home

cleo4_setup.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from downloader.disk.yandex.ru and multiple other hosts.
MD5:
af5e3cb5eba818d645e1583b473ee392

SHA-1:
c26841a2627ea9b8b26a8e733a04da8eecd2a8ab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:40:10 AM UTC  (today)

File size:
378.8 KB (387,930 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\cleo4_setup.exe

File PE Metadata
Compilation timestamp:
12/6/2009 6:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:KsJo0kT49vmkNzu5sUj3FgMJS++gS5XAG8exd35Ly7Hx+TqyO0ZKZhcUn+mcSv0d:joFiJ9Uj39I++gQDJUgNDZQvn+rSvJu/

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9166

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file cleo4_setup.exe has been seen being distributed by the following 50 URLs.

https://downloader.disk.yandex.ru/disk/c2e12dcc08667b7f6025f9e645270dfbe82072d1e659e1a8483950283fad9a8b/58a05ca2/.../x-msdownload&fsize=387930&hid=70f9c253a33764af104867d42febb554&media_type=executable&tknv=v2

http://download1003.mediafire.com/a9gi6e2msmlg/.../CLEO4_setup.exe

http://download1439.mediafire.com/y6mg8x9cnhxg/.../CLEO4_setup.exe

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../34QGQABI

https://docs.google.com/uc?id=0B4PXgwGHDHsfU1JMa0toQ1Z5cnM&export=download

https://mega.nz/temporary/.../i1EQxS6Y

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

https://docviewer.yandex.ua/source?id=3jg80d-3nqmicve7r3twb9ktiecbsoa6ji2w018wku9tywmf7hgggpob7bhxhl25y2ut3t9cceirny9sh9j9xwsr6745v3gq4cf3h6wn9s&archive-path=//Winter Mod for GTA SA/.../z6ErUMGJEgF4cVsHL5w==&name=Winter Mod for GTA SA.rar&uid=372180797

http://download1375.mediafire.com/f7alcwh1f8og/.../CLEO4_setup.exe

https://www.upload.ee/download/4361696/.../CLEO4_setup.exe

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

https://mega.nz/temporary/.../kZZkmL5D

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

http://www.upload.ee/download/4361696/.../CLEO4_setup.exe

http://s6620.chomikuj.pl/File.aspx?e=SWe98uVF39o_dfyxEDmQ9VLSQhjPcas-pkBCaUlWs34pM8RKu6lkQA_Z8mDLDvHqI3X8oibxXTHpfbhkyER_4aquskYBVnKpA5czj_2_rOhQPVCcD261v3x5OPtzf4GdTGxIOotzPNuoPMLS-EMfAvo-t6BOS-7h0vqwRIl2AV7KcXd8NUZrJfl2vtEzoO4v&pv=2

https://mega.co.nz/persistent/.../4dgADJjS

http://fisierulmeu.ro/.../?id=34UIAJMZUCZ7&key=aHR0cDovL3MyLmZpc2llcnVsbWV1LnJvOjgxL2R3bl9saW5rcy8yMTMxMzI1N2VmYTJiYjJlMTE3YmNmMmQ4ZDEyODNlNi81NDdjMzZkYi8zOS8zOUNBMlhDNzlCRUwvbmFtZS9bd3d3LmZpc2llcnVsbWV1LnJvXSBDTEVPIDQuMSBTZXR1cC5leGU=&uploader_id=

http://199.91.154.10/7o5nyr9rcb6g/.../[Gta sa ] CLEO4_setup.exe

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

https://downloader.disk.yandex.ua/disk/1611c6fe6c067171bea54492c7dff20291849b0c3331bd0474705635c9f5d05e/582e5b22/.../x-msdownload&fsize=387930&hid=70f9c253a33764af104867d42febb554&media_type=executable&tknv=v2

http://www31.zippyshare.com/d/74732287/.../CLEO4_setup.exe

http://download.gtasite.biz/.../1918_CLEO4_setup.exe

https://downloader.disk.yandex.ru/disk/be78bb90c5920ae8664fae6b61a294ee10201927b09d28489c4b770f24f0abb0/5810e7d5/.../x-msdownload&fsize=387930&hid=70f9c253a33764af104867d42febb554&media_type=executable&tknv=v2

http://download1439.mediafire.com/c9ecmtrlvgkg/.../CLEO4_setup.exe

https://downloader.disk.yandex.ua/disk/532f6c6c7505d06f303bb5ca2962bc402f471960c18b15adb6defc6865b561b6/5841e8bc/tcDXFTVTmpPQMaEX4naE1C__WR7h7p3DgKT20EHlsp8V8EnSOjoky1W5brnQMxPgO-NW-9cBXHdddoJu7cUK6g==?uid=0&filename=Cleo 4.1.exe&disposition=attachment&hash=v6exXcB6yRkrTa7Zzu5wk3wKroZVyw019OYt5pJxXXM=:/.../x-msdownload&fsize=387930&hid=70f9c253a33764af104867d42febb554&media_type=executable&tknv=v2

http://www.gta-mods.pl/pliki/.../484

https://downloader.disk.yandex.ru/disk/c1e86595865db0813b5aef927eeb3ee90a311f4e4e93cade6bb22198e2f94c88/583c21b6/.../x-msdownload&fsize=387930&hid=70f9c253a33764af104867d42febb554&media_type=executable&tknv=v2

http://dosya.co/.../CLEO4_setup.exe.html

Latest 30 of 131 download URLs

Scan cleo4_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.