home

macro 50ms.exe

Version:
1.1.14.03

MD5:
8958259b3ab65fc35ed76a32f2915aa5

SHA-1:
8e0808bf3310d53375a5c4a90808d208413883f5

SHA-256:
5380dbe03f7836c95b60ec575aea0fecc7e4eb8b57ba47eca570d926d65b2765

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 3:55:46 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
Trojan.Agent
3.12.26.4

File size:
793 KB (812,032 bytes)

Product version:
1.1.14.03

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\skryptymacro\macro\macro 50ms.exe

File PE Metadata
Compilation timestamp:
2/14/2014 10:35:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:4uIynGWAsWEjBov314BeTiWYIOGnIQbpqAx97AZcNv:4uIynPWKBYeBeeWY4nIQbrxZAUv

Entry address:
0x8DF93

Entry point:
E8, E0, 5D, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, 56, 8B, 44, 24, 14, 0B, C0, 75, 28, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 08, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 10, 8B, C8, 8B, C6, F7, 64, 24, 10, 03, D1, EB, 47, 8B, C8, 8B, 5C, 24, 10, 8B, 54, 24, 0C, 8B, 44, 24, 08, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 14, 8B, C8, 8B, 44, 24, 10, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 0C, 77, 08, 72, 0F, 3B, 44, 24, 08, 76, 09, 4E, 2B, 44, 24, 10, 1B...
 
[+]

Entropy:
6.4819

Code size:
619 KB (633,856 bytes)

The file macro 50ms.exe has been seen being distributed by the following 50 URLs.

http://download2115.mediafire.com/r73vfr728jhg/.../macro 50ms.exe

http://download1378.mediafire.com/auu6m37mh6zg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/ed00135c/.../macro-50ms.exe

http://199.91.154.142/bo4ze3o39vug/.../macro 50ms.exe

http://download1295.mediafire.com/8mk8koueacog/.../macro 50ms.exe

http://www48.zippyshare.com/d/YGWWWNCm/.../Wery.exe

http://download1146.mediafire.com/n8ayv6cq0y4g/.../macro 50ms.exe

http://download1187.mediafire.com/59n60ve50lqg/.../macro 50ms.exe

http://download1590.mediafire.com/2z9o0pbkjtlg/.../macro 50ms.exe

http://download985.mediafire.com/oex3je8j1cqg/.../macro 50ms.exe

http://download1378.mediafire.com/fq94aim1ffpg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/1209c021/.../macro-50ms.exe

http://download1378.mediafire.com/h1b9k0bffqsg/.../macro 50ms.exe

https://api.asm.skype.com/v1/objects/0-weu-d4-4c18074ccdb89f3814615c4776f0dfb8/.../original

http://www.speedyshare.com/eMjEY/0c621d69/.../macro-50ms.exe

http://download985.mediafire.com/bxsb03oldg5g/.../macro 50ms.exe

http://download741.mediafire.com/fzvrv89ipnqg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/8579366e/.../macro-50ms.exe

http://download1187.mediafire.com/h4f7p9xlzbjg/.../macro 50ms.exe

http://download1295.mediafire.com/vn9vz2gtnefg/.../macro 50ms.exe

http://download1590.mediafire.com/gpehk2pbe5wg/.../macro 50ms.exe

http://download741.mediafire.com/ecsb1qmd7zjg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/8ba8e829/.../macro-50ms.exe

http://download1590.mediafire.com/20a333v2olgg/.../macro 50ms.exe

http://download1378.mediafire.com/yw7lfccyrllg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/e9eb2a5e/.../macro-50ms.exe

http://download1378.mediafire.com/cutfq58lgtyg/.../macro 50ms.exe

http://www.speedyshare.com/eMjEY/06002288/.../macro-50ms.exe

http://www.speedyshare.com/eMjEY/dae33e89/.../macro-50ms.exe

http://download1590.mediafire.com/pxo6g0ezdewg/.../Macro 50 ms.exe

Latest 30 of 72 download URLs

Scan macro 50ms.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.