home

b2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from b2-31d2.kxcdn.com.
MD5:
7b1e3473b9e421166b4f95eb6529a566

SHA-1:
5428b9480d865d38f888a794cf598cd2a7c711f5

SHA-256:
14ce3aaacc668bdf850e5e3fd78de5ebb49f3652c6ad32f73c6a9383c8d4bdbb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:28:24 AM UTC  (today)

File size:
3.2 KB (3,281 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\b2.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
48:aEsNcUADJSX8pD76aoVHuxjQ0LenkEOG8S2h+XAB6s3PrdSM6VEhwc8DiVyYx4Na:aEqA22t6OWwenk5RCs/JSrcw1DNRNj2

Entry point:
63, BC, A5, 60, 1D, 90, 50, 52, 50, 86, B3, 94, 64, F7, 07, F8, D9, 55, 9F, 2C, 7A, 8D, 26, 33, ED, 3D, D7, 7A, 5A, 3B, 29, 5A, 61, 3C, 4F, E2, C4, 6F, C0, A9, 51, 7F, 47, 94, 60, E3, FC, A6, DC, FC, 21, 5C, D0, 6D, 48, FD, 8E, 3B, 5F, EE, 74, 54, 60, B2, 33, D7, 68, F2, F8, 01, E2, E2, E4, B8, 3F, EE, 22, 09, 17, 5C, C5, 91, AB, 2A, F4, 58, A4, 26, FF, 64, 4A, 56, EA, 97, 37, 84, 69, 97, 18, B1, 08, A3, 27, F3, FD, 47, 5D, 62, 0D, 6C, 22, 8A, 19, 41, 83, DC, 22, 10, 83, 92, 6F, D2, EA, 7A, 06, EA, 45, 82...
 
[+]

The file b2.exe has been seen being distributed by the following URL.

http://b2-31d2.kxcdn.com/B2.exe

Scan b2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.