home

installer.exe

This is a setup and installation application. The file has been seen being downloaded from www.hosttowerbest.com.
MD5:
854fcaa3fabb28a2c0565b4c5b64465a

SHA-1:
56d2223a4750f6a78a0ef661c6e27809a0dcafcb

SHA-256:
086028644ae884dd8cff60dada350a2394c98ca45aac2a2517086aeb0643b8c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:56:00 PM UTC  (today)

File size:
272 KB (278,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installer.exe

File PE Metadata
Compilation timestamp:
2/2/2016 10:45:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:cbwjDqMvnL9NFOeX09C7E3mIqGYjee86gUMxHcvzWCyDeqG/tinf0:cbwjGoLB7AC7E3mnGMPgFHCeqif0

Entry address:
0x25EEE

Entry point:
0A, F1, B5, D2, 68, A1, B4, 3F, 00, 68, 7C, A1, 09, 00, 88, D8, FF, CF, 85, E9, 0F, BF, F2, 81, CB, 51, 7E, 2E, 17, 0F, AF, FE, F2, 86, E9, 0F, AF, DB, 3D, 30, 0B, 00, 00, 81, E0, D7, 2A, D8, 0C, 0F, AF, EF, 69, CD, 7D, 8D, 65, 56, 8A, FC, 0F, BF, C5, 81, C2, E8, B9, 42, 5E, 1D, 8F, 18, C9, F9, 88, F9, 69, EF, 8B, AE, F8, 58, E8, 24, 00, 00, 00, 69, C2, 6A, C7, 1F, 88, 84, DD, 8D, 2D, 3A, 43, F8, 5B, 14, FE, 45, 0F, BF, ED, 89, CA, 81, EE, 9A, 04, 02, 00, 31, F0, 81, C6, 09, B1, 01, 00, B0, 32, 0C, 76, F3...
 
[+]

Entropy:
7.6128

Code size:
176 KB (180,224 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.hosttowerbest.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.