home

setup.exe

MD5:
978e815af8c929bfe75b1c6cc525c047

SHA-1:
13bbc223b97ad742d2a970f9d2d676c7984c504a

SHA-256:
0aaf2cc988e2c878eecb75a5cbe4c5952b443505acbddde13ddb782b027f35b6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:42:05 AM UTC  (today)

File size:
614 KB (628,736 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
3/26/2007 12:03:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:+L8ozML5h8Sxm1IzGUG+v2+7g7QYvwf4gzv4ggfz93T1:kAf8Sxm1ISUZv2+CLvwBj0b93T

Entry address:
0xA3624

Entry point:
83, 3C, 24, FE, FC, 77, FE, 8D, 64, 24, CC, 90, 34, 00, 60, B6, 7A, 83, EC, DC, E8, DE, 01, 00, 00, 4B, 66, 4B, 75, FC, 87, F6, 8D, 17, 86, C2, FF, 73, 3C, 59, 81, E9, FD, FF, FF, 7F, F7, D6, 86, F2, 8A, C2, 73, E3, 90, 8A, C2, FC, 8A, C5, 81, D9, E6, 13, 00, 00, 97, 8B, FE, 87, F6, 86, F2, 99, FC, 71, CC, 92, 42, 28, C8, FF, B4, 19, E4, 13, 00, 80, E9, 7E, 00, 00, 00, 5A, 8B, 79, 17, 8B, 04, 1F, 42, 83, C7, 04, 8D, 74, 18, FD, 90, 3B, 51, 0F, F7, D0, FC, 0F, 83, EA, 01, 00, 00, FE, CC, 53, 51, 43, 33, C0...
 
[+]

Entropy:
6.7977

Code size:
450.5 KB (461,312 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://download817.mediafire.com/agjfuqmix4ug/.../Setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.