home

6b.exe

MD5:
28f19e819410be3e6eb1fb47ff08a120

SHA-1:
48196f570a25880284fdcc7143d4e22ec1e73a34

SHA-256:
ccdc040e8d77ea5f7ae684045ea252c1ce32bec2a9fd68d091b4de8b586da117

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 4:37:27 PM UTC  (today)

File size:
724 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\6b.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6:gsLlteO+loca5xGbOOll3VhCuPVhC5pS1LQa:LLXeO+y5sbJl5hPj

Entry point:
4D, 5A, D4, 00, 02, 00, 01, 00, 20, 00, 00, 00, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 00, 00, 01, 00, FB, 50, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
2.5043

The file 6b.exe has been seen being distributed by the following URL.

https://doc-0o-1s-docs.googleusercontent.com/docs/securesc/7dep9rg9alemdrd0p6ddr9hontg78fhd/t5jptf4p9vakoirqlhsecueen41h6kul/1463630400000/16204402225879682250/.../0B8eV17mePT9qN2dnWW9kSktLQTg?e=download

Scan 6b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.