home

demo_hd.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from rcsoft.republika.pl.
MD5:
3fd83288c0ff2f93e5a18536774d1ccd

SHA-1:
b2a91b11e596793f07d357645447f5171d99a7f3

SHA-256:
c437d315e2b6bc8ca96f65a166426e8b7022a76caaa88485d224a3b2cbee82e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 3:39:08 AM UTC  (today)

File size:
1 MB (1,100,183 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\documents and settings\administrator\moje dokumenty\downloads\demo_hd.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:O4kAPRjkbfrumgpIneaXK7duXL5kANTEY85Hkro:sAPObfrumg2ZXKIbNAj

Entry point:
4D, 5A, B3, 01, 05, 00, 00, 00, 02, 00, CB, 14, FF, FF, B9, 00, 80, 00, 00, 00, 00, 00, 98, 00, 1C, 00, 00, 00, B4, CD, 39, 31, FF, FF, 56, 57, FA, B8, 80, 00, 8E, D8, 8E, D0, BC, C4, 12, FB, B4, FF, FF, 30, CD, 21, 3C, 03, 7D, 08, BB, 0E, 00, E8, BF, 02, B3, 09, 26, FF, FF, 8E, 06, 2C, 00, 2B, FF, B5, FF, 2A, C0, F2, AE, AE, 75, FB, AF, E1, 7F, BB, 2F, E7, 98, 02, B8, 10, 3D, 1E, 06, 1F, 8B, D7, F8, 87, D3, 1F, A3, 70, 33, 73, 06, BB, 56, EA, FF, FF, 90, 02, BF, 04, 01, 1E, 07, 2B, D2, 8B, C2, B9, 08, 00...
 
[+]

The file demo_hd.exe has been seen being distributed by the following URL.

http://rcsoft.republika.pl/pliki/.../demo_hd.exe

Scan demo_hd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.