home

herdprotectscan_setup.exe

herdProtect Anti-Malware Scanner

Reason Company Software Inc.

Warning, this is an unsigned version of herdProtect and might be compromised. If you have this version on your PC please remove it and install a legitimate version from our website.
This is a self-extracting archive and installer. The file has been seen being downloaded from touch.kaspersky.com and multiple other hosts.
Publisher:
Reason Company Software Inc.

Product:
herdProtect Anti-Malware Scanner

Version:
1.0.3.2"

MD5:
bd8367441e171c264561dd57a799851f

SHA-1:
a8b8ba497eb80e23a62b187b9915b96ca40d28de

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 9:36:43 AM UTC  (today)

File size:
2.1 MB (2,210,096 bytes)

Product version:
1.0.3.2"

Copyright:
Copyright Reason Company Software Inc.

Trademarks:
herdProtect is a Trademark of Reason Company Software Inc.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\herdprotectscan_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:+tvDxrLSs385qsB5JX+kcZvpGctq239hfngImVq9O4VdU16jfU4rL:g9sT3jcZxxn9hfgfcDzUyL

Entry point:
60, 6A, 00, FF, 15, 14, 71, 40, 00, E8, 00, 00, 00, 00, B9, 41, 1A, 26, 6F, D2, EE, 0F, AF, EF, 31, CB, 81, E9, EB, 02, BD, 8C, B9, 84, 37, 1E, 69, 0F, BD, C3, 89, EE, 81, F1, 44, F7, DE, 29, 0F, A3, FD, 0F, BC, DA, 0F, BC, C8, 81, C1, C1, 80, 43, FA, 0F, A5, F7, 18, D4, 31, CB, 81, F1, F2, ED, FC, CF, F2, 0F, C1, F1, C0, DC, A3, 6A, 00, FF, 15, C4, 70, 40, 00, 5B, 81, C3, 98, AF, DD, 01, F3, F7, D1, 81, D1, 1F, 66, 91, 10, 81, EB, 82, F0, D8, 01, 0F, CA, 0F, A5, C1, 0F, BB, F7, 53, 81, C3, 7A, 0C, 00, 00...
 
[+]

Entropy:
7.9237  (probably packed)

The file herdprotectscan_setup.exe has been seen being distributed by the following 35 URLs.

http://touch.kaspersky.com/url_redirect/.../000044C00000173D

http://filepony.de/.../herdProtectScan_32Setup.exe

http://filepony.de/.../herdProtectScan_32Setup.exe

https://dl-web.dropbox.com/get/.../herdProtectScan_Setup.exe

http://filepony.de/.../herdProtectScan_32Setup.exe

http://mafreebox.freebox.fr/api/v3/.../L0Rpc3F1ZSBkdXIvaGVyZFByb3RlY3RTY2FuX1NldHVwLmV4ZQ==?inline=0

http://touch.kaspersky.com/url_redirect/.../1408527742

http://touch.kaspersky.com/url_redirect/.../0000077900006318

http://touch.kaspersky.com/url_redirect/.../1404192854

http://touch.kaspersky.com/url_redirect/.../1404112139

http://touch.kaspersky.com/url_redirect/.../00006081000071A5

http://touch.kaspersky.com/url_redirect/.../1403617460

http://touch.kaspersky.com/url_redirect/.../0000783600002DD9

http://filepony.de/.../herdProtectScan_32Setup.exe

http://filepony.de/.../herdProtectScan_32Setup.exe

http://filepony.de/.../herdProtectScan_32Setup.exe

http://filepony.de/.../herdProtectScan_32Setup.exe

http://touch.kaspersky.com/url_redirect/.../1402133626

http://touch.kaspersky.com/url_redirect/.../1401631168

http://touch.kaspersky.com/url_redirect/.../1401528887

http://safe.pre-cloud.com:8080/safed.php?q=http://dl.cdn.chip.de/downloads/.../herdProtectScan_32Setup.exe

http://touch.kaspersky.com/url_redirect/.../1400680382

http://mail.aol.com/38563-111/aol-6/de-de/.../get-attachment.aspx?uid=31628005&folder=NewMail&partId=1&saveAs=herdProtectScan_32Setup.exe

http://download.findmysoft.com/2014/.../05/herdProtect-Anti-Malware-Scanner_1.0.3.2-Beta.exe

http://dl.cdn.chip.de/6DEB8334-7E1A-40C5-AC62-285FC30C1311/FinalDownload/DownloadId-EBF0BAC3FE898453A705E2A8FB00B380/6DEB8334-7E1A-40C5-AC62-285FC30C1311/downloads/.../herdProtectScan_32Setup.exe

http://touch.kaspersky.com/url_redirect/.../000024260000518D

http://touch.kaspersky.com/url_redirect/.../1399118444

http://touch.kaspersky.com/url_redirect/.../1399082301

http://touch.kaspersky.com/url_redirect/.../1398977218

http://touch.kaspersky.com/url_redirect/.../0000163C00003FBF

Latest 30 of 35 download URLs

Scan herdprotectscan_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.