home

installer.exe

This is a setup and installation application. The file has been seen being downloaded from www.conecpttoursmeta.com.
MD5:
03c97e758d37e783ad49e9ec301efeeb

SHA-1:
39ca4bac64f6109e4c43b0c6b2f416274ce3844d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:33:04 PM UTC  (today)

File size:
404 KB (413,696 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\installer.exe

File PE Metadata
Compilation timestamp:
2/3/2016 10:04:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:BbwlHXH1sciH646jNaIDsJ5Qzn1nKB95a8HgRuXqGKwc89v83Q5f:2l31sZqNaIDe0tKrjARuXlKwnh83QR

Entry address:
0x47E98

Entry point:
0F, BE, C3, 88, C7, 8D, 1D, E5, 96, 23, 21, C7, C7, 74, 5C, 46, 35, 76, 06, 8D, 3D, 36, E0, 97, 2E, 81, C2, 36, 2D, 00, 00, 14, C9, 81, C2, 13, 17, 00, 00, 70, 08, 8A, E9, 49, B8, D5, F7, 42, 8E, 68, 31, 27, B3, 00, 68, 17, FA, 7E, 00, 4A, 0F, AF, C1, 8D, 1D, A2, A5, 5F, 34, 0F, AF, F2, 51, 8D, 35, BE, C1, EE, 63, E8, 00, 00, 00, 00, 5A, 8A, F9, 88, D4, 81, E8, E0, 04, 8A, FD, 0F, AF, F2, F6, C4, 13, 0F, BE, F7, 20, C7, 0F, AF, D8, B0, AD, 86, EB, 23, F1, 69, CE, 40, 3F, B3, 29, 84, E6, 81, D7, 52, C7, BF...
 
[+]

Code size:
312 KB (319,488 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.conecpttoursmeta.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.