home

run.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from docviewer.yandex.ua.
MD5:
637f1c6b22e42d522369b8a9ca6ba082

SHA-1:
d03fe57df937a164ef9b186dc7bc39e9d278a4ba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 9:29:25 AM UTC  (today)

File size:
2.3 MB (2,449,920 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\съемный диск\merc manual\run.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:f5doYEboCSzBTWfXWjtPc0qNr1ZXZ+c6:f5KYEbrQkGjdpKr/XZ

Entry address:
0x20EA1C

Entry point:
55, 8B, EC, 83, C4, F0, B8, F4, E2, 60, 00, E8, 0C, 86, DF, FF, 68, B0, EA, 60, 00, 6A, 01, 6A, 00, 6A, 00, E8, B0, 87, DF, FF, E8, 73, 88, DF, FF, 3D, B7, 00, 00, 00, 74, 60, A1, CC, 94, 61, 00, 8B, 00, E8, B8, DF, E5, FF, 8B, 0D, 78, 93, 61, 00, A1, CC, 94, 61, 00, 8B, 00, 8B, 15, 6C, CB, 60, 00, E8, B8, DF, E5, FF, 8B, 0D, C4, 94, 61, 00, A1, CC, 94, 61, 00, 8B, 00, 8B, 15, BC, C6, 60, 00, E8, A0, DF, E5, FF, 8B, 0D, C4, 90, 61, 00, A1, CC, 94, 61, 00, 8B, 00, 8B, 15, A8, FE, 5B, 00, E8, 88, DF, E5, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.1 MB (2,153,472 bytes)

The file run.exe has been seen being distributed by the following URL.

https://docviewer.yandex.ua/source?id=35k43c-1uv5y4fw14s0ib5d7bwmcpumxl3iyecb0w3drr5yn3jpky99nhllo7w1nuq8qdv8ah48koez2be5xh547nrsfpinux9pqpjoueu&archive-path=//Run.exe&ts=14a7bc9140e&token=1DUbXjV j3aRHidHzqIMmw==&name=KIAmagentis.rar

Scan run.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.