MD5:
cc552116d4f67ed5e5f7f9d23687712c
SHA-1:
451d0a57118ebdea453e7cb4ad06f292af64d485
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Analysis date:
11/23/2024 9:39:42 PM UTC (today)
File size:
227 KB (232,440 bytes)
Common path:
C:\users\{user}\appdata\local\temp\ghn7x1lg.exe.part
Authority:
COMODO CA Limited
Valid from:
7/1/2016 7:30:00 PM
Valid to:
7/2/2017 7:29:59 PM
Subject:
CN=Durango Hosting, O=Durango Hosting, STREET=PO BOX 3090, L=Avon, S=CO, PostalCode=81620, C=US
Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
75A257C716EEFD936F0B8B93DC339AE6
The file ghn7x1lg.exe has been seen being distributed by the following 4 URLs.
http://www.ezthemes.com/site_tempfiles/b1/.../valentineboopwpp.exe
http://www.themesforwindows.net/dl.php?ezthemes.com ezthemes 69babes.zip
http://www.ezthemes.com/site_tempfiles/b1/.../forestchapelss.exe
http://www.themesforwindows.net/dl.php?ezthemes.com ezthemes ssmds9.zip