home

leer.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
29edfd5f55584b303c371f8fb500ddd6

SHA-1:
1e439937cc3ee37865e44a87ea495f1914d4da2d

SHA-256:
5632b88600444b855d5ddb30aa6bc34b55208ef26fababd18172365d6626ebc4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:34:15 AM UTC  (today)

File size:
4.3 MB (4,499,978 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\leer.exe

File PE Metadata
Compilation timestamp:
10/6/1999 4:33:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
98304:58Lu7L4NNkamcI+pzXsB2HeTFcKZPWm/pIRhKRB2:xQNk9Opv+TSePWmeRM2

Entry address:
0x1020

Entry point:
55, 8B, EC, 81, EC, 14, 04, 00, 00, 53, 56, 57, 6A, 00, FF, 15, 08, 41, 40, 00, 68, 00, 50, 40, 00, FF, 15, 04, 41, 40, 00, 85, C0, 74, 29, 6A, 00, A1, 00, 20, 40, 00, 50, FF, 15, 20, 41, 40, 00, 8B, F0, 6A, 06, 56, FF, 15, 1C, 41, 40, 00, 6A, 03, 56, FF, 15, 1C, 41, 40, 00, 33, C0, E9, 0C, 03, 00, 00, 68, 02, 7F, 00, 00, 33, F6, 56, FF, 15, 14, 41, 40, 00, 50, FF, 15, 10, 41, 40, 00, 68, 00, 02, 00, 00, 8D, 85, EC, FD, FF, FF, 50, 56, FF, 15, 00, 41, 40, 00, 56, B8, 00, 00, 00, 80, 50, 8D, 8D, EC, FD, FF...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 KB (2,560 bytes)

The file leer.exe has been seen being distributed by the following 50 URLs.

http://dw.uptodown.com/dwn/SXsxvw3X_bBkdvpZG7qBxcg_gcMNeAjVbaVRS0423_tTvKnn8GYz5Y8qMUe9RYTt6-Y2bWUOvKDJCxRr-Xfdps7pEhhIfc0DtAVVtzCX7B1F0OKeZ2AQu_ieKcM2ecfD/BFgSGsBaoHU3bYxX1MtrsL8mWlZg5XoyOQdfk8Fqwp8jk6mkM2KyvM-XREJenR9ejxscqEDKvf9TwQ3CDNj4ipMyZjef1JHgQJ33V3fgNG0DGsraUeHuid81Js06VjeG/lVvEr6Bhn-0v_17tUmmGYNAgeGAD7YcniWy6_T-fGkLV9LX9W2jy2IAiRI1sZHDlC4ha0Ylk2FDzz65KX1YF9iUAyuiqo6H_guyR3Pc0PkMj3fq4vT51uu6FKlQWCX8_/.../

https://dw.uptodown.com/dwn/3Ra9i3GmXjEM3GAfYWA9-J_1dACW4tEuld6SOIFHqkpiMil8VhGhGTFUcRQYxTpQC5qzxb5sAkzPCUKuFy4c2kFz-IhktOoDai4nY9G1R9M2qn-wDMMyhLUYeubk0nWe/yFsLRQF3s41F6Z0gvhG9IBvc13U4Ussx1YZtzDnieWi8lqr_E7_79-L900Vh-U2b_SPKlM3dpfXpQZlaeGjzGRiCuZ4vcUjbj_ZyefwhxnBkVh7dWuGjOISbtmCW97uG/.../

http://dw.uptodown.com/dl/1445190404/.../leer-es-win.exe

https://dw.uptodown.com/dwn/INJhMBgeMaqsirDhLtqxRTvq4DiPnp8GP2hhqBIuXdBYGGgPNCK-Z1F1yiR5v9W-HSUWIVqeTRKyp-bMGDkG6_TNj3V43Rs_Szd9HKdf5a51h9ZBp0berNnUXTNNNGe5/lFsA_DiVHs7liP3rwXiF5cCYKUo6BRrKXkJ0aFgZ5G7eQn0A1tyrbYQQch0onWqDtClWELOXITEIDzVWDreWEU9OCGkC91S_RYyAxbX-JnZfSocSQxgRjpR-WtlhsRnd/MP2HFtrNGyI9ybBV6hOclTuB_KtD6f1WdxJQHJ66wuot8A_R9TbLQXl6Nr0ynbbM6lVtdLP-O2u0fKccrURvJbx91lvPzoQidbpY8XFsb9hYKjwGV5c0vifsObNbBCA_/.../

http://dw9.uptodown.com/dwn/dchxrF7vMh4m6ZgPUI86UoB1e9mSQgGcRLzuu3rY9Tp-3omdH4_vY-1yySmxtu66cyMmXcRU9OCk29V5YrJT3hxeZ5C0mV_7KJ09Ik0VRomeQqQBy_SFk8uSE9n4aSfe/bpUGFjT1k2KGoQ4PrhkUO06fP_Vcajgrdbl8TQMZb6dOMeAydlGbt0pag-pQFdLEXxziQReER2GUUwIwqaBOgvj4QwhEpC7FhEu1JIuZ8LEknCaJqJXFr6xUdVr4wM0p/ch7syiw0vGhVIz6FMaRXfPjCD6JXoht5FVndJzuKpik_0ssJJhlGFHFr9L_OPtJUpx6eimY7wNBNskuUllsbzHGlExjihbwVp6nMzy77aSTD-FjcOYnbiS40yijSFWs6/.../leer-es-win.exe

http://dw.uptodown.com/dwn/TXgDoWPVjZdR4Yf6ujP9zJjMmgGvulPcT-Pi9FwcrvLL7OsMqQw6EQVrHFasdyfTrRHu7r2oFDl-7R8D-K6mG9CQDoq4qg6JllwToRfzuwOrSIzpUHcT11EWRY_rJ5xi/cYJ9oxTad8EQvsCja5KDSaAyACLcrhh7ZysNtrwSU756wjWGAD-SoUwi8Viu-vP5ebtvyaT_g_ymBEyeDpduDwtQ-lG72Gll6GOQP0_apK-qrxmsDFMtci_3TveYdhwM/gaoPros7QKdBkoSbvIa9RndpYrgb63mcgD6hPmwRLYtwEuZedpDIlMcGX3l3Amn0W2LlNHDK9fitqO-BgLFLegX8bh91XOj_CNgMZGveG9YOs22w2GnmJU7sNIdcgDPz/.../

http://dw.uptodown.com/dl/1441110383/.../leer-es-win.exe

https://dw.uptodown.com/dwn/rLUvEJ8NVy84m3k5Px7kXwg2p_N0A-7wfWIO-uHB-RwxAiFzBkXgh1_JuYfCtPcmsq9CZ8g9cq-ibm6auYjezZ89N-DOV9BAB86cEw-A2VWXA-STaNsS5sryd2yXpyqs/ctzhySem066ARK1Sr67WOBPf2ipNx2dNUjqHF7eBwBAIod1MXLFWPIrCW-goOHzTrY5MDu_XuYK9z_zkstYYP_IPvSWcAEgQfPPIW1UJyK_qwM-dpjU9hGN27hlocc65/4jOs2pJBz8JF5Z9gFRTsgBGAXVL25hAj523QiT9bb8qOU0-CDzST_ZaaoDiEvtKfqK-HFBr-bW-X925oOcQYN9HjbUDpj4McuZ5Ukij-R4H0u2DJgSQqQGHOHzK5UojW/.../

http://dw.uptodown.com/dwn/11zNnsM9DctW2KGDGzAyyJMPJEtfg4OLc3uol41pVpAmncDiHbrKaCOrF1Y7IPKUIIBnB8dPx_d2iaDEZjfCUPbbQuMWPQPjzUYmC4V031xBSmqfY-wAU8PAjG_9pL2N/krhvWtumdpmy9yjupguuJPzNvfKhWCbUC-0kDqQqdu37Mr2PeO814lDhQqPRwPnr_Az3NG-GgpJwGrKAVdoys6WyANAyQccxhnr992jGsQgXVOGi_jko-TN9FAMl406D/v_48cj_GoTNV8pgX8rdcH4njhZa96fdJfKeP-PfD_4l0DyF1_Iu7wvLnbTtZM8eG-PmoGw2gt-lrjiO43P9qN9IhALWOYX4WKratSlyZiBEE0SIUWu4IDxG44_4AXG1c/.../

http://dw.uptodown.com/dwn/lVrk5jl3CZjx97ZJBKZKtii-UqZJ3diNAe4Kt9xyL1cuuEw03rS4QyVYWr_FMGJpmVd5nri-BRbxXIe_MQd56fQ7Edz3DNS-T4x8H5udrba1PGx8ianwA0bRMLP2QBXl/pN5WVb_EPYxo0-cyF7E6M6gqcuef0BRKwUPFPTXmPDCoFuXGsZzczUaPJ05p6Z-XQgNGm7Mji2IoQRJjuX4QfbELzzCm9YkO050xDMCwUPc-yQ-pXsca_aL89xC33BP7/.../

http://dw.uptodown.com/dl/1425847987/.../leer-es-win.exe

http://dw.uptodown.com/dwn/7Z3561WP5C_2IpiaFPBOBo_ZlPIXaFkYMl97bvu4gbkv-4vP24OXUSwZPpkBEGE_23skYfCH49z2zph8KRTGOjNHLrVhZfJGCyumgz9-Rk0_9bap3s86pe4nj5gvTD3_/63ILO8L4znvQxgoCw7zcC97OnzbuTvWbXJKHserZ9Yx2jT-NLytOEgygGkjjLtg51zARH2_OTrZHxH-T7SXqRLufq-eZFpyym1nPgCxB1YVnXWee1tBjeV3R6ScVsa-_/QkqCVNPr0syZhlpWxKSTL9AXY6V9WrdTRkGoUiXc4nKwCJoGu0dDnou5pnSGESzVgwaYs5Oa9Wk00OY4oggXHzScn9QmOIV8Pke86KIktAlj1QLqvYYWmlrgt6PPiP9J/.../

http://dw.uptodown.com/dl/1446642623/.../leer-es-win.exe

http://dw.uptodown.com/dwn/eWjfPSbvznjSjIRHCOM6Ep-Eho0YSoMO1hzR2Bolp7KIvMa_LQX9Px55kmD2C8oDEamNYRLzyd6siLA2jyf39qRWXso1mnNJwemEqLJckSh_QGiHjAv5TEjQ21tD7mmt/tfBNqGj24SxkF9hgsx49WoRNK_-BS2pMpAUw3UlYWigUdv2EdXyucjzfpvAu5XQK26KW5obhnu_1r5-6lSj_fS43d8wKPqA6gqHLU7DketADau2yC8jpp5aY98_rr9HE/DcKY_ovGL8Y5EYO6FRRuWDZvK54pK4T0SEfgFfybYteN3hx9OhSWdtlF4hE9PgFJ1-zyNwzNHErAtm9D3af5TuBd8PA_atfOkYthW1e7R_jpCBxRDFvmi3X96KwSAeeI/.../

http://dw1.uptodown.com/dwn/rMEzPJ9RKrnSCd9WI2AsMo9bIPxLKsq1vhVPcoCC3CG8GTAtMZXS3geUXvp8G8dwGb7GYijP3xX4ABh2uZDMzidmNKWXNUtOc5N6GnwNNi4kzJeIVRrkBt3DKtHRuJX0/WA-6NTqJE2UBx9cRHedWcDlmrNXfwC4nrWFBGku9VmqThKxNo7wLRypSKN5LSw5d_CVy6lIoN2BMB1uyuLEQmEaMw8fhRnRE3TifrG4fiP1xprl7ZsFYzuzZYe_eh8Pv/zCJaVVztMXx0zhkv1aK0zJxZrErnuhsCjdEjsay9_mp6j7x5hb05I9OVGzbE0kYBx5PgpCOzAO9zuD1hXvxbYPIcof5XkyzWI1Q4rya0D1THLtQp20Jwd-uZ7udcZfec/.../leer-es-win.exe

https://dw.uptodown.com/dwn/4qV0Zls6hSepzp9R2Emz_BjnDg76t7t0GnBYX53-ikkL87In2_UGDVkJejizMPa1X8g9ChN9JAzMibegBTz-R3_2yWM7dgpGkwstjDsiYAeV_DN6LTroRzEl3LOM0xPp/cJLmc5pC6Y8E3YngVvcfvhDRzRj9zI6RWsXeR91jUXk3WDuAleSbdBxiAxdFKxLepp0l6jIOwFTCmak3RyNh4sR2vZ7zWIDoPXIZh0dI-IEt_5ElRTAMW2zqig0Vf6bT/ZYS67ZpCcpCWnTZItNctQ8_9VZGd_1OIccYNt7kkPyRm0OSAOe1yA49TqbcMiE8adg299Cosg1kJ2zsWRSOJL1hia9OZuwzdRKopL5YU_d2iqVRSHAbEL0RCAlAzaXx_/.../

https://dw.uptodown.com/dwn/FK_Ppry75VD5-mxqEx9CAG9vL-HtN3tqGuYi0lhkrbY7WNBtDluCxTYUHKveEG6MZr4vLjAvFSfNpWJnUu-yoQc9IF7Gd6zp_FlFbgubzX3oMJjhMftuL_IqOiq1Nkzf/69CYd_pRlX-7WZHnvf2rpV4Fy5od-GrNzj3PjL-h8o7sL7HKnyzNW8yl5Cav3syfE4TsiVPFmEJWwhfryon7c3I4OIGzMvydiDmg-Bp96MC8bwWLTjpCj3Prw4knN3Eu/42SJfwg0eTwMn4ltoto5bBTPgbeolOrhv_GWh_59h7cNAXkKbbyPDnQ3gSalHc2Ns255wyEIvwwzprltpDjSQXd3KdRmpMsszWoBfnGeWSiNbe8GEivew3xP2xf7YCC7/.../

https://dw.uptodown.com/dwn/rzFcfT6POcBcMdDtYaW-eIyPhrr3JvzTT3-6T0ZiOolXiptesi-MWuePg0Uh6Gvn72DZjS2HRuOjjruYfWBOn54JEBJ3IlwsFsps3US7q3YyM8SdeLQv-OFEuoKQzwDN/8YAmoMjHcqpYwWmpQe96mxbdoThtJEB_JN3tq2Ykql2PzFoAOFz0HaURLcB46ifgoBxt5_7340ehhVDId_yMosD7gk8tL_EMu9CWSoylwBziizNiARLtQb93F3NJ7guU/.../

http://dw.uptodown.com/dl/1442878157/.../leer-es-win.exe

http://dw.uptodown.com/dwn/yHkuhOP3wje69Ni3vWzqOO7IssbfUx2CovsbmupuYhKbYSIvnrCWvgZk3Y20n-ypvtJVeArNrQwl3aRa3v32_i3MhWK2zwEiNhX4OlqKIwRkcMi5yGKYCFuw-6GBgbJ7/5zgEKl3mYLLhdr0nbbREXjwvtJxwjIX53S5EpJr_40WwGxSuflmV1F_DeCP_PGOwCn0ubiKNBn6cyXowGkK_RbbAUtrD611j8GTOw5aUXSAuCPiMXu6oY1T6e-uhIF6M/0Ms93ZuwKKc1ZhoXCwNx8ySaigJRWae1C7VNMefS_IW8-k1iYEX65bPOFkNJP5HerlgX6VgLxn8TPn4ylw7pj247Xcya3HIh4KLbQSxhGdOsy2rUXV9dVgzzBkEVcdZs/.../

https://dw.uptodown.com/dwn/WCE-qt87acNsloVeQhW5ovn0Jw53zvrwvjxRJVHLKXWG5jeYJMh1zXkVnTJzEGkCfyiI-hIjBtvVbp3oktiSXlM6Ly1AP_h2BtFcSnPtlG948Kdch6ob7tKyUEq9kaJD/TiN9Vd3ItyDtZ8eUpR7TH5jsYcID0Z3078RgiYwQ-cWtzQCfU7lcUa1_GRij2Lqok8yFUz2jVkr4lAi0iyKfD95FqO-k7uyhOwmc7lKyK4F8rkagO6xPNSwoXsxRojPf/sYxUnvQoqvXRrLctqwBADjekoCJZq4Gu4GdX9RzGWMPAgvh3es37F5XsYN2t-aoQK_Jo8QdSLUO-zej-1b7Fd5kKkxiztUtal3m_HXok6IHwWzYrBwILnkTnBscryF4D/.../

http://dw.uptodown.com/dwn/4RDdGX0fpJVpPHWUa3W-B0zxowm3KqX4EIhzjd-9gyAVC21b1y11VjFJjJdAm7YaiGpt0KaF8AmIwwksCypZlV32Zf3g4Dat1R5ecBKn29XpASq0vOsLBEL_6CEqW-4v/tQufOd6YT0Jqcm0SSXpRBgiRsrMtqrUuEpjLKiBMejqka6JBbS2u0kEh_W_HaeKPepq1al6hHQ-FDp-Rm7idA0f6RuwCj4EdkgZrYrJw1WsNE2nqQ-RXaUGC_O4M5bso/i_GqRn-oST5K-x1pBqbHTuH1NqG6ESuNqjze5xOTnTharmSjfE4tszMcFoUniraC03uSB5Yhl7rgvOpFDK0L7B4B3w0RL0EqTKiC9hdA4jDEMAnev3jSiESbW4bAjSRt/.../

http://dw.uptodown.com/dl/1438389181/.../leer-es-win.exe

http://dw.uptodown.com/dwn/8HHvtFJQAsXliZ5_CK3dvKilF1533FR2-rONPPvDPVBfN0fygTz6X77e-jLBXZFFYknL_dqA4VVxYjhguqztnrIZsbc417Xnj-vPskKOp979fc8U9c3Jt-QgprOAz5V1/XxmxjEHBZuAOtcKUEMjcD7Lrrpu4UKJdT3VcyjADtZr5G5R7hOLGEYiDj__fZSKPrU4Kmq8OL4QjFqbnHD-Rp7E8CMewcaWe1shy7j6ulfcXvRn1DyGySx7AAYYYSn31/.../

https://dw.uptodown.com/dwn/980UNc7uVgPoXbEi7isWBkHWQz0aj6kzrahN9K2_Klub-Xb7jR54DOr4V66ctpyewMFymYsi35JilBkAoWqpO5Jw7l9u_OGHK6cFDqHu8iW8BMtMiu460yV8dpdk9hQB/DkweLYjGwSewpMO3bNkH4-Zu_5atqRMqyeQQQURnMfZItqPE7m-nGgdgGlAdTWGwON9Yyu_g1X5LWJuFAfkvBjKc7xFdQKPBDqd0oBnSb-baqArFkhQKtCj2KgiZ8rSu/.../

http://dw.uptodown.com/dwn/werNIlgc0RVEmGn5IR1mV927jE4Djy9eRrBxEI34k1mZH4gzpEZ5hAxfNST8jyjTB1eIdeNHub_JLC5NjQMTvapGnj-vR3wnCQvRQYAmDeuLXz63s3XhvbAmUA1V_TNt/.../

http://dw.uptodown.com/dwn/zQ8Qw7GP_wTiIN_sKGa6Fu1HVKtHsedq2SMqLKnzsgqVQaRspISUpOMSrq1AQ0E8LgEVUddc6AQDhHPCD0hZ_hfPwJbPsBxNf7cXpJ1U7cdXRdmeo1qjG3494BAd9YXq/G6qMEAe2okcBoINBSBoFerWhOa9VpTR1EZdNcduh2I2NtI2mAjaZkOSOlZaBslpqTadRdzwNZyIBHOKM-EznsCX_86alSJqOsMjGh4h9GlDpYBO6jQwdZEGk8bzfGyqP/.../

http://dw.uptodown.com/dwn/OKi4gcxqiCgV02ufGfWRo7VzawT1o44vAKUwGgSQdO4w7Hk9rFERCaDu_xzdTnr2GCCo2gwBC5r8CaPXPxal0t_5-_JNu_oMZxySwExAqRTGT43dX73G-l_oFyvtSYoU/uzrGLHQGSov6zzuGia9wxtBB4YYI-vt7a8GDQ33s6Z3UZnNmnL_v8_JBgEJq-ogz2KW8LdJhdhXH6xr7DxnfhZVPgGoJ5S8abgO0pZu1jn0MJF8XAcfEqsIBa6MdQQDF/.../

http://dw.uptodown.com/dwn/L6z8BiwgKThvph-QxF8v0lWwQAy6zGTmDbhB9f2NYWZcxDV1_S0e31fqXHVihZRHf0Hl0MHsl-XQR72P7b5V3wxsjouetBJdMzh0wt8QORa7R3WFVERs_RDzazZ2pjWs/YfHTwQRIRovXlRRIE3JiLad8Ke9BrXbcCMSFqIaBpCcuQuW_vq1uYncqOu-V3-MPvcMzfqQTZ699X7S_PJBtUrK_05wgpz1d1vCxPSSZ-Vvyp63VM4O5S0Dvdg-Dji9t/.../

https://dw.uptodown.com/dwn/KuVMWBKSt92OSFvCwKjkPEmrYOcNIw7iqSluu0kUhBbXcF9AIpIUjDEmyI2vv1qwVjAZUQzfC2Qihgoe2gkuiSFCKnnef37AeMFOsYTRV3INClzSJ2o_1-dliBMcjBrJ/s1DZMRD2nXHcu8MNkK6y6P2guzxQB4s54JcVXE8IJypFBbcizJIHFUAkgoiAWT_vgHilkfkyJRYO78ChoD8u3kaHxgPDhjz7A64mVd3IeQH2QlIwscFK6lMRp1B3X9-k/.../

Latest 30 of 50 download URLs

Scan leer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.