home

la_setup_v4.7.7.exe

Light Alloy Installer

Vortex Team

This is a setup and installation application. The file has been seen being downloaded from docviewer.yandex.ua and multiple other hosts.
Publisher:
Vortex Team

Product:
Light Alloy Installer

Description:
Installer Software

Version:
1.0.0.2

MD5:
7e6c2f20d4def3e9bdbbdf9437db41c7

SHA-1:
320f05d68e1894570e798335463e57727d6f6535

SHA-256:
1e5bf2bf80637302127320cf64143e7eda5237e21f3f9259b26fa0dff6a314f9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:37:26 AM UTC  (today)

File size:
66.1 MB (69,259,264 bytes)

Product version:
1.0.0.2

Copyright:
© 2011-2013, Vortex Team

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Common path:
C:\users\{user}\downloads\la_setup_v4.7.7.exe

File PE Metadata
Compilation timestamp:
12/24/2013 7:34:08 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
1572864:kvQAsIkSVO0PKJD4iWeifiyEuG62Hvj5LXsVmmnmuVFgT67eF2:IQ6vZ9SV6Qvj5LXsfnmuYud

Entry address:
0x21A4DC

Entry point:
55, 8B, EC, 83, C4, F0, B8, 78, 1D, 61, 00, E8, 70, 3B, DF, FF, A1, 84, 39, 62, 00, 8B, 00, E8, 68, 0B, FC, FF, A1, 84, 39, 62, 00, 8B, 00, B2, 01, E8, A6, 28, FC, FF, 8B, 0D, 64, 36, 62, 00, A1, 84, 39, 62, 00, 8B, 00, 8B, 15, 40, BC, 60, 00, E8, 5A, 0B, FC, FF, 8B, 0D, 94, 37, 62, 00, A1, 84, 39, 62, 00, 8B, 00, 8B, 15, 74, B9, 60, 00, E8, 42, 0B, FC, FF, A1, 84, 39, 62, 00, 8B, 00, E8, 9A, 0C, FC, FF, E8, A1, EB, DE, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.1 MB (2,198,528 bytes)

The file la_setup_v4.7.7.exe has been seen being distributed by the following 3 URLs.

https://docviewer.yandex.ua/source?id=xfjg9-ev8500jri3t0bkpljgay80wg6j49q341cnp7j2v9y4st3rdqz3p4dk99mqdy2iqq3az4jcb2v9stdwcgd19b1hxn594fuccri0n&archive-path=//LA_Setup_v4.7.7.exe&ts=150afc550e5&token=wMeeJF3xy6kI7bWk8jbx8w==&name=LA_Setup_v4.7.7.7z

http://mirror9.fosshub.com/.../LA_Setup_v4.7.7.exe

http://www.fosshub.com/.../LA_Setup_v4.7.7.exe

Scan la_setup_v4.7.7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.