home

update.exe

MD5:
e2634d3d5379d968a684a24b7ac1eb7f

SHA-1:
33390e57fea5fcfaf76c241f734bf98ab9c32c1c

SHA-256:
82307ac22c1a2f110f8884bd6bbda6e1f652b6c8989296ec7e2673380c8628cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 2:38:19 AM UTC  (today)

File size:
1022.5 KB (1,046,995 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\update.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
12288:nFOLW2y59VGtow+qe5mG8dT2EIvJy5nvvKO753jLxZI2wiQOsuk:cyn59V2ow+qeMVgRy5nL3ZI4QO

Entropy:
4.7434

The file update.exe has been seen being distributed by the following URL.

http://d13a5ifzas6rye.cloudfront.net/.../update.exe

Scan update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.