e3a81b821b298

SHA-1:
e1dd95fb22731529e187f83417f92a541f322e3d

SHA-256:
7e13426da1d760d63e688de2c33f28680fee0e509c74915e78fecd8a15354f4b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 6:26:32 PM UTC  (today)

File size:
45.3 KB (46,396 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\3916a0c7-acc3-2735-c465-b758dd3cd016_1d1f22d3044e877

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
768:2+iXquQ78xzJZwgFomO0BIj3nlEQtlQORLnXqHqom4nSmHf1Id1/vc9uU8F1vFN5:OXquQ78xzJIj3xPQKnXs9SaO/vvtTvFv

Entry address:
0x89834

Entropy:
6.5093

Code size:
546.5 KB (559,616 bytes)

The file 3916a0c7-acc3-2735-c465-b758dd3cd016_1d1f22d3044e877 has been seen being distributed by the following URL.

http://rubugvkrwjee.mestermc.hu/.../mestermchutelepito.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.