home

presentation-3625.exe

MD5:
12b932e988fce6a1e117325852c36c94

SHA-1:
da600cb85a129770e6e47fdef285770dd11bc493

SHA-256:
1ac94a3cbb151021b510aea8d4fc6642991146464b10058927aae8d9f79aeca3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:37:58 AM UTC  (today)

File size:
42.8 KB (43,864 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\presentation-3625.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:Res0ZfrUyQU9WS+rdhxB/bDHK2iHtcLNYVvox4iAV:RGzQU9W/xli1NcLNUm4NV

The file presentation-3625.exe has been seen being distributed by the following URL.

http://dls1.sadbamo.ru/output/gaqeaepfxxqhhhkefh9eagvffxuelwgdhe8wgrwvlxkutq3d3d/01/f2/d4/70/archive/0d/95/0c/.../presentation-3625.exe

Scan presentation-3625.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.