home

n16d408.exe

This is a setup program which is used to install the application.
MD5:
4918e43f959e9aae077fe4ba08ac9553

SHA-1:
334d1e734ad23b54706497fc04fec1a2762fe221

SHA-256:
96645d2db79ec6307057f55855173927d67a51e9250488eff9dadf8bb59fada0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:54:56 AM UTC  (today)

File size:
8.7 MB (9,093,595 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\n16d408.exe

File PE Metadata
OS version:
124.4353

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
196608:gJP0ffZ0yA2CW1910TlUj61dsZnwhyJHLudazOW:6K0M1klAe2J0EqazOW

Entry address:
0x10C0106

Entry point:
4D, 5A, 90, 00, 02, 00, 00, 00, 22, 00, 11, 00, FF, FF, 07, 00, 00, 01, 65, 40, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
192 KB (196,611 bytes)

The file n16d408.exe has been seen being distributed by the following URL.

ftp://ftp.netscape.com/pub/communicator/english/4.08/windows/windows3.1/.../n16d408.exe

Scan n16d408.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.