home

comunicado importante.pdf.exe

Komsi

The executable comunicado importante.pdf.exe has been detected as malware by 3 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from c124.pcloud.com.
Publisher:
Komsi

Product:
Komsi

Version:
18.2.244.2987

MD5:
1cd099155c24c36aff0f93e1a67d189c

SHA-1:
58d2a7189c613f76938242a4c47a56534ffdfea0

SHA-256:
030c39a8d03b7c307b894a925ceaf134c7fd5e4bae6c79fb91b4c021ef5d11ac

Scanner detections:
3 / 68

Status:
Malware

Analysis date:
5/7/2025 10:22:15 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Trojan-gen
160327-1

ESET NOD32
Win32/Injector.CXIF trojan
8.0.319.0

Norman
Gen:Variant.Zusy.186846
02.04.2016 17:35:19

File size:
885 KB (906,240 bytes)

Product version:
18.2.244.2987

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
4/26/2016 10:48:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ZV2pWO/UEMnYXH527+MEhhXq71cDLYvA7H5PcYGxzbbFwzs+a:+v+nYXH527+M4Xu1DAIbbFZ

Entry address:
0x6E7E8

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, AC, D3, 46, 00, E8, 35, 81, F9, FF, 33, C9, B2, 01, A1, 30, B3, 46, 00, E8, BF, D5, FF, FF, 33, C9, B2, 01, A1, E0, 20, 46, 00, E8, 6D, FA, FA, FF, B2, 01, A1, C0, 59, 41, 00, E8, E9, 51, F9, FF, 33, C9, B2, 01, A1, F4, D9, 42, 00, E8, 43, FF, FB, FF, 33, C9, B2, 01, A1, 74, EB, 44, 00, E8, 9D, 32, FE, FF, 8B, D8, BA, B0, E8, 46, 00, 8B, C3, E8, C3, E2, FC, FF, 33, C0, 55, 68, 6C, E8, 46, 00, 64, FF, 30, 64, 89, 20, 8B, C3, E8, 56, 8D, FE, FF, 33, C0, 5A, 59, 59, 64...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
436.5 KB (446,976 bytes)

The file comunicado importante.pdf.exe has been seen being distributed by the following URL.

https://c124.pcloud.com/.../Comunicado Importante.PDF.exe

Remove comunicado importante.pdf.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.