home

cain-abel-4.9.56.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.bestbinariesvaults.com.
MD5:
6b5e29c808ea0ed89ceab5ce14171f51

SHA-1:
16365da7b1cb4f057b37093bbabecb4b1fa0eee3

SHA-256:
5617c618b071c9ab65339df22d59a59b5daf6d1adf3df5f3cb044a1da0701cd2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:52:24 PM UTC  (a few moments ago)

File size:
52.2 KB (53,482 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\cain-abel-4.9.56.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:6mLvFqyX2xdCmzldoHtvb9jdjFs73PP+eRbPaLCe:rpuJdqjPsTPP+eRbPar

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 22, 3E, 0A, 20, 20, 20, 20, 3C, 21, 2D, 2D, 20, 74, 63, 20, 31, 34, 36, 34, 32, 35, 33, 30, 36, 34, 20, 2D, 2D, 3E, 0A, 20, 20, 20, 20, 3C, 68, 65, 61, 64, 3E, 0A, 20, 20, 20, 20, 0A, 20, 20, 20, 20, 3C, 6D, 65, 74, 61, 20, 63, 68, 61, 72, 73, 65, 74, 3D, 22, 75, 74, 66, 2D, 38, 22, 20, 2F, 3E, 0A, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 3C, 74, 69, 74, 6C, 65, 3E, 43, 61, 69, 6E...
 
[+]

The file cain-abel-4.9.56.exe has been seen being distributed by the following URL.

http://www.bestbinariesvaults.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

Scan cain-abel-4.9.56.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.