home

setup.exe

Testo

Testo AG

Publisher:
Testo AG  (signed and verified)

Product:
Testo

Description:
Check running device driver

Version:
1, 0, 0, 1

MD5:
6af0f9931892a9459d9ffc07ee3418c3

SHA-1:
279f40b8d493e88fda579158dfde1e2202c0e2a7

SHA-256:
1922380fdf45ba207c744d10288c601547f9ba7700e0f4a7ed6070a7b9c3f4ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 7:34:09 PM UTC  (today)

File size:
70.8 KB (72,544 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright © 2004

Original file name:
Test.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\programs\comsoft_basic_5_sp4\setup.exe

Digital Signature
Signed by:
Testo AG

Authority:
VeriSign, Inc.

Valid from:
8/4/2009 4:30:00 AM

Valid to:
8/4/2012 4:29:59 AM

Subject:
CN=Testo AG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Testo AG, L=Lenzkirch, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1508574C63541722F1E0B57605F089FB

File PE Metadata
Compilation timestamp:
5/31/2010 2:06:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:1G7TaDkG2Fa0ZLFG/zA81p50E69TpR/y24fC+c:cTdG2Mqo11p55upR/y2oc

Entry address:
0x19D0

Entry point:
E8, C7, 22, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE...
 
[+]

Entropy:
6.5282

Code size:
36 KB (36,864 bytes)

The file setup.exe has been seen being distributed by the following 3 URLs.

http://d2iwzbhgddzdwl.cloudfront.net/resources/autolaunchers/.../Setup.exe

http://ehpopuehi7h.x81hbkjs85.com/Rzc93H_rOHdgot3mQuq6tw8zy8hNg_eiTvFbRmhkg6-9iSk0nSLTk11Iwmt176eJwwKEVZIQlsduIug_idP8FbVmBD7RGQZc32Y_llkWaAqb_WdoELO67YyzKApv8_YS?sbb=AcHIW6Yq9ncSr0TNe0rfsELFwGByIfAoaNxIeD49qQbnWQvGEcyRDP47MoIGrNBRDN4vybiT3CeCo83Vg6oUc9IUOVZn8NIXxdRx4QNlWlINVVhZnRHRI2yCMJ8q0eCUCv9lvxQcjIUZnSZUJo8goinANgEHxoqNVx6FochLktrCPKPAu8ehbZXcwRk4Kvot92Oi9rzwBXnSg7teVYnAYDcH04h1Ix8hJYfCi8Mn2ACmsu1HHYG6bC4tnfVWtIimkqxpUWbWpnAmqugSkPW41rhK1XhNIw2uForCXYPUKyyfFf1sPphGCsyGXn9LgFvXHq3syC67jHLjIW9NVvMpbdiua0bv6w9Or4vXCPFN5laDMTe71G7kcp4IUWev6Nvng7nTtc6KWiSKaxrEew1TIuEKch3HhYaDmgLyGVh08tCmU6OqD75peAdUVgsWKDTMux3MtjgYC6fQZ3zp8sDOkkFoO7DSX0QiXSRW0S7xA6JquQRqIq5nSsJbiFvZlaQVZws74JfS4v0Ws0hMhkqd8IZl4ufcC7J2ceKnxC6YyXZzWQ2KrCk2iztrnW0OA2eedcVVZnPvp2zuqoJXB42JzNxdICxyuXKXZoFa4meRQ9RZbsC7TC8l6PzzDmvLKyw6WW42lLwPIMZx56SONMTnHSPmGMx8pqQ5LkFG9w8Sx53O1nTjho7Jfptfgp0SAzaWIoMq3UReRQcxNC9xQvAo6klGQfyavv8TX9meuCxbEMypg9LBDWvASFagQtFI8a4L9Bx8ltGdsw6ccqCqAp6HZWwfl3aZnQaEWE8iPPuRjl5J3eHDAEBt8HACI5sxaMz1h

http://ttb.gspxtny93b.com/download/request/.../CJzxGx39?__tc=1411842593.347&lpsl=1cc35d0ed3d1a0944fc92a38af31fc11&expire=1411928991&PubID=279525&tgu_src_lp_domain=www.prosoftlst.com&ClickID=14915016751411842590&fileName=Setup

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.