home

install_icq7.exe

Setup.exe

ICQ

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from download.slunecnice.cz.
Publisher:
ICQ

Product:
Setup.exe

Version:
7.7.0.0

MD5:
b8bfd532362e349d56d39b8dc78db428

SHA-1:
952315d16a53f6268a459d0244995208f7e929c6

SHA-256:
9dddca8aefcdf0a282f28e7e2799f07326f208be465eaba5b0118025567d8e31

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:53:01 AM UTC  (today)

File size:
17.2 MB (17,997,432 bytes)

Copyright:
Copyright ICQ company

Trademarks:
ICQ TM

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\install_icq7.exe

File PE Metadata
Compilation timestamp:
2/21/2009 8:46:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:QLMB9H4jFTpDY27WLuUvVi+9byFNgCD2MVx+lQCDg3SKDmngx5:RB6jFhY2kfV39boNRDjVi83SKSO5

Entry address:
0x30FA

Entry point:
69, C6, 02, 54, 64, 35, 3D, 03, 73, CF, 63, 8D, 05, 01, 2F, 47, 89, 81, FF, 2F, F9, 00, 00, 71, 07, 2D, 2B, 42, 2F, BE, FF, CB, B0, BA, 84, EC, 68, 19, 00, 00, 00, F7, DB, 59, 1B, C5, 69, C9, BA, 02, 00, 00, FF, C8, 03, F9, 4A, 81, C7, 8B, 07, 00, 00, 43, 74, 02, 86, D9, 85, DA, 40, E8, 00, 00, 00, 00, 5F, 8D, 35, 94, DE, B4, 28, BB, 23, D7, F6, 4F, 87, C6, 74, 03, 0F, AF, D8, 69, C1, 7A, 1A, BB, 10, 8D, 0D, 00, 00, 00, 00, EB, 08, 0F, B6, F0, F6, C2, A5, 10, D0, 0B, C9, B8, E7, 81, 76, B5, 4B, 8B, D1, 69...
 
[+]

Code size:
23.5 KB (24,064 bytes)

The file install_icq7.exe has been seen being distributed by the following URL.

http://download.slunecnice.cz/slunecnice/5a7e79bc64a5668a35bc62768ea031bf/50f27a38/win/.../install_icq7.exe

Scan install_icq7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.