herdprotectscan_setup.exe

herdProtect Anti-Malware Scanner

Reason Company Software Inc.

Warning, this is an unsigned version of herdProtect and might be compromised. If you have this version on your PC please remove it and install a legitimate version from our website.
This is a self-extracting archive and installer. The file has been seen being downloaded from mirrord.donmare.net and multiple other hosts.
Publisher:
Reason Company Software Inc.

Product:
herdProtect Anti-Malware Scanner

Version:
1.0.3.2"

MD5:
3e2d8b254bc4654ae6cdb53d3a6589d6

SHA-1:
1d119c3c1800e20e6555a7907c64cc895436594d

SHA-256:
09ac6d045b30cf2d9c79e0a80055c942941fd4cfd44468c38c5e5555ffd3e87e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:27:48 AM UTC  (today)

File size:
2.2 MB (2,278,592 bytes)

Product version:
1.0.3.2"

Copyright:
Copyright Reason Company Software Inc.

Trademarks:
herdProtect is a Trademark of Reason Company Software Inc.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:wtFxrTbXsvJ7nKeZVEdURzcbbSxB7CRfngImVq9O4VdU16jfU4r:IR8vdh6SQ2cfgfcDzUy

Entry point:
55, 8B, EC, 83, C4, E0, 33, C0, 89, 45, E0, 89, 45, E8, 89, 45, E4, 89, 45, EC, B8, 54, 80, 40, 00, E8, 12, BE, FF, FF, 33, C0, 55, 68, 20, 82, 40, 00, 64, FF, 30, 64, 89, 20, B8, A8, 91, 40, 00, B9, 0B, 00, 00, 00, BA, 0B, 00, 00, 00, E8, 5C, EF, FF, FF, B8, B4, 91, 40, 00, B9, 09, 00, 00, 00, BA, 09, 00, 00, 00, E8, 48, EF, FF, FF, B8, C0, 91, 40, 00, B9, 03, 00, 00, 00, BA, 03, 00, 00, 00, E8, 34, EF, FF, FF, B8, DC, 91, 40, 00, B9, 03, 00, 00, 00, BA, 03, 00, 00, 00, E8, 20, EF, FF, FF, A1, 10, 92, 40...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file herdprotectscan_setup.exe has been seen being distributed by the following 21 URLs.

Scan herdprotectscan_setup.exe - Powered by Reason Core Security