home

saper.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from annac.w.interiowo.pl.
MD5:
fc7fccedb4f464d7b2ff620784fe6cea

SHA-1:
bcf5ce519fe32da32521e6a6459abb71932aad5c

SHA-256:
930560d32f97a771ca3c82d19b1f65229deeca9ae37e6c9484284726bbaec3aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:43:19 PM UTC  (today)

File size:
57.3 KB (58,648 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\saper.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:veRIVQTeuH4bPjbT9gkGIpU0vcTk+6Xy5UC2yBSOaYAm3P2qSrKZtc7CN/2uvg3Y:vMP4nvNU0v8guDSOTPYKZ+uZXx

Entry point:
4D, 5A, 18, 01, 73, 00, F1, 00, 60, 00, 1B, 00, FF, FF, FB, 0D, 80, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 00, 00, 01, 00, FB, 50, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 5E, 00, 00, 00, A3, 00, 00, 00, 4F, 01, 00, 00, FF, 03, D0, 04, E4, 03, D0, 04, C9, 03, D0, 04, B8, 03, D0, 04, A9, 03, D0, 04, 9F, 03, D0, 04, 91, 03, D0, 04, 74, 03, D0, 04, 44, 03, D0, 04, 36, 03, D0, 04, FE, 02, D0, 04, E6, 02, D0, 04, DB, 02...
 
[+]

The file saper.exe has been seen being distributed by the following URL.

http://annac.w.interiowo.pl/Saper.exe

Scan saper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.