Benign windows Download

Executor

Standard chocolatey package installation script

PowerShell stops processHTTP/HTTPS URL literal
SHA-256a9651b6ec123ba8c71d28da59ff00298978c97e5f5ed2724c018b9a7f6784fe6

Evidence

HTTP/HTTPS URL literal ChocolateyInstall.ps1 · lines 4–10
4 PackageName = $env:ChocolateyPackageName
5 FileType = 'exe'
6 Url = 'https://executor.dk/previousdownloads/ExecutorSetup111.exe'
7 Checksum = '01aadd7208f7715e43d2d9399b41e297ed9127bff6a715bd8b77f158d0076a5c'
8 ChecksumType = 'sha256'
9 SilentArgs = '/VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-'
10}
PowerShell stops process chocolateyBeforeModify.ps1 · lines 1–7
1$ErrorActionPreference = 'Stop'
2if ($Null -eq (get-process "Executor" -ea SilentlyContinue)) {
3 Write-Output "Executor NOT running."
4} else {
5 Write-Output "Stopping Executor process..."
6 Stop-Process -processname "Executor"
7}

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.