home

puffle.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn2.scratch.mit.edu.
MD5:
2aa95d2cdd2913bc627653aa2bbe618e

SHA-1:
4b72bf82f4637d722edb134d64b1b1229985452c

SHA-256:
a283e17304a6726942f4fa5f75e99037554853daea75e720295c5ff16af942ac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:56:36 PM UTC  (today)

File size:
124.2 KB (127,132 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\puffle.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:cFSqBnDdbfxYe/mtrkDHTPB1ZyiOfdL8ln7SyncD2uheN83GYMTchfsuwWWqDnBd:c4kDRZPIkDD0pm7Fk7qTGfBWqDnB+5W

Entry point:
47, 49, 46, 38, 39, 61, C8, 00, C8, 00, F7, 00, 00, 01, 01, 01, 0A, 09, 07, 15, 0D, 00, 1A, 0E, 00, 11, 0F, 0E, 1D, 14, 01, 17, 11, 05, 0C, 14, 17, 14, 1B, 1C, 1C, 1C, 1C, 14, 15, 16, 05, 0E, 15, 22, 16, 00, 24, 18, 01, 2E, 1D, 00, 34, 1E, 00, 20, 1F, 1E, 3B, 26, 00, 31, 2E, 1C, 37, 2C, 18, 3C, 32, 1E, 26, 24, 1E, 15, 1E, 20, 1C, 1E, 23, 0B, 18, 21, 1C, 22, 24, 1A, 2D, 37, 23, 23, 23, 2C, 2D, 2F, 28, 37, 3B, 37, 38, 39, 25, 2F, 30, 41, 2B, 01, 4B, 2E, 00, 4D, 31, 00, 54, 35, 00, 58, 36, 00, 55, 38, 00, 5C...
 
[+]

Entropy:
7.9427  (probably packed)

The file puffle.exe has been seen being distributed by the following URL.

https://cdn2.scratch.mit.edu/get_image/.../4326756_60x60.png?v=1403039123.0

Scan puffle.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.