home

687932-grs_(_graphic_stealer_).exe

This is a setup program which is used to install the application. The file has been seen being downloaded from filestore.softwaredownloadwebsite.com.
MD5:
dbd0f09abeb08f93d45b056ae1081c81

SHA-1:
0eb5bb58a193215e83b73c77e304e7eec4f53bef

SHA-256:
c7927fd94abff56967a9bfe48f809c28b6a797e391e4c8753247ad64a76e6b86

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 8:41:21 AM UTC  (today)

File size:
19.6 KB (20,023 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\687932-grs_(_graphic_stealer_).exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:J7QF7UrzE23ZQmOj0eSdASwBV654oF05SjlBwkpVOef3Rc8N:J7QFoE23OmZtSM

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 48, 54, 4D, 4C, 20, 50, 55, 42, 4C, 49, 43, 20, 22, 2D, 2F, 2F, 57, 33, 43, 2F, 2F, 44, 54, 44, 20, 48, 54, 4D, 4C, 20, 34, 2E, 30, 20, 54, 72, 61, 6E, 73, 69, 74, 69, 6F, 6E, 61, 6C, 2F, 2F, 45, 4E, 22, 3E, 0A, 3C, 48, 54, 4D, 4C, 3E, 3C, 48, 45, 41, 44, 3E, 3C, 54, 49, 54, 4C, 45, 3E, 4D, 41, 53, 54, 41, 4B, 2E, 52, 55, 2F, 20, CE, F8, E8, E1, EA, E0, 20, D7, E5, F2, FB, F0, E5, F1, F2, E0, 20, D7, E5, F2, FB, F0, E5, 3C, 2F, 54, 49, 54, 4C, 45, 3E, 0A, 0A, 3C, 4D...
 
[+]

The file 687932-grs_(_graphic_stealer_).exe has been seen being distributed by the following URL.

http://filestore.softwaredownloadwebsite.com/.../687932-GRS_(_Graphic_Stealer_).exe

Scan 687932-grs_(_graphic_stealer_).exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.