home

peggyzone-sims3-f-fhair129-vc56.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s10112.chomikuj.pl.
MD5:
1b156c811811e9aaba96835e32e773ff

SHA-1:
651c2d73f34db084d8d4fc09fd852305cf242f98

SHA-256:
2b4717a978c1e08f830214d8a4f9f0dbc2276c3dfeb5c53422b8f1fd89ab097b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:06:46 PM UTC  (today)

File size:
6.6 MB (6,870,134 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\peggyzone-sims3-f-fhair129-vc56.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:fynJecuCJ0W2LYtTV+v0mpXuSB5skDqlihpmRJBIS6c:fPcu0F38v0YXuCfRhSBp6c

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 4D, 86, 3A, 3D, 0A, BB, DA, 17, 6D, 65, 00, 00, EA, 66, 00, 00, 1E, 00, 00, 00, 70, 65, 67, 67, 79, 7A, 6F, 6E, 65, 2D, 73, 69, 6D, 73, 33, 2D, 46, 2D, 46, 68, 61, 69, 72, 31, 32, 39, 2E, 6A, 70, 67, 95, BB, 05, 50, 1C, C1, B7, 3E, BA, 58, 08, 9A, 40, 90, E0, C1, 1D, 82, 3B, 04, 77, 77, 0F, 1A, 6C, 81, C5, 9D, 40, 90, E0, 0E, C1, 6D, 17, 58, C8, 42, B0, C5, 21, C1, 35, B8, 2E, EE, EE, AE, 2F, B7, EA, D5, BF, DE, FD, DD, FB, 5E, D5, FB, A6, A6, 6B, BA, A7, AA, EB, 74...
 
[+]

The file peggyzone-sims3-f-fhair129-vc56.exe has been seen being distributed by the following URL.

http://s10112.chomikuj.pl/File.aspx?e=aNFc3pvLTQPjrDLPHGckf-qGg43Pd26GrTbCgwwawqy3nfungGyfGQFQQMMMKyXD9DdLCbzZjolxkQ32M4p6l0m1E_l2Nt2bD_bI2xWzWm2xl_yPo4ePPB_kDSXtKqu8NUBK3zgWED_Qb1qAmvT9gesZc2-HoYwQp9wl6rqRyXQ&pv=2

Scan peggyzone-sims3-f-fhair129-vc56.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.