home

office_free_2013.exe

MD5:
4de37c28007b088654785574e138eac8

SHA-1:
8b7a5500ad8774134a3798ca89c69f72d90957fa

SHA-256:
92a50dcbecda6a14daaa9155a4cac135db200159ef967b2857680d21e05b0381

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:29:51 AM UTC  (today)

File size:
72 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\office_free_2013.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:g/O9O7xKNRVWiLGJKHPV0WVMv:S9kRbLVpVMv

Entry point:
3C, 73, 63, 72, 69, 70, 74, 20, 6C, 61, 6E, 67, 75, 61, 67, 65, 3D, 22, 6A, 61, 76, 61, 73, 63, 72, 69, 70, 74, 22, 3E, 73, 65, 74, 54, 69, 6D, 65, 6F, 75, 74, 28, 22, 73, 65, 6C, 66, 2E, 63, 6C, 6F, 73, 65, 28, 29, 3B, 22, 2C, 31, 30, 30, 29, 3C, 2F, 73, 63, 72, 69, 70, 74, 3E, 0D, 0A...
 
[+]

Entropy:
4.7672

The file office_free_2013.exe has been seen being distributed by the following 8 URLs.

temp:virtualdjhomev7.4.1.exe

http://www.dofreedownload.com/.../flashplayer_13_ax_debug.exe

http://www.dofreedownload.com/.../PowerPointViewer.exe

http://www.dofreedownload.com/.../WebFreer_Setup_1.1.1.1.exe

http://www.dofreedownload.com/.../office_free_2013.exe

http://www.dofreedownload.com/.../SkypeSetupFull.exe

http://www.dofreedownload.com/.../TorchSetupkFull-r294-n-bf.exe

http://www.dofreedownload.com/.../wordview.exe

Scan office_free_2013.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.