home

combofix.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.infospyware.net.
MD5:
8b538947b975d15d0ac3a0f35b5c988f

SHA-1:
d5ca6f1dbfbffc597aebb7791225ea854cbfa3fe

SHA-256:
3a15fe492ecd9cf2bc3f7d96e67471f6eaf3e240fa20cc662ab4caa1cb6d5e3f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 8:40:11 PM UTC  (today)

File size:
4.2 MB (4,387,018 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\combofix.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
49152:1lzcb3OZIMfResjRDVx764RRIEVB7K+mpD91d2F9DjxyJj+97YtM1XCVBppQL:bcaZf0Q5Vx7RHHcpD70LjxHZ0JA

The file combofix.exe has been seen being distributed by the following URL.

http://www.infospyware.net/.../ComboFix.exe

Scan combofix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.