prepreinstaller_win.exe
The application prepreinstaller_win.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from d172h6aeftm6ez.cloudfront.net.
File name:
prepreinstaller_win.exe
MD5:
3b43abb9f1f33879837c4e4bb14e7e29
SHA-1:
c5e8964df08d8b50b062dfd05337dab35d4ef102
SHA-256:
217b022c9fa82b0fc88db4aa0ae060a9a4aec9f2061b5efa2ff877f2b9f0c617
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
11/25/2024 4:36:42 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
Adware.Downloader (M)
16.7.24.16
File size:
317 KB (324,608 bytes)
File type:
Executable application (Win16 EXE)
Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\prepreinstaller_win.exe
CTPH (ssdeep):
3072:Xx04WUC+GdwHxJuN5Y8tcXGUFyt/NGElgpI7M3YoQcmAGFrr85C:B4UC+GdSc5YOcXGVtkElo0MIoQcqV9
The file prepreinstaller_win.exe has been seen being distributed by the following URL.