whatsapp-pour-pc.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from i_eazel-com_whatsapp-pour-pc-2-11-506.forquetarefi.com and multiple other hosts.
MD5:
4be4d900bf34f0023b0c3082baf67b76

SHA-1:
5b2b694d4f9d304d39470b165635146a0bf25248

SHA-256:
bf6601d74e055adf664926ebb9b4c0bf0f78ed84c2c7de0babfd8ec293c8895b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/31/2024 11:19:26 PM UTC  (a few moments ago)

File size:
18.5 MB (19,415,331 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\whatsapp-pour-pc.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:htMvNWBBXrVyqyMsBImWUDWSEubzXVweT5Eis9Snvet36G:htMvcL5yqgWSZbTVZTad9SnvKP

Entry point:
50, 4B, 03, 04, 14, 00, 08, 08, 08, 00, 70, 56, 37, 46, AF, E7, 46, 3B, 01, 20, 01, 00, 6D, 7B, 03, 00, 14, 00, 00, 00, 4D, 45, 54, 41, 2D, 49, 4E, 46, 2F, 4D, 41, 4E, 49, 46, 45, 53, 54, 2E, 4D, 46, A4, BD, 49, 93, A3, 5C, B2, 2D, 3A, 2F, B3, FA, 0F, 35, 7C, D7, B0, 53, F4, 08, 8E, D9, 1D, 48, F4, 12, A8, 41, A8, 81, 49, 18, 7D, DF, F7, FC, FA, 27, 45, 44, 66, 46, 46, 42, A2, AA, 3B, F8, 1A, AB, 2F, 6B, 83, 36, BE, DD, 97, 2F, 5F, EE, 5B, 36, D2, C0, 75, AA, FA, 7F, AE, 4E, 59, 05, 59, FA, BF, FF, 82, FF...
 
[+]

The file whatsapp-pour-pc.exe has been seen being distributed by the following 11 URLs.

http://i_eazel-com_whatsapp-pour-pc-2-11-506.forquetarefi.com/crawled_soft/2/2/.../228656-678361-whatsapp-for-pc.apk

http://i_eazel-com_whatsapp-per-pc-2-11-506.fdatiroremyxo.com/crawled_soft/2/2/.../228656-678361-whatsapp-for-pc.apk

Scan whatsapp-pour-pc.exe - Powered by Reason Core Security