home

setup.exe

MD5:
512d3e8f273f4f55c2f6c337c1df452a

SHA-1:
2d438c77d0649f9bdb605df8f66f879a914947cb

SHA-256:
df99998e01671cd4b4c66688f3cef82e32444bbbe64c888de7c3e3e512832918

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 9:11:06 AM UTC  (today)

File size:
1.1 MB (1,139,585 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:3puOrDDiDPAbyr0jnco97vezabZNxNBWl:3puOmDPAbLT97vZbZDNBWl

Entry point:
00, 0F, 04, 00, 0C, 1B, D1, 41, 42, 41, 41, 41, 45, 41, 41, 41, BE, BE, 41, 41, F9, 41, 41, 41, 41, 41, 41, 41, 01, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, B1, 41, 41, 41, 4F, 5E, FB, 4F, 41, F5, 48, 8C, 60, F9, 40, 0D, 8C, 60, 15, 29, 28, 32, 61, 31, 33, 2E, 26, 33, 20, 2C, 61, 22, 20, 2F, 2F, 2E, 35, 61, 23, 24, 61, 33, 34, 2F, 61, 28, 2F, 61, 05, 0E, 12, 61, 2C, 2E, 25, 24, 6F, 4C, 4C, 4B, 65, 41, 41, 41...
 
[+]

Entropy:
6.8137

The file setup.exe has been seen being distributed by the following URL.

http://install.oinstaller2.com/o/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.