home

abecedario letra cursiva__3038_i1291797687_il1446897.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www-squid.cluster11.fb-hosting-apps.com.
MD5:
f7916fac645ebee56ef83a845cf2bcf3

SHA-1:
b241344fc96be486a088677122b8e6ef5b57f00d

SHA-256:
4f8f240e3b437b3d444804df479ad38a5f51e1eb1b49b26bfa4fa9a46ec82af5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:50:58 AM UTC  (today)

File size:
545 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\abecedario letra cursiva__3038_i1291797687_il1446897.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:D52tK6QL0XUtFstSDKKEmjtCR8EBKVSvJMdSyD7sbcKSDK7vXmoWW3sj:ItHJS+WtCaEMVE5WKS+7v2EY

Entry point:
50, 61, 6E, 64, 61, 20, 49, 53, 20, 32, 30, 31, 34, 20, 77, 61, 72, 6E, 69, 6E, 67, 3A, 0D, 0A, 0D, 0A, 54, 68, 65, 20, 66, 69, 6C, 65, 20, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2D, 73, 71, 75, 69, 64, 2E, 63, 6C, 75, 73, 74, 65, 72, 31, 31, 2E, 66, 62, 2D, 68, 6F, 73, 74, 69, 6E, 67, 2D, 61, 70, 70, 73, 2E, 63, 6F, 6D, 2F, 64, 6F, 77, 6E, 6C, 6F, 61, 64, 2E, 70, 68, 70, 3F, 76, 65, 72, 73, 69, 6F, 6E, 3D, 31, 2E, 31, 2E, 38, 2E, 32, 32, 26, 63, 61, 6D, 70, 69, 64, 3D, 33, 30, 33, 38, 26, 69, 6E, 73, 74...
 
[+]

The file abecedario letra cursiva__3038_i1291797687_il1446897.exe has been seen being distributed by the following URL.

http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=abecedario letra cursiva_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=abecedario letra cursiva&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&parameter=abecedario letra cursiva&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&parameter=abecedario letra cursiva&ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.