home

picexa.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.downxmrii.com and multiple other hosts.
MD5:
3b287ca64562111c9501da501bf90221

SHA-1:
440a0ee5579ddfc88536732e0e9adabfdf5cfb9d

SHA-256:
2b1415ef89ac14718afd59f674321f519c6479bef47ac3ce10e397b6d24a8e4f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/13/2025 6:37:14 AM UTC  (today)

File size:
2.4 MB (2,500,526 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\hcjukge7\picexa.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:UOeBk8+vWoVUg65UmFZRQcaLtz02ywRxelgByubK9Sdhi/h7ytlsazv8EvsoGXbF:teBhgUgwFZRQ/22bBy7X7ytlXdsoGwwl

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, 00, 08, FF, 8D, 33, 7D, 7C, 00, 00, 00, 00, 00, 7F, 00, 00, 00, 00, 00, 00, 00, 8A, 18, 77, E2, BB, C1, 41, BA, 59, 07, 00, 40, 56, 18, E2, A0, CC, 05, CC, 82, 28, F3, 8A, B0, 94, 09, 47, 87, 22, 2A, DA, 50, 9D, A3, 33, A6, 7F, A4, 45, 75, 0E, 2B, 13, 1F, D8, 62, B1, 9C, 2F, 6D, 3E, 16, 4D, 51, 89, ED, EC, 8E, 98, FC, E5, 73, 66, 5E, 0D, F2, 2E, 86, 59, 36, 56, BF, 7B, 0D, 9B, 5C, A7, 0D, 7D, 5A, 14, 5B, 64, F7, 09, 3F, 56, D7, CB, E7, 98, 5A, 71, 83, AB, 3A, 7B, 83, CE, 2D...
 
[+]

The file picexa.exe has been seen being distributed by the following 2 URLs.

http://www.downxmrii.com/Public/softs/lim2/9283/.../picexa.exe

http://www.downxhymx.com/Public/softs/lim2/9283/.../picexa.exe

Scan picexa.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.