home

device_images_pack_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from customer.oxygen-forensic.com.
MD5:
d709c020e21fb6a7584906a95722af35

SHA-1:
115704de5d3d6480bd7f1e2f13075c884e2b76fd

SHA-256:
744eefd31cbf98632111838a18db9d61a32f5b64f6f19518fdb645895306eeb7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/2/2025 4:40:15 AM UTC  (today)

File size:
94.1 MB (98,701,859 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\device_images_pack_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1572864:gy2q87ks0CiL3fOarD2BAdMNLxLhJH7ZVsiOxRSZiJRHYBhpg4Bxd36NrLpCL11+:gy210r3fOarCBAWN7JH7HOxFJeBEExBW

Entry point:
AD, 9D, E2, C4, E7, 6C, 5F, 9A, 88, 78, CF, 25, 7D, 6E, D8, 2A, 61, DE, AD, 70, 74, F3, EB, 9D, 0F, C8, FD, FE, 80, 68, CE, FE, F6, 5D, 15, 74, A5, 30, 30, 73, 65, 0D, C4, 11, F4, 1B, 4A, 89, FB, 7D, 28, 68, 23, A2, 75, EF, 56, 25, 5B, 5E, CF, 7C, 0C, B8, 09, FA, 5B, 13, 23, 96, 87, AC, E6, 7E, 42, D8, A4, 75, CE, 4A, 52, BE, 8C, 31, C3, A7, 5D, 99, 99, 69, DC, 16, 77, CB, 46, 5D, 4C, B3, 38, 38, 22, EC, 5C, CB, AB, 57, 93, 71, B6, C6, 0D, B0, DE, 83, D7, 26, 61, C0, 46, F5, 8D, B1, 8F, 86, 57, 5B, C1, 7F...
 
[+]

Entropy:
8.0000  (probably packed)

The file device_images_pack_setup.exe has been seen being distributed by the following URL.

http://customer.oxygen-forensic.com/.../download.asp?file=Device_Images_Pack_Setup.exe

Scan device_images_pack_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.