home

setup_6182mnc.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl.fly086.com.
MD5:
54847c674477f7c1fbe520f9e0e931f5

SHA-1:
df18f0f3057e625f6709dfcb1e2d01c9f3574b73

SHA-256:
f82716222ea75dfe19f097238357ddf57185ad14084b971ad8efbf33dcae060f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:14:14 PM UTC  (today)

File size:
1.9 MB (1,968,544 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:1SXV5aObnH6Hd2RROh7pL4njquycJxmQXx8lIM9NtOW+L:sDaOTHk2g1V4n2V83XKptOr

Entry point:
A6, 31, 76, BA, 8D, 67, E2, AF, 8F, 89, 9F, 98, 02, 81, 38, C1, 7A, 4D, B8, C6, DB, 75, 40, 2F, 14, 3D, BC, 6C, 81, 86, 29, 99, 24, CF, C9, F2, 4B, C9, 99, 23, DD, F7, 55, 4D, 89, 64, A1, 3C, 67, 4E, FE, 75, E7, E3, 27, 13, 2D, 92, 7A, B3, AA, AE, F9, 58, F7, F4, E1, BD, A5, 50, DB, DE, F0, 56, 25, 3B, BA, A6, 58, 65, 9F, 05, 66, 44, 9B, F7, 6C, E5, 66, 8D, 38, DF, 39, FF, 28, 24, 0E, 59, 91, 5F, DC, A8, 81, C2, 23, 35, 34, 2F, BE, 49, D3, D6, A2, ED, 28, 76, D5, ED, DF, 6B, 8A, 4C, 88, 13, 0E, 30, 59, D3...
 
[+]

Entropy:
7.9954  (probably packed)

The file setup_6182mnc.exe has been seen being distributed by the following URL.

http://dl.fly086.com/d.php?id=6182

Scan setup_6182mnc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.