home

ica16.exe

This is a setup program which is used to install the application.
MD5:
f967031712e3f76a34cd8c30c1d1b394

SHA-1:
b5cf6e818b21f08595dcd6ab458e3b693bd6aebb

SHA-256:
3fe09c7f7f6f944a3b2a3392e3639525783cb6fcf9d4cc4e0892f08b2f28789e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:09:36 AM UTC  (today)

File size:
2 MB (2,131,661 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\ica16.exe

File PE Metadata
OS version:
294.16752

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
3.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:tHw6lYiUxj/uVlvPc6vITFpXflOo3eBXszhS8MhH:tQBiw69PATHB3ets9IhH

Entry address:
0xA4009C

Entry point:
4D, 5A, 31, 01, 01, 00, 01, 00, 05, 00, 00, 00, FF, FF, 00, 00, 14, 00, 00, 00, 00, 00, 0D, 00, 40, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 01, 00, 00, 04, 00, 0D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 44, 69, 65, 73, 20, 69, 73, 74, 20, 65, 69, 6E, 65, 20, 57, 69...
 
[+]

Code size:
256 KB (262,147 bytes)

The file ica16.exe has been seen being distributed by the following URL.

ftp://download2.citrix.com/FILES/de/products/client/ica/.../ica16.exe

Scan ica16.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.