home

add21c.exe

MD5:
906ed89b454f3b78bac83a044f87c46e

SHA-1:
60f2c91aa8d93e398117e444d6fc3b01fde91d45

SHA-256:
7ddc2079e8881e28024dec58f0ad63f21e1d090ece65074bbe024f292358f84c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:48:19 PM UTC  (today)

File size:
714 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\add21c.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6:1O51E/a0QlmyCkzRE2d2MjIzlzMRzlJfS1E5yTXze7:1M1kaTbRBSzFursBbz4

Entry point:
4D, 5A, CA, 00, 02, 00, 01, 00, 20, 00, 11, 00, FF, FF, 0D, 00, 00, 01, 00, 00, 00, 00, 00, 00, 3E, 00, 00, 00, 01, 00, FB, 71, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
2.4112

The file add21c.exe has been seen being distributed by the following URL.

https://app.schoology.com/system/files/attachments/files/m/201605/course/.../ADD21C_57398d60cc202.EXE

Scan add21c.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.