home

max.exe

MD5:
e8a671c48d55069b40d775ac073d836c

SHA-1:
5c24398c87ce1b25579e6d360a0c46b11ade3809

SHA-256:
6cbd87c043a4aab47f1f31bc09f7808e8f8ee950566767217864ad8e8c52780a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:58:18 AM UTC  (today)

File size:
10 KB (10,240 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\max.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
96:IzhxKXT35xphZRJF7WwTCtBrzPGq30mw+trnWj5AXaKixZr0nkYDHnnG1g8mXwRA:Iy/WwKteq3xtNdEZrqHig8mXKnA

Entry point:
64, 5A, 41, 00, 54, 5A, 41, 00, 3C, 5A, 41, 00, 2C, 5A, 41, 00, 20, 5A, 41, 00, 10, 5A, 41, 00, FC, 59, 41, 00, 54, 5B, 41, 00, E0, 59, 41, 00, 54, 5B, 41, 00, CC, 59, 41, 00, B8, 59, 41, 00, 9C, 59, 41, 00, 88, 59, 41, 00, 70, 59, 41, 00, 54, 5B, 41, 00, 2B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.7903

The file max.exe has been seen being distributed by the following URL.

http://dijlc43cxnk7d.cloudfront.net/max.exe

Scan max.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.