home

aa_v3.5.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.kdkupdate.com and multiple other hosts.
MD5:
942072a96ebe0955f53081d68e7df8f9

SHA-1:
6052e73befe50a9a936715195b6db3d042f69b47

SHA-256:
2067ac4c5590b404d98e751d1e983572f21f4e5f96a0891b2edef1c2035418a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:37:08 PM UTC  (today)

File size:
1.4 KB (1,472 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\aa_v3.5.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24:WMBr7eAIueAjG7EfVmBjmrfIbpwObwbYAORpFAO5IPE/FAOZvMFAOSz/FADFAePK:x3eAIueAjnfSCrf89ws5/hvMeyjPl5IJ

Entry point:
3C, 3F, 70, 68, 70, 0D, 0A, 0D, 0A, 09, 24, 61, 67, 65, 6E, 74, 20, 3D, 20, 74, 72, 69, 6D, 28, 24, 5F, 53, 45, 52, 56, 45, 52, 5B, 27, 48, 54, 54, 50, 5F, 55, 53, 45, 52, 5F, 41, 47, 45, 4E, 54, 27, 5D, 29, 3B, 0D, 0A, 09, 24, 69, 73, 5F, 6F, 70, 65, 72, 61, 20, 20, 3D, 20, 28, 73, 74, 72, 69, 70, 6F, 73, 28, 24, 61, 67, 65, 6E, 74, 2C, 20, 27, 4F, 50, 52, 2F, 27, 29, 21, 3D, 3D, 66, 61, 6C, 73, 65, 29, 3B, 0D, 0A, 09, 24, 69, 73, 5F, 63, 68, 72, 6F, 6D, 65, 20, 3D, 20, 28, 73, 74, 72, 69, 70, 6F, 73, 28...
 
[+]

The file aa_v3.5.exe has been seen being distributed by the following 3 URLs.

http://www.kdkupdate.com/KDKUpdateIndex.aspx

http://software.thaiware.com/download_url.php?id=10685

http://www.ammyy.com/AA_v3.5.exe

Scan aa_v3.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.