home

visualg-32-bits.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.baixakicontent.com.
MD5:
a19183973372a5662feb644def0304f1

SHA-1:
9bb59417fb7b0540d7c3e4278db4c84c1daed9b0

SHA-256:
ec87c0eac7ea8d603589520a20815ea75945b3a679b5f9dc8fdc957dec53cc03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:24:59 AM UTC  (today)

File size:
871 KB (891,874 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\visualg-32-bits.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:hhm3y3NyXZoQEcbh63WYoGNog5ET1AFVpI3w2iJTN:hh+C8XOhcbh63WjGNJu6FYniJN

Entry point:
78, DA, 63, 60, 18, 05, 43, 18, FC, FB, FF, FF, 1D, 10, 33, 02, 99, FF, FD, 49, D7, 1E, BA, 0A, 00, F5, 74, 09, 35, 78, DA, 73, 75, F3, 54, 08, 70, 0C, 0A, 61, 60, 60, 64, 88, 61, 60, 60, 38, 38, 57, 8B, 15, 48, 01, 79, 10, F0, DF, 1F, 42, 2B, 41, F9, F7, A0, FC, 3A, C9, 22, 86, DF, 26, 17, FD, 5B, 1A, F7, D5, 69, DA, FB, 6E, 60, 82, CA, 37, 40, 71, EB, CF, DE, 97, 0C, A3, 60, D0, 03, 00, AA, 8E, 11, A8, 78, DA, ED, C5, 31, 0A, 41, 01, 00, 06, E0, DF, 11, DE, 0D, 8C, 32, 39, 81, 42, 64, 33, BC, 13, BC, 7A...
 
[+]

The file visualg-32-bits.exe has been seen being distributed by the following URL.

http://cdn.baixakicontent.com/?x=HwO02Y0onc8LFBTW nV979/mTT6tUgK plutj2PBHmI=&key=FIVpoQsqlGzKt1b4V9zscTxPRF2OzxxueeLteSPNh1iNummZYXx5qzpN7U8QOgEAdrqnLFQP8FVjkKOQPh9WcdYKpubPGVWetQ0ywZKls2xL2oZMPOa qYu5jsdRVhWf6K 7kT9WS1pMSHBkJ6HcqEXkazlIC01oNql6NU1T5Crpi S5FmaStIRonxyXFoLlvMPzK6FBlJlIDRAzsaW3P84Vta71EjcG3T/qPy855ky6GDgJ8CKANgl/Ca1OX0mTovCB72IytJwZEXPaHLVP7POyT/TSTe7wWbqKVL4iXdZYKIFGIQtuFhn1QcVH/2rZR1zYpEtGUR Cu3f9cSnqJQ==&data=IwU9LGpwn24R6FMztarLcq0rLoRQqE3LSsF3SKgVAx2qCF2hBM0aORAoDulX7G42LGx4o37LFgfsshbcKYfMxAsimC0ANuiJY41DrGEaSPYtVrLx5wUK6gsx5bDu6AvHuVjGBkJPuqsk7SuNWIIF7o49cm9KRyplT9djKtGNiJGCRKKrvFL9D1m5MBYHiNOHJ5b2a3ezWoyT2KKgT/DYZm2EfyGDewM66JJxm1N6YaFxoahYa7igwwIsV/sEznJnDBi3FQouPX/6Un7DmmO/OyEvyCaXjN//jZUhPCE wT TZSEetI7DHrobu0cu3W4o4aoCf3ZPH/cJJmj3Av7eAhEN0M/UH82GIEnieP4ab9o25Xycb0vGtwgY1bJw57H6fbWXh9QD8BIBYv9ZtAZfMngnvvgKvcowcBACoNKoW4PN2N07nTUKrjkiQoFXoXENQN3Xoa9hlSh6Ej4xryR5CMVMOZkytfY3/.../K8x4EHJjV66CiHtt7tipgSRsuX

Scan visualg-32-bits.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.