home

ed_application_exe.tmp

Version:
6.0.0.0

MD5:
a4d80fb481ac6d4882d85899956812ca

SHA-1:
927ab834523b1e5bf993a306a0d801ce9542d435

SHA-256:
71e8c0524d78f8c2631d3646afca29e22c443b1f647b6ed86eabb29783da5833

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 1:42:02 AM UTC  (today)

File size:
3.7 MB (3,868,160 bytes)

Product version:
1.0.0.0

Language:
Polish (Poland)

Common path:
C:\users\{user}\appdata\local\temp\ed_application_exe.tmp

File PE Metadata
Compilation timestamp:
9/9/2008 3:44:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:avs4Esk3XlpU4rrs1T/ruMfYN2i2i2a2K2i2i2a2:aU4Esk3XlpU4rrs1T/rdgN2i2i2a2K2Z

Entry address:
0x19A0BC

Entry point:
55, 8B, EC, 83, C4, D8, 53, 33, C0, 89, 45, D8, 89, 45, E0, 89, 45, E4, 89, 45, EC, 89, 45, E8, B8, B4, 7B, 59, 00, E8, 0E, DB, E6, FF, 33, C0, 55, 68, F6, A3, 59, 00, 64, FF, 30, 64, 89, 20, 68, 04, A4, 59, 00, 6A, 00, 6A, 00, E8, 3A, DD, E6, FF, E8, 25, DE, E6, FF, 3D, B7, 00, 00, 00, 75, 07, 33, C0, E8, A7, B4, E6, FF, 8D, 55, E8, A1, 7C, 64, 5A, 00, 8B, 00, E8, 08, EF, ED, FF, 8B, 45, E8, 8D, 55, EC, E8, D9, 11, E7, FF, 8B, 55, EC, A1, 5C, 62, 5A, 00, E8, 28, B5, E6, FF, A1, 5C, 62, 5A, 00, FF, 30, 68...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,673,728 bytes)

The file ed_application_exe.tmp has been seen being distributed by the following URL.

http://www.jezykiobce.net/.../ROZUMIENIE_APP6000.exe

Scan ed_application_exe.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.