home

sap2000v1811setup64.exe

SAP2000 18 64-bit

Computers and Structures, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from doc-0s-80-docs.googleusercontent.com and multiple other hosts.
Publisher:
Computers and Structures, Inc.  (signed and verified)

Product:
SAP2000 18 64-bit

Description:
Setup Launcher Unicode

Version:
18.1.1.1

MD5:
b71c930a25ade539168b9de1f5d685f7

SHA-1:
548185184cfce17261b991821403c352e932f8eb

SHA-256:
7f55b5bb5ec47c9950419ed0ba43f0ae60c554f3552a239381ae6ac43a6b501a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:19:02 PM UTC  (today)

File size:
448.3 MB (470,066,184 bytes)

Product version:
18.1.1.1

Copyright:
Copyright (c) 2015 Flexera Software LLC. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sap2000v1811setup64.exe

Digital Signature
Signed by:
Computers and Structures, Inc.

Authority:
Symantec Corporation

Valid from:
2/29/2016 7:00:00 PM

Valid to:
9/18/2016 6:59:59 PM

Subject:
CN="Computers and Structures, Inc.", O="Computers and Structures, Inc.", L=Walnut Creek, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1770136FB209220EB545CF4D4FBF0C11

File PE Metadata
Compilation timestamp:
1/22/2016 2:35:02 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12582912:RCx8DI84wkXgLB0/btkKW9t2OmclLcZEp4Ai/8qV74:sx8OoybuKW9tpmclLcZB/8c4

Entry address:
0x6D03C

Entry point:
E8, C1, EA, 00, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 3C, 83, 7D, 08, 00, 75, 13, E8, B1, E6, FF, FF, 6A, 16, 5E, 89, 30, E8, 69, 2B, 00, 00, 8B, C6, EB, 25, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 09, E8, 93, E6, FF, FF, 6A, 22, EB, E0, 50, FF, 75, 10, FF, 75, 08, E8, B6, BD, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45, 0C, 72, F2, 5D, C3, 85, C0, 75, 06, 66, 0F, EF, C0, EB, 11, 66...
 
[+]

Entropy:
7.9999  (probably packed)

Code size:
943 KB (965,632 bytes)

The file sap2000v1811setup64.exe has been seen being distributed by the following 2 URLs.

https://doc-0s-80-docs.googleusercontent.com/docs/securesc/npb760p8fc7ojvmekfvs05qp455p2r91/ds90a0hgn91etdt1lmp7fnpfo8u1lr52/1462413600000/03021425087656673521/.../0BwklfQhxHzo1dGMyNGw0OHAzekE?e=download&h=14771753379018855219&nonce=a34himm14qtss&user=04117210615707050513&hash=mng34t597d4f8o2vci6e4tbe71rafflc

http://installs.csiberkeley.com/software/SAP2000/.../SAP2000v1811Setup64.exe

Scan sap2000v1811setup64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.