home

clip-setup.exe

CL!P

Labage

This is a setup and installation application. The file has been seen being downloaded from f3r.download.bg.
Publisher:
LabAge SA  (signed by Labage)

Product:
CL!P

Description:
Installer

Version:
2009.1.10.1223

MD5:
50ae9881b7865520b242fec25a4e9281

SHA-1:
54ab0040ff2f5cf61d8490f3733f2877f3e00d1e

SHA-256:
a82a59bcc45cb5bd9f4f42feafbc0f9a53c0541576fc0b3b92eed8360855c62b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:29:28 PM UTC  (today)

File size:
1.5 MB (1,609,160 bytes)

Product version:
1.32

Copyright:
(C) 2009 LabAge SA

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\clip-setup.exe

Digital Signature
Signed by:
Labage

Authority:
The USERTRUST Network

Valid from:
9/21/2007 3:00:00 AM

Valid to:
9/21/2010 2:59:59 AM

Subject:
CN=Labage, O=Labage, STREET=rue En Bois 104, L=Liège, S=Liège, PostalCode=4000, C=BE

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7181389467B6FF38851C9740C22A7E52

File PE Metadata
Compilation timestamp:
10/13/2008 9:09:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:+fC6Lqg//9aSdeJnXo9LDSgt6H4UFvC5a4N/JeO6N47HxJRW:gGs9aSmWLvu4UJC5FyIW

Entry address:
0x1700

Entry point:
55, 8B, EC, 81, EC, A4, 03, 00, 00, 53, 56, 57, FF, 15, 6C, 20, 40, 00, 89, 45, FC, 8D, 85, 5C, FC, FF, FF, 33, DB, 50, 88, 9D, F0, FC, FF, FF, C7, 85, 5C, FC, FF, FF, 94, 00, 00, 00, FF, 15, 68, 20, 40, 00, 85, C0, 75, 11, FF, 15, 1C, 20, 40, 00, 50, 68, F0, 22, 40, 00, E9, 8E, 00, 00, 00, 33, C0, 83, BD, 6C, FC, FF, FF, 02, 53, 0F, 94, C0, 8B, F0, FF, 15, 64, 20, 40, 00, 66, 81, 38, 4D, 5A, 0F, 85, 82, 01, 00, 00, 81, 78, 24, 74, 73, 6C, 33, 0F, 85, 75, 01, 00, 00, 3B, F3, 74, 0A, 39, 58, 34, 76, 05, 8D...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 KB (2,560 bytes)

The file clip-setup.exe has been seen being distributed by the following URL.

http://f3r.download.bg/downloads/26/511826/.../clip-setup.exe

Scan clip-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.