home

тест._договоры.exe

MyTestXPro

www.klyaksa.net

This is a setup program which is used to install the application. The file has been seen being downloaded from docviewer.yandex.ru.
Publisher:
www.klyaksa.net

Product:
MyTestXPro

Description:
Computer testing of knowledge (MyTestStudent)

Version:
11.0.0.32

MD5:
8a2f1f9e5c7797dab6284d24b1710b73

SHA-1:
b49fa1dd4fee758f57f53e559b09ee8e610fd705

SHA-256:
ea3e99266051ab72c15229dd222cf0283236449f89e2dac2e5b6b1b00fd48650

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:35:59 AM UTC  (today)

File size:
9.1 MB (9,581,568 bytes)

Product version:
11.0

Copyright:
Alexander Bashlakov

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\????._????????.exe

File PE Metadata
Compilation timestamp:
10/17/2014 9:56:55 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:jhzZAZ1EwPHFodlDu29xWX8x09YEM3DPT4acs9mO8DUG4K2Gyl6K/w:hZGQlzBXh4pso/2n6K/w

Entry address:
0x58A360

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 08, 9D, 97, 00, E8, DB, 48, A8, FF, 8B, 1D, 68, B2, 9A, 00, 8B, 03, E8, F2, 0E, CA, FF, 8B, 03, B2, 01, E8, 35, 2C, CA, FF, 8B, 03, BA, 44, A4, 98, 00, E8, 8D, 08, CA, FF, 8B, 0D, 68, AA, 9A, 00, 8B, 03, 8B, 15, C8, 8C, 94, 00, E8, E2, 0E, CA, FF, 8B, 0D, D4, A7, 9A, 00, 8B, 03, 8B, 15, E8, 2E, 8F, 00, E8, CF, 0E, CA, FF, 8B, 0D, E8, B3, 9A, 00, 8B, 03, 8B, 15, AC, 3C, 8F, 00, E8, BC, 0E, CA, FF, 8B, 0D, 94, AA, 9A, 00, 8B, 03, 8B, 15, F0, 01, 91, 00, E8, A9, 0E, CA, FF, 8B...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
5.5 MB (5,805,568 bytes)

The file тест._договоры.exe has been seen being distributed by the following URL.

https://docviewer.yandex.ru/source?id=7gsmy-d718cbyacr0pgoq6p5kqfiq54uyolon6x538eeb969one2ys3bar2gb419gnkh965i6ill0ue6cbu3zlmxcp74551quqsvhkewz&archive-path=//.../????._????????.exe&ts=14cc790fa45&token=YnonSHjufw6Qq9f6jZO8oQ==&name=????? ??????.rar

Scan тест._договоры.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.