home

qksee0428.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dhd29up7zcdyt.cloudfront.net.
MD5:
167645be5a3d62dee2d92e847969015f

SHA-1:
7516f62897fd81174e90cbd5b8512e52d8e99ca4

SHA-256:
37d1fc8eaf06b9cff1faf97244b466e3551fd520f53a3df7884235f8c9cae4cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:45:03 PM UTC  (today)

File size:
2.1 MB (2,162,637 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\qksee0428.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:uUwUbbw1FuMhq7j7i0nDfBC9eltbAFYKIBNUj6DrT4LJwQI9:uUwUbUPhIGIBCQl9AnIBNUj0A4

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, 17, E9, 2F, AF, D2, A5, 7A, 00, 00, 00, 00, 00, 7F, 00, 00, 00, 00, 00, 00, 00, DD, D9, CF, 19, BB, D6, 44, BA, 59, 07, 00, 40, 56, 58, E2, A0, CC, B5, 25, F5, 33, DF, 74, A3, 6B, 20, FC, 07, 22, 2A, DA, 50, 9D, A3, 33, A6, 7F, A4, 45, 75, 0E, 2B, 48, 3F, 7B, 77, 0C, 16, F6, 05, 8C, 65, 28, 1F, C7, FB, 62, 85, 52, D4, 8C, 29, F0, 64, C5, 68, 42, 04, 3E, 1F, D3, F7, 0C, C3, D4, C5, 90, E7, F5, 0F, CC, AF, 5C, B8, BE, 8F, EF, 5C, E0, E0, AD, C8, C8, F4, 80, CC, 06, EE, E8, A4...
 
[+]

The file qksee0428.exe has been seen being distributed by the following URL.

http://dhd29up7zcdyt.cloudfront.net/download/.../qksee0428.exe

Scan qksee0428.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.