home

runclubsandisk.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from images.bestbuy.com.
MD5:
3dca3ec59ba89bfd82235435966bacde

SHA-1:
74df4632e160be61b746b188bd997b26b55824eb

SHA-256:
a57118a04428336bde84f539e057959dd22d222b02575fc8f7f5fde5664831be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 5:26:05 PM UTC  (today)

File size:
298.4 KB (305,583 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\club-sandisk-1.0.0.1\runclubsandisk.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:clLiu0PDeeeeeeeeeeeeeZxjkvBn1Cvgf2Wtxi6vl3OFZ2EqWCpg1U:clLn0PDeeeeeeeeeeeee7jQjCof26JBT

Entry point:
FF, D8, FF, E1, 00, 18, 45, 78, 69, 66, 00, 00, 49, 49, 2A, 00, 08, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, EC, 00, 11, 44, 75, 63, 6B, 79, 00, 01, 00, 04, 00, 00, 00, 3C, 00, 00, FF, E1, 04, 56, 68, 74, 74, 70, 3A, 2F, 2F, 6E, 73, 2E, 61, 64, 6F, 62, 65, 2E, 63, 6F, 6D, 2F, 78, 61, 70, 2F, 31, 2E, 30, 2F, 00, 3C, 3F, 78, 70, 61, 63, 6B, 65, 74, 20, 62, 65, 67, 69, 6E, 3D, 22, EF, BB, BF, 22, 20, 69, 64, 3D, 22, 57, 35, 4D, 30, 4D, 70, 43, 65, 68, 69, 48, 7A, 72, 65, 53, 7A, 4E, 54, 63, 7A, 6B, 63...
 
[+]

Entropy:
7.9137  (probably packed)

The file runclubsandisk.exe has been seen being distributed by the following URL.

http://images.bestbuy.com/BestBuy_US/en_US/images/abn/2013/mob/pr/.../iPhone_5c_5s_compare.jpg

Scan runclubsandisk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.