home

editor.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from app.box.com and multiple other hosts.
MD5:
554328d0784b614943c48b1e8686d7cf

SHA-1:
06ebce65a3142e8c1a36467f3d88c50dba06279a

SHA-256:
be012e9d9c4f13a33847573d7502cec75e6e6694fa74a223ad4e8d4f0559af9d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 10:50:17 AM UTC  (today)

File size:
351 KB (359,424 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:DtfnC2cWsWmyvmbcIhW5p0tAJvkK6dNAow5+V:Zfn3d1etE0eJvkKRTk

Entry address:
0x3EA6C

Entry point:
55, 8B, EC, 83, C4, F4, E8, F9, 47, FC, FF, E8, DC, 5A, FC, FF, E8, 6F, 95, FC, FF, E8, CA, 04, FD, FF, E8, 9D, 18, FD, FF, E8, E8, 37, FD, FF, E8, B3, AF, FD, FF, E8, 72, 7C, FE, FF, E8, DD, F5, FE, FF, E8, 84, 1D, FF, FF, E8, 2B, B4, FF, FF, BA, FC, EA, 43, 00, A1, 20, 06, 44, 00, E8, E8, 6F, FE, FF, A1, 20, 06, 44, 00, 83, C0, 30, BA, 18, EB, 43, 00, E8, 96, 48, FC, FF, B9, 98, 06, 44, 00, BA, 60, 9F, 43, 00, A1, 20, 06, 44, 00, E8, A6, 72, FE, FF, A1, 20, 06, 44, 00, E8, 2C, 73, FE, FF, E8, AE, 55, FC...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
247 KB (252,928 bytes)

The file editor.exe has been seen being distributed by the following 4 URLs.

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=7vnum9yi438qyi19ls6r&file_id=f_21570298363

https://tm.app.box.com/index.php?rm=box_download_shared_file&shared_name=66tbx76e3orkeb4ghi7e0b2w44clwhl1&file_id=f_2775223475

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=530534c8f5ed936fdbba&file_id=f_2775223475

http://www.universidadedabiblia.com.br/.../EDITOR.EXE

Scan editor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.