home

riffsetup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.riffbox.org.
MD5:
96c30db3a0ac0cd1bb2d520e8c483152

SHA-1:
6387e6693af171cba952be87b2adf3b28be3f880

SHA-256:
47e66ebf74cba73148fe5b61f0e7c6e2b3d75d4edd637454d6e235e26ba534fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 3:05:17 AM UTC  (today)

File size:
8.5 MB (8,866,783 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\riffsetup.exe

File PE Metadata
Compilation timestamp:
11/3/2012 4:00:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
196608:9wH6O7OWqLrF29Hk2U+nXsVSCOX4EkLk0V2GvAe10w:9wAJXssVHOBkLf2xw0w

Entry address:
0x1000

Entry point:
77, 02, 8A, DB, 76, 03, 80, F0, 05, 81, FF, B5, 03, 00, 00, 77, 08, 34, FB, 69, C1, 1C, 8F, 77, 52, FE, C9, F6, C2, A6, 8D, 3D, BA, 0C, 98, 13, 08, D8, 0F, AF, F1, 33, D1, 0F, B6, DC, 85, CD, 0F, B6, F1, 12, DE, 71, 08, 35, D7, 50, 3E, BE, F6, C7, 5B, F3, 8D, 05, 16, D7, 21, 74, F2, 18, D2, E8, 4F, 00, 00, 00, 85, DF, 15, E8, A7, A7, 74, 84, DA, 87, E9, C7, C0, 9A, 94, B0, 6B, 8D, 2D, D0, 2D, F2, 64, 84, D4, 81, E2, D5, 63, EE, F9, 33, ED, 0F, BF, FF, 0B, EB, 42, 86, D6, EB, 05, F2, 8A, D6, 84, EA, 8D, 45...
 
[+]

Code size:
194 KB (198,656 bytes)

The file riffsetup.exe has been seen being distributed by the following URL.

http://www.riffbox.org/.../RiffSetup.exe

Scan riffsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.