home

installer.exe

This is a setup and installation application. The file has been seen being downloaded from www.downloadssharepresent.com.
MD5:
f52a5944e9fef87cbc3626cbe2405730

SHA-1:
ac1887fef7718334b590fc60eb4a2f7b35fdbe05

SHA-256:
8fb96e1fd740434452a80ce5c2c55cba31006eb4af7703a8834b6f0c16661693

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:10:07 PM UTC  (today)

File size:
560 KB (573,440 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installer.exe

File PE Metadata
Compilation timestamp:
1/11/2016 3:38:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:ViznKm9gc8LyEqRREmO99zAQwODq2SXiL6p0cunXHCv0dNjnXvKTsvZbsLQ:iKm9zAybOfPwODq2SXHbunHmcZ4c

Entry address:
0x6D373

Entry point:
34, E0, 41, 89, D6, 71, 09, BF, 2A, B1, 93, A8, 8A, EE, 88, CF, 69, EF, 8A, 84, 7D, F8, 86, CD, B9, 5C, 81, A8, B5, 48, 4E, 8D, 35, EB, 37, CA, F4, C7, C6, 36, 1B, 0F, 2B, 38, DB, B4, 7D, F2, 86, FA, E8, 18, 00, 00, 00, 85, F2, C6, C5, 5B, 84, C6, 81, EB, 11, C1, FB, FF, 0B, EB, 87, FD, 4F, 81, EB, 39, D9, 04, 00, F2, 4B, 84, F7, F2, 85, F7, 68, EA, 0A, 00, 00, 86, C7, 89, D1, 5A, 0F, B7, EB, 85, C0, 77, 05, 0D, DD, E5, 91, 27, 80, FF, CB, F6, C0, D5, 85, FA, 73, 07, 69, C0, 1E, 14, 70, C4, F3, 68, 0A, 00...
 
[+]

Entropy:
7.2039

Code size:
460 KB (471,040 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.downloadssharepresent.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.