home

flux-setup3.exe

Michael Herf

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from update.justgetflux.com and multiple other hosts.
Publisher:
Michael Herf  (signed and verified)

MD5:
4c542f35d9f97d56ce16081b15b34ee1

SHA-1:
781d03f3a04e53a7e0fab69834c8d2dbdab2df82

SHA-256:
c4d156309fb48eb85feacae742fe190d74870ae8be1400cbaf6a824c8f775d04

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:02:38 PM UTC  (today)

File size:
478.9 KB (490,352 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\flux-setup3.exe

Digital Signature
Signed by:
Michael Herf

Authority:
COMODO CA Limited

Valid from:
5/4/2012 12:00:00 PM

Valid to:
5/5/2014 11:59:59 AM

Subject:
CN=Michael Herf, O=Michael Herf, STREET=929 S. Gretna Green Way, L=Los Angeles, S=CA, PostalCode=90049, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F44D90F5015B431315399BB0349396EC

File PE Metadata
Compilation timestamp:
2/9/2008 10:25:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:Iw/Acr5KN+9edsaMl166L38DLasudwUKTy5aq:Iw/KN+9OtMtLMLasuKe51

Entry address:
0x30BE

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 58, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, 3F, 42, 00, E8, E1, 2A, 00, 00, A3, 64, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 28, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 4C, 91, 40, 00, 68, 60, 36, 42, 00, E8, 98, 27, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 86, 27, 00, 00...
 
[+]

Entropy:
7.9308

Packer / compiler:
Nullsoft install system v2.x

Code size:
22 KB (22,528 bytes)

The file flux-setup3.exe has been discovered within the following program.

F.lux  by justgetflux
Publisher's description - “f.lux fixes this: it makes the color of your computer's display adapt to the time of day, warm at night and like sunlight during the day. It's even possible that you're staying up too late because of your computer. You could use f.”
stereopsis.com/flux
4% remove it
 
Powered by Should I Remove It?

The file flux-setup3.exe has been seen being distributed by the following 2 URLs.

http://update.justgetflux.com/flux-setup3.exe

http://justgetflux.com/flux-setup3.exe

Scan flux-setup3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.