home

7db6ab2e-b226-f8b2-8590-066b49f74517_1d1dfaa942aeca5

MD5:
baeab1daeeb59ed91fab61e66357bc8a

SHA-1:
5c1f02aa7e5da76230625eebd4d9924b4a0c1c68

SHA-256:
c3e71832fa8b162844888d977f6e68fd5a1d931b75d109bffbea1d636f64da4f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:23:26 PM UTC  (today)

File size:
25 KB (25,567 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\7db6ab2e-b226-f8b2-8590-066b49f74517_1d1dfaa942aeca5

File PE Metadata
Compilation timestamp:
1/30/2013 4:21:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
768:hwnPIbiThxP/ija+1I9pjV8SwQCppbt4zUtiT3LQ:inPIbiThZjV8hvbGzUtiT8

Entry address:
0x113BC

Entropy:
6.5179

Code size:
63.5 KB (65,024 bytes)

The file 7db6ab2e-b226-f8b2-8590-066b49f74517_1d1dfaa942aeca5 has been seen being distributed by the following URL.

http://www.nliteos.com/.../nLite-1.4.9.3.setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.