home

installer_win.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.privateinternetaccess.com and multiple other hosts.
MD5:
92880d402c260635c4f5ae045748f4e7

SHA-1:
f7d1a3ddc71652ec5cea9dd9dee70f64c0ae0ec9

SHA-256:
91eb5bd0381d48e8172d5fa48c7284b656c1953204f6c31ac51d2c45ae03cb30

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/12/2024 6:41:53 PM UTC  (today)

File size:
24.7 MB (25,928,740 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\installer_win.exe

File PE Metadata
Compilation timestamp:
3/29/2013 7:57:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
786432:ydYb2G7EesQn1rcfjcH73ueoarq0NEBMWLTyrzDO:v2AEesQtcfjcLueokNEuWLI6

Entry address:
0x1280

Entry point:
83, EC, 1C, C7, 04, 24, 01, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 6B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, 83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, EC, A1, 40, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 04, A2, 40, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, F8, A1, 40, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, 70, 40, 00, E8, FE, 3E, 00, 00, 52, 85, C0, 74, 65, C7, 44, 24, 04, 13, 70, 40, 00, 89...
 
[+]

Entropy:
7.8989  (probably packed)

Code size:
17.5 KB (17,920 bytes)

The file installer_win.exe has been seen being distributed by the following 50 URLs.

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_bYNUtAdbT5MDsq6h97PRm-KxOgrxS4JsAkbpQp64dSk7JFMm93Bdv,D1qFI7x-Q5C_vOy_91yIo6zmNB0

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_hxbJlfbwEM5raqSzG5eSwaAFZPJmsvyCBaSi2P9xAIJCTD7Z6MHTh,wLotvEvKHdRqBlDAjMCkV9I5eLU

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-mfLXSGI5eqj4pGWPiwtgU9PLedcBOBPuNBPdUUcdrGBT_6ZbG28oK,8MfR2pXgj0J15yqdExyF2lwr2zQ

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19jTnZ57TRUQru3fycE9G4qoD3Yb392uG4KEdeZrrk5m5zORUSuI_RC,JbHhfBWdNnC8fhMWQJiNr4HEHMQ

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-OD2GxMZfm57LSQLI96GOuocVN6VzcZWTdcpxKqoIw_8Hfkzi_YTcm,jHuie3SMYsZ9eXwx3jxWrjOMacI

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-yaiVD3Mh0x17tCxlv3yjbEFyZBssl3AsYFEYDGBWdvRdwLGyrVKtf0zKViwDkewSNeV3EQaC_qGBO7Pu3GzddLSqV432aHbp4PsAW900xojL2i8d6ya6M,iGTqnCGlgAhG7wa02VgPyz49J00

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_zX34yO-5OBnl-_QXEs50QCbSklk_dmqxoLbkraJpvAlJ0vleMKDry,r-LkPiEV41MRoz-YMdjU8TJ9qZs

http://software-files-a.cnet.com/s/software/14/26/64/.../installer_win.exe

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-yj3iexd1voHP5W1K_WKJGILce3OL-5beSqJSmslnn7vuosyigp4D_,vM7t_Ws10o1jeRiWHA1OWKeNaPY

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18v4VEgigGOG9ZEiAdHm2dNnp5c5rautGAo4hzo53AgE5-x65FzYDl7,sFU6_Z0eypJ489NqjqSmevoT3oY

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18RWkpCfDc8rQEGZLJxS-YNa1ERJGGxD7VysWMxNmRWF9UHjsJNbhJY,bkGrh5ZOU-zwJcteTSxN7E4xAyc

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18L36BID6byphcYuqQ_YqRziGvTQ688sBVo8dordORYrqJxLIlM73-_,gjh7Hns6Ek4ySbJ6uiheKqgT0Qg

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18PWZ6SRXjBIC-g_RCOpTYIar2W3qzO5EL6vF5F94l8eGLk6OeEIu_V,gslbSh-AzMz88l3X37tWL3gW0KA

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19KXs6Ispg-U5yQtUsX48fyPFgPUEtQDVNFM-gPSsVD0_vuRmVnfUGJ,bWMGLCe1p7-Zznb1ku6tjK9XMPk

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19qpDk6cg8zpz5QJ1Q3l-PjkmLwzhuUWc0svgVMiOLbJ4r-pQ9rxWXG,bi2TiMI3RS3wReyxkvZmtaSt76M

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_0XD9kSY00mJeVQXvf-4bepgK9H0SYnk1AEnpoeiV90KVhfHsdEEtn,zDWHCuBixaglTjN1RcmlUR_sJAQ

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-HbmWLKle_X72svAplQybZoxj5HDXwAgMjztVCrESRIO_HaeIAvim8,pnkgKdDDwZE_iCRdU4sEo-D6FTU

https://files.privateinternetaccess.com/.../installer_win.exe

https://mex.privateinternetaccess.com/installer/.../U2FsdGVkX1-Ijru1k-DE551w1d_WNl3nFsTcLZ04Mho5YjfjoVYq8jBYj855SlCT,7EwSqTNWSjrybQAZEtYlkK4PZWI

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_xVqCN83wIdtXkMc7TlvQLVgRjdXvYVXTdH4CrB50Ja4Ar_R0DWplZ,zKCbxmUNgJi1lTIYdwNocitvE-8

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18yx7qZfWKUD7M0UY7Z4CA90X4PzZn_gjGgyNqBS3PRs2ndrXEb1Xdt,di4OMlMZez3qBGKoGQi70aa0XCs

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_BbrdBM0OJq1n_KINiwRvcgOnsQ8upgs2O6uoPD-qG0JlBZUhu1Dxv,ym7ocko_i4cY5-T0hJGjpDlBhqk

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19VlwSr0kuNxTMPVBKnyFh1QfRFamzdoPJhekJd2NxzFAQ9z7fasPOz,gJjZEGAvlTKQ_TEQ1LPZiT16uvo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX19EfE1g2FQ9LC2JsjARE1EIJdcycNji4HMvz_jhmEhVtJiBAABeQEo-,fLL1up58tp4cei9RiKDs9vsrp9A

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_na_EnplplbHdqt4uAAQySJT7SalxM82_ZkNT9qnx4W7_RBMy4BkPAPxpMImU4eV7wguLuOq1Z-D1NyKMAAW6CQva-S2h8BkWtP6OXY3dVahT277-fQY3X,NV_szX4OCUZIr75dNMnL-JJGzVo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18JpM7OnRN3W9ey9ijdY4Iw3xQ2dVSUfykVQY2jEo-R2cOh8lLiiadS,mVXOG_oUm8wMLffHNHyZUZ8sYjg

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1-V1YCMXlTGNlebc1PpJrIAazSZCreyBfvpPAafzaQ2optNxZdUUA7R,yof8nnzPvKPErvEX-T6VPSOMyVo

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18wJSFCAgNVYc185q7ykvPQrwvaCN1wNVbeDP3MqeZp1WWHvyqTpwgU,5TaljM269Sch2wtANbs3RaP9zuE

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX1_HTddDHku2wdyCnbMSOldLgkVPm9yY8r72lwpPIY5c3K7qBCMgnOmm,X5ijriGlbbTHIkj917ea9LFlbEc

https://www.privateinternetaccess.com/installer/.../U2FsdGVkX18p5YPNyzCztNk6xryoNOVsuSuaoOnTsbPRJQGezQNxRCsx_ALtohah,NeYKAXn-EM0qeZ43u4izbl5PBLA

Latest 30 of 137 download URLs

Scan installer_win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.