home

pilot.exe

MD5:
145a8cfaad39b6332649a238e7fa0cb1

SHA-1:
40f45b7a2e6828000f88c351213c08da609360c6

SHA-256:
649d6488eabc24c58d35df3ed0c16a2408d97c82477233b357bc7689243acbb9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 9:13:35 PM UTC  (today)

File size:
22.3 KB (22,874 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\compressed\1\pilot.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:KemlJBdIrfy1qW+zwZSBaPXds4W1gKjbanNNcKaXb7FePUwW9RJTlm:qlwyLbZ9W1gKvanT1aL7FeMwsR5lm

Entry point:
4D, 5A, 5A, 01, 2D, 00, 09, 00, 20, 00, 0F, 01, FF, FF, 7C, 06, 80, 00, 00, 00, 00, 00, 00, 00, 22, 00, 00, 00, 01, 00, FB, 20, 72, 6A, 01, 00, 00, 00, CB, 09, 00, 00, 7A, 09, 00, 00, 35, 09, 00, 00, C9, 08, 00, 00, AA, 08, 00, 00, 90, 08, 00, 00, 69, 16, 00, 00, 57, 16, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6724

The file pilot.exe has been seen being distributed by the following URL.

https://api.edmodo.com/files/.../download?f=2ojtaagdb861rrgyxajlrif8h

Scan pilot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.