home

picexa1015.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 113.171.224.208 and multiple other hosts.
MD5:
70aa7b3e7fdd9d058457d06d3ca1caab

SHA-1:
3637b1860b7be7de141bc801ffc8dcc77eeaccca

SHA-256:
f1284aa4f5e4c016046ee8124b613203a531e7e87159a0a0fe098a463da77b26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:59:34 AM UTC  (today)

File size:
20.4 MB (21,378,833 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\picexa1015.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:v6JGu6KLkmt7UvB09lXQK6jG29CsZ2wu9lY8Ci93yLNpU152XD0EEefirdlNpPcB:ygmkmtYvB6lXQK6i2ow2x935H2QEE9rE

Entry point:
37, 7A, BC, AF, 27, 1C, 00, 04, FC, B6, DB, 99, CD, 36, 46, 01, 00, 00, 00, 00, 24, 00, 00, 00, 00, 00, 00, 00, 0D, A5, F7, D8, 01, DC, E9, 6D, 20, E6, F5, 7D, 46, 00, 5E, B5, 0B, 99, 07, 49, 47, 45, 00, 00, 00, 00, 00, 7E, 00, 00, 00, 00, 00, 00, 00, 77, 6F, 80, 8B, BB, C1, 41, BA, 59, 07, 00, 40, 56, 18, E2, A0, CC, 05, CC, 82, 28, A1, FF, A8, 43, 0D, 9D, 90, C7, 6B, 89, C2, 4D, 6C, 19, C7, CB, C4, CA, 3B, 5F, 0B, 9E, CD, AB, 07, CB, DC, C2, 08, DA, 8D, 80, 18, 04, 05, 61, 86, 8B, 7E, BE, 7A, 07, F2, 1D...
 
[+]

Entropy:
8.0000  (probably packed)

The file picexa1015.exe has been seen being distributed by the following 2 URLs.

http://113.171.224.208/.../picexa1015.exe

http://dl07.brot-soft.com/download/.../picexa1015.exe

Scan picexa1015.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.