home

9827554-b-en.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from downloads.netscout.com.
MD5:
fef1d1c011d78ce64f8f3dcd178645c3

SHA-1:
69d88adef439dc1fbbc2bf6f524cbad9418b96bf

SHA-256:
2e29c309a9beef26607df75e926421a6dfeb4984b3859ae75561f54bce57deb9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:26:14 AM UTC  (today)

File size:
16 MB (16,744,559 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\9827554-b-en.exe

File PE Metadata
Compilation timestamp:
7/9/2002 10:00:25 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
1.3

CTPH (ssdeep):
393216:HT23dk1yc2m0Qo6j8bi0NTk19rzVb/1zYI8jB1zkEs/M91/2PUGt:HikIc10QnmTk19fVbZLUBRkfUf28S

Entry address:
0x30A50

Entry point:
FF, C5, 87, F1, 81, FB, 41, B9, A0, 77, F7, C7, 53, 55, 3E, 3A, 87, EA, 85, F5, F6, C1, CC, 0F, BF, C8, 73, 06, 03, C9, B2, AF, 87, FB, 6A, 00, 5B, 0F, B7, C8, FF, C8, 0F, B6, C8, 85, F1, 73, 03, 0F, AF, D2, 10, CE, C6, C2, 12, 45, 81, C3, 21, FA, FF, FF, FF, C9, 1A, C9, 81, C3, E0, 05, 00, 00, 0F, BE, F8, 81, FD, 6B, BB, 00, 00, 75, 06, 8D, 15, D7, B9, 6B, FD, 69, D3, 4D, 5E, 26, FC, BA, 7F, 39, 67, 54, 81, FB, EE, 02, 00, 00, 0F, 86, B3, FF, FF, FF, F7, C6, C8, 19, B6, D8, 81, FE, D8, 55, 00, 00, 71, 07...
 
[+]

Code size:
40 KB (40,960 bytes)

The file 9827554-b-en.exe has been seen being distributed by the following URL.

http://downloads.netscout.com/secure/.../9827554-b-en.exe

Scan 9827554-b-en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.