home

chrome___click_to_safe_install___________________________ma2_9506_176681_gc.exe

The executable chrome___click_to_safe_install___________________________ma2_9506_176681_gc.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from www.cooct13hen.com.
MD5:
42c105b32845026d0a455c323adcdf86

SHA-1:
cad7de664836f8575ceacc19e89c8136c5edf9ad

SHA-256:
f4e5850224020abd5ac66df7d92a71f434f8e642b83a9999a78a1928fe27a135

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/19/2024 2:02:15 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.22.17

File size:
32 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\chrome___click_to_safe_install___________________________ma2_9506_176681_gc.exe

File PE Metadata
Compilation timestamp:
4/28/2014 5:19:46 AM

OS bitness:
Win64

Linker version:
49.126

CTPH (ssdeep):
3:r+WqaGfvn:qz3Hn

Entry point:
0D, 0A, 0D, 0A, 5B, 73, 74, 61, 72, 74, 5D, 53, 75, 62, 49, 44, 44, 61, 74, 61, 3A, 31, 37, 36, 36, 38, 31, 7E, 47, 43, 0D, 0A...
 
[+]

Entropy:
4.2181

Packer / compiler:
RLPack FullEdition V1.1X

Code size:
160.8 MB (168,641,351 bytes)

The file chrome___click_to_safe_install___________________________ma2_9506_176681_gc.exe has been seen being distributed by the following URL.

http://www.cooct13hen.com/download_codesign_v1.php?id=mH59dg==&subid=176681

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.