» past.exe
Overview
Analysis
File Details
Downloads (6)

past.exe

File name:

past.exe

MD5:

f43913618a49c2beacf5a0b08fa2e9b1

SHA-1:

a4ed2501ae057a59786b6d6ffc966dcfd39313f7

SHA-256:

caaaf4d6df022c249f1c5bdbad4830ecd31058c0898eee6a6bec52f448ef64a6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

2/25/2025 8:24:44 PM UTC (today)

File size:

4 MB (4,236,800 bytes)

File type:

Executable application (Win32 EXE)

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:3152RlBH9p0PSUrFXocUt3sKZE/zo1Nikbcfnv8sb1CyGV1Jy:315Cl6PSUrFtUt3sm1wkb8

Entry address:

0x2A1940

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, C0, 00, 6A, 00, E8, F3, 60, D6, FF, 8B, 1D, 14, B1, 6A, 00, 8B, 03, E8, 86, 40, DD, FF, 8B, 03, BA, F4, 1B, 6A, 00, E8, FA, 3A, DD, FF, 8B, 0D, 38, B1, 6A, 00, 8B, 03, 8B, 15, 50, BB, 68, 00, E8, 7F, 40, DD, FF, 8B, 0D, 18, B1, 6A, 00, 8B, 03, 8B, 15, F4, CA, 4D, 00, E8, 6C, 40, DD, FF, 8B, 0D, 4C, AE, 6A, 00, 8B, 03, 8B, 15, 54, F8, 5E, 00, E8, 59, 40, DD, FF, 8B, 0D, 98, B1, 6A, 00, 8B, 03, 8B, 15, C8, 27, 68, 00, E8, 46, 40, DD, FF, 8B, 0D, 78, AE, 6A, 00, 8B, 03, 8B, 15... 
[+]

Entropy:

6.6393

Developed / compiled with:

Microsoft Visual C++

Code size:

2.6 MB (2,755,072 bytes)

The file past.exe has been seen being distributed by the following 6 URLs.

https://onedrive.live.com/download.aspx?cid=55DF5DACB4667461&authKey=!AGI7w4ankgnFCEk&resid=55DF5DACB4667461!4127&ithint=.exe

http://portalprogramas-download.com/d/.../Past

http://cdn.portalprogramas-download.com/d/.../Past

http://esri.szop.ztikm.szczecin.pl/Past.exe

https://learningcentral.cf.ac.uk/bbcswebdav/.../xid-5591542_2

http://www.nhm2.uio.no/norlex/.../Past.exe

Scan past.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.