home

naild-demo.exe

MD5:
93960950f105601e09bd1fdd728ee01d

SHA-1:
97fca3bcf9760a26f0b7295af9ecd310a9ce563a

SHA-256:
bfea7b3c78310d08dea05e9edc2f7be82d799768f8c1f0e3a9b68b7876ee0c32

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:15:46 AM UTC  (today)

File size:
7.1 KB (7,228 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\programs\naild-demo.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:UIMDK6N8w+YnR7L8FmH4jiHcTc+cqcycRCBAQYvWgzglmc4KhgQKx6vgLsa7c1+h:ZqN8w+YnR7L8FmH4jiHcTc+cqcycRCBg

Entry point:
76, 61, 72, 20, 5F, 30, 78, 65, 35, 34, 37, 3D, 5B, 22, 5C, 78, 34, 38, 5C, 78, 36, 39, 5C, 78, 37, 33, 5C, 78, 37, 34, 5C, 78, 36, 31, 5C, 78, 37, 34, 5C, 78, 37, 33, 5C, 78, 32, 45, 5C, 78, 37, 33, 5C, 78, 37, 34, 5C, 78, 36, 31, 5C, 78, 37, 32, 5C, 78, 37, 34, 22, 2C, 22, 5C, 78, 33, 31, 5C, 78, 32, 43, 5C, 78, 33, 33, 5C, 78, 33, 32, 5C, 78, 33, 34, 5C, 78, 33, 34, 5C, 78, 33, 39, 5C, 78, 33, 32, 5C, 78, 33, 31, 5C, 78, 32, 43, 5C, 78, 33, 34, 5C, 78, 32, 43, 5C, 78, 33, 30, 5C, 78, 32, 43, 5C, 78, 33...
 
[+]

Entropy:
4.7521

The file naild-demo.exe has been seen being distributed by the following 2 URLs.

http://downloadcdn.betterinstaller.com/installers/f/.../FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe

http://www.googleadservices.com/pagead/aclk?sa=L&ai=CjXccZzkbV96-OoGrywPN8rm4Boy_o7xE1f6Dw9oC5efOjYwFCAQQASgFYOXy54PUDqAB9JTb3wPIAQepAkkj81suHFA-qgQoT9BQu-kI-qYPzpRqzEqCHkKdh8Siel5kzO8m36VdRyyAC8BQB9TyBcAFBaAGJoAHhbbSI4gHAZAHAqgHpr4b2AcB4BLPh42J-tDYvEA&ctype=5&clui=3&ved=0ahUKEwiNx8bFsqTMAhUlOJoKHSFTAUgQwg8IHg&sival=AF15MEBYv4pW5U3K3OQwtklGQawLX5L7uZjKr16sj-vhnKaSIWVJEOpRI4-seY0aAQJt2jh9OccJxJ_hNeFnqUxOAz-VOpnJHA&sig=AOD64_3oC3hXEeqMgtY1hMSb6IOtBNdZUQ&adurl=http://www.snapdeal.com/product/.../676860597612?utm_source=earth_feed&utm_campaign=12_175&utm_medium=110611363&utm_content=676860597612&utm_source=earth_feed&utm_campaign=TopPerformersPLA&utm_medium=cpc&utm_content=676860597612&utm_term=,&campaignid=334666885&adgroupid=28018067125&adposition=1o1&network=g&device=c&targetid=pla-175048471525

Scan naild-demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.