» setup.exe
Overview
Analysis
File Details
Downloads (21)

setup.exe

Kaspersky Installer

Kaspersky Lab

File name:

setup.exe

Publisher:

Kaspersky Lab (signed and verified)

Product:

Kaspersky Installer

Description:

Kaspersky Installer [12.0.1.808.15]

Version:

12.0.1.808.15

MD5:

0d7e51c37a27951bbd527624b30f3b00

SHA-1:

14cc9e061d2838c96a561e4b259dea64daa1860d

SHA-256:

55ea61f42f21ffff099127d221bdc419016763fc6c60a7d8063f0e328be57a7a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 12:36:15 PM UTC (today)

File size:

700.8 KB (717,656 bytes)

Product version:

12.0.1.808.15

Trademarks:

Registered trademarks and service marks are the property of their respective owners.

Original file name:

Setup

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\setup.exe

Digital Signature

Signed by:

Kaspersky Lab

Authority:

DigiCert Inc

Valid from:

4/10/2015 3:00:00 AM

Valid to:

6/1/2017 3:00:00 PM

Subject:

CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, S=Moscow City, C=RU

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0136F0FB19F20B6FC21F525C1E25601F

File PE Metadata

Compilation timestamp:

4/30/2015 11:02:46 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:lzr2ikT8ex1kRTmpMS8+6iQn3uEVD7w0ZNF5LqiVE1xRV:tkT8E1rMbBV3JmiKxRV

Entry address:

0x11ADA

Entry point:

E8, 17, 41, 00, 00, E9, 16, FE, FF, FF, E9, A1, 41, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, BB, 45, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, ED, 07, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, EF, 41, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 2E, 0F, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 6C, 45, 00, 00, 6A, 22, 59, 89, 08, 8B... 
[+]

Entropy:

6.4897

Code size:

224 KB (229,376 bytes)

The file setup.exe has been seen being distributed by the following 21 URLs.

http://ttb.newallsoft.com/download/request/.../oia9vKEN?PubID=79_1731_4231&ClickID=6693635098

https://onedrive.live.com/download.aspx?cid=5F00BA7B14ADB5DC&resid=5F00BA7B14ADB5DC!298&canary=sGdpvDMBL7jfqAuhFbHF2LF1HGf zyQVGm5bsVRxuQA=8&ithint=.exe

https://supporttools.granicus.com/Secure/.../setup.exe

http://cldrload.com/?a=4672&c=61974&s1=rt

http://kaspersky-security-scan.fr.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GUTh8mwLOhGoMW3jQZkGeXol96JJC3CTasl1poaDN0RcZE1wldQA4Vk6boxslXCvU3bQUsAlM8xha0zpwSZGZc9ONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://mysweetsoftware2.com/Download?lpm_id=15

http://www.vgrabber.com/geo/gd/downloads/vGrabber/.../setup.exe

http://akke.blob.core.windows.net/.../Setup.exe

http://www.playmediaforfree.com/.../2?sub_id=w44PO4QC7FJ4G7UI0K2OLS2U&pub_id=355&template=lp8

http://fugupdates105.com/download/.../133?lpm_id=70

http://get.0110shop.info/.../1430165678/1430165678?13085552632ZmJ0Lyw6azsrMDIxNSZcOC0zLy0wJGs6Mi8uMi8kaDovJW1yZ19wXnJoXmtkOlNdb3BrJF91Y3RvbDVjb29ubSIxYCIyXiAtYWJcK3JzIjJeRDxpZVBQM2AjZHFpXGhnXWtfbGI9OXBfXGFjcXclY2lkYGlca186UWRxdWghZF5taDowJXdpaDgt

http://global-shared-files-lw.softonic.com/14c/c9e/.../setup.exe

http://special.kaspersky-labs.com/.../setup.exe

https://opensoftwaredownload.com/startdle.php

http://clientupdate-v5.curse.com/setup.exe

https://download-new.utorrent.com/endpoint/bleep/os/win/track/.../

http://get.ddlmedia1003.info/.../Get?p=3022&d=20297&l=1694&n=0&d1=365452&d2=-1&d3=-1&d4=-1&d5=-1&filename=setup&clickid=w2C53I87VIVP61PH02S6JRGA

http://www.fraps.com/.../setup.exe

http://gsf-cf.softonic.com/14c/c9e/.../setup.exe

https://kas.pr/kss-fb-dl-engb

http://esd.element5.com/affiliate.html?affiliateid=70900&publisherid=50105&target=http://special.kaspersky-labs.com/.../setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.