home

picexa0709.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 113.171.224.211 and multiple other hosts.
MD5:
6191f4efa175faec49c91287a03f0980

SHA-1:
8df58a303e321f68b88e6c15809c3cb13a83b047

SHA-256:
195f9a4ae19c05dc54d0884608c593859afc614c4a9d196ec12c3c1b06b5b100

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:40:40 PM UTC  (today)

File size:
1.2 MB (1,310,336 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\lvl0nfze\picexa0709.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:q7Z4tS+yN1gxAN1bAXHPpCb5flukyhpr2Ouq1SA2qKJ7A0BektMxc+8sWhOkPGq8:q7ZGyniumPIl0HuqGHJ7A0B/tMxc+8bQ

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, 6D, 94, 0D, 65, 66, A4, 49, 00, 00, 00, 00, 00, 7E, 00, 00, 00, 00, 00, 00, 00, DE, AC, 3E, 06, BB, C1, 41, BA, 59, 07, 00, 40, 56, 18, E2, A0, CC, 05, CC, 82, 28, 88, 79, 36, 13, 36, 22, 3A, 71, 67, 1A, 50, 9D, A3, 33, A6, 7F, A4, 45, 75, 0E, 2B, 13, 1F, D8, 62, B1, 9C, 2F, 6D, 3E, 16, 4D, 51, 89, ED, EC, 8E, 98, FC, E5, 73, 66, 5E, 0D, F2, 2E, 86, 59, 36, 56, BF, 7B, 0D, 9B, 5C, A7, 0D, 7D, 5A, 14, 5B, 64, F7, 09, 3F, 56, D7, CB, E7, 98, 5A, 71, 83, AB, 3A, 7B, 83, CE, 2D...
 
[+]

Entropy:
7.9999  (probably packed)

The file picexa0709.exe has been seen being distributed by the following 2 URLs.

http://113.171.224.211/.../picexa0709.exe

http://dl0529.puphelp.com/download/.../picexa0709.exe

Scan picexa0709.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.