home

e861223f-0e9b-35a8-1ca0-55c831010fe4_1d1c2196057192c

Version:
1.32.0.0

MD5:
520c99bd9864f466e732eabe2dd3a09d

SHA-1:
bf906c6b4d59a666608b6b2e3ebba8737b85f34b

SHA-256:
2bf0aca0b81b5b5bf48b080732e18191263cfa2cf8703d719f2be5a42b1bbc18

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:44:14 PM UTC  (today)

File size:
4 MB (4,228,608 bytes)

Product version:
1.0.0.0

Language:
English (New Zealand)

Common path:
C:\ProgramData\microsoft\windows defender\scans\filesstash\e861223f-0e9b-35a8-1ca0-55c831010fe4_1d1c2196057192c

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:FUMCev6gAQkYArRM4q0pL7vPAeAFXfsXvhUWZG86gRnCLkay1HTi4x1rafXNZbDJ:23Dq+QovhRZG8rnikay1THMXv5

Entry address:
0x27417C

Entry point:
55, 8B, EC, 83, C4, F0, B8, 3C, 3A, 67, 00, E8, A4, 36, D9, FF, E8, 13, F6, FC, FF, 84, C0, 0F, 84, FD, 03, 00, 00, A1, 2C, 62, 68, 00, 8B, 00, E8, C7, 3F, E0, FF, E8, 9A, 01, FD, FF, 84, C0, 0F, 84, E4, 03, 00, 00, E8, 79, 03, FD, FF, 84, C0, 75, 0A, E8, DC, 0A, FD, FF, E9, D1, 03, 00, 00, A1, 2C, 62, 68, 00, 8B, 00, BA, A4, 45, 67, 00, E8, A2, 3B, E0, FF, A1, F4, 59, 68, 00, 80, 38, 00, 0F, 84, 14, 01, 00, 00, A1, 2C, 62, 68, 00, 8B, 00, C6, 40, 5B, 00, 8B, 0D, 6C, 66, 68, 00, A1, 2C, 62, 68, 00, 8B, 00...
 
[+]

Entropy:
6.8948

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 MB (2,569,728 bytes)

The file e861223f-0e9b-35a8-1ca0-55c831010fe4_1d1c2196057192c has been seen being distributed by the following 2 URLs.

http://download.freedownloadmanager.org/Windows-PC/.../FREE-1.16.0.0.html?ac52e4e

http://responsive.fileburst.com/LedgerLite.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.