home

display.exe

MD5:
f2bdf1a797143c6f060cca8e2eac0b6f

SHA-1:
f8066cfe5cc9489f3c83a853f8c670bdc86645dc

SHA-256:
cee9140f7df442c8bd3d633fb78ec63e4fee9687c92189ff677f55d9fdbf5dbf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:32:00 AM UTC  (today)

File size:
23.8 KB (24,355 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\display.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:baT3VK4aea76WyVmOKDOaGvIKdqUWjdscAHF2i/vUysctgZXTc0Y:bOCaMdbAHFzQDHY

Entry point:
2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 0D, 0A, 53, 79, 73, 74, 65, 6D, 20, 49, 6E, 66, 6F, 72, 6D, 61, 74, 69, 6F, 6E, 0D, 0A, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 2D, 0D, 0A, 54, 69, 6D, 65, 20, 6F, 66, 20, 74, 68, 69, 73, 20, 72, 65, 70, 6F, 72, 74, 3A, 20, 37, 2F, 39, 2F, 32, 30, 31, 36, 2C, 20, 31, 33, 3A, 31, 30, 3A, 33, 33, 0D, 0A, 20, 20, 20, 20, 20, 20, 20, 4D, 61, 63, 68, 69, 6E, 65, 20, 6E, 61, 6D, 65, 3A, 20, 41, 44, 4D, 49, 4E, 2D...
 
[+]

Entropy:
5.4867

The file display.exe has been seen being distributed by the following URL.

https://p8.zdusercontent.com/attachment/.../kqigYPRWcDo2BDFhJd4HzaHlF?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..OmZOv0uNn1nb0o6AHsTCWg.cXo18_Go_VWAsK_uURJ9sK4oS2Kj32Ia_-vq7yP31L7jNBX0QMk_lqn7gbvPhO9gQfDqBA9t0dihY6mY8qSEWKSmw3BCFO5tO-ni_yxhNtZ-N52pNIIeG1xHo-lpTBBz6wV1SqmJqmAY4yxQEaqE-ipdEZn8L93W8pLRvzEugy00wVuc2yd2tHbc9wdZsfy6LUtcRbDPxemmVd1JFS-M7hC1tzZ1OalQEZsRrJt2fYTceHs8JszwP05gkCrTZ8y2dUBdkErnr9Cs2QVwH22_w8AXGyYmXidtVgcGFLZdTdI.748-pk33AP6BaR-3I-zpSg

Scan display.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.