home

b2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from b2-31d2.kxcdn.com.
MD5:
637b45a238f6cf423ec736e3272b00e5

SHA-1:
719e42755a4f424e959bcbb515c310fbb67de4bc

SHA-256:
8fc34ab30dc691b871c98400239656faff0ee9741be0d0397dc524fc7ace4c92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:35:20 PM UTC  (today)

File size:
15.4 KB (15,778 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\b2.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:K6zqlaOcWRMM4PhWuDeccDUlj/PZ7vnFQZ3XWI64:V+lX74cuFcDmjZ7dT54

Entry point:
D5, FC, B3, E7, 4F, 94, 75, F0, 79, 98, D7, 65, 46, C5, 1B, 67, C4, 7E, 75, A3, A5, E2, 93, 46, 03, 82, B7, 63, AF, 78, FF, C6, F5, A3, 5A, 1A, 49, F2, 7B, 72, 87, 0F, 9C, AC, B1, 5E, A7, 82, 1C, F7, ED, DB, 21, 53, B7, 90, CE, 73, 7B, 6C, 6A, 3A, 15, 5C, 85, 0A, B5, 16, 6C, 62, 94, D5, 66, E3, 31, 52, CF, 8C, BF, A5, D6, 84, C5, FD, 19, D5, 98, F0, 26, C8, 33, 6A, D3, CF, 29, 23, 01, CC, A1, 85, 8F, 10, 45, 2A, DA, A1, A1, 6F, E9, 30, 0C, BB, 61, BF, AA, 1C, D2, 6A, 42, 6B, 31, 0A, AC, 62, 51, A1, 76, F1...
 
[+]

The file b2.exe has been seen being distributed by the following URL.

http://b2-31d2.kxcdn.com/B2.exe

Scan b2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.