home

sf36b.exe

MD5:
7bf0a90519c388e6599da2815240ab47

SHA-1:
f62f84693d56eeb2d20b46b4a9d4d5ed3e86d0fa

SHA-256:
1bea1b596920f1f4e8b35e480d0de1627da4f455e6daffcaa0da3a13f7670acd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:57:11 PM UTC  (today)

File size:
22.9 KB (23,424 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\sf36b.exe

File PE Metadata
OS version:
206.0

OS bitness:
Win16

CTPH (ssdeep):
384:RVLwi1gy3yGGq7xC7t+lXoN/ibbYXemiLJeVM3j41X+FmnuY:RVLh1xCGF7etaXoNqb0XezJeVM3MImn

Entry address:
0xA4

Entry point:
4D, 5A, 4C, 01, 2E, 00, FA, 01, A0, 00, 00, 00, FF, FF, AD, 06, 00, 02, A3, 25, 1A, 00, 00, 00, 1C, 00, 00, 00, 04, 00, 00, 00, 06, 00, 00, 00, 08, 00, 00, 00, 1D, 00, 00, 00, 29, 00, 00, 00, 2E, 00, 00, 00, 36, 00, 00, 00, 43, 00, 00, 00, 48, 00, 00, 00, 50, 00, 00, 00, 58, 00, 00, 00, 5D, 00, 00, 00, 65, 00, 00, 00, 6D, 00, 00, 00, 72, 00, 00, 00, 7A, 00, 00, 00, 82, 00, 00, 00, 87, 00, 00, 00, 8F, 00, 00, 00, 97, 00, 00, 00, 9C, 00, 00, 00, A4, 00, 00, 00, AC, 00, 00, 00, B1, 00, 00, 00, B9, 00, 00, 00...
 
[+]

Entropy:
6.6465

Code size:
143 Bytes (143 bytes)

The file sf36b.exe has been seen being distributed by the following URL.

http://gim.med.ucla.edu/FacultyPages/Hays/utils/.../SF36B.EXE

Scan sf36b.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.