home

crepusculo.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.portalprogfiles.com.
MD5:
e248b31756204d65fbe1704942aefb19

SHA-1:
b4f799df92663c53bbeda9fdefc49c3ac839995f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/19/2024 10:33:46 AM UTC  (today)

File size:
216.5 KB (221,654 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\crepusculo.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:PsrYlSAlsQK93yyEyGNAmZsYFN+DXsVwd:Eks7QMVGAVEEDX1d

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 49, 63, 47, 39, 05, 72, 3C, 3F, 6A, 61, 03, 00, 6A, 68, 03, 00, 05, 00, 00, 00, 32, 2E, 6A, 70, 67, 7C, BB, 73, 70, 25, DD, 17, 05, 7A, 63, DB, CE, 24, 37, B6, 27, BE, B1, 8D, 89, 6D, DB, CE, C4, B9, 31, 27, 13, DB, B6, ED, 4C, 6C, 1B, 13, 4E, CC, F7, FD, 5E, BD, 7A, F8, E7, AD, AE, 3E, 5D, BD, 4F, D7, A9, D5, FB, 9C, DA, 67, AD, EA, EA, AF, D5, AF, 5D, 00, BA, AC, A4, 8C, 24, 00, 02, 12, 00, 30, FB, EF, 00, 7C, FD, 05, 60, 88, BB, 9B, DA, 7A, 03, 20, 00, D0, 00, 00...
 
[+]

The file crepusculo.exe has been seen being distributed by the following URL.

http://cdn.portalprogfiles.com/?ic_user_id=882

Scan crepusculo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.