home

co.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-08-5g-docs.googleusercontent.com.
MD5:
0d67f474a106570ee5433c5ebbb491e2

SHA-1:
48bc51fd29fc09bef6effff5b777229989a5b4fe

SHA-256:
af1070bdcf041877c66bf136a57a81e9c7865d4421f4a4557e3f602ca75655b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 4:13:54 AM UTC  (today)

File size:
1.8 MB (1,926,369 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\co.exe

File PE Metadata
Compilation timestamp:
4/7/2016 2:41:35 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
24576:IsVYunaS89MpoWUmkPslGUjovG3e8JsU3Aot+Ec0xMkIqqIpWsRfF:DVYunabMpoWgslPF3CqqIpWsRfF

Entry address:
0x1500

Entry point:
48, 83, EC, 28, 48, 8B, 05, 15, BA, 08, 00, C7, 00, 00, 00, 00, 00, E8, CA, D5, 00, 00, E8, 95, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 53, 48, 83, EC, 48, 48, 8D, AC, 24, 80, 00, 00, 00, 48, 89, 4D, E0, C7, 45, B8, 00, 00, 00, 00, C7, 45, B0, 00, 00, 00, 00, E9, 06, 01, 00, 00, C7, 45, BC, 00, 00, 00, 00, 8B, 45, B0, 89, 45, AC, E9, AE, 00, 00, 00, 8B, 45, B0, 48, 98, 48, 89, C2, 48, 8B, 4D, E0, E8, 28, E4, 04, 00, 0F, B6, 18, 8B, 45, AC, 48, 98...
 
[+]

Code size:
451.5 KB (462,336 bytes)

The file co.exe has been seen being distributed by the following URL.

https://doc-08-5g-docs.googleusercontent.com/docs/securesc/ag5vm4peirh19nikc63vg81f513287s4/s2otavckn2biqbj00bmgoqmnl6abru1g/1462406400000/.../18327379174997704792/0B6I-vdTLDiLRR0poMFZjVDVmUHc?e=download

Scan co.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.