WhiteSmokeInstaller_8916.exe
The executable WhiteSmokeInstaller_8916.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from get.whitesmoke.com and multiple other hosts.
File name:
WhiteSmokeInstaller_8916.exe
MD5:
ad579702bb9658bb8d3057cf3396b7de
SHA-1:
ee841b4e6454e5a2ed94b707cbd542d87b20073f
SHA-256:
d73c3a0b1a4117dbdd2144841a3f8049604910230db45e76b3b695d3201726d5
Scanner detections:
1 / 68
Analysis date:
4/16/2024 2:45:48 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
(M)
16.6.22.16
File size:
21 KB (21,544 bytes)
File type:
Executable application (Win64 EXE)
Common path:
C:\users\{user}\downloads\whitesmokeinstaller_8916.exe
CTPH (ssdeep):
384:RRsEJLqnh0jJkCBIEvAVy32QJN+bCO9Kg2Ly32QZl+tCa9Ggk8UUr1DwZgXEoWMj:7lJLehgl/QbjYtOMh/uIEEsCQ4
The file WhiteSmokeInstaller_8916.exe has been seen being distributed by the following 4 URLs.