home

recife.exe

OSMAR AP. SILVA

TV PROGRESSO

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0k-20-docs.googleusercontent.com.
Publisher:
TV PROGRESSO

Product:
OSMAR AP. SILVA

Description:
RELOGIO DE TEMPO

Version:
1.0.0.0

MD5:
defa20756940f5af7b8caac0e995668e

SHA-1:
3f9537a29dbc98ff7028868e6caa600b914e6619

SHA-256:
84744518f9459ba1d65e883c4ea73df3a7ff6037e72898da38bf81cd563ca04d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 2:29:15 AM UTC  (today)

File size:
1.4 MB (1,432,576 bytes)

Product version:
1.0.0.0

Trademarks:
TV PROGRESSO

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\downloads\recife.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:/HZw2SHUZFNCSeTVkW4gPf0pOleSA/Q9RbSA/Q9pz0Kdj4z0:/HZw2zZ6ScW215AAmANgX

Entry address:
0x3CE2C

Entry point:
55, 8B, EC, 83, C4, F4, 53, B8, EC, CC, 43, 00, E8, C7, 82, FC, FF, 8B, 1D, 60, DB, 43, 00, 8B, 03, E8, 8E, F0, FE, FF, 8B, 03, BA, 04, CF, 43, 00, E8, AA, ED, FE, FF, 8B, 0D, E8, DB, 43, 00, 8B, 03, 8B, 15, 34, BF, 43, 00, E8, 87, F0, FE, FF, 8B, 0D, 00, DC, 43, 00, 8B, 03, 8B, 15, F8, 44, 43, 00, E8, 74, F0, FE, FF, 8B, 0D, 3C, DB, 43, 00, 8B, 03, 8B, 15, F4, 3F, 43, 00, E8, 61, F0, FE, FF, 8B, 0D, B8, DA, 43, 00, 8B, 03, 8B, 15, 54, 86, 43, 00, E8, 4E, F0, FE, FF, 8B, 0D, 9C, DB, 43, 00, 8B, 03, 8B, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
240 KB (245,760 bytes)

The file recife.exe has been seen being distributed by the following URL.

https://doc-0k-20-docs.googleusercontent.com/docs/securesc/0p47s1pu7b0c200hdj02bsbthhfqlrrk/ial3c4v454nggusdb2335r5d1j7v1st9/1459634400000/.../14898688201755695745/0BwL70H6N1L6heEFQbEVqN1RJcWs?e=download

Scan recife.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.