home

InstallShield Setup.exe

Aion

NCsoft Corp.

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
NC Interactive, LLC  (signed by NCsoft Corp.)

Product:
Aion

Description:
Aion Installer

Version:
4.0.0.3

MD5:
359a8d321f0ed3ce04739286a2fb1be8

SHA-1:
db6d3ef09fdcec92d4d82047288dd43429715d56

SHA-256:
b2f22ef246426c557e7f2dd5e12bd48fb455fee5983e9b0caf37bdf2994eca7a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 10:01:12 AM UTC  (today)

File size:
4.8 MB (5,003,264 bytes)

Product version:
4.0.0.3

Copyright:
Copyright © 2013 NC Interactive, LLC

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\installshield setup.exe

Digital Signature
Signed by:
NCsoft Corp.

Authority:
SGssl

Valid from:
3/7/2013 7:00:00 PM

Valid to:
3/8/2014 6:59:59 PM

Subject:
CN=NCsoft Corp., O=NCsoft Corp., STREET="507 Teheran-ro,", L=Gangnam-gu, S=Seoul, PostalCode=135880, C=KR

Issuer:
CN=SGTRUST CODE SIGNING CA, O=SGssl, C=KR

Serial number:
28E31647F215B601F8116284B271809B

File PE Metadata
Compilation timestamp:
10/5/2010 4:39:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:Puc8OiE6w3YFYS0QYok32T5LG/KgBpL2Ej1/0Cm9Juc8Oo:HhErqS0QY45LmXpL2EFepho

Entry address:
0x3D90D

Entry point:
55, 8B, EC, 6A, FF, 68, A8, 75, 46, 00, 68, 38, F0, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 8C, 63, 46, 00, 33, D2, 8A, D4, 89, 15, 44, D7, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 40, D7, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 3C, D7, 47, 00, C1, E8, 10, A3, 38, D7, 47, 00, 6A, 01, E8, 0E, 2A, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C2, 00, 00, 00, 59, E8, 8F, 0F, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B1, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Code size:
403.5 KB (413,184 bytes)

The file InstallShield Setup.exe has been seen being distributed by the following 20 URLs.

https://dw.uptodown.com/dwn/TZyJZgp5uHrRJUFpGJFqzx5hjsT4pZAHPBfs8bm0gQGkJbtyPjlwvongt2XEbjFy3buDghBuwMEYXVyd69jwX-y9Uwh0WMo7ZzPj2TvkEixNw-bPqp4kx9VTFfHvIOBA/Wm1VTnAIMKeft_Evl6LvPqVd0Tblli591JhQe1lXegoFmOEP026IaXI06pez-EEu73WAMwpezO8YARM7Lbst51eN7KJuEj2ZRxIsk9HgiCXcFjiJ5GnxhYKGx-lJAhTH/IzuJ6m37tsouj9Dg1v5ka1uJR125QcF56bl71_I_h8vcaMuowROcHRgcm8VXsCw73KinYLQPL7JhufV820hmkDrwvpWUCUNwFqgW4kPRKWncMTbjJwQweavO1muWKsxh/.../

https://dw.uptodown.com/dwn/gq7tUNBJljd3MHlRkU5HRDkoTaHV_oKbhTEsb2fLD4twA5QdBtILVp1pPgLIDyODzQP47mfsyBCrtgBwyndu3r8je2rnuAMzifFlM_K8cLghe0subjcxQxRS3l-ZPx4y/vXPy2a3P5JwHOCufFB12_XLQY-NN5xJyNIDBuKnZfp3LDcKanbJde43NEkmpOdwRkzE9INWhp-rS1S8ZBV0mOvZko9MSdSNhmc0AuD1bNdCQjbEucAZ4ll74-pV-Cx-E/QeO5TXv7YjAA6J4YwYdQkNbZU7dXWcbnixjlKnBf2g-l7txkQBxJpGvJGgdzMBixdHAC1t2jba_dIEc6l8HYzxV7-hfs5qcoYl6Xdu6nQj50OmYHO15-5aem1urA9KYn/.../

http://download2213.mediafire.com/ob799f66yybg/.../AionInstaller.exe

http://baixar.freedownloadmanager.org/Windows-PC/.../GRATUITO-3.0.62.182.html?ac4f0fc

http://dw.uptodown.com/dwn/JnubIpbX0n5gHl4yPqINYETfLvh7jQWSKqsyACNpwc8-nVLdak0FsT-YQpGJNmMoYlv_UXPw8QGdr3yoPsxTQVutX-66iV_bZIeOqojaC9TEi73-GN92IzD1cExv4IK7/XKwqFNXWtGj4C0Phc7HK3k-LcGwyIYckoKWi0UZSgHlIfDIvgqBpNlzwW_PPNLPmqvYpnBpjgqWSmQwgov7TCpAdjNQoRPlip2EqKnfHV5FrG2ly7XM5HCfKW7qScUrm/D5LCDBSs8XS3MHQ7lJsrZd2rV0CcNNSksv8qgM8gEtyHy4dXxXiwMIketQ23X0ItkRQmHPQEyhcly4rAZDIbHzQMBjyfeNKaODySyhWaFRwYHCIgjgDe2BWshDw687IZ/.../

http://download821.mediafire.com/hcz76u0bi6vg/.../AionInstaller.exe

https://dw.uptodown.com/dwn/aZ8iu_GCn8xP8ajw21uI-K-uh5HLi3oViBfa9SlTvkcg8MBETdG6yZK-c8D0d7Gwu-bBHA236RSrWdT7bZYpSaR6lbzeg6sMYn3aQbMkd4xepkUCOex-Uw1WlxIv-tmy/EFtv-RtiTRGDJ5XLI7LpIUqfoYmr71_Y-Zv_p-33FPTc98tzor7mP6rJ9CwtJa-KQYbXpJRBdgRhPoyzLPMD4cy0B_s7Bh9wXzElLkkBa33W7DTrRgiUdtlKDXb9kFe-/qMIm67sTxqu2V28E1EjR6rPKKR1aNK7w7WukgohMZvi4-UGjrZ2kDr4aIKPzq1RYLu9aeeFIKQ_fg3z0fXkxXEJnJWzvEU8SHFgWTyTzEplJxVU-mqBGAfRc5fVwBKMN/.../

http://download2213.mediafire.com/8b9auq9bu1eg/.../AionInstaller.exe

http://www.insanegames.eu/.../AionInstaller.exe

http://s41.filefactory.com/get/f/4jrtqrt82srp/.../AionInstaller.exe

http://download1643.mediafire.com/44dd3p73i1tg/.../AionInstaller.exe

http://download1160.mediafire.com/ar225ia2gwgg/.../AionInstaller.exe

http://aion-anarchy.ddns.net/.../AionInstaller.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://www.techtudo.com.br/_/software/.../download

http://dw.uptodown.com/dwn/9YOMB_fsxEd5kIkNNoAGrjD4P7G1JSCSdwxcwKohomKsJbFpFB9i3TbNocKMzPTviyeHujdxmqTlesm9zzASkHIZ66H1rQ430Fm3KAo0Xt-KtKdur0Cb2Qwoil0mmNc9/.../

http://ncsoft-launcher.software.informer.com/.../

https://static.ncsoft.com/.../AionInstaller.exe

http://aion.patcher.ncsoft.com/AION/.../AionInstaller.exe

ftp://ftp.ncsoft.com/.../AionInstaller.exe

Scan InstallShield Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.