home

encarta-dictionary_100859.exe

MD5:
8b88c60d6594599343c5856a1b84d2b3

SHA-1:
d33df60c436d1df5e0b56fcf0f0bd7da364d27cd

SHA-256:
60356fde9762e3e8bea71ae67e07290d43d83627416c24b511793d48f65940dc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:16:04 PM UTC  (a few moments ago)

File size:
1.3 MB (1,369,041 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\encarta-dictionary_100859.exe

File PE Metadata
Compilation timestamp:
12/17/2014 11:10:48 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:BNsJAeByoFhY2Oc2W8T8M5QT2pOnowyIbHu67T6ZEtsUSJNOvQ:cJAek4u2i8COl6UAEI

Entry address:
0x13CF70

Entry point:
8B, FF, 55, 8B, EC, E8, 56, 35, 01, 00, E8, 11, 00, 00, 00, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 6A, FE, 68, 70, 66, 60, 00, 68, E0, 6F, 54, 00, 64, A1, 00, 00, 00, 00, 50, 83, C4, 94, 53, 56, 57, A1, E0, 02, 61, 00, 31, 45, F8, 33, C5, 50, 8D, 45, F0, 64, A3, 00, 00, 00, 00, 89, 65, E8, C7, 45, 90, 00, 00, 00, 00, C7, 45, FC, 00, 00, 00, 00, 8D, 45, A0, 50, FF, 15, AC, 84, 5B, 00, C7, 45, FC, FE, FF, FF, FF, EB, 26, B8, 01, 00, 00, 00, C3, 8B, 65, E8, C7...
 
[+]

Entropy:
6.0655

Code size:
1.7 MB (1,795,072 bytes)

The file encarta-dictionary_100859.exe has been seen being distributed by the following URL.

http://www.com-about.com/download/.../encarta-dictionary.exe

Scan encarta-dictionary_100859.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.