home

faceless_vpn_setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from faceless.me.
MD5:
fa4b6f33ef587c4c093093cb571b0914

SHA-1:
230ff3a2e62ffa0f13cc0a4b05d5f671daec3af7

SHA-256:
2a29f9eb8de7a2b7f02354141413bf02a7ed839b83b7fcb702a6d8c6f8963ed3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:39:34 PM UTC  (today)

File size:
10.1 MB (10,637,683 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\faceless_vpn_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:NUOn92Vau+w+aQDGnVksoepHYsxs4HEr3bVOsQtBWxUVko8que3lRFYS:NUO9qaJwNkGnVPYs3HEjbzqWuoze3ljf

Entry point:
50, 4B, 03, 04, 14, 00, 08, 08, 08, 00, A9, 59, D1, 46, C4, 45, F4, 73, 2F, 04, 00, 00, 80, 14, 00, 00, 0D, 00, 04, 00, 61, 73, 73, 65, 74, 73, 2F, 61, 66, 6D, 76, 70, 6E, FE, CA, 00, 00, ED, 58, CF, 6F, 13, 57, 10, 9E, 5D, 3B, C6, 90, D4, 98, E0, 14, 0A, 94, 6E, 7F, 08, 39, 22, D9, 38, 51, 9A, A2, 96, 4B, 84, 29, 95, 28, 28, 45, 41, AA, D4, 4A, D6, DA, BB, 24, 2B, EC, 5D, 77, F7, 81, 88, 54, A9, 6E, B8, 44, 2A, 55, DA, 4B, C5, A1, 8A, F9, 13, 38, 55, 39, B4, 55, 4E, 08, 71, CA, 91, DE, 2C, 57, 16, B4, E5...
 
[+]

Entropy:
7.9518  (probably packed)

The file faceless_vpn_setup.exe has been seen being distributed by the following URL.

http://faceless.me/flvpn.php?os=windows

Scan faceless_vpn_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.