home

freelan-1.1-amd64-install.exe

FreeLAN

Julien Kauffmann

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from d29vzk4ow07wi7.cloudfront.net and multiple other hosts.
Publisher:
Julien Kauffmann

Product:
FreeLAN

Description:
FreeLAN Setup

MD5:
33278c664ddf89b4eef6ca0ef89e3b27

SHA-1:
1b2d0f12bcf06c309d8a7da6560050da92d95389

SHA-256:
beae67d3c8adaa75466d05ad1935dae2ca12617f6c414f315982decb08c62b73

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 9:07:15 AM UTC  (today)

File size:
1.6 MB (1,668,161 bytes)

Product version:
1.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\freelan-1.1-amd64-install.exe

File PE Metadata
Compilation timestamp:
6/20/1992 7:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:CQirjb3awtJZ6AtGbDaa89EzZMt6gVeWKvS6CV03Bhkwhdm4GyRpP8UsItq:C9/bqGJZDcYayheHCVHF4XHrsqq

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9919

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freelan-1.1-amd64-install.exe has been seen being distributed by the following 7 URLs.

http://d29vzk4ow07wi7.cloudfront.net/1b2d0f12bcf06c309d8a7da6560050da92d95389?response-content-disposition=attachment;filename="freelan-1.1-amd64-install.exe"&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHAqOi8vZDI5dnprNG93MDd3aTcuY2xvdWRmcm9udC5uZXQvMWIyZDBmMTJiY2YwNmMzMDlkOGE3ZGE2NTYwMDUwZGE5MmQ5NTM4OT9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQlM0JmaWxlbmFtZSUzRCUyMmZyZWVsYW4tMS4xLWFtZDY0LWluc3RhbGwuZXhlJTIyIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNDUzMzQ4NjEzfSwiSXBBZGRyZXNzIjp7IkFXUzpTb3VyY2VJcCI6IjAuMC4wLjAvMCJ9fX1dfQ__&Signature=LPcT28U1UfSrmax7qt8NGxspJE8e1a8oQPGrEoXy~N1bIrdN-akYCMMzwkGzo2mR2Mwt~GXgtKDR8d8TDEdqXj8dNQekq254CPHm~-ZnTF18~NWYUQA7wxBPTKeYkVaqrgaPIjT21hfkLgUi4G3ujOjAh-62E3tyhkJK2h4hC4c8GwHGMesRzfoakV7EWAMFZREir5DgDm1NnxIYg7HPMkvkWe1hA0ejPPZKtU9BveRO0nWEQT0IWYLsMHHe~S5~afKIoDdrvij8X5YjKaLNBYjLcZgcvA7-907D7P3EWgqt~s6k0HwNOiFTk2ARtlrsJzcXHnbtUb3BJbUDzMRISg__&Key-Pair-Id=APKAIFKFWOMXM2UMTSFA

http://akamai.bintray.com/1b/.../octet-stream

http://akamai.bintray.com/1b/.../octet-stream

http://d29vzk4ow07wi7.cloudfront.net/1b2d0f12bcf06c309d8a7da6560050da92d95389?response-content-disposition=attachment;filename="freelan-1.1-amd64-install.exe"&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHAqOi8vZDI5dnprNG93MDd3aTcuY2xvdWRmcm9udC5uZXQvMWIyZDBmMTJiY2YwNmMzMDlkOGE3ZGE2NTYwMDUwZGE5MmQ5NTM4OT9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQlM0JmaWxlbmFtZSUzRCUyMmZyZWVsYW4tMS4xLWFtZDY0LWluc3RhbGwuZXhlJTIyIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNDIxNjUwNzUzfSwiSXBBZGRyZXNzIjp7IkFXUzpTb3VyY2VJcCI6IjAuMC4wLjAvMCJ9fX1dfQ__&Signature=Ia-UXEyvQw9uIxXRE0Jup1h62YQHJSKf-JMsBiWThEQZE~K~nh8OecYauheyM3sR-qEi0QZtSwbjI-cCG6JghC4b~KdlBtqrYYv4Z9XUYVqTYAIOuLdE1wKWAqpX0xgzZlWJw6Tzowae0Q3Mb9Ju74HRleeU5gh-Uzo4Sill9x0lIpYrDMAEWLJ5YDpOuN97jgn-a0EjZb29-GF7dcSD~zl2BTh0ZNftO9gTZX8ZZjKHbfKf7FG9A9JhbDt2qDc8-oPE4TR-qqbt~G69uRMhZtFEnGlJejc2Zsakf4WgEajh-aRB7lelREmvSOn8YS7ioMaTrvYKHIRf2Y3cDFOcdQ__&Key-Pair-Id=APKAIQIOJCQ5764M5VTQ

http://d29vzk4ow07wi7.cloudfront.net/1b2d0f12bcf06c309d8a7da6560050da92d95389?response-content-disposition=attachment;filename="freelan-1.1-amd64-install.exe"&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHAqOi8vZDI5dnprNG93MDd3aTcuY2xvdWRmcm9udC5uZXQvMWIyZDBmMTJiY2YwNmMzMDlkOGE3ZGE2NTYwMDUwZGE5MmQ5NTM4OT9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQlM0JmaWxlbmFtZSUzRCUyMmZyZWVsYW4tMS4xLWFtZDY0LWluc3RhbGwuZXhlJTIyIiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNDA2NDkwMzE4fSwiSXBBZGRyZXNzIjp7IkFXUzpTb3VyY2VJcCI6IjAuMC4wLjAvMCJ9fX1dfQ__&Signature=U6XRU6cqr65ydFtf5-03E0Z12-1pC6Nk0wpWeAvpG7ygsaKLqNVFfTZ~UhCbVAPo4IEGfgoFJmP97ZcdNqPnHiGINOk0RSM2Al999~l61w1KKNFF~ZZ92~qeXAeGzqK9MvWTuXOntugS8jqEnyOVFsmDQyRfp96boZWhjE2~F9MjpOJonvSX0cift3vo7GlBFzLYLBTyZoytqra35iz0f4PTwtDP-uNSaeG4BtT0iQ7qOJQPIpG5PeHYGLnZu8VB1PV1V-FFgbaiNmLm4kIjjI1bPaTA5hsibtUIPrSuxgDcesjbqhfvvxEeaEi7Jt1NOxdDHEvj3S1Xca2dIgDOqQ__&Key-Pair-Id=APKAIQIOJCQ5764M5VTQ

http://dl.bintray.com/ereon/.../freelan-1.1-amd64-install.exe

https://googledrive.com/host/.../freelan-1.1-amd64-install.exe

Scan freelan-1.1-amd64-install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.