home

setup.exe

DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC. LTD. STI.

The application setup.exe by DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC.. STI has been detected as a potentially unwanted program by 26 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software.
Publisher:
Antalya  (signed by DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC. LTD. STI.)

Product:
Antalya

Description:
Antalya Setup

Version:
1.1.4.0

MD5:
b39099d154cb59104bd0283a872292b2

SHA-1:
22c83554be654730250f431f1d9125615355a7ef

SHA-256:
43ad84903ee6d003ca5c021191bb1a2c68dd6b5b757afec6bbc85443807f677e

Scanner detections:
26 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:04:17 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2529327
173

Agnitum Outpost
Trojan.StartPage
7.1.1

AhnLab V3 Security
PUP/Win32.Joedown
2015.07.19

Avira AntiVirus
ADWARE/Joedown.508648.4
8.3.1.6

Arcabit
Trojan.Generic.D26982F
1.0.0.425

avast!
Win32:Adware-gen [Adw]
2014.9-160814

Baidu Antivirus
Trojan.Win32.StartPage
4.0.3.16814

Bitdefender
Trojan.GenericKD.2529327
1.0.20.1135

Dr.Web
Trojan.KillFiles.18730
9.0.1.0227

Emsisoft Anti-Malware
Trojan.GenericKD.2529327
8.16.08.14.04

ESET NOD32
MSIL/Adware.Joedown (variant)
10.11962

Fortinet FortiGate
W32/StartPage.A!tr
8/14/2016

F-Secure
Trojan.GenericKD.2529327
11.2016-14-08_1

G Data
Trojan.GenericKD.2529327
16.8.25

IKARUS anti.virus
AdWare.MSIL.Joedown
t3scan.1.9.5.0

K7 AntiVirus
Adware
13.207.16606

Kaspersky
Trojan.Win32.StartPage
14.0.0.-248

McAfee
Artemis!B39099D154CB
5600.6307

MicroWorld eScan
Trojan.GenericKD.2529327
17.0.0.681

NANO AntiVirus
Trojan.Win32.KillFiles.dtkhuw
0.30.24.2487

nProtect
Trojan.GenericKD.2529327
15.07.17.01

Panda Antivirus
Trj/CI.A
16.08.14.04

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Trend Micro
TROJ_GEN.R01TC0EG815
10.465.14

VIPRE Antivirus
Trojan.Win32.Generic
42138

Zillya! Antivirus
Trojan.StartPage.Win32.4
2.0.0.2300

File size:
496.7 KB (508,648 bytes)

Product version:
1.1.4.0

Copyright:
Antalya

Trademarks:
Antalya

Original file name:
Antalya.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

Digital Signature
Signed by:
DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC. LTD. STI.

Authority:
COMODO CA Limited

Valid from:
3/23/2015 2:00:00 AM

Valid to:
3/23/2016 1:59:59 AM

Subject:
CN=DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC. LTD. STI., OU=Software, O=DEY YAZILIM İNTERNET HIZMETLERI SAN.VE. TIC. LTD. STI., STREET=KULOGLU MAH.ALYON GECIDI SOK., STREET=no 2 d 2 beyoğlu, L=istanbul, S=istanbul, PostalCode=34433, C=TR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
74CFE735D4A9C333262E54F219961F8F

File PE Metadata
Compilation timestamp:
7/1/2015 10:21:01 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:cMGsgL7GZOsLa30hTb1S/y7qsKQ0jnAt4Bknk9fBYUt:c/nGZY09pS/kBKQ0jnpBknk9l

Entry address:
0x6B21E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
421 KB (431,104 bytes)

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.