home

setup.exe

MD5:
af18955096b8aa87caa6575881388aed

SHA-1:
0c3d17a899876c18b7b31e240e5d14cf84362c4e

SHA-256:
ac0526da802c3c9ff37876ad72856c0db9d4e3bebc11b35d3bd175f38e0235a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:42:42 AM UTC  (today)

File size:
462.5 KB (473,600 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

File PE Metadata
Compilation timestamp:
8/13/2012 9:49:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:zYV+M4Z/f4GKLhxoVX2Pig6v4mvy6jRiy0eezwJ2l:zYV+M+QGK9iVX2PlAly8iy+

Entry address:
0xC010

Entry point:
E8, DD, 18, 01, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 4D, 08, 53, 33, DB, 56, 57, 3B, CB, 74, 07, 8B, 7D, 0C, 3B, FB, 77, 1B, E8, D4, 35, 00, 00, 6A, 16, 5E, 89, 30, 53, 53, 53, 53, 53, E8, 5E, 29, 00, 00, 83, C4, 14, 8B, C6, EB, 30, 8B, 75, 10, 3B, F3, 75, 04, 88, 19, EB, DA, 8B, D1, 8A, 06, 88, 02, 42, 46, 3A, C3, 74, 03, 4F, 75, F3, 3B, FB, 75, 10, 88, 19, E8, 99, 35, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, C1, 33, C0, 5F, 5E, 5B, 5D, C3, 6A, 0C, 68, 08, 54, 43, 00, E8, 56, 54, 00, 00, 83, 65...
 
[+]

Entropy:
6.0666

Code size:
181 KB (185,344 bytes)

The file setup.exe has been discovered within the following programs.

Autodesk SketchBookPro 2011  by Autodesk, Inc.
Publisher's description - “Autodesk SketchBook Pro sketching software for Windows is a professional-grade painting app that is easy to use for every artist.”
www.autodesk.com
5% remove it
BitTorrent  by BitTorrent Inc.
BitTorrent is a desktop application that allows you to work with torrent files.BitTorrent allows you to download files available as torrents, search torrent sites for music, videos, books, software and other free or public domain material.
www.bittorrent.com
7% remove it
klickTel Routenplaner Deutschland und Europa 2011  by telegate MEDIA AG
www.telegate-media-ag.de
About 1% of users remove it
OpenOffice 4.0.0  by Apache Software Foundation
OpenOffice is a widely used open-source office suite.
www.openoffice.org
About 2% of users remove it
OpenOffice.org 3.3  by OpenOffice.org
Apache OpenOffice (AOO) is an open-source office productivity software suite containing word processor, spreadsheet, presentation, graphics, formula editor, and database management applications.
9% remove it
OpenOffice.org 3.4.1  by Apache Software Foundation
Apache OpenOffice (AOO) is an open-source office productivity software suite. It descends from OpenOffice.org (OOo), which was an open-sourced version of the earlier StarOffice.
11% remove it
PC Inspector File Recovery  by CONVAR EUROPE Ltd
Publisher's description - “PC INSPECTOR™ File Recovery 4.x is a data recovery program that supports the FAT 12/16/32 and NTFS file systems. Finds partitions automatically, even if the boot sector or FAT has been erased or damaged.”
www.pcinspector.de
19% remove it
PC Matic 1.1.0.50  by PC Pitstop LLC
Publisher's description - “PC Matic is safe, secure, & simple to use software that automates the regular maintenance & preventative steps necessary to keep your PC fast & safe. Start with your Free Diagnosis today.”
pcmatic.com
50% remove it
TeamSpeak 3 Client  by TeamSpeak Systems GmbH
Publisher's description - “TeamSpeak 3 continues the legacy of the original TeamSpeak communication system previously offered in TeamSpeak Classic (1.5) and TeamSpeak 2.”
www.teamspeak.com
4% remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 3 URLs.

https://docs.google.com/uc?export=download&id=0B5U0fAQ_R6oVQ3UzYVBldHJISzg&revid=0B5U0fAQ_R6oVN1ZwMHM3N3pZM1pKN1p2QXpjTUVKVmd1cXhFPQ&authuser=1

http://dbd.downloadvideoeditor.com/download/bin/.../setup.exe

http://pb-software.s3.amazonaws.com/setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.