home

cpqsetup.exe

This is a setup and installation application. The file has been seen being downloaded from trace.qq.com and multiple other hosts.
MD5:
96a3be3cf272e017046d1b2674a52bd3

SHA-1:
ddfe163345d338193ac2bdc183f8e9dcff904b43

SHA-256:
938db8c9f82c8cb58d3f3ef4fd250036a48d26a712753d2fde5abd03a85cabf4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:18:44 PM UTC  (today)

File size:
2 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\budget\reportes\tred\cpqsetup.exe

File PE Metadata
OS bitness:
Win64

Packer / compiler:
RLPack FullEdition V1.1X

The file cpqsetup.exe has been seen being distributed by the following 2 URLs.

http://trace.qq.com/collect?pj=1990&dm=s.pcmgr.qq.com&url=/report/.../adv.html&arg=&rdm=s.pcmgr.qq.com&rurl=/report/gj_report_v10.html&rarg=version=11.4.17347.218&guid=b0370f2fe03a7812b4830f002dc19140&type=1&opversion=Windows 7&display=1&source=qmdesktopgc&icache=&uv=&nu=&ol=&loc=http://s.pcmgr.qq.com/report/.../adv.html&column=&subject=&nrnd=F1159825456&rnd=55968

http://btrace.qq.com/kvcollect?sIp=&iQQ=&sBiz=mini2015_guanjiaaio&gray=0&usertype=0&sOp=tab&more=1&iSta=0&iTy=2713&iFlow=&sTab=news&page=1&iId=6&rnd=16757

Scan cpqsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.