home

siga11-0516-grupocantu.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.cantu.tecnologia.ws.
MD5:
aa83d67a27b2a40003af712a68480d87

SHA-1:
6501dba22b4ae96b4e2cf5c53ee50e27174059d2

SHA-256:
27c29debd8504c04a6a912b27bd5fbf503b28145834b0c4280e7de66646ede8b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:31:54 PM UTC  (today)

File size:
16 MB (16,732,812 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\siga11-0516-grupocantu.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:Xp/HE3BpyfmuWjxdhHTns86dZ2e6guV51nInkVHbjwQjMhIFG:xHERpyWjxXTns86d0Qudkk7Sn

Entry point:
13, 2D, 7F, 62, B9, F8, 68, B5, A5, C0, 56, 8F, 98, 43, E8, 7E, 9C, 99, 77, 72, 7F, A0, 5F, 2B, BD, E4, 6F, 48, 81, AB, 25, A1, 02, C2, 4F, C1, BB, 5F, 60, BF, 98, 1A, 32, 68, C9, FF, F6, 22, AB, 94, 9F, F1, 1A, 51, 6F, 6B, 44, 55, 65, 23, 26, 91, E0, 35, 26, F9, AA, 75, C2, 2E, 49, EC, D9, 45, 77, DC, C8, DC, E6, E9, 9F, 34, 84, 99, D2, 0D, 4A, 5D, 34, F5, FE, 4C, 0D, 94, 87, 53, 65, 83, 4E, C9, 0E, 4B, DF, F7, 2C, 25, B4, 0C, BA, 65, D2, 48, CC, CA, D9, E9, 6F, 3D, 39, 39, 98, 53, 93, EC, 9E, 33, 94, C6...
 
[+]

The file siga11-0516-grupocantu.exe has been seen being distributed by the following URL.

http://www.cantu.tecnologia.ws/.../Siga11-0516-GrupoCantu.exe

Scan siga11-0516-grupocantu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.