home

lineinst.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.linepc.in.th.
MD5:
2a6df2c05b9ffcd4c32fd566b6dafd65

SHA-1:
498ccf251a23ec34cecf5f320f3af339438e3be8

SHA-256:
59f381949f2e32ccf94370be9b0bdf13b729a0c744fbca56ea556d3dfa35bd70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 6:33:53 PM UTC  (today)

File size:
27.4 KB (28,028 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\lineinst.exe

File PE Metadata
OS bitness:
Win16

Linker version:
19.0

CTPH (ssdeep):
768:DAq1Du2nGxgUxq+sjdVXHN78qardsazLQ5:DAanGURPXB8lrdLzLi

Entry address:
0x73657079

Entry point:
50, 4B, 03, 04, 14, 00, 06, 00, 08, 00, 00, 00, 21, 00, DF, CF, 9B, 2E, 92, 01, 00, 00, 94, 06, 00, 00, 13, 00, DC, 01, 5B, 43, 6F, 6E, 74, 65, 6E, 74, 5F, 54, 79, 70, 65, 73, 5D, 2E, 78, 6D, 6C, 20, A2, D8, 01, 28, A0, 00, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6691

Code size:
1.1 GB (1,130,037,724 bytes)

The file lineinst.exe has been seen being distributed by the following URL.

http://www.linepc.in.th/.../aHR0cDovL2Nkbi5saW5lLWFwcHMuY29tL2NsaWVudC93aW4vbmV3L0xpbmVJbnN0LmV4ZQ==

Scan lineinst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.