home

installer.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.bundlefilesstock.com.
MD5:
cbf3db2e187dfff9569b5107c3af2e85

SHA-1:
5710d819cf6eb1a682f1fd59210e20b9323d056c

SHA-256:
531a54baa4fa8e77fd33672f491369872099acda152ed1aec5736a17dabcf380

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:47:55 PM UTC  (today)

File size:
408 KB (417,792 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installer.exe

File PE Metadata
Compilation timestamp:
2/3/2016 9:08:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:lfD4FFvyWkn0JjKK05CkzmTcNXeNrJqnYUr:pL0J2K0YkaTcNsdUlr

Entry address:
0x47190

Entry point:
B4, 3A, 81, C9, C5, 84, 1D, 85, F3, 0F, AF, C3, 0B, E8, F3, 78, 02, 4D, F3, 32, E0, 8D, 05, 0D, 84, 11, 5F, 8B, CA, FF, C2, 49, 8A, DB, 87, FB, 69, D9, AF, 0D, 63, 75, 75, 0C, C7, C5, 06, 77, D4, 2E, 8D, 0D, F5, F1, 43, 98, 12, C9, F3, 69, C8, 04, 4F, 13, 74, E8, 00, 00, 00, 00, 85, E9, 77, 0A, C6, C3, CE, 88, E5, BF, 49, 70, 48, B8, 86, F8, 80, F3, F2, FF, C5, BA, 2B, 19, F0, F9, BE, EF, 4C, 05, 00, 38, C8, 81, F6, 41, 14, 00, 00, F7, C3, 80, A2, 4C, 3C, 33, D3, 81, F6, 57, D2, 05, 00, 5A, 80, C1, 14, 68...
 
[+]

Entropy:
7.7502  (probably packed)

Code size:
308 KB (315,392 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.bundlefilesstock.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.