home

halsetup.exe

This is a setup and installation application. The file has been seen being downloaded from www.bithal.com.
MD5:
1fdc040154294f95de7822c66cea7162

SHA-1:
de27f6b485dfbb103cd42822e6ebe1ab21dd3269

SHA-256:
caceb1cf4b7eb08ef17c12729207382df7c2a23a3778bd58728d64336946cd59

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:58:31 PM UTC  (today)

File size:
242.7 KB (248,567 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\halsetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:QKrxiyJuPuLgE06ze4gaM7D9k/pSJQlhS4Y8y7Rm:dtLaYezN7Bk/pSyPYP7o

Entry address:
0x19B64

Entry point:
9C, 3B, 85, 38, FF, FF, FF, 75, 37, 53, 56, FF, B5, 74, FF, FF, FF, FF, 75, D8, E8, DA, 9C, FF, FF, 85, C0, 75, 23, 68, E4, 01, 04, 80, FF, 15, 68, 10, 00, 01, 53, 68, 97, 00, 00, 00, E8, 07, 88, FF, FF, 50, E8, DC, 83, FF, FF, 8B, DE, E9, 3E, FF, FF, FF, 8B, 35, 18, 10, 00, 01, 8D, 85, 30, FF, FF, FF, 50, 8B, 45, F4, BF, 19, 00, 02, 00, 0B, C7, 50, 53, FF, 75, D4, FF, 75, 9C, FF, D6, 3B, C3, 74, 22, 50, E8, 82, 85, FF, FF, 68, 01, 00, 02, 00, FF, 15, 80, 11, 00, 01, 83, C0, 40, 50, E8, F9, 84, FF, FF, 33...
 
[+]

Code size:
99 KB (101,376 bytes)

The file halsetup.exe has been seen being distributed by the following URL.

http://www.bithal.com/content/files/.../HalSetup.exe

Scan halsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.