home

find.exe

MD5:
d920b1cb8f9a31c55538aea3a2efc5ae

SHA-1:
61665e7f04f8f3254a344526efc582a2c6b53457

SHA-256:
2cafa0204d62235c8c000aacb1f64507bbadcee9c56c7b01cb563ac4c4075130

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:30:11 PM UTC  (a few moments ago)

File size:
1.8 MB (1,930,260 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\find.exe

File PE Metadata
Compilation timestamp:
12/23/2015 5:16:14 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.24

CTPH (ssdeep):
24576:oMQFsKy8wQ8D86pEmkz4Q3r+4gUeC+Ec0xMko8JsU3AoCqqIpWsRfF:TQFsKWQ8D86pbQi4B2qqIpWsRfF

Entry address:
0x1500

Entry point:
48, 83, EC, 28, 48, 8B, 05, 95, B7, 08, 00, C7, 00, 00, 00, 00, 00, E8, 1A, D5, 00, 00, E8, 95, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 53, 48, 81, EC, 28, 02, 00, 00, 48, 8D, AC, 24, 80, 00, 00, 00, E8, CA, D4, 00, 00, 48, 8D, 85, 9D, 01, 00, 00, 48, 89, C1, E8, FB, 4B, 04, 00, 48, 8D, 95, 9D, 01, 00, 00, 48, 8D, 85, 90, 01, 00, 00, 49, 89, D0, 48, 8D, 15, 93, 6A, 08, 00, 48, 89, C1, E8, FB, DC, 04, 00, 48, 8D, 85, 9D, 01, 00, 00, 48, 89, C1, E8...
 
[+]

Entropy:
5.5241

Code size:
451.5 KB (462,336 bytes)

The file find.exe has been seen being distributed by the following URL.

http://www.filedropper.com/.../filedownload.php?id=find_1

Scan find.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.