home

demo_ht.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from rcsoft.republika.pl.
MD5:
9dcd500f8cff49dcab82bb8dfd4f1a46

SHA-1:
263c049eab6cb5cc0b1d74d965d5c85158874bc8

SHA-256:
7bf846a9dd6db4895629eff6c4965e93342477deab6b75797b5d586140f211fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 3:07:39 AM UTC  (today)

File size:
2.4 MB (2,557,486 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:jjyIC+PRRpGCy/Iv4pug30USvsJFz69Q3jMhR/Q:NvECtgkUSviFO9QoHQ

Entry point:
4D, 5A, B3, 01, 05, 00, 00, 00, 02, 00, CB, 14, FF, FF, B9, 00, 80, 00, 00, 00, 00, 00, 98, 00, 1C, 00, 00, 00, B4, CD, 39, 31, FF, FF, 56, 57, FA, B8, 80, 00, 8E, D8, 8E, D0, BC, C4, 12, FB, B4, FF, FF, 30, CD, 21, 3C, 03, 7D, 08, BB, 0E, 00, E8, BF, 02, B3, 09, 26, FF, FF, 8E, 06, 2C, 00, 2B, FF, B5, FF, 2A, C0, F2, AE, AE, 75, FB, AF, E1, 7F, BB, 2F, E7, 98, 02, B8, 10, 3D, 1E, 06, 1F, 8B, D7, F8, 87, D3, 1F, A3, 70, 33, 73, 06, BB, 56, EA, FF, FF, 90, 02, BF, 04, 01, 1E, 07, 2B, D2, 8B, C2, B9, 08, 00...
 
[+]

The file demo_ht.exe has been seen being distributed by the following URL.

http://rcsoft.republika.pl/pliki/.../demo_ht.exe

Scan demo_ht.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.