home

LyncSetupEval.exe

Microsoft Lync 2010

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from s2.download.net.pl and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Lync 2010

Description:
Eval Bootstrapper for Microsoft Lync 2010 Installer

Version:
4.0.7577.0 built by: lcs_se_w14_main(rtbldlab)

MD5:
48a6c0e66299dd2f30db915634bc8ac6

SHA-1:
3e2aec047f58d4f71503f84519ad5b7c3f08f6c4

SHA-256:
5c3538dce620fc8ba6be3f18f91fd5df58e97eb8f5d0d0b7dae1e9e91cdbbed4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 7:47:20 AM UTC  (today)

File size:
53.4 MB (56,038,168 bytes)

Product version:
4.0.7577.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
LyncSetupEval.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\lyncsetupeval.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/19/2010 5:53:10 PM

Valid to:
10/19/2011 5:53:10 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
10/22/2010 5:19:11 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:oWN65eG8HXTZo6d/2xWUWp92XNyPGIB1lVm3cKD:oWY5eNHXTZo6d/2YU59AGI/fgcK

Entry address:
0x81AE

Entry point:
E8, 1E, 20, 00, 00, E9, 74, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, DC, 83, 41, 00, 75, 02, F3, C3, E9, A0, 20, 00, 00, CC, CC, CC, CC, CC, 6A, 0C, 68, 90, 6B, 41, 00, E8, F7, 1D, 00, 00, 33, F6, 89, 75, E4, 33, C0, 8B, 5D, 08, 3B, DE, 0F, 95, C0, 3B, C6, 75, 1C, E8, 2B, 27, 00, 00, C7, 00, 16, 00, 00, 00, 56, 56, 56, 56, 56, E8, A9, 26, 00, 00, 83, C4, 14, 33, C0, EB, 7B, 33, C0, 8B, 7D, 0C, 3B, FE, 0F, 95, C0, 3B, C6, 74, D6, 33, C0, 66, 39, 37, 0F, 95, C0, 3B, C6, 74, CA, E8, 05, 24, 00, 00, 89, 45, 08...
 
[+]

Entropy:
7.9644  (probably packed)

Code size:
91.5 KB (93,696 bytes)

The file LyncSetupEval.exe has been seen being distributed by the following 3 URLs.

http://s2.download.net.pl/microsoft-lync-2010-42140-58771-1770807.exe

https://download.microsoft.com/download/A/F/4/.../LyncSetupEval.exe

http://download.microsoft.com/download/A/F/4/.../LyncSetupEval.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.