home

園遊位置圖104.doc.exe

MD5:
642a0b0a0cb0d23d66d85935985ec8fc

SHA-1:
c2323e0632a070e9006987b0239926b13a4dc254

SHA-256:
2b4fd8302fa6c9a09df0f6e2ce4371622b1f20eee553295b5c6bc8de2551b150

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 3:36:23 PM UTC  (today)

File size:
56 KB (57,344 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\%e5%9c%92%e9%81%8a%e4%bd%8d%e7%bd%ae%e5%9c%96104.doc.exe

File PE Metadata
Compilation timestamp:
2/7/2106 2:28:15 PM

OS version:
65535.65535

OS bitness:
Win16

Linker version:
255.255

CTPH (ssdeep):
384:W9Y4Hu/1Zed+Qxdw2k3VCSZmmjgrJmqiSEYnxbzffzYE762lq+MQmWPl:Wljlx3DYE1

Entry point:
D0, CF, 11, E0, A1, B1, 1A, E1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 03, 00, FE, FF, 09, 00, 06, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 6B, 00, 00, 00, 00, 00, 00, 00, 00, 10, 00, 00, 6D, 00, 00, 00, 01, 00, 00, 00, FE, FF, FF, FF, 00, 00, 00, 00, 6A, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF...
 
[+]

Entropy:
3.8641

The file 園遊位置圖104.doc.exe has been seen being distributed by the following URL.

https://doc-14-04-docs.googleusercontent.com/docs/securesc/ah6lte3gbk9i6f2hp3kdejuth8s6vivb/enslho4n5k0hmtlbv1v28alcfs36rp0q/1466906400000/.../10963306613165581679/0B8K8GY5I9yljR3djbnpvbnlETDA?e=download

Scan 園遊位置圖104.doc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.