home

file.download_64lp6.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 1phads.com.
MD5:
c0f901d848ac8d6ccc025ac811d3429b

SHA-1:
bd1e453a742523db45ad5b6406a393e9b170f400

SHA-256:
ae95330db536892b81b157c5b2c6ae3f3ff5b6ac4d2a0c94a922caa24a83f88a

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 4:05:06 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:BmMedia-D [PUP]
160518-2

File size:
2.7 MB (2,854,628 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\file.download_64lp6.exe

File PE Metadata
Compilation timestamp:
9/19/2014 2:38:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:X9mYsxnYRffqJG1G9rOCUwgenYfSMM8WqN:E4SICUwtnySMM8WqN

Entry address:
0x19B44

Code size:
100 KB (102,400 bytes)

The file file.download_64lp6.exe has been seen being distributed by the following URL.

http://1phads.com/ck.php?oaparams=2__bannerid=120458__zoneid=15972__OXLCA=1__cb=c6a00104f0__oadest=http://.../?id=p191&sub=ar&name=File.Download&nor=1&subid=${SUBID}

Scan file.download_64lp6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.