home

starterbackgroundchanger_v09.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from renaudgerson.fr.
MD5:
e5c9929589b60be3cf6c8198fec96b75

SHA-1:
107e5cfff14b0df1af878e8b9cc3ae385447acf0

SHA-256:
09693cc65e71f2b16ca238da47c7cadae3c3005de5ccb1826b630489dee26c55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:18:49 AM UTC  (today)

File size:
2.3 MB (2,365,657 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\starterbackgroundchanger_v09.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:NPHSxalvVM9E7pf7ofpNSyIRQ5qs25zHJBdo83WnhBe:kk3d7pcDqQ5q75zNge

Entry point:
68, FC, B1, A3, 02, E2, 49, CA, 89, 50, 2C, 5B, 5A, A2, 00, C5, 0E, DE, 75, 7F, E7, 84, 03, 22, 71, 8C, 38, 6D, 42, 83, 98, 4F, 08, 21, FB, 15, AE, AF, 53, E7, 33, 88, 8E, F8, 05, E6, 6F, 7B, F5, 45, 2B, 4A, 76, A5, 84, 02, 82, 12, BB, F2, A4, C6, 7F, E3, C3, F8, 27, A5, 7E, CA, 52, 2F, BA, 57, 01, BC, EC, 3B, 10, 5A, 40, 1C, C1, EB, 51, 21, 02, AA, 37, CA, FF, 89, 4C, 78, A8, 66, 64, 50, 17, 78, 18, 91, FF, 87, 4E, 6E, 63, B7, 43, BE, 9E, F1, A9, 79, 5B, 46, 0F, 33, B0, ED, 13, 5A, 3C, 7A, F3, F9, 6F, 95...
 
[+]

The file starterbackgroundchanger_v09.exe has been seen being distributed by the following URL.

http://renaudgerson.fr/.../StarterBackgroundChanger.php?lang=fr

Scan starterbackgroundchanger_v09.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.