home

safepstbackup_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from d.4team.biz.
MD5:
403f174bc17e22da6cbfec99412ad0de

SHA-1:
d72c13f1b333c4af8aadbe021dc73b36f2578f92

SHA-256:
206976d305450b5338a4ec3aa559b6d3770d099bb420066248d9e4cf21186cb6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:18:48 PM UTC  (today)

File size:
524.4 KB (536,993 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\safepstbackup_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:GhOMar3nRZmiM7gifj8zM2Rp+51ppo3fRnRwQE7VmSMP:y5arXRZrMcigzM2mFuRlE7V7w

Entry point:
06, DB, 98, A1, AE, C1, AD, D5, 4C, AC, EB, 0E, CA, 8E, 44, 31, 7B, 9F, E0, 41, 24, 7A, A2, 59, FC, A7, 15, DE, 5A, EA, A5, 29, C8, 74, CC, 61, 40, A9, 0C, 27, 32, DC, 77, 9C, AA, FE, 65, F5, 74, 39, 74, D4, B1, 97, D6, 32, 12, 1C, A1, 03, 7C, FB, 11, 1C, D3, E7, 08, D6, 96, 03, 42, 13, 84, 33, BE, 16, C0, 18, 8B, 92, 95, 3B, 88, B5, 1D, 7D, 12, 4B, FA, F3, EF, 79, 75, F5, 5C, 93, 4E, 43, 89, B2, 5B, 2D, 35, 01, 07, 64, D7, DD, 53, 60, 43, 00, 75, 7F, E5, 0F, 73, C3, 49, 3A, 5D, 2E, 03, 53, AD, D8, B3, D1...
 
[+]

Entropy:
7.9995  (probably packed)

The file safepstbackup_setup.exe has been seen being distributed by the following URL.

http://d.4team.biz/.../safepstbackup_setup.exe

Scan safepstbackup_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.