home

installer.exe

MD5:
4d1c7103ba958fff7d0ddea7ebbd9b42

SHA-1:
682649c3c4bc6d1acbc482aa10dcd6739dcf91fa

SHA-256:
d4c3307a484abd7eabaacaf92f0c4d1e2a96850a98e2eb104f49d0a70d1b1e0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:07:41 PM UTC  (today)

File size:
147.5 KB (151,040 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\installer.exe

File PE Metadata
Compilation timestamp:
2/7/2106 1:28:15 PM

OS version:
65535.65535

OS bitness:
Win16

Linker version:
255.255

CTPH (ssdeep):
3072:OMfXZjgXCdMHRaTBN3G+vyqVsxaCAQBiaE2vUjpM8IiTHgszfu/0D7P6:OEjgXCdMHRaTBN3G+vyqVsxaCAQBianP

Entry point:
D0, CF, 11, E0, A1, B1, 1A, E1, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 00, 03, 00, FE, FF, 09, 00, 06, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 10, 00, 00, 22, 01, 00, 00, 01, 00, 00, 00, FE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 62, 00, 00, 00, E3, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF, FF...
 
[+]

Entropy:
4.6052

The file installer.exe has been seen being distributed by the following URL.

http://www.universequickfactory.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.