home

e.exe

MD5:
d042b006981a09b7cd26f4d07e765386

SHA-1:
ed30437e8462715c96d4d72d367918e39c7400b9

SHA-256:
0fcb1d02ccdf23b2cdb8485e1c7453e2730e18248e4b221c031e0876e4e7284a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 1:47:44 PM UTC  (today)

Scan engine
Detection
Engine version

Fortinet FortiGate
JS/Redirector.ADS!tr
2/19/2016

File size:
37.6 KB (38,472 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\e.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:JtPTWN7TK4dCDxFpw8G+t+Rh8JwluOoVxC3yLCrsGT75TaEYB23xqrVDn2Vkb:mkFi7anLgsHBaxMD/b

Entry point:
3B, 65, 76, 61, 6C, 28, 66, 75, 6E, 63, 74, 69, 6F, 6E, 28, 77, 2C, 69, 2C, 73, 2C, 65, 29, 7B, 76, 61, 72, 20, 6C, 49, 6C, 6C, 3D, 30, 3B, 76, 61, 72, 20, 6C, 6C, 31, 49, 3D, 30, 3B, 76, 61, 72, 20, 49, 6C, 31, 6C, 3D, 30, 3B, 76, 61, 72, 20, 6C, 6C, 31, 6C, 3D, 5B, 5D, 3B, 76, 61, 72, 20, 6C, 31, 6C, 49, 3D, 5B, 5D, 3B, 77, 68, 69, 6C, 65, 28, 74, 72, 75, 65, 29, 7B, 69, 66, 28, 6C, 49, 6C, 6C, 3C, 35, 29, 6C, 31, 6C, 49, 2E, 70, 75, 73, 68, 28, 77, 2E, 63, 68, 61, 72, 41, 74, 28, 6C, 49, 6C, 6C, 29, 29...
 
[+]

Entropy:
3.7330

The file e.exe has been seen being distributed by the following URL.

http://platform.twitter.com/.../follow_button.html?show_screen_name=false&screen_name=msnarabia&show_count=false&lang=ar

Scan e.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.