home

pcstreams_setup.exe

Setup Program

This is a setup and installation application. The file has been seen being downloaded from tiny.cc and multiple other hosts.
Product:
Setup Program

Version:
2.1.1005.0

MD5:
d39de79cdfa47e8653add98e3cfc97cc

SHA-1:
5608a493647dc2da17d3e2f15346ae3728df33fc

SHA-256:
fb2b87e8d4207ce609208eef3ffde387144755b572e416fea3c6af1bf61c836c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/24/2024 12:58:17 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V1222
7.2.87

File size:
10.9 MB (11,428,372 bytes)

Product version:
2.1.1005.0

Copyright:
Copyright (c) 2008 Indigo Rose Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pcstreams_setup.exe

File PE Metadata
Compilation timestamp:
8/26/2008 2:56:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:zwKkYTbnflWmixLdcH+L4U4KvsfkayBY5YBC/TV7yzODHZ0X8wVt:tflVi94Kvs8a75YB6T8wZRwVt

Entry address:
0xA5CE3

Entry point:
E8, 8B, E1, 00, 00, E9, 16, FE, FF, FF, C3, B8, 94, 49, 4B, 00, A3, 38, 99, 4F, 00, C7, 05, 3C, 99, 4F, 00, 90, 40, 4B, 00, C7, 05, 40, 99, 4F, 00, 4E, 40, 4B, 00, C7, 05, 44, 99, 4F, 00, 82, 40, 4B, 00, C7, 05, 48, 99, 4F, 00, F8, 3F, 4B, 00, A3, 4C, 99, 4F, 00, C7, 05, 50, 99, 4F, 00, 0E, 49, 4B, 00, C7, 05, 54, 99, 4F, 00, 0E, 40, 4B, 00, C7, 05, 58, 99, 4F, 00, 78, 3F, 4B, 00, C7, 05, 5C, 99, 4F, 00, 07, 3F, 4B, 00, C3, E8, 9B, FF, FF, FF, E8, C2, EC, 00, 00, 83, 7C, 24, 04, 00, A3, CC, E2, 4F, 00, 74...
 
[+]

Code size:
816 KB (835,584 bytes)

The file pcstreams_setup.exe has been seen being distributed by the following 7 URLs.

http://tiny.cc/PCStreams

http://h1931790.stratoserver.net/.../PCStreams_Setup.exe

http://t.co/ZXBpA0aOlq

http://80.82.78.162/.../PCStreams_Setup.exe

http://tiny.cc/.../

http://www.lapje.nl/.../PCStreams_Setup.exe

http://pcstreams.com/PCStreams_Setup.exe

Scan pcstreams_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.