home

installer.exe

This is a setup and installation application. The file has been seen being downloaded from www.appfunapps.com.
MD5:
592668cc4ef93aa1ace6cb26b27579d9

SHA-1:
29b317ab0106b40dfdf5a81bc16bc977e816e6a6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 1:31:18 AM UTC  (today)

File size:
376 KB (385,024 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\installer.exe

File PE Metadata
Compilation timestamp:
2/3/2016 4:33:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:b4E6j+8X+DVlmnGpgbdxWdpolk6x7D75/H+l0BTdzmwInPL0uNCd+rRNYpeGjR:b4EQ+1jIggbdcdpolk6NtvBpXIDlNCdB

Entry address:
0x3F4DC

Entry point:
60, 52, 52, E8, 96, 02, 00, 00, 5B, 5B, E8, 0F, 00, 00, 00, 68, D5, FA, D4, 5B, B2, EF, 98, 69, 48, 30, 48, 29, 80, 5A, 68, C4, 42, 21, 00, 6A, A6, E8, 31, 02, 00, 00, 58, 5A, 8B, F3, 88, F0, 81, D6, AD, BC, 8F, 16, EB, 01, DF, 0F, C0, F1, 4D, 5B, 3B, C0, 0F, AD, EA, 70, 0A, 33, C6, 0F, AD, EA, EB, 01, F9, 86, D5, 81, C3, 4C, C8, 63, 00, F2, 0F, BB, F7, 81, EB, 37, 0D, 63, 00, 69, FE, 14, 87, 2E, 39, F6, C5, 3E, 0F, BC, C8, 8B, CD, EB, 01, 54, 53, 3C, 7E, 3C, 8E, D2, F8, 59, 88, F0, 3C, BE, 0F, AD, D8, 88...
 
[+]

Code size:
276 KB (282,624 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.appfunapps.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.