home

amcapsetup.exe

AMCap (Demo Version)

Noël Danjou

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Noël Danjou  (signed and verified)

Product:
AMCap (Demo Version)

Description:
AMCap Installer

Version:
1.5.18.0

MD5:
4ded91ad73b1fb88a9d81c9be8ee0df9

SHA-1:
4bf8f1c71471e65e9f3be646f05ff0f157675095

SHA-256:
3900365b60d811e8fdfc06cb64930d32a170252f1338325d610604569e5b2f10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 7:02:04 PM UTC  (today)

File size:
897.2 KB (918,712 bytes)

Product version:
9.21

Copyright:
© 2004-2012, Noël Danjou. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\amcapsetup.exe

Digital Signature
Signed by:
Noël Danjou

Authority:
The USERTRUST Network

Valid from:
3/3/2011 2:00:00 AM

Valid to:
3/3/2014 1:59:59 AM

Subject:
CN=Noël Danjou, O=Noël Danjou, STREET=29 rue Jean de la Fontaine, L=Saint Jean des Champs, S=Basse Normandie, PostalCode=50320, C=FR

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
22C1B1ADE19185DEEBCAB66333174EFF

File PE Metadata
Compilation timestamp:
2/24/2012 9:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:MJOwSYLpjXL578EDyLh7wgO2UIlWv7Pqj7:nezLeED4RUIlWv7P

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file amcapsetup.exe has been seen being distributed by the following 24 URLs.

http://lb.cdn.m6web.fr/d/c/a/5bf68148b05a82c68315d7765fedb827/57d821c7/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/83972b8333768759f4b9445e24383d47/584d5d56/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/6e3ea15820ef3d7b6d3b2469670554bd/57bcb025/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/1f2ff128904ecec34e07dc3c872f14bd/57e94f6e/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/e22e17485020f71833f35ec6256cb6c4/57bedf6c/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/d97b0584e7563c300c6b9d2f1b3b17a2/5811caa4/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/266ae3b0cc389727ec1fb7e1aec645be/579cd196/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/8a6e68cadf712aa2e4c11a9ac7890326/5802361a/soft/.../amcap_9-21_en_49088.exe

http://vsofte-link.ru/setup_amcap.exe

http://lb.cdn.m6web.fr/d/c/a/b28592fa5b0e7e122d64c6effe498cd9/5804f50b/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/cd1d77e4e734e804758db288fa474f40/567510a3/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/44bf7de502221626e22926e03e2ca814/579210de/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/e2345a3c84f9875f33e8384acbe645aa/57320b6c/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/8c7eb0d005108500394843e5beb874b7/575a8711/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/369ce62c6124f66d2e81f243076c3d8b/575b6583/soft/.../amcap_9-21_en_49088.exe

http://www.noeld.com/dl.asp?filename=AMCapSetup.exe

http://lb.cdn.m6web.fr/d/c/a/c587803636d66b29f4fff84c6b3eabb8/56b2462b/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/1676ce11ae3723dbe9fe4da306822ba9/56efe12f/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/94692bbc4905b7e80a21f55c40709f7f/567992db/soft/.../amcap_9-21_en_49088.exe

http://lb.cdn.m6web.fr/d/c/a/93f9661239e800de788eae83c3820ca5/5481eafe/soft/.../amcap_9-21_en_49088.exe

http://d110.cdn.m6web.fr/soft/.../amcap_9-21_en_49088.exe

http://noeld.com/.../AMCapSetup.exe

http://noeld.com/dl.asp?filename=AMCapSetup.exe

http://lb.cdn.m6web.fr/d/c/a/a698a37d26e2251ca2bcf4b4aa6b1f52/5447f07d/soft/.../amcap_9-21_en_49088.exe

Scan amcapsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.