home

b3.exe

Setup

Open Source

This is a setup and installation application. The file has been seen being downloaded from b3-31d2.kxcdn.com.
Publisher:
Open Source

Product:
Setup

Version:
1.2

MD5:
5663b94f903512e2cd97c45dd2fc867d

SHA-1:
ba5d29dc15c1e6c54e4e8ff60f64d3cb9936ac5a

SHA-256:
05166ff1807b4533081d1cb52b9edc4fac17e3e04a598f93bb6a15fca1e2ae58

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:26:06 PM UTC  (today)

File size:
4.6 MB (4,771,317 bytes)

Product version:
1.2

Copyright:
2015 - Open Source

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\b3.exe

File PE Metadata
Compilation timestamp:
8/5/2015 2:47:29 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:V1/cnBnjORaued0T4nvrFPJdRBTnM4p4fF/kAfpJDbT/92p:V1aBjORaued0svZbPTMw4fGIR2p

Entry address:
0x30B6

Entry point:
60, 73, 05, 80, DE, E7, 85, EF, 8D, 2D, FC, 8D, 84, DD, F6, C5, 90, 0F, AF, FB, 0F, AF, F7, 30, FC, 8A, F9, 0F, AF, DD, FF, C9, 3B, E9, 81, FE, 6D, FD, 00, 00, 72, 06, 8B, C6, 38, E9, FE, CA, 52, 50, 89, CA, 8D, 15, 15, 1E, 3E, 26, C6, C6, B2, 69, F6, 42, 55, 55, 5D, 0C, 30, 1A, E4, 53, 32, D4, F2, FE, C8, E8, 00, 00, 00, 00, EB, 01, 4A, EB, 0B, BA, 7E, EB, 21, ED, 8D, 35, 71, 97, 2B, 7F, 8A, E4, 89, C0, 3B, F9, 6A, 00, 58, F7, C7, 2E, C2, 9B, 83, 8B, C8, 0F, AF, D5, 8B, F9, 0F, B7, CE, 80, E7, 74, 05, F9...
 
[+]

Code size:
23 KB (23,552 bytes)

The file b3.exe has been seen being distributed by the following URL.

http://b3-31d2.kxcdn.com/B3.exe

Scan b3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.