home

installer_win.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.privateinternetaccess.com and multiple other hosts.
MD5:
c3fba6849f6714a0081e4b96069c4a99

SHA-1:
64ba67d5ba302b8ff08aec8d63c81d9fbdabe91d

SHA-256:
8310324582c0a9e395989a91f72587eee33686e0ddca85324b8ddbfac7a492f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 1:30:26 AM UTC  (today)

File size:
54.8 MB (57,460,488 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pia_manager\installer_win.exe

File PE Metadata
Compilation timestamp:
3/29/2013 6:57:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
786432:+fv2OHprWMnq5P/LsFjHkmkKkGA2l/jszb+plWGwwKW8RVF5hasvoQ6e7cU3xHCm:AuOrYsFQvsl7szb+pkkt816e75LZGq

Entry address:
0x1280

Entry point:
83, EC, 1C, C7, 04, 24, 01, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 6B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, 83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 04, A2, 40, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, F8, A1, 40, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, 70, 40, 00, E8, FE, 3E, 00, 00, 52, 85, C0, 74, 65, C7, 44, 24, 04, 13, 70, 40, 00, 89...
 
[+]

Entropy:
7.9725  (probably packed)

Code size:
17.5 KB (17,920 bytes)

The file installer_win.exe has been seen being distributed by the following 43 URLs.

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18G-tThzTHZOk7fSqxneOfQx4aP8Nx3UzeDGes7IUZwaaTnFcouJSlI,GrazbW43Wk-bApKgD1CkLFxiijc

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19gnEbx7o65js8ajbLW80-6x_ZJ72vFwYPEI-cajn2WTamiwoMp7Kr6,sANKzwZFKL7fpbVhdSGBzON2bEE

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19ptIfE4mcWWZ99yDg25v2vTsDsGPSD5AihdG8C6VpU4aC-jZyUpFXc,HQp_g0DYUWLi0IdbbfeUEO1KoGE

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19eQGYcAs18EMdzq3NEpg2hqP8p1JdsUljdaC9hQL_GY8AXg4x1RFY9,VixeLm5mYs9HrqsLvLybiRz0rOU

https://nld.privateinternetaccess.com/installer/.../U2FsdGVkX19Ktc1YwiY_3IZ6AajX09dBvB2ixiYh8FumR8RQOxiBWjoldwvqKe8L,Qs-bB2WShbWSQ-hILjE7HuPbcNQ

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18_NPgSm9455cCsUPHM-RaksDwIjCllHactwlt4SfYBRRANKeLv4V9j,KFcJ_19pdhgQB-XbFrFM0tvKATA

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19Ib95rEfIEa0KWB8QSyI9Cipx1obB0ppPQ3jlS4KT5pBMSy_VGA8-p,v_7Re5ILMW4BvHu_2taxLgotMPI

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-PqQqHTmWDHPKOOBG9OZ_g2a7b35Q0v8-Q9xVw9o4WxAyNbVa8fWBF,U8Lor-fo_JcHDkNYul90c05nT7Y

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-U7-ysDW27StiK-5MuY7TPT2scoUnGwLGUjIha5bV_yQeul_O2VhZf,BfY4_ePnWqlPAtUI2i5C3a7b5fg

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_7NiEfMQe7XRPj1HT7iiCN-GwICZyvD_-MjBLAIQrNJ1KPeoYX0mjv,-hbKnCezK8IdJzh_gAbshD4dITs

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18NXX9kvK3-4w8TJByQCa70yYrYLwH93xb23KUQqCRDQuMBs3vxXxYg,GkmYhphji7gnUGFGNuS82JzBrNo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18zUU54wMHzELO8pMgnqXJtCkRudKLE3jwpLzv8gyrKksl53GjmznL5,0HbxKY7kCoeugV3fiJUQQgZr-WA

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19wNsDxLaRJEoTETt1b67Cpdt7Eztsv9dqfhJ6m_YIOo_GaRUpZ6QRb,WkryVqKbtUqXYqetD98w01BXbRw

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19hryB-KmRI27-MILm0TcMwu2BIATS3n9CJBtglE41W4jZe5bIB-94f,9HNHNsgUe6YwiyIJWZBKb97FXoo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_VYIizHPOrc0HYvIx9n2gvi9BPbJxGdJjwUmbeqWVj4HdkhKtmB6xH,DKgXQQiM5E1BiGmGETi5DyNr08Q

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19NqcGJTuQDdwyH3dvOOLyeaoUxKaBHBjNhNQ8_-qDC8P1EhD38fRVX,K9WYtOKqShIBAqloK-Yj4lGcbjg

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_q0mXRLOXkTIaxUFts-le0d_6Wre4-De8dgI2_sll6L8AjzAxj1V4L,cuepDG402-GSvNqKncerHN0sOTI

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-iMRP-yH3dgH1nJSR1GVjFHjJWnmMNY9gDbWSVY382CdoUlGI9ij15,Ni6WDZxElrLuabhDQJ_7304Kg6w

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18sQxN6xRYpGt5FTF0fzDvBxy8HhWv526hKzQ-ZXhXJv1yt2lJeDD86,Z0XnRha_lihUmdFfWsU_XP39FCk

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18fgFH3R_x2FF2rkqE-rUFF0cAZ7KUK0sYBXewNndtkxKdGJgRVPjoz,XPk4roVu7ICpKr4c3tDx7svSB58

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_y2gD2jt_QP7lgrXT3KcUvqBzxFZPfRXeDLkyE-LDy39BKt5ShC2Fp,7P2TYnDSrUywX3XdY_OZQnpu1M8

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_0TrlDQxBqwjZgS6ujADYqh8uW9uqGIw2nHyVgjUHIo4BzyEZf-FmV,VTCTHeKq8pmi3_ORzegAhAWCX6Y

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_0k_t7ltvjrMkBfV8b0L7TLCHUfbO9BjQIDowaA2aoQ_WoEiQGK1Wq,XTKvaLL7ekUIcewtAmBgHqExad4

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-i2iTc2l0wTi1CMYLAi7zgjyoVdF5wCzezxPwmb3V7pjFObkV5aRMj,fEOQH35BFlC1wSWKNHyLRV76sxU

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_zY-gODqymIfLVxB44VnUR8HNaFJ4tz6U30NHwzUnIzHNDBZbCz4qm,yyz-E9gZqw7huynoOMww8E0zATE

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-0pkDx9M4m6tXU5bwJwR8HenZu9npQJlReKxAnI-bPuzVbbwo1okSP,fWbVm2MfL4B-cETFJVhw4OxL6po

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-zCqdXGnnnwTlGLeqO4OEParUXssQgKx9AlROgoQlbETr74blPK55-,y8ZyHieGGvvlNfhgTVxxr7MRpY0

https://fra.privateinternetaccess.com/installer/.../U2FsdGVkX1-DSXYzQ6MZ0xZZ9xqLajM_Ct4RHR1tzrgBP8AjFkKExRav0ir9nrhg,Y3ZPfpiu1aixpoWzPpdDYp4nn4E

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-iXV0Pz69evHc3fUPoh4OII_RQkaQU9fBr8NEsILtujY3yPDrQrDuh,brHZQEFNh0zukLAxiZS9bgMYsFU

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-wQQ7Kir6JF_mTJ6sRD_4J1ecHBVAkw6t2DrPKAFxFjVkzbd0rwqa6,OYv4VQ2QAgxwd9hXjLQOgiK77kk

Latest 30 of 43 download URLs

Scan installer_win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.