home

setup.exe

MD5:
e975d9c21e1930b60970b23fbfe71386

SHA-1:
22666d518cae0e1091088dc59672fe12f764202c

SHA-256:
acf9782b60cf6ba13b879245d79eed531c0af87026e4c2c6518ba6795356a303

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 4:35:58 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
exploit.cve.20062766
1.0.0.1015

File size:
9.3 KB (9,523 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:sJOgOfVMUtY9G+IhqL9vPxP57J4eXSVpemz2atqnk5iKfom:sojtY9iu9vpx7J4eaE42hk

Entry point:
0A, 5B, 7B, 30, 30, 30, 32, 31, 34, 41, 30, 2D, 30, 30, 30, 30, 2D, 30, 30, 30, 30, 2D, 43, 30, 30, 30, 2D, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 34, 36, 7D, 5D, 0A, 50, 72, 6F, 70, 34, 3D, 33, 31, 2C, 47, 6F, 6F, 67, 6C, 65, 0A, 50, 72, 6F, 70, 33, 3D, 31, 39, 2C, 32, 0A, 5B, 7B, 41, 37, 41, 46, 36, 39, 32, 45, 2D, 30, 39, 38, 44, 2D, 34, 43, 30, 38, 2D, 41, 32, 32, 35, 2D, 44, 34, 33, 33, 43, 41, 38, 33, 35, 45, 44, 30, 7D, 5D, 0A, 50, 72, 6F, 70, 35, 3D, 33, 2C, 30, 0A, 50, 72, 6F, 70, 39, 3D, 31, 39...
 
[+]

Entropy:
5.9968

The file setup.exe has been seen being distributed by the following URL.

http://www.lpcloudbox400.com/.../Setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.