home

hh10_install.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
MD5:
daf018d98711c7b6f0c0748b1cfb3eb6

SHA-1:
73e4681f23d82bd977eb14fba80b14e6c348d924

SHA-256:
b341dc1ed4ac5856dc3e4dcbd8d4d18a85a8f6957d4a080afb53f86c6516c365

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/24/2024 5:26:18 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Agent.cku!1173776423
23.00.65.14514

File size:
1.4 MB (1,508,117 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hh10_install.exe

File PE Metadata
Compilation timestamp:
6/7/1999 11:10:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:xtAyb7T+L9bNzHJr1nYp/xl3vfA2h6cofuT0Sxl/8WVZRaBSCv/f7:xOyb3kN1pu742hjo2T0SxV5W3f7

Entry address:
0x88A2

Entry point:
55, 8B, EC, 6A, FF, 68, 50, B3, 40, 00, 68, 00, A6, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 28, B1, 40, 00, 33, D2, 8A, D4, 89, 15, 1C, DB, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 18, DB, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 14, DB, 40, 00, C1, E8, 10, A3, 10, DB, 40, 00, 33, F6, 56, E8, 8D, 02, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 46, 1A, 00, 00, FF, 15, 2C, B1, 40, 00, A3, 04, E0, 40, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
40 KB (40,960 bytes)

The file hh10_install.exe has been seen being distributed by the following 43 URLs.

http://lb.cdn.m6web.fr/d/c/a/e80ab5d67cc117ae03711220c776da2c/58037b2f/longtail/0067/.../hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1483158229&Signature=WU4F8TQ98nFUFhvUyxbU~081RlcrMRQnZnzwzUWse7OuKO4kAdo6CyC9DHhTogAt3rSSXfLcdqbQUSKJHInlVwORkEpqbkXwvzFfI3ZHtFat-E4qdM-Znw1PzaMQDTT5hvlrmGYt5b3HtQvSWc2y31y9EQbUhebEZMv5bjYv-5Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://www.towerbitscenter.com/m5yvx_7gq5g2uNIYE_n7yNQFDrM75ghKDbnCQT qZQjwWVCpGZmr2Cs425KsPTXzmye6RVYEWyQv_p4TY7f6zv1skv_TUVUThIFhE4yP99NF tRAknvqpHYEEnU34vWxw7ZtJeRBSr73ZIZVDg4ONMdyEAv uEVpu214wIDa2TCvh6aRJ48_aYW2E8J0Li4PlqmB160Ztx2St376EBJSWgKQ3_tGKSjrZ ceQuYuo_6GcwEQAe8Fkgpjo 1DWOt3cgHmpSah5m1 hN b8iO7veKdyabzad_kAK9sDHu7_3OhN2EyI HS4yY GVdCpZNjvBfzAPv_O2thI32AVmmhi2eXl_nACSDawixBre23HYBT99o6a2JrI9A66mp4ELky9mkgdwaCKYwzWc0uBniEQPB9_j3MmZYUToTLFbytPMS8HImLn2zUQnpKHeayTzFxCwPJrEBIes4jmql2D3Z6voSuSrjpP5JhlTs7WQiYRKxHj8gjChmozBEZR2UrYgvJoy1kU _vrI7w7bVeSRsiAH UHuIHeC1UcEJ2iTolsaGHFa0Fusn2io4VcfhpxDXBj32Hi77-GzwAAETdFpvXmOSwwYJH2A2CQw7YvyWUHTAADzbGzhWMKm9M D6ZLa7RSqOsolk_cG6iQ1pzT8rBTw==-e

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1483281543&Signature=bQLDiVaISSaCbkDntKGyCxmhDYcVaYnWPZuiMx-1vDX9zCOW~nc7tosKhePgQOIYTVd~ffp1o3NVPGtK3WhHwmnrDSRYjDhv~JJ628RdfItvixrr50qDTljsVIAJuZ~5erOIv71vvdiU5l0OjqAcxxjNZK6WkLpM9f5sanNKPl4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15869&instance=softonic_es&type=PROGRAM&Expires=1431677137&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dfCWbk6QLZkVpemJhYcfqUDckW28FIUoFFmkpbgb~LOhFHS8t25YAN~NlefVkb1ZxZVt1Q~ObueAARSmXlqZsesH6Qq3HWb~jmdiP6vt2M7YNrQHfq50UojXd2xyU3Xbyhh4KXlkDAPHul7SPc~AQcuYdzh~I~p1V2G~NZl3B0k_&filename=hh_install.exe

http://global-shared-files-l3.softonic.com/73e/468/.../file?nvb=20150124100442&nva=20150124220542&token=0bc96fe3f1d3178dabc8e&SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_de&type=PROGRAM&filename=hh_install.exe

http://ec.ccm2.net/www.commentcamarche.net/download/.../hammerhead_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1480318825&Signature=acKTuOipi59L-cChIkNWLy7-Nbzy1Blr3fzkjgG6ECC5acwNrz9SlB-nbZEHWcvjwcW~Ri0U58L9E6yfGs6IIzy63r40YIh0~dxkhuOZNy6clHCWKFosPRVonczgI1eZmnvdtFGCik11XgVR2SCg4zMp3rAXfJVJpzJ-55cdEys_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1473807037&Signature=V6YvHRK1JMEKdOCqz3Iy2pLh776Ta~GXhN9zwUQak4WuCWz5mH7YoVzFGn4qQEPuF7EJ2RMao4dHEFomIDn3AbJow4t9sD~ZYabJIYIoK5uGEnPlzIxjeTA7Ddlt04P6Zg8MthDbvFz3TxkdqefpzPul8VmYAj~FXGAOE77mX-4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://www.ranchsendgift.com/VkpY0Wm7wiNAjo33IKeEv_UPw15kremq3a4iB6pGDCY_VOIuoQHL7PT 4AiUZ3o2NTGv6M9C7CXCUcymYWmA_lkXl6tQkoEkHCe5rsHct_cxa54VeMMKRCt hwMH1x4naQrfCG1ec RC7jGoZUyYq nF0cZFFVvQTs3xTXI3VLKi2V2 Jgwc1I k5UskKcLmnVtjgpAhCOKAj TRLoxm5f1BPVEMIg==-GzwAAETdFpvXmOSwwYJH2A2CQw7YvyWUHTAADzbGzhWMKm9M D6ZLa7RSqOsolk_cG6iQ1pzT8rBTw==

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1480826501&Signature=M8Yvkth7d1pIaB3Wc8g5FgMHKsDjbDDdfEPTRhIkEToL2l4mFg0GRZBfdJWFeFx0vN97fGIQrMwwkxXs~5GypYccS7SY7WvfJjSOTNv8KYDc8N-7B2h5VXBMPLoZiw6an64dE-aIvIO2VqEaTBYrhENAbbZraTOV-TsU3HPaVDw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1481310823&Signature=L4DTSsdPPwHeQKdQu2g5mBLJ0NxzRGu8kyeiRX7BVU~2kJkDR8rcM7KcmbjyCQkXXZG1uemmLRbJTj9GpWhKy80rhZ7BjJppyCh2Dy6aFQoSaaaqptABFCp3mpRB1oNjSxpR4tZTQO5LUrvLN5HJ64XFpTccXaVYYA2HXGO2mPU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1478926116&Signature=AxPNWviGCRHJc9B7KUtZqd~Ks5vojO15rOdp1rzJ76wuSdIOc7rh3ih7AvEsoZwXoQdepjom-lXJpVLp3Zrs7RmiK69GzJ2A-SEaIZmviYaM6LoslF-~z1YGOVXNnzTBjHLyIklelanbek8gSuCH68lmk-C-e-uCySkex-SZ2Qo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://www.programlar.com/download.php?f=0Gm8qFME0TJ7ITh3ADBAOVF7IJN28RFAOMzEWLQFYTA9sCeAOErAORE7I6bBwAj1cEr8q6S8qFM9MFN8qN78q6S8qFNE06aE0FN8q6b8q6S8qFNDUFN8qN78q6S8qFN5kL2E0FN8q6b8q6S8qFN3AFN8qN78q6S8KAi9sAiFY

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1475464181&Signature=bCPPeEW16YjS10IeULfAqpw5d6HanetzYiJsa86wpWZbNnKco0TIGruxZygvbVFkTAcG3b1dKZlKgbvHxRIqafEgFNUasgep0FAxQq~tcdWAKB-bo-RWTKOWBkJC0V4tZZrSxKUpb33PBwW01TXFMvHa0nUo9HUtuQMfTw9MVLw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://lb.cdn.m6web.fr/d/c/a/54b38b713b96ccfa234d9f74d3e93e54/57d94fda/longtail/0067/.../hh_install.exe

http://www.ranchsendgift.com/8skJkFPcJHx 4m9v50p1Ed5KIdsIWf7bS7j9YKIT3QFSqzzu49VxLgw5mYwbk7Xl7RYMVBm0_N Dsz zfnlpBum87cLs2TRq0z_N2Dl3TwXOufyXMB3ZzBcWr2irCe3qLUmyvW7a2j0C2e_hG07D WanuVEoWNiWL1g0CQ6J5Rwwm_oiRphHKOhkLatVQDOm3TtW5qPKxsrqhuSN3KSpg6TkjtSrlw==-GzwAAETdFpvXmOSwwYJH2A2CQw7YvyWUHTAADzbGzhWMKm9M D6ZLa7RSqOsolk_cG6iQ1pzT8rBTw==

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1474717881&Signature=fweP6tQ2gLY8SaQtQzcp1SUT-PJ89yaOABsKl5xq65--pytbWo84B-g~bPEsuo4y6~6JLoA3jMBu866d2yvUPokTlpX4WYC9nOmA36hCA~bDhPM9NjqVRRxr7aoaHCGvNMQQxklBeoY~5vk3x49Xjl4q1LwRxyhip55bTBEMR40_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1432572924&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XLBq~Xw-A8xy7J6vyPkKzejHaFWLH4SPR4ZE87f1uQVwGH-SvtDe2BFj019mb4wzpd2CGiowra2c6p-ms~4JMVySKjhn1ChPFRBmJxZKe8YcIum64Y7dfs4IprSWYL-rCt7qaLGfcs1OEDAjABqI72yWnYn1WaZtj7Gk~XgDmyE_&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1466672753&Signature=eSkh3JnVPU3lI0w3WjZ32FwLOUyvBCTr-Dt3gx7ZKNi3P9c9ZTTyYHiHbGlJ3izpd~y94vlEL0sewPderi2pYIXQcREAO39JKx-eWgErsfP04TMrDnJiAll2YJDNTjEfLlAJmXDA-1xTIAm4rlbLlv8kaNpSsiI6o75TlNI7A2g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_de&type=PROGRAM&Expires=1473156144&Signature=bCG00pS5Qjxw1jf8D6i8MP4XkuKO06qT6P~g5W9dCf-i98Zi1xm~d886uvwUsw2sv25LSaxTPn6cv9kmnFpWHEVeKlkeHFcb-uB3HZ3PagiHv-KspZ~EM8V4NhlRce8Xa7LJeyiqUq0eChIY-oLD8UXJ4TT~Jad8ONctr~IfKuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1465131544&Signature=VVhc~9~AlB95Z~yf4Ex6J4xHpxWpln1BjUN~-Gysff1ecdmxi241PS4DGMcJY0nryjegxzWDvTYOzvoSVHIIR2yEQdaK62z9qspiSU~ykzktpnrkbADi1TAe-3CrgMvZpvPM4TTrefbczNTf58yUf36zl3Orb0FJ-OXL4HEO1dQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://global-shared-files-lw.softonic.com/73e/468/.../hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1468382253&Signature=fL5INYNTeKosbupH30bwO8vwNTltoxG34upA7SMMRNZoqC90a6XOuUh12V4GYYgMBPy-P6yntFgfwkyrJY15N~kO9bOVnJB94PJ~H66rpGmQaZcafcwZ6PN22hHPxhDsoZopmOSIStLuZU5AGxSRUmlSUDwlIMjVMi6-VMc8pmU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1456118797&Signature=EKk4bskV-xSVf87ecEGebFNCRMdTZP3P-Zm5NnC2Y5574FafctsYjuOu3tUu4-pO6mqT30GjPZOi83Hz~F8KmfQb3OCJ2~UQao1AD8EKtDUtY2nIUvAn56z1YQKj6zrPdn5yHJSv8SLTexVdvNoRgPLDVmSdjhcrn-Ha0Lgdwd0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_br&type=PROGRAM&Expires=1465277082&Signature=FihVlKFIkh7viDdGJBPljUtZ9KcOEsSapWPWKYiGolyL7L0o8yTe33DHjqv5gQFN0YXt81teFO8zubhQy4tTZ23It0TL0LhLbm8UW8T6Fk~9uCELEWT4-HR9CcdeYTVHhWDHyqnjnJ4Fta8nwa-qKXBHT1kJylUeyKbiDKyUklg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=15869&instance=softonic_es&type=PROGRAM&Expires=1449584965&Signature=dkEL2vNVm5Blw-My9wqBzhNjJn0HutrYEuaXqBGDEv8dGLRe0w1RuGHXd6S3Ey8Tdu7Q8bULYd7jNdrzdZuI4T8gvUQVb963G~3nYRnq5UPt27cFNWqHjw8Qr9r1hO2nSuMrKkhaP4tpCcBezJMD6xyA4FnVVCCTfC-298BHcNc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1429526205&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Ppf96MVmfj2GPhHxJylVq9m9SOk-mcLQ0DWHECRkEVZQkcdU0bLGa6EwLtA8zelExvkWID8SgYhiZhsZTw9gnRTqNW7M8YKT28m0dea1LpDuHh-zWuSiThiccVA9Piw04HjeAwDWU72MTuhtKPROZKYB29zqxyGIQUphtYbQC5Y_&filename=hh_install.exe

http://gsf-cf.softonic.com/73e/468/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34862&instance=softonic_en&type=PROGRAM&Expires=1462315644&Signature=CyTGp8LF6MnHoFkLPOShAN21mr9SkNN2Wd~TNK1xCz3bMldHWyYkZImhypI-KBK09m9VxEHBCyXrq-hXuei1wQT~RRNNwazjdlyTtOoN1A8aHjLsBoMkjj5t6uIyi8R-lg1sz8ND6Is9d7Lj1oFYvY4SopfGAdeLOOR~gzu4xIY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=hh_install.exe

http://www.programlar.com/.../?operation=download.complete&contentType=none&panel=client&module=prg&objectId=11G5DNE&random=20151209145132.171omd8iqsnna6blf63veh39q7.906

Latest 30 of 43 download URLs

Scan hh10_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.