home

instalpb.exe

Pense-Bête 8.01

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.jetelecharge.com and multiple other hosts.
Product:
Pense-Bête 8.01

Description:
Pense-Bête 8.01 Setup

MD5:
08ef76743aadbf98dda86d1a78bcc65a

SHA-1:
b6f49606323147ea5016966f0f4190af2b0429f8

SHA-256:
885113039d27201b6ac0124b555ad1feaca48356191ca36e5e0023c2dffc81df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 8:23:06 PM UTC  (today)

File size:
1.6 MB (1,722,812 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\instalpb.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5aB+5iIiBxsNwK6htWMGTKoGr4liPoinXBgJ:QB+5usaxhM/KoGrLRgJ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file instalpb.exe has been seen being distributed by the following 4 URLs.

http://www.jetelecharge.com/.../telp.php?id=181

http://pense-bete-agenda.fr/InstalPB.exe

http://d.telechargerfiles5.com/?data=qdTYhkWufxbennLP5VaZsAQU1etkgNxr9um80etJE9JK/DgsJyK3P/NKiqxRM1XMIZqMuWiEWJN2vKj1/eGyFbmwmaxsT5VGLsQpCTgB0uNcZpCAt7KzQMXGZrfXWl1WCXF6EX4Fi94Jt9HiDo4C843BF9zaPN9a4 axwl1B9zUkd7rgfi0iid lRTSXw0SsP5zpuuilBQUwujEAPPs9pZubdrY r1Zm9hLwZQMVJmz/Eg6wo0dA OoYoK1cKY/IbBykKLb8bXlHd1vVJb9JIqfcQXiRZqnbEgWACltDJYCojKzlK9c7E7v/a0M78Jn5GyS VS mmbEiVskoC 6zk84mnM3eCH0XMACjEg9yzgb3fDpKy 4fMe3MeupWMfHG6XwTdERnNERnLk3tDTLhWMtNpTkVHfv2svtGS9Z3IDUYBCg GYgwlpPp0vbcIQgm HbupJxT8 EWEOO1wFa6VTmTHlI9zgkerorHVRYs6xdnncdU8IJAK8FqfEAhosMZHUbBYQLK9sA2KpSV4nD9ui7TDZT2hdWrCfdnA2hXCFmxU0wx&key=q6wh0vemQU3PESMQyzBd/sG6U2saM/E yO2F9p0JcXSDeUNaCnBY511W9OrEK5kl4EH8y8GXr/3yjH0Nhka1eA0sI/KP/uh vyXkRbHmFVfIrtKOjWWVqrWNRif3Q3T8FZD/TsUj0zQubxqx41OOWOabEKzATFdqgHxckO4N0el Mqv1cP6BjyRzQBxGGmrOK2MG2cBOaeEsiJcudB9I9VQo0Nvo/ux5YAsWZEWGClFcwvLd3PIeP9ixiVXFzFMAxy2q9jTGgiORljZu3OYdlxFM5cjaFnboObDkpnCgLra8r9w/.../4TIXVR TF7bzSHVsYMKCarYnIhyTXp9

http://d.telechargerhosting.com/?data=qdTYhkWufxbennLP5VaZsAQU1etkgNxr9um80etJE9JK/DgsJyK3P/NKiqxRM1XMIZqMuWiEWJN2vKj1/eGyFbmwmaxsT5VGLsQpCTgB0uNcZpCAt7KzQMXGZrfXWl1WCXF6EX4Fi94Jt9HiDo4C843BF9zaPN9a4 axwl1B9zUkd7rgfi0iid lRTSXw0SsP5zpuuilBQUwujEAPPs9pZubdrY r1Zm9hLwZQMVJmz/Eg6wo0dA OoYoK1cKY/IbBykKLb8bXlHd1vVJb9JIqfcQXiRZqnbEgWACltDJYCojKzlK9c7E7v/a0M78Jn5GyS VS mmbEiVskoC 6zk84mnM3eCH0XMACjEg9yzgb3fDpKy 4fMe3MeupWMfHG6XwTdERnNERnLk3tDTLhWMtNpTkVHfv2svtGS9Z3IDUYBCg GYgwlpPp0vbcIQgm HbupJxT8 EWEOO1wFa6VTmTHlI9zgkerorHVRYs6xdnncdU8IJAK8FqfEAhosMZHUbBYQLK9sA2KpSV4nD9ui7TDZT2hdWrCfdnA2hXCFmxU0wx&key=q6wh0vemQU3PESMQyzBd/sG6U2saM/E yO2F9p0JcXSDeUNaCnBY511W9OrEK5kl4EH8y8GXr/3yjH0Nhka1eA0sI/KP/uh vyXkRbHmFVfIrtKOjWWVqrWNRif3Q3T8FZD/TsUj0zQubxqx41OOWOabEKzATFdqgHxckO4N0el Mqv1cP6BjyRzQBxGGmrOK2MG2cBOaeEsiJcudB9I9VQo0Nvo/ux5YAsWZEWGClFcwvLd3PIeP9ixiVXFzFMAxy2q9jTGgiORljZu3OYdlxFM5cjaFnboObDkpnCgLra8r9w/.../4TIXVR TF7bzSHVsYMKCarYnIhyTXp

Scan instalpb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.