home

average.exe

MD5:
b826c8b9ad3dd02bafeada073a9efc79

SHA-1:
153a4e7c50339977c1f97d8808d4e858e9ebafe8

SHA-256:
2c0f6bc3f525c0413ace16d88b91f5469a5272246e7eb22f33bd560df74db943

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:52:42 AM UTC  (today)

File size:
1.8 MB (1,921,805 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\average.exe

File PE Metadata
Compilation timestamp:
3/1/2016 6:13:19 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
24576:i+5WQnd34yzEwA3/kmvzRZP2oXA1Vv58JsU3Aot+Ec0xMkwd0MzWsR5F:F5WQnd3JEwA3/pRZx8Fpd0MzWsR5F

Entry address:
0x1500

Entry point:
48, 83, EC, 28, 48, 8B, 05, 55, B7, 08, 00, C7, 00, 00, 00, 00, 00, E8, 3A, D3, 00, 00, E8, 95, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 48, 89, E5, 48, 83, EC, 50, E8, F3, D2, 00, 00, C7, 45, FC, 01, 00, 00, 00, C7, 45, F8, 00, 00, 00, 00, 48, 8D, 15, AE, 6A, 08, 00, 48, 8B, 0D, 77, B1, 08, 00, E8, A2, D7, 06, 00, 48, 8B, 15, 7B, B1, 08, 00, 48, 89, C1, E8, 83, BE, 04, 00, 48, 8D, 45, F0, 48, 89, C2, 48, 8B, 0D, 25, B1, 08, 00, E8, B0, 9F, 04, 00...
 
[+]

Entropy:
5.5215

Code size:
450.5 KB (461,312 bytes)

The file average.exe has been seen being distributed by the following URL.

https://doc-0c-c4-docs.googleusercontent.com/docs/securesc/8upfe95g4kgjn5cco1u2uul3f562rsfn/bi79bfhh7mp456dehkkv5eunnp7r7lar/1459620000000/.../10633065767867018660/0Bxn7IfurG4CWQVQ2N2RpTnFpaUU?e=download

Scan average.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.