home

setup.exe

File

This is a setup and installation application. The file has been seen being downloaded from get.0122f.info.
Product:
File

Version:
1.9.3.0

MD5:
1731b350bf5e89204e8c5b8c364d5ccf

SHA-1:
097db8cdcd012541ec69b9ee03067830cf8157b7

SHA-256:
52e1d7788ee4412ba0acde7552d462969e166a0ea07a257cf3ad4cf20477c997

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 9:57:15 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Bundler.Outbrowse.BE
5813612

Clam AntiVirus
Win.Adware.Outbrowse-1251
0.98/21322

File size:
532 KB (544,790 bytes)

Product version:
1.9.3.0

Copyright:
File

Original file name:
Ionic.Zip-2015Apr23-190152-08d9c1eb-7287-422e-afba-a07ced589c36.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
4/23/2015 9:01:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:+6ziYJDMYhaatGtSV41OJDsTDDRI09e6RcxLV/EheN70h6B6JDsTDD1:+Miy4IadS4ms5I6e66fEheKhPst

Entry address:
0x75F3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
464 KB (475,136 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://get.0122f.info/.../1429815720/1429815720?78815604250YF1sNDE5cDk1LjArHlw8LS41MDEhbDYpLjgvIG45LyFkKjUpNyswNSJhZ2lcY2FjOCw4LTMxNispLDAhY2NrbDgyH3Jhbzgs

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.