home

desktop.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download789.mediafire.com.
MD5:
02f86e2d4d01de33c8e65b3b67991955

SHA-1:
cf7e00a159051368ea105b0b0560d981b1b0576c

SHA-256:
b2dca363a08e05345b171dc17dfe99a3c2e51dd27e8a04f9db232ddd5ee68d90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:00:44 AM UTC  (today)

File size:
357.9 KB (366,460 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\desktop.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:GnjwxHtnAJO8I9AJ0Go6DkjzKX5l0CymOSTSb8zqqSuoPh8hGw64HJk7nmAH1zCC:G6Ht7ri0Giqr8mOA68uLnIxtpk7nTH1P

Entry point:
37, 7A, BC, AF, 27, 1C, 00, 03, 52, 4C, 70, 3F, BD, 37, A9, 00, 00, 00, 00, 00, 23, 00, 00, 00, 00, 00, 00, 00, 37, 9B, 68, 65, 01, DC, F0, 37, 7A, BC, AF, 27, 1C, 00, 03, 4C, F2, 74, 27, C3, 33, A9, 00, 00, 00, 00, 00, 25, 00, 00, 00, 00, 00, 00, 00, 4A, B4, 3B, 77, 99, 14, DA, F5, 83, FB, 77, 80, DD, 2C, 0E, 52, BE, 31, FE, D7, 1F, 11, C2, 35, 6B, A6, C3, 36, 23, 01, 28, 8A, F3, 5D, 13, F5, F8, 46, 1E, BA, 7F, D4, 8C, 61, 40, 13, A6, 2D, 29, ED, 9A, 44, A6, 66, B3, 82, 1C, 7E, 4B, 09, 62, 2E, 3B, 63, 36...
 
[+]

The file desktop.exe has been seen being distributed by the following URL.

http://download789.mediafire.com/89qua2jz5hrg/.../Desktop.exe

Scan desktop.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.