home

plan.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dc690.4shared.com.
MD5:
3d602f4062dd08b2bd68089dc228ab3b

SHA-1:
1e0a0c3d601a50d8d0453bb4c373b9b852e4bd37

SHA-256:
ee5cf12fc30306308b8aa62329a7828a232c5956d73ca5f2154abac9f98d876e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:25:54 AM UTC  (today)

File size:
20.8 KB (21,339 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\plan.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:jiMKcRAa5r9DIiXbwVBD8cnH3RxGXmbWqKNefP4ycbp5L2zVcr8DJZTO4uNh:jiDa5r9DFsgcH3HGXmiqKNoP4ysIfJZg

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 3C, 68, 74, 6D, 6C, 20, 64, 61, 74, 61, 2D, 61, 64, 62, 6C, 6F, 63, 6B, 6B, 65, 79, 3D, 22, 4D, 46, 77, 77, 44, 51, 59, 4A, 4B, 6F, 5A, 49, 68, 76, 63, 4E, 41, 51, 45, 42, 42, 51, 41, 44, 53, 77, 41, 77, 53, 41, 4A, 42, 41, 4E, 6E, 79, 6C, 57, 77, 32, 76, 4C, 59, 34, 68, 55, 6E, 39, 77, 30, 36, 7A, 51, 4B, 62, 68, 4B, 42, 66, 76, 6A, 46, 55, 43, 73, 64, 46, 6C, 62, 36, 54, 64, 51, 68, 78, 62, 39, 52, 58, 57, 58, 75, 49, 34, 74, 33, 31, 63, 2B, 6F...
 
[+]

The file plan.exe has been seen being distributed by the following URL.

http://dc690.4shared.com/download/.../pLan.exe

Scan plan.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.