home

go32.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.logipole.com.
MD5:
4d0e562ff1ecb1e2e09b5c5dd4e5d119

SHA-1:
3f781acb5a85f94457787a09a33383181bf3e112

SHA-256:
0344b8978342eca7a1cf8835d2a7ee80281b3610dc9523c7dcd91f01117f03b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:23:37 AM UTC  (today)

File size:
42.9 KB (43,968 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\go32.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:PqwNql9mlkKZe4FE18QXm7wEn2sXprZncRFu0WG9FoFoHAm61Ka:SK49neFE18QXm7wi5Zr6jxoWAB9

Entry point:
4D, 5A, C0, 01, 56, 00, 01, 00, 02, 00, C5, 0F, FF, FF, 15, 13, 00, 02, 00, 00, 00, 00, 00, 00, 1C, 00, 00, 00, 07, 00, B9, 0A, B9, A5, 55, BE, 48, AB, 89, F7, 1E, A9, B5, 80, 8C, C8, 05, 05, 00, 8E, D8, 05, 68, 08, 8E, C0, FD, F3, A5, FC, 2E, 80, 6C, 12, 10, 73, E7, 92, AF, AD, 0E, 0E, 0E, 06, 1F, 07, 16, BD, 08, 00, BB, 7F, 80, 55, CB, 55, 50, 58, 21, 0D, 03, 03, 08, E7, 13, D5, A8, 49, 8F, 81, FF, 2F, 31, 01, 87, AA, 00, 16, 34, 01, 00, E5, FF, BA, E4, 0F, 2E, 89, 16, F8, 01, FF, B4, 30, CD, 21, 8B, 2E...
 
[+]

The file go32.exe has been seen being distributed by the following URL.

http://www.logipole.com/download/konvertorfm/AddOns/Images/.../go32.exe

Scan go32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.