home

installer.exe

MD5:
d6785784784c53c6f03aa229b79eb066

SHA-1:
b9a3bdde16898d12b63d9c66251d072555b91acf

SHA-256:
ad737f5f5359d3caedd2312f5042fd0b27d12eb65f3688009eed7ff5904c660f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:36:35 PM UTC  (today)

File size:
528 KB (540,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installer.exe

File PE Metadata
Compilation timestamp:
1/11/2016 3:40:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:uTipYLR8haqMJ/qE5DSxWwIGkbhWnQsbS/DScR0+rMo:juGhMJ/qE5DSxMGkNMQi2Gy0+7

Entry address:
0x65517

Entry point:
FF, C3, 87, DF, 50, 68, 15, 1F, C6, 00, 24, BC, 0F, BF, E8, 81, DE, 74, A3, 54, 42, 47, F7, C2, 9B, 16, 95, AF, 87, C3, 18, C3, 0F, AF, D0, 81, F9, 94, 6B, 00, 00, FF, CF, 50, 68, F3, 2C, A2, 00, 08, D5, F2, 84, F2, 89, F8, F2, 03, C5, 80, EC, FC, 13, D2, E8, 00, 00, 00, 00, 58, 80, D5, 6F, 8B, D0, 0F, BF, F8, 75, 02, B6, D1, 0F, AF, CD, F7, C2, 14, EB, EC, 9D, BE, 00, 00, 00, 00, F2, 80, E9, AE, 88, C9, 81, EE, 06, 40, FF, FF, 1B, DD, 8A, E9, B9, 58, 23, A6, 39, 28, DB, 03, C6, 81, DA, 18, 95, 31, E7, 85...
 
[+]

Entropy:
7.1843

Code size:
428 KB (438,272 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.farmdownloadvaults.com/.../installer.exe

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.