home

863a654b-93e0-97ef-4a69-01de6127803a_1d1bb297cfb4da2

MD5:
4ea8cc29bc8cb328cbde0b6733dc20d6

SHA-1:
5cbe82db3a1f84f7a661c663802a155c3d566b1c

SHA-256:
57bfab93262ef7670ed203d5657a0149617829d124323a9d44173b2ce9ec01f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/4/2025 1:56:59 AM UTC  (today)

File size:
9.9 KB (10,164 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\863a654b-93e0-97ef-4a69-01de6127803a_1d1bb297cfb4da2

File PE Metadata
Compilation timestamp:
5/24/2016 11:05:16 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
192:viWfvGgtYgzukLUVwhlMaPrdQ9E8JL8DQWXwzLE0A2aJvrb0494AzXVy:NvGgtXUEfPrC3L0hg/EbXfKL

Entry address:
0x54190

Code size:
465.5 KB (476,672 bytes)

The file 863a654b-93e0-97ef-4a69-01de6127803a_1d1bb297cfb4da2 has been seen being distributed by the following URL.

http://www.towersvaultbundles.com/c?x=92cdHFwe92w9RsqoEWFB9BJSJbTgXuSrGPgCO4j1QSs=&c=0TgGsuTgsXlC1hDMIZIeONtTEtuXRC6bR/acql4BoH6ZP8bVJ/9FvaDjeB0USABJymeCRL7qCR8tvPA04m MgrP6/cXvDweuUIf7QZfMPZ/n0AJjU1Lb7cAoWLbm0t/M&fallback_url=https://.../ZonaSetup[iZz0].exe&downloadAs=ZonaSetup[iZz0].exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.