home

setup.exe

InstallShield

InstallShield Software Corporation

Publisher:
InstallShield Software Corporation

Product:
InstallShield®

Description:
Setup Launcher

Version:
5.10.130.0

MD5:
2e7bc5b75df9c7bc2a53a32964c2d899

SHA-1:
24d08d262007a254e0797a128e0399aa47b13e6c

SHA-256:
83441525fb5aebe10892cfbc931395e2bb1f68c8720e49bb58749cb95981f06d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:38:31 AM UTC  (today)

File size:
58.5 KB (59,904 bytes)

Product version:
5.10.130.0

Copyright:
Copyright© 1996-1997 InstallShield Software Corporation, Phone : (847) 240-9111

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
OS version:
9.42174

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
2.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:d8s/igVfqfbqg6tNrpaE7bP+Fbsk4WoPygjhZB/qf0F4r:CgViDqgMdpa47+zv4hZB/qsFq

Entry address:
0x12B0121

Entry point:
4D, 5A, FD, 00, 08, 00, 04, 00, 20, 00, 00, 00, FF, FF, AE, 00, 00, 08, 00, 00, 16, 01, 00, 00, 40, 00, 00, 00, 01, 00, 24, 01, 00, 00, 00, 00, 00, 00, 00, 00, 8F, 00, 72, 00, 94, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0E, 00, 00, 24, 01, 00, 00, 0A, 02, 00, 00, 00, 00, 8F, 00, 72, 00, 94, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2014

Code size:
320 KB (327,682 bytes)

The file setup.exe has been seen being distributed by the following 10 URLs.

https://drive.google.com/a/.../uc?id=0B5De2TUBw4SCVGhtTmt4YjFIQTQ&export=download

http://software.thaiware.com/download_url.php?id=7457

http://192.168.1.92/.../setup.exe

http://www.pecas.com.br/.../setup.exe

https://docviewer.yandex.com.tr/source?id=43v9k-63j8v8j55n9kqbggo803bf6dvzef3piyg32vrapvppfwfncudqsls14ztb28kerj6ugh0kg5ngucadhxt0nv0ayrbj7wsoi1gf9&archive-path=//APP/DISK1/.../yXARHaWvQYkQ==&name=laconte-tv-karti-driver.zip

http://assets-pc.between.us/.../setup.exe

https://www.dropbox.com/sh/dx5wa0c53oljt7i/AACpCbO8nC7AoscFzmGp0wv5a/.../SETUP.EXE

https://downloadmirror.intel.com/25153/.../Setup.exe

http://alpha.tmit.bme.hu/pub/multivox4/.../Multivox/SETUP.EXE

http://az804735.vo.msecnd.net/.../Setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.