home

assign1_q44.exe

MD5:
2a3544fc212cfa7d503220f7d1f80424

SHA-1:
424dbc4d73be43e9b82525c1dcb1ae4d9d716c6b

SHA-256:
cb33adb64fa23758239db8079fde3b3e6d8990c7921e80ffbd50eac0573dce32

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 5:49:53 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
W32/Virut.Gen
7.11.30.172

File size:
361.8 KB (370,511 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\assign1_q44.exe

File PE Metadata
Compilation timestamp:
7/8/2015 8:35:31 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
6144:ZnOLyOz73UHf1d2WOT1ee2k6Sn4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElVtX:ZOLHvu1gC9tmSFdgF

Entry address:
0x14D0

Entry point:
48, 83, EC, 28, C7, 05, 72, EB, 02, 00, 00, 00, 00, 00, E8, 1D, 91, 00, 00, E8, 98, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 55, 48, 89, E5, 48, 83, EC, 50, E8, E3, 90, 00, 00, 48, 8D, 0D, FC, 7A, 02, 00, E8, 8F, A1, 00, 00, 4C, 8D, 45, FD, 48, 8D, 4D, FE, 48, 8D, 45, FF, 48, 8D, 55, FA, 48, 89, 54, 24, 30, 48, 8D, 55, FB, 48, 89, 54, 24, 28, 48, 8D, 55, FC, 48, 89, 54, 24, 20, 4D, 89, C1, 49, 89, C8, 48, 89, C2, 48, 8D, 0D, F7, 7A, 02, 00, E8, 5B, A1, 00, 00, 0F, B6, 45, FA, 44, 0F, BE, C0, 0F, B6, 45...
 
[+]

Entropy:
4.7817

Code size:
80.5 KB (82,432 bytes)

The file assign1_q44.exe has been seen being distributed by the following URL.

https://netstorage.its.dal.ca/oneNet/NetStorage/DriveG@sd942676/.../assign1_q44.exe

Scan assign1_q44.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.