home

herdprotectscan_setup.exe

herdProtect Anti-Malware Scanner

Reason Company Software Inc.

Warning, this is an unsigned version of herdProtect and might be compromised. If you have this version on your PC please remove it and install a legitimate version from our website.
This is a setup and installation application. The file has been seen being downloaded from mega.co.nz and multiple other hosts.
Publisher:
Reason Company Software Inc.

Product:
herdProtect Anti-Malware Scanner

Version:
1.0.2.0"

MD5:
89a91a6d54ffa2aa5391c99eee43f6bf

SHA-1:
ebf89ed4709c6d6b23a57241fd8a334ae2c14be6

SHA-256:
2d21a4609c02de03149effe12451eb7f5e4e73fca90ad3832bf1f5319336834f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:21:56 AM UTC  (today)

File size:
2.1 MB (2,178,104 bytes)

Product version:
1.0.2.0"

Copyright:
Copyright Reason Company Software Inc.

Trademarks:
herdProtect is a Trademark of Reason Company Software Inc.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\herdprotectscan_setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:Gt4xrvyvafUd1XLjawWrgfngImVq9O4VdU16jfU47:xKas7XLxWkfgfcDzUY

Entry point:
55, 89, E5, 83, EC, 08, 83, C4, F4, 6A, 02, A1, C8, B2, 40, 00, FF, D0, E8, 79, FF, FF, FF, C9, C3, 00, 00, 00, 00, 00, 00, 00, 49, 6A, 65, 65, 66, 6F, 21, 45, 73, 62, 68, 70, 6F, 21, 77, 6A, 73, 76, 74, 2F, 21, 43, 70, 73, 6F, 21, 6A, 6F, 21, 62, 21, 75, 73, 70, 71, 6A, 64, 62, 6D, 21, 74, 78, 62, 6E, 71, 2F, 00, 5C, 00, 20, 00, 22, 00, 8D, 76, 00, 55, 89, E5, 8B, 4D, 08, 8B, 55, 0C, 31, C0, 39, D0, 73, 08, 00, 04, 08, 40, 39, D0, 72, F8, C9, C3, 8D, 76, 00, 55, 89, E5, 8B, 4D, 08, 8B, 55, 0C, 31, C0, 39...
 
[+]

Packer / compiler:
Video-Lan-Client

The file herdprotectscan_setup.exe has been seen being distributed by the following 5 URLs.

https://mega.co.nz/temporary/.../wUcQ1JBZ

http://www.herdprotect.com/.../herdProtectScan_Setup.exe

http://dl.cdn.chip.de/downloads/.../herdProtectScan_Setup.exe

http://vindavoz.ru/.../go.php?url=aHR0cDovL3d3dy5oZXJkcHJvdGVjdC5jb20vaW5zdGFsbGVycy9oZXJkUHJvdGVjdFNjYW5fU2V0dXAuZXhl

http://external.comss.ru/url.php?url=http://dl3.comss.ru/.../herdProtectScan_Setup.exe

Scan herdprotectscan_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.