» popularscreensaverssetup.popularscreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe
Overview
Analysis
File Details
Downloads (1)

popularscreensaverssetup.popularscreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe

File name:

MD5:

4b682650c496997e5a62fa51af105f9f

SHA-1:

06d80b3d01cdbb3f6ea850e6127b91c6f91be9b4

SHA-256:

31ce9e3f53379359215596db8368b6436ab952eff3b291bca2575296f3a7696b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 8:15:26 AM UTC (today)

File size:

24.1 KB (24,679 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\popularscreensaverssetup.popularscreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

768:CUyU33dKV7N8pshIE9BQcGvgCPoWQ8Hg3V+IyvbEsic2:CUyIkFN5hIE9BuvSJ8H6V+IyvbT/2

Entry point:

3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 48, 54, 4D, 4C, 20, 50, 55, 42, 4C, 49, 43, 20, 22, 2D, 2F, 2F, 57, 33, 43, 2F, 2F, 44, 54, 44, 20, 48, 54, 4D, 4C, 20, 34, 2E, 30, 31, 2F, 2F, 45, 4E, 22, 20, 22, 68, 74, 74, 70, 3A, 2F, 2F, 77, 77, 77, 2E, 77, 33, 2E, 6F, 72, 67, 2F, 54, 52, 2F, 68, 74, 6D, 6C, 34, 2F, 73, 74, 72, 69, 63, 74, 2E, 64, 74, 64, 22, 3E, 0D, 0A, 3C, 68, 74, 6D, 6C, 20, 6C, 61, 6E, 67, 3D, 22, 65, 6E, 22, 3E, 0D, 0A, 3C, 68, 65, 61, 64, 3E, 0D, 0A, 3C, 74, 69, 74, 6C, 65, 3E, 3C, 2F, 74... 
[+]

Entropy:

6.0882

The file popularscreensaverssetup.popularscreensavers_7i.dhijmjbenobkbfaopobmafipbehikanf.ch.exe has been seen being distributed by the following URL.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.