prepreinstaller_win.exe

The application prepreinstaller_win.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from d3bt01lx9eiyhq.cloudfront.net.
MD5:
ee2e0b88d01f86a76a8b69e7ec0b380c

SHA-1:
ee27d89c4270038061677658675e5c9073efbfc8

SHA-256:
69268608d8ca8f0df39f557890f171a3f211103c8067893c540356d0e6dd5f1d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 3:31:42 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Downloader (M)
16.7.24.16

File size:
289.5 KB (296,448 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\prepreinstaller_win.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
6144:mcpH/xAGcHMSX+K5EoiCO133PI6X8fMF7Uzg9Fc:10GclPEoi333PI6Mfug

The file prepreinstaller_win.exe has been seen being distributed by the following URL.

Remove prepreinstaller_win.exe - Powered by Reason Core Security