home

citrixreceiver.exe

MD5:
ad89c4038b2fe99cf505b2ca91637e2b

SHA-1:
6c2e3896490b3bd3edda3c2030413a44c080b608

SHA-256:
7a919c5c2e8ba0d16bd6a4d7248e213591e4e241f1707f32249f580a898ff8cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 7:51:37 AM UTC  (today)

File size:
691 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\citrixreceiver.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:4WtSP+VbDmUz+VbDcSwM+VbDB7qhTX6QclfeNqJmrIDLYxTEgUDA6VN4yuyYou4i:4Wk2FaUaFg5FAhTXsWutL2EgUZVN4Jjl

Entry point:
0A, 3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 21, 2D, 2D, 5B, 69, 66, 20, 6C, 74, 20, 49, 45, 20, 37, 5D, 3E, 3C, 68, 74, 6D, 6C, 20, 63, 6C, 61, 73, 73, 3D, 22, 69, 65, 36, 20, 6F, 6C, 64, 69, 65, 22, 20, 6C, 61, 6E, 67, 3D, 22, 7A, 68, 22, 3E, 3C, 21, 5B, 65, 6E, 64, 69, 66, 5D, 2D, 2D, 3E, 0A, 3C, 21, 2D, 2D, 5B, 69, 66, 20, 49, 45, 20, 37, 5D, 3E, 3C, 68, 74, 6D, 6C, 20, 63, 6C, 61, 73, 73, 3D, 22, 69, 65, 37, 20, 6F, 6C, 64, 69, 65, 22, 20, 6C, 61, 6E, 67, 3D, 22, 7A, 68, 22...
 
[+]

Entropy:
5.2347

The file citrixreceiver.exe has been seen being distributed by the following URL.

http://download.cpf.co.th/download/sysdownload/data_pro_cpf/.../CitrixReceiver.exe

Scan citrixreceiver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.