home

uiso9_pe_installer.exe

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.instalki.pl.
MD5:
f4d6009fb14d47138430a43f7f64a36c

SHA-1:
f8aebb1089e00720c516c7b15fc6a97e3409a7b6

SHA-256:
11d40a153ce1c7744bbf5b3089e7ab4af7b2690ad865715efd90a6bad67d5e39

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:45:02 PM UTC  (today)

File size:
704.8 KB (721,704 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\uiso9_pe_installer.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:YLMJfeKnbbaga7r7PfsI/+wepHlNqOlF2td9lGHvmtiq+lGVyneTDCB:gMJfTnagaLPkGepFNqOlsd/ROGVzT

Entry address:
0x98CC

Entry point:
14, 7A, 0F, AF, C8, 0F, BE, F2, 81, F1, 86, 23, 31, 5A, 2C, A7, 0F, B6, DC, 8A, F9, 78, 04, F3, C6, C3, E2, 2C, A6, 0F, BF, EA, 0C, 97, 69, D0, 0B, 74, 08, 68, FF, CA, 8D, 1B, 8A, E0, C7, C1, 85, 92, BA, 92, 0F, AF, D0, B5, FC, 42, 86, F6, 53, 80, CA, 49, 5F, B0, A6, FF, CB, 85, F1, 33, F7, F3, F6, C5, 9C, 69, C8, 90, 4B, D1, D7, F2, 0F, BE, FB, 89, D9, 41, 89, DA, 8D, 3D, 5E, 8E, 8F, 2C, E8, 30, 00, 00, 00, F2, 11, F7, 85, D8, 75, 03, C6, C4, 97, 4F, 0F, BF, D9, 52, C6, C0, DD, 81, C2, B5, 66, BE, 4F, 59...
 
[+]

Code size:
36 KB (36,864 bytes)

The file uiso9_pe_installer.exe has been seen being distributed by the following URL.

http://www.instalki.pl/.../get_UltraISO.php

Scan uiso9_pe_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.