home

installer_win.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.privateinternetaccess.com and multiple other hosts.
MD5:
8d71685d4c15f71cd41d591aa3797460

SHA-1:
a249e1142c07b32dc5ce319a614874ca790110c0

SHA-256:
80e42b598778c2a2a3721e39afc219157c90882956590f09263e950b9fc8b044

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 1:28:47 AM UTC  (today)

File size:
54.8 MB (57,466,910 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\installer_win.exe

File PE Metadata
Compilation timestamp:
3/29/2013 10:57:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
786432:rDsW4OMCwmj+Mnq5P/TsFvHkukKkGA2l/jszb+plWGwwKW8RVF5hasvoQ6e7cU3q:Pz4StgsFc3sl7szb+pkkt816e75TZaT

Entry address:
0x1280

Entry point:
83, EC, 1C, C7, 04, 24, 01, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 6B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, 83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 04, A2, 40, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, F8, A1, 40, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, 70, 40, 00, E8, FE, 3E, 00, 00, 52, 85, C0, 74, 65, C7, 44, 24, 04, 13, 70, 40, 00, 89...
 
[+]

Entropy:
7.9725  (probably packed)

Code size:
17.5 KB (17,920 bytes)

The file installer_win.exe has been seen being distributed by the following 50 URLs.

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_4SutOSZSw0LinX5_oeX6gduGjvXwqOOt94QHtQY9Mibx2ugbCmQ_g,9A3ptdozldZPcelNM2lSvaSNhaw

http://download.freedownloadmanager.org/Windows-PC/.../FREE-1.0.html?ac18b1d

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18gHrqU-Gf4D23zTBemxJnT_kH45a7XRe76f9p1hdxRshBZYZwzTvg1,MqSrv582M7PjKgmYtUXexl4NJ4E

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18IwmWgLoS9rw9Q8OT2udBaKJcIm2NBBtYYAAROoJmuTbshmCLVQTLQ,g42_QDgesB45j-1Su4ZiZIQ2ws4

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18IhtoECqwXuClr1zkXfvAFWz9cHW90-AafVu14DG0nVQq6dAs16TKR,DOs6DwSDowCUka8zJX4U4mWXvkY

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-6EJuW3K5W27jE8liincpghRb-JcIVdXELaEdyZsTP67FhUG_HGot4,vxndYVxuErTdBBvUu_1ePWBjjRo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19HUfXoQCt5ONFhX9QrhZYyW1rP9_NY2NaE_6G4RBYwbIUp6DVWoNiZ,-R5jdkcnZOt9xD7ZLUAmRDHgFUo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18LNdzxSw2VCQCFFm-Rz3q9nJ_DZ-auH6mxc98WWZPGQ-vCFlo1DRwe,1VyiLFTbbU2V_nFZhGv0ONv2n3M

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX194xLXC9xfAAleRgNKDojQgziXNtPtU-Okn1z1xmXLMdTC6NnTuWiZE,28gNaABMwwpoG7gpbdc9-tMYf2Q

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_4-qRMnfSRAuzuexvn3RJeveQ1W6JnfA6Ok1KxLEah7L7AHs9NjqVU,flFfidLrVOqssVeizP4q9oZu_uM

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18bPotC1zvWBrAXkPfiwkGGj3wXUNN60da24nMlC5O75tbwusfGHIP9,Mfi_G_Ahh1iJG-Dr-62z3x4cJ9I

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-5cVVj0O0xGzAizpFtHP5wnojGe10wtnoEXMxneW7FN2yjke5JrSbU,TyWx6fxseP9AoXlrZUGA89yozNs

https://nld.privateinternetaccess.com/installer/.../U2FsdGVkX1_UX-JoK8hhuLSe21Ftc9KU061MBdZWQ1c65la8y0HCROjKVIQwNxcc,SdFh5v40rcX2MgVGLc0QhAMZ85g

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18oxbE-5i3F9mCXgIEZ1HgHP57PZwuRBWdvEacyA2JPVG1-fIWygWvl,aIeL5a87DeZGYG2LLtBDnC7QZM8

https://nld.privateinternetaccess.com/installer/.../U2FsdGVkX188nQAsxcHY0OXEMIYSvabTEdIvG5fD6yJ1eCAwQfNuPJc23PpeDDSg,NCcd0T_oWZyPRuOcTzamYEW4yGM

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19xL8uO-JsEO81B7RNvbaVqC_nIllB2ELze562umx-EvqDTQ-Ignv5R,uVlz66B2QbvPC7uUIxK30RTUNNc

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-DAllE4i9_OTu9FgoAW0Gp9HK7Vfb-L3zIJQ0Uc12KtcK_yv8rZqnB,arbypoMQD4Rmwhn5nxOBQcBHCiw

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18XcDHPGo_Rulbm8qUhkRrn0OOEY1yqqwGKr04sGvbW3TUlvM0iC3HI,SGJgw6APXENVnreMNivat8VaQzk

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19ST1qYYwDKGfpK0ib8oshQ8Z8LZ95UWx05HYsBsi_cJg2pxa9pSYsi,r_cSOBU7CLf4PY3AxE8ZdUKtnNA

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18IeUpwlns7sG-5sr8xAg9TXrfBFpcDzzhKpDyE5vVkUcU-nzwn1qYn,ZDyHVaOiqNC1BKfYIYgRe6POudc

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19aTKOADeOlsBI5A_pFcSITVd_pg_OjAtcjEAOwjgJzB_ZdPibpzO94,whkxISd55XjmA3Rsl9Vw7E8h8Ts

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-3zB-QTnonfGCYd6onVHYUbkOfqBJCh58zM-1YEuwlBgWcqdKOVcns,TM4ZuQdWdzm_9e1f4ExsGutjYOA

https://www.privateinternetaccess.com/.../installer_win.exe

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-BeTUFIEk2PKauASAP40XfraZuGSlF6kuDNN3vSo0O4rssjUAoxu2-,z91ny70ipMOfAKxZfYIm4dWiqa0

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19RLt-Rn5uscX2JTGPcdArZfvi0_GdvU3GxnKGxE0hhOlsyVLZIkyqQ,_Y3HtVApVOGy9P76U9kDpD5_Iss

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-34eUz1Ms6KS3HckNKdLIAMVuhBjnoAa-9YcutHvOglYZhABucNQJR,BR1TE1VgQ40OjE8XdYKXdthMk08

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18sf2zpHrHYAylVME1lev4orc1q3PmUpeh6DJaSIS90NLY5DNz8FJaK,YMt7jt1_MKbeWShR0Us-9RLW-_E

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18A97lT2k_nWALgwz_F1gJVK1dOt7fqAvn0hOVhZovP2v5KiBFHGGAh,pTtZ5KTQKm7oZFDUlQRSY8facKk

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_k4WJaHy8PS4CRdw_Z9yym1pXjXTqgCkdYRWccD6Bzo161BlXtGaVN,kLiAsTH8ferZe2IUvIfm0aPL3GQ

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX196uAeEJ22DcHa93nbi_3PepalEoHqWk1vWfpieGnVzYJWYeyLGkMod,kO5m0DyNrzW4WmalGBFck2T8wu4

Latest 30 of 92 download URLs

Scan installer_win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.