» clinicas-integradas-11-baixaki-32-bits.exe
Overview
Analysis
File Details
Downloads (10)

clinicas-integradas-11-baixaki-32-bits.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.

File name:

MD5:

0685adf01708a263bfa6dcc4798f9c52

SHA-1:

b0f7ae2ed101fa3c02250444b2ba859d51273eaf

SHA-256:

997814326a941b11be7362ec3cd0c8e5bce2df1ab6cfb147581a7a5cb9af7afd

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/4/2024 10:15:28 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.Paked

1.3.0.4959

File size:

1.9 MB (1,990,106 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\clinicas-integradas-11-baixaki-32-bits.exe

File PE Metadata

Compilation timestamp:

4/5/2006 5:55:39 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

3.0

CTPH (ssdeep):

49152:iUROLt7ol1i0ikUtSZfxrXC9hcpIGXOzK02oWFwzqoDVB:iURgt1kUtSPbC9+ptXO2pyqoD

Entry address:

0x1226

Entry point:

55, 8B, EC, 81, EC, 5C, 0A, 00, 00, 53, 8D, 85, A4, F9, FF, FF, 56, 33, DB, 57, 8D, 8D, A4, F5, FF, FF, 68, 00, 02, 00, 00, 89, 5D, F0, 51, 89, 45, F8, 53, FF, 15, F8, 40, 40, 00, 39, 1D, 2C, 20, 40, 00, 74, 4F, A1, 2C, 20, 40, 00, 8D, 8D, A4, FD, FF, FF, 50, 68, 98, 31, 40, 00, 51, FF, 15, 08, 41, 40, 00, 83, C4, 0C, 8D, 8D, A4, FD, FF, FF, 51, 6A, 01, 53, FF, 15, F4, 40, 40, 00, FF, 15, F0, 40, 40, 00, 3D, B7, 00, 00, 00, 75, 17, 68, 74, 31, 40, 00, 8D, 85, A4, FD, FF, FF, 50, FF, 15, B4, 40, 40, 00, E9... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

3.5 KB (3,584 bytes)

The file clinicas-integradas-11-baixaki-32-bits.exe has been seen being distributed by the following 10 URLs.

http://www.ranchsendgift.com/ymgI4_dEqR3yMlLB3sEsz5QBgQ1TvLq7BB4VDO8JdsTrOe1eKH7InML T2 jwZRYkBSeElUpcIq1soov1nJ6OrCSOwxsDLkLEGxD5TNhvuh9V5LSh_iczGe5BIx3rDUqXuB3w4EAvhkdBRm5CTn7T4EhU8b8q6oimQSWBdOcpTJDR09Gvpn5OdC6MDoeC5BiXPFPlXxYu53sDdRmtxxxwWL9ZTTD2w==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://www.ranchsendgift.com/FrBt_xbZLKK3rqlF1_TrESnzock_9pszFEyD0lp0BC4ahlm2PrsW bmZwVh61GbEgIYzRhLSfyvDG4 NXIj5M01ciDM_zi5qu1I 1eMddp3x1yHGNQ1YDaXb7eMKK1bS1DMDkWhTcuEm4pdDfOVYFKuBrkktIlsXqIfaRTT2zmoKQK8fGfwFyTnruElSZQioHh5itLTI347qQBdZePYhWfpRJ8rXEQ==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://www.ranchsendgift.com/uAzR3J FyrrrxpVxh_RnThszQ5plt5hC6QU4V7j8JS8mYGX8uoyH5 CzWZWhJc0tR6P9qW0klJ5vJ92 ZBifgu9qZk4K5w9t80eSuBP5cAHgPXZMXeOpyYg5s9iBwceF0EAienZ6wqBc2fTZYFgNLr4_kkbUec8SRjC9uZqSBgCmfMjSCDJXCaqb KzfJnVhy3lAwuhqxJElVjuOFLrveT0RLmbtyA==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://www.ranchsendgift.com/1_3OLw1_79NTDGv7E9ETCnOIvbb o5Xl4LjPcY3djJ2arOoMbqJd7QtcpDieCGacdggi5lbWTlWXw91VDbbmY6ZiuQ8sD dO9IKaBC4ITQgy2SXyh3ZFEfBZfwdDcgwxI2Rw29NzvPlGJsCD67ba15PiYJR LzGxGAX7wWHGTboP8i2E2jT8eD4IOH f9Wxtauhispnj34sBCkD LzzmoIlbljCc_w==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://www.ranchsendgift.com/V Jece4i8YQXGfcF_5CiKNQoEt4MzhaTQhDBIScWjShpr6fdVxfcmJeGhSQJMXWDQDT5AQEFaNFAkJuL2andDzS8sUF7Z1B7Q9k0L9cLg_6vFI0BwxVjDHeE3JMmQuJpEdwJYyGMUKsIpjruxz8IyP5 bkTx6pcCcII2byyHwJZDUMAc7uK4OxyOAG0tQnLoGDNkY2S3tJq6MdDAXG1a04sX2xP4Hw==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://www.ranchsendgift.com/2Plu2l3qsPWmuvA4Lw2ktjRm_V12_AtU2ImOAqyfAi9diq2nJH7h0pGUmtbx DPQd0m_TV4CVoIOZrqGM9ieyqapHzzbUuecIwvji7gu_2REqpfP6A6sZAZgZoI5KFxX5qJIDicdXz0JF_aLMpHp uaUvUa1ACllyA78UCr5uEKLQAewBO8falDNnwKoBCzisvFByH4Z8lZM7N2hdZar2WqQzUP9aWvrrqVxqFn_TiAedlAabyom4eVqOrZ2hAcdXZsQy0x_L2DbWpWZVgdKQgxQvKEpZhP0MQOqPPajhXP7EaNHuRlGQgmkFjGGFbBHZN5neobjul7HkEhgws8A1ctJKKBvthLBr7WjvTPtLxZFqI4Fvl8TyWtUZaPfIZlPU8hDL9HBDc MvEc5cp1GSiFR1MVRi5B1Il WbxHzkgABM3mApbAGcXbFl8M57xdohWQ56tou89f0laJ97fYmo_kb4b9YtUtvP4alaswllVVZsUUeIaDlGURuyGZ8 A 4RJcSgAag_zA_Cm G3OvDAeQcqL3Oiw==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA-e

http://www.ranchsendgift.com/KrVECaAm 7jesfdjmS3pDk7Kf2GNbQaAcNtyMLysFfG_YXGLCaIW2jQQaLGgp610KPoLrm2eAMPzaQghWRNq0EPfThrcMZmbm2Nx6LgfIpsD4O6CY6Mr5am0dsWXQ_4QsC0sp4futn mOO0fobps3yw8Ll34nS7t9vcWHbmZ2czuwbMAws3 fbcZwdb2i0m2Ifjnezud7joz3p6yIWsMMO3Uf7ryiA==-GzIAAMQ2R7FpzN8FYczhA4OJHLC3RRoQXN8ZB56sMfKPwy1v75mskKsh0mLE4MbsI3wA

http://ultradownloads.com.br/.../2,245889.html

http://www.pimaco.com.br/.../setup.exe

http://www.dedconsultoria.com.br/.../setup.exe

Scan clinicas-integradas-11-baixaki-32-bits.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.