home

14.exe

Giesecke & Devrient GmbH StarSign CUT

Giesecke & Devrient GmbH

This is a self-extracting archive and installer. The file has been seen being downloaded from www.onlinecertificadora.com.br and multiple other hosts.
Publisher:
Giesecke & Devrient GmbH

Product:
Giesecke & Devrient GmbH StarSign CUT

Description:
Setup Launcher Unicode

Version:
1.7.17.0

MD5:
2c113d04d08b58c94a695fc191039294

SHA-1:
0a0e7e40d66b7d9f0e9324f589536649ca3848ab

SHA-256:
dcef68e5339e0689c2d58aaea3f4143094afe3385c97ab1d7aeb0fb1da6eb3d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:59:28 AM UTC  (today)

File size:
4.4 MB (4,663,863 bytes)

Product version:
1.7.17.0

Copyright:
Copyright (C) 2010 Flexera Software, Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\14.exe

File PE Metadata
Compilation timestamp:
8/2/2010 1:52:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:/Wx/KmKKZKxywoJq1XAZSJrV5HyFsdKs0s0ivolp4I+/Wba:/Wx5KgKxy5WBXH2sP0ivMp4I+/Wba

Entry address:
0x681F8

Entry point:
E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Code size:
684 KB (700,416 bytes)

The file 14.exe has been seen being distributed by the following 50 URLs.

http://www.onlinecertificadora.com.br/DOWNLOADS/.../TOKEN_32_64.exe

ftp://ftp.datasus.gov.br/catalogo/.../GDsetupStarsignCUTx32.exe

http://www.trt12.jus.br/portal/areas/pje/extranet/certificacaoDigital/1-Safesign_Token_GD/GD Starsign_GD Burti/.../GDsetupStarsignCUTx64.exe

http://certmidia.tempsite.ws/Drivers/gd/.../GDsetupStarsignCUTx32.exe

https://www.bsoft.com.br/download/.../GDsetupStarsignCUTx32.exe

ftp://ftp.datasus.gov.br/catalogo/siops/.../GDsetupStarsignCUTx32.exe

http://www.aasp.org.br/aasp/downloads/certdigital/.../GDsetupStarsignCUTx32.exe

http://download843.mediafire.com/j5pdkwe0rlsg/.../GDsetupStarsignCUTx64.exe

https://doc-00-ac-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/mh3vl6ou2rbr860s2ag5mghas4deitll/1462543200000/03268491527734945973/.../0BxpgShy3pEuFWDRqQkZZM2NQdDQ?e=download

https://atendimentosjc.unifesp.br/.../index.pl?Action=AgentFAQZoom;Subaction=DownloadAttachment;ItemID=162;FileID=713

http://www.bsoft.com.br/download/.../GDsetupStarsignCUTx64.exe

http://cms.tjrn.jus.br/pje/files/.../GDsetupStarsignCUTx64.exe

https://www.linkcertificacao.com.br/.../GDsetupStarsignCUTx32.exe

http://www.maxxdata.com.br/.../setup64.exe

https://renovecertificadora.com.br/.../GDsetupStarsignCUTx64.exe

http://www.tokenbr.com.br/downloads/.../GDsetupStarsignCUTx32.exe

https://www.praticacertificacao.com.br/site/uploads/drivers/.../GDsetupStarsignCUTx64.exe

https://hotsite.certisign.com.br/download/midias/tokens/gdburti/32bits/.../GDsetupStarsignCUTx32.exe

https://www.certmidia.com.br/Drivers/gd/.../GDsetupStarsignCUTx64.exe

http://www.trt12.jus.br/portal/areas/pje/extranet/certificacaoDigital/1-Safesign_Token_GD/GD Starsign_GD Burti/.../GDsetupStarsignCUTx32.exe

http://www.ar.arisp.com.br/conteudo/downloads/drivers/.../GDsetupStarsignCUTx64.exe

temp:GDsetupStarsignCUTx64.exe

http://site.solutinet.com.br/2014/images/files/.../2d49cf949c9f4bf33e21c36ec7192bda.exe

https://wwws.prodemge.gov.br/component/phocadownload/.../43-gd-burti?download=75:driver-para-windows-10-8-7-xp-64bits

http://ar.krypton.com.br/.../GDsetupStarsignCUTx32.exe

ftp://ftp.datasus.gov.br/catalogo/siops/.../GDsetupStarsignCUTx64.exe

http://juristas.com.br/arjuristas/arquivos/.../2d49cf949c9f4bf33e21c36ec7192bda.exe

http://certidigital.aasp.org.br/content/.../IOCDA3GdStarsign.exe

https://s3-sa-east-1.amazonaws.com/.../GD_burti.exe

http://www.certificadoboavista.com.br/index.aspx?DID=99&

Latest 30 of 60 download URLs

Scan 14.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.