» easysetup.exe
Overview
Analysis
File Details
Downloads (15)

easysetup.exe

Easy Flyer Creator 4.1

Peridot Technologies NY Inc

This is a setup and installation application. The file has been seen being downloaded from windows.indir.com and multiple other hosts.

File name:

easysetup.exe

Publisher:

Peridot Technologies (signed by Peridot Technologies NY Inc)

Product:

Easy Flyer Creator 4.1

Description:

Setup Launcher Unicode

Version:

4.1.1

MD5:

1fcf64584c0f317d6d4747c253cafd1f

SHA-1:

d8592c0e619170148a5162f351e2e4b7b2a14a9d

SHA-256:

8c2b49c376986dc89ce5278040b84b2ed0ab4b03038389d62d8c692d547df4ad

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 3:27:27 AM UTC (today)

File size:

168 MB (176,118,184 bytes)

Product version:

4.1.1

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\easysetup.exe

Digital Signature

Signed by:

Peridot Technologies NY Inc

Authority:

COMODO CA Limited

Valid from:

11/19/2012 9:00:00 PM

Valid to:

11/20/2013 8:59:59 PM

Subject:

CN=Peridot Technologies NY Inc, O=Peridot Technologies NY Inc, STREET=9131 Queens Blvd., STREET=Suite U, L=Elmhurst, S=NY, PostalCode=11373, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4AA570491443D674270FF770237473C3

File PE Metadata

Compilation timestamp:

9/11/2012 12:58:02 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3145728:9ENxYOmUBa3NK5FU/2cVv/ScklR3oGOcWm8GGPdXmvV0C+67W7blWLHYNz6ZBNZ0:teBa30LcVvzkHoGyvPdy0C+67WlsHYNN

Entry address:

0x6AABB

Entry point:

E8, 6E, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0... 
[+]

Code size:

697 KB (713,728 bytes)

The file easysetup.exe has been seen being distributed by the following 15 URLs.

http://windows.indir.com/kaydet.php?x=TXprd09UTkFRRUFoSVNFdVFYTnVLelJtSlcwMVRRPT18fHw4N2IzNTViMWQyM2MzNGNjMTUxMjkzNGU1NjVjZWI0NA==&m=1

&onid=6675&oid=3001-6675_4-75912108&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=design/desktop-publishing&topicbrcrm=&pid=13111447&mfgid=6284656&merid=6284656&ctype=dm&cval=NONE&devicetype=desktop&pguid=ac37dc2fe22306900c37c99d&viewguid=dlNoT0gZq@ogMhicsKolooI1VsgOFNygeNkF&destUrl=http://.../easysetup.exe

http://letoltom.hu/letoltes_server.php?a=168640

http://www.commentcamarche.net/download/.../telecharger-34066705-easy-flyer-creator

temp:EasySetup.exe

http://ultradownloads.com.br/.../2,1176033.html

http://ec.ccm2.net/es.ccm.net/download/.../EasySetup-4.1.exe

http://windows.indir.com/kaydet.php?x=TXprd09UTkFRRUJJWVZOQVRqZzNNdz09fHx8YjliMzk4OTEyZTUzNjBhY2M1ZWJiZTZjZmQzMmNiZDQ=&m=1

http://windows.indir.com/kaydet.php?i=39093&x=TXprd09UTkFRRUJJWVZOQVRqZzNNdz09fHx8NDY2ZGMyODJlZGU5MmY3ODVhOTBkZjUwNmZlNDYzODE=&m=1

&onid=6675&oid=3001-6675_4-10699134&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=design/desktop-publishing&topicbrcrm=&pid=14203810&mfgid=6284656&merid=6284656&ctype=dm&cval=NONE&devicetype=desktop&pguid=999926e6f22930aeb0acb24f&viewguid=cd0deaOkdT0pArTZo1KylUyUhrrGdP4Amxj0&destUrl=http://files.downloadnow.com/s/software/14/20/38/.../easysetup.exe

http://files.downloadnow.com/s/software/14/20/38/.../easysetup.exe

http://www.flyerscreator.com/click_counter.aspx

http://www.flyerscreator.com/easysetup.exe

http://www.flyerscreator.com/click_counter.aspx?it=ver41

http://software-files-a.cnet.com/s/software/14/20/38/.../easysetup.exe

Scan easysetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.