home

_93e1a7a087d634d40bcd0e.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from aulas.uniminuto.edu.
MD5:
a4888afc80d703b51e6b1bf9201310ac

SHA-1:
27ac6020e0f33b2b1883c1b7ec53625b95d1907c

SHA-256:
2016df7b67505ba13b63b070c54e753feddd967ac7abb14ce0ec816774e45f33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 12:52:57 AM UTC  (today)

File size:
116.9 KB (119,706 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:jtGcxYI/pC2uCCZIFPD5EZkdie5wDv7RBQ:DKrZIND5skdig

Entry point:
00, 00, 01, 00, 08, 00, 30, 30, 00, 00, 01, 00, 08, 00, A8, 0E, 00, 00, 86, 00, 00, 00, 20, 20, 00, 00, 01, 00, 08, 00, A8, 08, 00, 00, 2E, 0F, 00, 00, 10, 10, 00, 00, 01, 00, 08, 00, 68, 05, 00, 00, D6, 17, 00, 00, 0D, 00, 00, 00, 49, 48, 44, 52, 7C, 73, 00, 00, 3E, 1D, 00, 00, 80, 80, 00, 00, 01, 00, 20, 00, 28, 08, 01, 00, BA, 90, 00, 00, 30, 30, 00, 00, 01, 00, 20, 00, A8, 25, 00, 00, E2, 98, 01, 00, 20, 20, 00, 00, 01, 00, 20, 00, A8, 10, 00, 00, 8A, BE, 01, 00, 10, 10, 00, 00, 01, 00, 20, 00, 68, 04...
 
[+]

The file _93e1a7a087d634d40bcd0e.exe has been seen being distributed by the following URL.

http://aulas.uniminuto.edu/distancia/pregrado/mod/.../view.php?id=1200745

Scan _93e1a7a087d634d40bcd0e.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.