home

pal_install_r132144.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download.paltalk.com.
MD5:
7e1ee64689ddb74c390949fad45e7873

SHA-1:
ce454f55e5fd199d1a8a6005f66971b457943f04

SHA-256:
15b6084db927b1d0c13f62eb01fce114c7c12d7f9c55744c4a13bcdb9c4b194b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:33:56 AM UTC  (today)

File size:
2.4 MB (2,545,398 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\pal_install_r132144.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:eoNH1BWoRgnvuaPJuaMahfzumx87PnjQVN6UtWPuSjYF+K+NGXkEmJof:NRoGXaJzumxWjFUtWP1YF+D1nJof

Entry point:
F7, 1D, F2, 0B, 09, 53, 5D, 57, 88, 9C, B5, EA, 02, C1, 8F, B4, 44, 72, 5D, 6C, 54, 9A, AB, 7C, 0F, E5, CD, 58, 57, 5A, 24, 7C, 73, CF, 71, C3, 0E, 3D, 11, BB, A0, 41, 76, C8, 16, 37, 7D, C9, E4, F0, 8B, 31, 45, 3B, 7B, D9, 03, 5B, A9, 33, 72, FA, AA, 94, CF, 29, 80, 62, B5, 2F, C6, FF, B1, ED, 06, 07, EC, 72, 56, B5, 56, BE, 4A, 79, 32, 6C, 28, 6F, A8, 47, B9, 7B, A3, 99, 0B, E3, A9, 34, 2E, 83, D5, 53, 7D, DE, 0D, AB, F7, 6B, 30, DF, B3, 6D, 44, 36, 12, E5, 0D, 8B, 5A, 18, CA, 81, 03, 01, B6, 93, 5A, E6...
 
[+]

Entropy:
7.9999  (probably packed)

The file pal_install_r132144.exe has been seen being distributed by the following URL.

http://download.paltalk.com/download/.../pal_install_r132144.exe

Scan pal_install_r132144.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.