smartsheet_ldc_setup_64bit_1.4.34.0_Signed.msi

Classification: Malicious

smartsheet_ldc_setup_64bit_1.4.34.0_Signed.msi is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02. Detected by 1 antivirus engines.

Detection summary

1 antivirus detections
22 IDS alerts
0 processes observed
59 contacted hosts
42 DNS requests

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Generic Malware	Hybrid-Analysis	2025-10-07 11:00:04	2026-09-02 17:45:05	malicious-activity

Tags

phishing

Sample information

Filenames: smartsheet_ldc_setup_64bit_1.4.34.0_Signed.msi
File type: Composite Document File V2 Document, Little Endian ...
MD5: 52172aa63e41bbda228861777e84daeb
SHA-1: 203808b23c7f5c9c6e33e903a1e129bdb73dc529
SHA-256: 82b551449acf07e4d0a0a2bd8ff678702157e300d651078ce955d13e12308fe7
First indexed: 2025-10-07 10:13:29
Last updated: 2026-09-02 17:45:05

Antivirus detections

Engine	Detection
Kaspersky	HEUR:Trojan.OLE2.Alien.gen

Network contacts

151.101.66.191 185.199.108.153 142.251.214.42 13.32.241.4 104.19.147.8 151.101.193.140 142.251.154.4 104.18.83.37 108.139.29.53 34.49.192.216 142.251.151.119 4.153.187.221 23.56.109.141 142.251.219.38 104.18.6.218 216.239.34.181 69.147.88.7 142.251.218.162 18.238.55.127 18.164.124.2 100.20.58.101 104.18.10.212 151.101.129.140 3.227.190.204 142.250.141.154 23.43.87.9 150.171.109.115 104.18.30.133 44.231.64.235 172.67.74.19 57.145.2.128 108.138.128.29 151.101.130.191 142.250.191.65 185.199.109.153 142.251.46.202 151.101.197.140 108.139.29.40 69.147.88.8 104.18.7.218 18.190.121.157 142.251.46.174 18.238.55.6 216.239.38.181 142.251.46.194 172.217.12.100 146.75.93.140 172.217.217.157 50.16.211.97 44.226.90.60

DNS requests

1421519-19.chat.api.drift.com ad.doubleclick.net ajax.googleapis.com alb.reddit.com analytics.google.com api2.amplitude.com bootstrap.driftapi.com cdn.amplitude.com cdn.bizible.com cdn.bizibly.com clients2.googleusercontent.com connect.facebook.net conversation.api.drift.com core.thepointyspritesclub.com customer.api.drift.com dx.mountain.com dx.steelhousemedia.com edge-consumer-static.azureedge.net event.api.drift.com googleads.g.doubleclick.net grsm.io gs.mountain.com hat.thepointyspritesclub.com js.driftt.com js.partnerstack.com js.zi-scripts.com k.clarity.ms link.technologyadvice.com metrics.api.drift.com mpc-prod-28-1053047382554.us-central1.run.app partnerlinks.io presence.api.drift.com chromewebstore.googleapis.com collector-37944.tvsquared.com pixel-config.reddit.com px.ads.linkedin.com s.yimg.com script.crazyegg.com smartsheet-platform.github.io sp.analytics.yahoo.com stats.g.doubleclick.net targeting.api.drift.com