home

5b.exe

MD5:
fba377a76d8a6da96249a4241641ece2

SHA-1:
97b74160e2d966bea1f3629d7ad447b586359ca7

SHA-256:
e54301e793f4297d4a21b2151a55d58a040ea0c0c8ea90cb2c30d1a396190156

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 4:37:51 PM UTC  (today)

File size:
609 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\5b.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:MFlLlt5l9vl/t8lZv5NrXAjwOQPQEL0LVtkLRmzbdf5Xdn64:MLlteZ/wUOQPRoQVmndn64

Entry point:
4D, 5A, 61, 00, 02, 00, 01, 00, 20, 00, 00, 00, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 00, 00, 01, 00, FB, 50, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
1.6668

The file 5b.exe has been seen being distributed by the following URL.

https://doc-0o-1s-docs.googleusercontent.com/docs/securesc/7dep9rg9alemdrd0p6ddr9hontg78fhd/4m3bhc3qq0euva5iet155pvral37qhrg/1463630400000/16204402225879682250/.../0B8eV17mePT9qZHVPM1JaajhyTjA?e=download

Scan 5b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.