home

b2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from b2-31d2.kxcdn.com.
MD5:
006080240086f9cb872e3cc7778591a0

SHA-1:
c987f8868ff5d445c43707ea224c27b530892940

SHA-256:
8f6ba776b4b765a06abd0d3b1a4df1962d3001d4d56aa73dfa589d7bb6c38c2a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:31:57 PM UTC  (today)

File size:
2.3 MB (2,383,266 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\b2.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:OM5YUVT3USp9Z9rjWtDk09My57ukFMM6pIRXrwwJf+OKTKrFA+ILzo0S1i:n5TVT3UG9j+dk0my57RLB7wUfKD+I/oi

Entry point:
3E, 2A, BF, B5, 20, CA, 9B, E7, C4, D9, 24, A2, 07, 15, 17, B7, 5D, F1, 5F, 61, 87, 8D, 4A, 39, 06, 4A, C1, 71, B6, 9D, 62, 6C, 88, 3F, 76, 95, D7, 24, DE, 4A, 16, AE, 19, 8B, F8, 44, 6F, A3, 75, 23, 50, C4, F1, 0F, DD, 1B, E0, 33, 3A, E1, CE, 29, 95, 52, 4F, C2, BA, BF, 49, 5C, E1, C1, 7E, 9B, C6, 7F, 65, EF, 33, D0, F5, 74, 77, C4, 7A, FF, 1B, 05, F5, 60, B3, 9A, 63, 36, 97, 01, A6, 17, 98, B5, 5E, D1, 22, 7A, 9E, B2, D9, 5C, 6B, BD, 7E, 8F, 95, DA, 3C, B2, 55, D0, 01, 76, 79, DC, 19, 7F, 2F, C8, D5, 0D...
 
[+]

The file b2.exe has been seen being distributed by the following URL.

http://b2-31d2.kxcdn.com/B2.exe

Scan b2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.