home

test.exe

MD5:
c3af0b77d07887ddd7af94c9ae776d11

SHA-1:
9f520ab75e5fdf349a0b7190fd4122726609b9ca

SHA-256:
5bbd942a910ef2fb5e2e35cf16a9e330443dd2bd9f642a49dc673ec833257783

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 8:37:25 AM UTC  (today)

File size:
9.1 KB (9,344 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\test.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
192:7KLprsP+qAiEclW+vWKVPL4C3sefBJoTVT6+3Pgk1kg+4phN2V:Kprsvm+vhnA3P7K

Entry point:
49, 44, 33, 03, 00, 00, 00, 00, 03, 61, 54, 41, 4C, 42, 00, 00, 00, 01, 00, 00, 00, 54, 43, 4F, 4E, 00, 00, 00, 01, 00, 00, 00, 54, 49, 54, 32, 00, 00, 00, 01, 00, 00, 00, 54, 50, 45, 31, 00, 00, 00, 01, 00, 00, 00, 54, 52, 43, 4B, 00, 00, 00, 01, 00, 00, 00, 54, 59, 45, 52, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8343

The file test.exe has been seen being distributed by the following URL.

http://windows.supportnotices.com/adv/reg/.../test.exe

Scan test.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.