home

sr16.exe

MD5:
4e78480172a6c3313751dd1ecc0c4c87

SHA-1:
ef172ff2e4e700287ea59f28b2eaf9859846ccd2

SHA-256:
aca0cf7c8e5c43278d4118fe58d8e291bea2382566d3a4b0990fa2a987003d21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/9/2025 6:20:08 AM UTC  (today)

File size:
2.1 MB (2,214,854 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\sr16.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:6CgLgkmVqMvy/uS5eXItUZOLNdrzMZFTXlJThCnkXk9jTk8hFK3rDp8MdtCL3:O3YPTHQnkGk8h4TT+

Entry point:
4D, 5A, E0, 01, 3A, 02, 5E, 0E, 9A, 03, 11, 00, FF, FF, 75, 42, 00, 14, 00, 00, 00, 00, 25, 2E, 20, 00, 00, 00, 33, 30, 00, 00, 1E, 00, C7, 31, DE, 00, C7, 31, EE, 00, C7, 31, FE, 00, C7, 31, 0E, 01, C7, 31, 1E, 01, C7, 31, 2E, 01, C7, 31, 3E, 01, C7, 31, 4E, 01, C7, 31, 7E, 01, C7, 31, 8E, 01, C7, 31, 9E, 01, C7, 31, AE, 01, C7, 31, BE, 01, C7, 31, CE, 01, C7, 31, DE, 01, C7, 31, EE, 01, C7, 31, FE, 01, C7, 31, 0E, 02, C7, 31, 1E, 02, C7, 31, 2E, 02, C7, 31, 3E, 02, C7, 31, 4E, 02, C7, 31, 5E, 02, C7, 31...
 
[+]

Entropy:
6.1235

The file sr16.exe has been seen being distributed by the following URL.

http://mail.mts.rs/iwc/svc/wmap/.../SR16.EXE

Scan sr16.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.