home

vce-exam-simulator.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.avanset.com.
MD5:
b0d341eb4e45910e850b1859deb4b706

SHA-1:
f3f237b8156ad6ae3f9087a417c29be12e4443a7

SHA-256:
7aa671836892a31a00f8c64cf8a8b8b7173cb543f0fab5ab36260c0b826f9669

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:06:45 PM UTC  (today)

File size:
15.9 MB (16,692,281 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\vce-exam-simulator.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:6keofxl8koA6ed00KDZ3uJzHK46NlAAtPeJJwoavFRdvOnyg1OaNr:6AZdX10/VeNq4QljR2naNTna1

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 11, 6E, 88, 47, 70, D8, F0, 19, 61, B3, FE, 00, 70, 0E, 04, 01, 21, 00, 1C, 00, 76, 63, 65, 5F, 65, 78, 61, 6D, 5F, 73, 69, 6D, 75, 6C, 61, 74, 6F, 72, 5F, 64, 65, 6D, 6F, 5F, 73, 65, 74, 75, 70, 2E, 65, 78, 65, 55, 54, 09, 00, 03, B1, DF, 66, 56, 7E, DB, 66, 56, 75, 78, 0B, 00, 01, 04, 00, 00, 00, 00, 04, 00, 00, 00, 00, CC, BD, 0B, 5C, D4, C5, F6, 00, FE, DD, 07, B0, C0, EA, AE, 8A, 8A, 66, 45, 85, A5, F9, 08, C3, 4A, 45, 6A, 11, D6, F0, 81, AE, 22, F8, B6, 4C, DD...
 
[+]

Entropy:
8.0000  (probably packed)

The file vce-exam-simulator.exe has been seen being distributed by the following URL.

http://www.avanset.com/demo/.../vce-pro-12-months.html?act=download

Scan vce-exam-simulator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.