home

w_turbotax_1040_dlx_2015.140.0100.exe

MD5:
62bf2b0ad374f78c22a5d4baadfb646e

SHA-1:
abf068278126e7f947a8051d01fc2ebc6af78c7b

SHA-256:
2d6f672c5abb6b2145b8f2da0c43aa3503330cfac86f4c4ad8cd72322271c849

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2025 5:09:11 PM UTC  (today)

File size:
9.3 KB (9,515 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:Gq45oFvrThMM0zpevPzkIE+tEpP79E2OpvJncdJ:r30ELzt679E2OpRn+

Entry point:
0A, 0A, 0A, 3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 48, 54, 4D, 4C, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 63, 6C, 61, 73, 73, 3D, 22, 69, 75, 73, 2D, 72, 65, 73, 65, 74, 20, 69, 75, 73, 2D, 68, 6F, 73, 74, 65, 64, 2D, 75, 69, 22, 3E, 0A, 0A, 3C, 68, 65, 61, 64, 3E, 0A, 09, 3C, 74, 69, 74, 6C, 65, 3E, 49, 6E, 74, 75, 69, 74, 20, 41, 63, 63, 6F, 75, 6E, 74, 73, 20, 2D, 20, 53, 69, 67, 6E, 20, 49, 6E, 3C, 2F, 74, 69, 74, 6C, 65, 3E, 0A, 20, 09, 3C, 6D, 65, 74, 61, 20, 6E, 61, 6D, 65, 3D, 22, 64, 65, 73, 63, 72, 69...
 
[+]

Entropy:
5.2065

The file w_turbotax_1040_dlx_2015.140.0100.exe has been seen being distributed by the following URL.

https://accounts.intuit.com/signin.html?offering_id=Intuit.platform.estore92.turbotax92&redirect_url=https://shop.turbotax.intuit.com/commerce/account/.../login_ius.jsp?clientCode=null&errorMessage=&locale=en

Scan w_turbotax_1040_dlx_2015.140.0100.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.