home

installation.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ads.adsrvmedia.net.
MD5:
256b93a530ea86d2743d030d3e2a018b

SHA-1:
64a175f932e4f770d5455ac261b3ee54d6c81963

SHA-256:
f309bae2b8dcfa518facf91214bbd0b28cb70034d0cfd4f2cf13517000feff17

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 12:06:46 PM UTC  (today)

File size:
569.6 KB (583,312 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\installation.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:PdGEJowE4j0kRZnLOlMZ8M6d0UH5J2Z2HBFqKkMILltG5SnKfjriBm6U8Y71dkjX:j8M6d04sjTws

Entry point:
33, 00, 00, 00, 54, 00, 68, 00, 65, 00, 20, 00, 53, 00, 79, 00, 73, 00, 74, 00, 65, 00, 6D, 00, 20, 00, 70, 00, 65, 00, 72, 00, 66, 00, 6F, 00, 72, 00, 6D, 00, 61, 00, 6E, 00, 63, 00, 65, 00, 20, 00, 6F, 00, 62, 00, 6A, 00, 65, 00, 63, 00, 74, 00, 20, 00, 63, 00, 6F, 00, 6E, 00, 73, 00, 69, 00, 73, 00, 74, 00, 73, 00, 20, 00, 6F, 00, 66, 00, 20, 00, 63, 00, 6F, 00, 75, 00, 6E, 00, 74, 00, 65, 00, 72, 00, 73, 00, 20, 00, 74, 00, 68, 00, 61, 00, 74, 00, 20, 00, 61, 00, 70, 00, 70, 00, 6C, 00, 79, 00, 20, 00...
 
[+]

The file installation.exe has been seen being distributed by the following URL.

http://ads.adsrvmedia.net/event/click/0/nKhruxuyuF4-Y-P5g4E-CXppY_ogn14GALIrE7tueF-lIDxyIfsWrycUo0rCoJXqpPu2b6D2eN8XiPgokb8gyNjthh4dKmz0Kw_EyKmwpwhumpgFcVq5La85upRaeaTQb2hmHsNrNpT68RFbuYe9qlNPq_t0AMLvCwPcem18bxIdQNQBFhDvDugli6IgVGfigEx15S2yCLogLz5_Oo8UW9Ste37MWliR_dmP5ooLxdlYX6tb8sKcE8HhHAzzCpgmYYTZHDuUZ-hLaDRDEZB8dblb5znXpSX_sscRxLxV_tqFtBF2kHScdl1DHbpMfdWIEk_yAXYyMsEm-Rkg7BUmMA3wzMx2qpuV2b9q8Oj8S2_ckVfWqvYiWNWF75PlRrPhst4Ff0wKcgkX29u4NeIizf-yy05LE8TocX8Z8pHx_-nf/.../

Scan installation.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.