home

prezi.exe

MD5:
a75988e32c623dd43071861e5677cfe2

SHA-1:
e0be685f8b62f42724d06678916714680afef3d7

SHA-256:
e3328de058cc66e4b0431844320814f7298038ae82f34d3d15ee3335b2f7de1e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:54:50 PM UTC  (today)

File size:
114.5 KB (117,248 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\untitled-prezi\prezi.exe

File PE Metadata
Compilation timestamp:
12/7/2012 3:27:54 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
3072:7bfvOSiYGbZ36uq6mMpL2b2ocpPrFJ2q:P+S3GtRGMpL2M5f2q

Entry address:
0x1279

Entry point:
E8, 8F, 1A, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, FF, 15, 04, A0, 40, 00, 6A, 01, A3, E4, 00, 41, 00, E8, AD, 1D, 00, 00, FF, 75, 08, E8, CB, 20, 00, 00, 83, 3D, E4, 00, 41, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 93, 1D, 00, 00, 59, 68, 09, 04, 00, C0, E8, 99, 20, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 34, 7F, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, C8, FE, 40, 00, 89, 0D, C4, FE, 40, 00, 89, 15, C0, FE, 40, 00, 89, 1D, BC, FE, 40, 00, 89, 35, B8, FE, 40, 00, 89, 3D, B4...
 
[+]

Entropy:
6.5676

Code size:
33 KB (33,792 bytes)

The file prezi.exe has been seen being distributed by the following 50 URLs.

https://mg.mail.yahoo.com/ya/.../vhswAAAP839rI&fid=Inbox&pid=7&clean=0&appid=YahooMailNeo

http://lmspis.cidos.edu.my/mod/.../view.php?id=85489

https://doc-14-58-docs.googleusercontent.com/docs/securesc/fg4lguh4hen0hqlnjba1vsr5jad3fbkg/do5r72lkks9bup503oqitm40ppgu7qnj/1479672000000/13093858563295291287/.../0B2TZK4xG53IZWlZVREc0OFJyNnc?e=download

https://onedrive.live.com/download.aspx?cid=37222ADAB431CB59&authKey=!AIf4vrrfrOmnO_E&resid=37222ADAB431CB59!1281&ithint=.exe

https://mail.google.com/mail/u/.../?ui=2&ik=f369bd04f0&view=att&th=147ed73dd6f56854&attid=0.1&disp=safe&realattid=f_hz0zoac00&zw

https://doc-08-cc-docs.googleusercontent.com/docs/securesc/6vr6o3igsm4d7rs3ffohn8c86t1fi858/ols2udvgbn5rlue07amkra5tptmamf9j/1454781600000/07627523366173959124/.../0B0BrQ-aius5KVWN1YU44UmRlakk?e=download

http://mail7b.webmail.libero.it/cp/ps/Mail/.../Prezi.exe

https://doc-14-c8-docs.googleusercontent.com/docs/securesc/79pgo3l1jijucoobo6cs65j2k6g6ooj6/s36ot6g6qpvdn7ii8tbi62p4470lnidh/1473861600000/.../17246241874385935436/0B2y7L-NJ6GVpaS1zemFWTVlvTE0?h=07969425113516205582&e=download

https://learn.valenciacollege.edu/courses/1/201510-SLS-1122-16667/messaging/users/_456642_1/attachments/.../Prezi.exe

https://webmail.ig.com.br/?_task=mail&_uid=30155&_mbox=INBOX&_action=get&_part=2&_download=1

https://docs.google.com/uc?authuser=0&id=0B5e93-69zsyCdEpBT2lGbk8tMGM&export=download

https://lms.psau.edu.sa/webapps/assignment//download?course_id=_72923_1&attempt_id=_94535_1&file_id=_207871_1&fileName=Prezi.exe

http://moodleufv.ufv.es/moodle/pluginfile.php/226165/assignsubmission_file/submission_files/.../Prensa.exe

http://psycholinguisticsuce.wikispaces.com/file/.../Launguage and the Brain.exe

https://cf.managebac.com/uploads/asset/file/.../Prezi.exe

https://servicos.ulbra.br/pls/ulbra24/.../7530-1230610.exe

https://doc-14-8c-docs.googleusercontent.com/docs/securesc/3jkkvl7jpgq13d3501s9vu7iqhd0bi2c/jh66l91cec7khq5ml5tquucqf5l06sgp/1462053600000/11833225122956513141/.../0B0TdMhTGSpAKRjhWUWNaLTlDczA?e=download

https://mega.nz/temporary/.../TpoVyIaL

https://www.jumbomail.me/.../Downloads.aspx?sid=4A46626F4A6A5A36766B6E464B3342347436653838673D3D

http://udecvirtual.unicundi.edu.co/moodle/mod/.../view.php?id=24190

https://blackboard.it.chula.ac.th/bbcswebdav/.../xid-2272353_2

https://app.schoology.com/system/files/drop_items/m/201610/course/.../Prezi_57f83b8da3c0b.exe

https://onedrive.live.com/download.aspx?cid=E7A4B8A4B7123A72&authKey=!AKuXLVNa9-GY-wM&resid=E7A4B8A4B7123A72!136&canary=G9RPfifFgyoGuM6jT5g904aD0mN1VZSkvR59fgl tgs=9&ithint=.exe

https://doc-00-8o-docs.googleusercontent.com/docs/securesc/8p44qdabcvqbqo068e1nl2e4tc34mkp9/8cvopb97a3rltokqapimljkgr60dlas7/1446400800000/.../15445312507271228688/0B0QTdr7a-MirMm1WazYwTW11WWs?e=download

https://dl.dropboxusercontent.com/content_link/.../file?dl=1

https://virtual.usanpedro.edu.pe/pluginfile.php/77655/assignsubmission_file/submission_files/.../Prezi.exe

https://doc-0c-14-docs.googleusercontent.com/docs/securesc/31nkm6esqr0n6skn1oan4svkl20edmgs/ri5dqsjqgtne6uu5cvo71t142hdnfbea/1464955200000/02528058325901113540/.../0B7j4JxcwQMulNDJDbVhaYlMyVXM?e=download

http://academiadeaviacion.com/aulavirtual/draftfile.php/1554/user/draft/.../paquete turistico a santa marta.exe

https://blackboard.adu.ac.ae/bbcswebdav/.../xid-2614646_1

https://iusto.neolms.com/files/.../Prezi(2)_lmsauth_958846baa0f29c2fed902d93966120722ef35ac4.exe

Latest 30 of 464 download URLs

Scan prezi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.