home

is_ap_sta_rt6x_d-1.2.8.0_va-2.1.6.0_082409_1.5.4.0_free.exe

InstallShield

Macrovision Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from download.wireless-driver.com.
Publisher:
Macrovision Corporation

Product:
InstallShield

Description:
Setup.exe

Version:
12.0.49974

MD5:
b687eb46a33bca5fa47cafed0d155b0c

SHA-1:
d27af668eec924b9f8e75bce66595c8adbca8d6d

SHA-256:
07d785896405fcf496c89288540f1cbf4520eae1f302b2a8cb77bea54922ce28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:57:37 AM UTC  (today)

File size:
26.3 MB (27,614,572 bytes)

Product version:
12.0

Copyright:
Copyright (C) 2006 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\is_ap_sta_rt6x_d-1.2.8.0_va-2.1.6.0_082409_1.5.4.0_free.exe

File PE Metadata
Compilation timestamp:
5/24/2006 6:57:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:qw4UsU2SaieagTDBaWCJ4Tgo2IuBqY2cp24UZKZiXaseV4kCTpsTlZ7Sulb+VtXM:gUH2SpUBaWn2IaMERiKakapyXH

Entry address:
0x22A29

Entry point:
F6, DE, 68, E5, 6C, 62, 00, 8A, EF, 3B, D7, 71, 02, 0F, C8, 76, 06, C7, C0, DC, 79, E7, 10, F6, D7, E8, 00, 00, 00, 00, 8D, 2D, CD, C1, 8C, A3, 0F, AF, DE, F7, C6, 6B, 60, F5, 60, 03, F5, 3B, CD, 59, B8, 98, B6, F1, 15, FE, C3, 81, FF, 5A, 36, 00, 00, 77, 03, 46, 8B, C1, 8D, 2F, 8D, 05, 6D, A0, 4B, 0C, F6, DF, 2B, FD, 0F, AF, DD, 0F, 6E, C1, 12, EB, 0F, CD, 81, FF, DF, C3, 00, 00, 76, 03, 0F, B7, FF, 81, C6, AF, B1, F8, FF, F6, C2, F8, 81, C6, 1E, 39, 08, 00, 0F, 7E, C2, 0F, BE, DB, 69, F0, 40, 35, E2, 20...
 
[+]

Code size:
276 KB (282,624 bytes)

The file is_ap_sta_rt6x_d-1.2.8.0_va-2.1.6.0_082409_1.5.4.0_free.exe has been seen being distributed by the following URL.

http://download.wireless-driver.com/driver/Ralink/.../IS_AP_STA_RT6x_D-1.2.8.0_VA-2.1.6.0_082409_1.5.4.0_Free.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.