home

setup.exe

Curse, Inc.

Publisher:
Curse, Inc.  (signed and verified)

Description:
Setup

Version:
9.0.30729.1 built by: SP

MD5:
7fae6b7801ee1b51ef5f235d598ee526

SHA-1:
3866b7a968feba60466595f2dfe2174cc6a96cc9

SHA-256:
b58f139bfd0093f6fb9d09148809b8ad5981fb61724585a42e3c00dffb774756

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:15:05 AM UTC  (today)

File size:
393.3 KB (402,696 bytes)

Product version:
9.0.30729.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Curse, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/17/2012 8:00:00 PM

Valid to:
6/23/2015 7:59:59 PM

Subject:
CN="Curse, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Curse, Inc.", L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6B83C0A6C8BF8CFCFB3596310C507748

File PE Metadata
Compilation timestamp:
7/29/2008 9:45:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:iXaNjt6LuPHmLyiBvuJiFkJ+2Qw+MMq6FlOUeKJ6qjaVojDuUlW1m:KYYuUx65QwDMq6TOUAeDuUlIm

Entry address:
0x28EE8

Entry point:
E8, 94, 4B, 00, 00, E9, 73, FE, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 75, 11, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 3E, 4C, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 17, 13, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 0F, 1F, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, CE, 0B, 00, 00, 83, C4, 0C, 39, 7D, 10...
 
[+]

Entropy:
6.3573

Code size:
291 KB (297,984 bytes)

The file setup.exe has been seen being distributed by the following 50 URLs.

http://securefilecloud.net/.../curse-client.exe

https://secure.giga-downloads.de/dl/.../

http://d.computerbild.de/downloads/.../setup.exe

http://www.lpcloudbox405.com/.../Setup.exe

http://captdownload.com/track/install?button=green&subid=&subid2=gameoapp.com&adprovider=google_captdownload.com&source=google_7zip-display-gb-336x280-captdownload-30002460024&gclid=CNPTypCEt8ACFShp7AodhH4Aig&dlink=http://secure.oinstaller7.com/g/.../Setup.exe

https://secure.giga-downloads.de/dl/.../

http://ttb.latestvideoplayer.com/download/request/.../FodUQ1SG?ClickID=8ba3091fd3c1198db3e5170aee7c52c2&PubID=CD4349

http://ttb.bsi8wh63xu.com/download/request/.../2BXhq8za?__tc=1412320923.705&lpsl=aa0fb6b099667c2f83b2bbd5374ebdbd&expire=1412406470&PubID=322028&tgu_src_lp_domain=www.dwlmysoftlist.com&ClickID=4100034801412320069&fileName=Setup

http://www.applicationsdeliveryupdate.com/5dV67_oJYBaT wLLYc9uGASwADdExXGuDLFEzdrkflqPk3uBsa43l0eFBBBbVwIT s7UIsQ6d4iXR6slkEJ0lNYN3EFzXuZlRoG1as6oE59XP_gVOk2ucZ9kSVLquzVVGQqfSV qaFPGl12fS9XMA8ZX89 d16E6RcDD_RTDurmgC3ad24VzPAGjgEsxHrbpECJ 1LVMTK3C yC6eAg197YTtYPkQSLbWfUPC2AA1P7gZ7gwK1SHDn_OqL9sEjMuRsjdcUcRv6QMI9JyfwTioy1mAQI2ye2AQmOJ_V_93arn7YmSgWAsCh3jjTJLWhudY8L7a0qJ9EeEK0yCOMm2mYGM5FEDbcfNwpk jJuR_Nl7WjE1sEKNd9yljkwJqJZtmCK3Bpj0wbH52l_xAO6apa6ipiNMwo1WgqiJpCqEo2JZhxGo5Afx6hurWIDX8LYiieADKBcYLQTZLhGyqFsOuRi yty0APoJkKpIzzDGdWtscO9tUC8_2omkYUmH7hzB7v16Khc MtyxM5g4VLc8rWSMuNKOGzU9FsMOTCbCb3pqjVvrJSuRNxrPeFyO2rDRP xZ05SQ_FN6j9s b6eO_xW5U1UY8w==-G00AAMTaOU7 fDJMpkGGLwrJv AGp4FyGARhTwPa4DE8Xp9EdtVsIbEaaLMpVwvRn_GPZUoRWAJeYI90topLvcm0HIm18gQ=

http://curse1.software.informer.com/.../

https://ttb.updatevideos.com/download/request/.../Nd1Xco0h?ClickID=AAAAAIRkRgDY-EcBAAAAAMENVQAAAAAAAAAMAAAAAAAAAA4AAgAGFwftawAAAAAAX4dsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACamxgAAAAAAAIBAgAAgD8ADX3gaT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=&PubID=REGEV

http://ttb.playmediaplayer.com/download/request/.../IkvnKFuc?ClickID=1624--943--1387562313.0053&PubID=943&cb=2b8f44b815

http://secure.3-pn-installer.com/o/.../Setup.exe

https://files.giga-downloads.de/.../curse_client-setup.exe

http://www.opendownload.us/.../get.php

https://secure.giga-downloads.de/dl/.../

http://www.supertuneup.com/downloadip_allcs_dcom.asp?utm_source=dcomnew_sec_728&utm_campaign=dcomnew_sec_728

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc&utm_campaign=mdc_1145303&pub_id=1145303

http://b.compqueue.com/gi.aspx

https://secure.giga-downloads.de/dl/.../

http://www.anyprotect.com/dl.php?sct=NONC&data=null&anyprotect_id=1&r=ap_100_nc&pr=s&prm=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

http://www.opendownload.us/.../CurseClientSetup.exe

http://opendownloadmanager.com/startsetup.php

http://ads.adtrace.org/www/delivery/ck.php?oaparams=2__bannerid=134__zoneid=41__cb=4f2506d5e4__oadest=http://ttb.downloadsetup.com/download/request/.../wkObJ47b?ClickID=&PubID=300250

https://e.mail.ru/cgi-bin/.../octet-stream&cn=setup (2).exe&cte=binary&notype=1&file=setup (2).exe&mode=attachment&channel

http://www.opendownload.us/.../downloadarch.php

http://software-files-a.cnet.com/s/software/13/80/47/.../setup.exe

http://www.freevideodownloadforpc.com/.../setup.exe

http://s.m2pub.com/event/click/0/CiQ4ZjRkYmI2NS1mNjE5LTRiZDEtYmE5ZC05MGExZTI1ZWNiZDEiCDExOTQwNzIxKggxMTk0NDc5NzIIMTE4ODUxMDQ6Bm1hdG9teUIIMTE3MzAwNDhKCDExNzA4MTEzUgJVU1oCVFhiCDExOTU1NDY1agZDaHJvbWWQAQGYAQGoAQCyASBjZDE0MTllYWUyOTkxMWUyYmZmODEyMzEzZDJkNTliZsIBDWFkLnZ1aWFkcy5vcmfIAQPQAQPdAQAAAADlAT2XjD.tATR.ij.wAQH4AQGCAgljMTE4NzkxMDmIAgCQAgCYAgCgAgSqAgA=//

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQap5knn-XimKYnmWjfpW3YmmYYKF7w49ncZ1nnA?dp=V8WePhEs0zK4YIzUx54Y4nefky8fkbSoHHNKAhBxg3M-xLGCteay2HHOBCYEYK3wlurTfNMfV5M_hRe97XEyHc5Y7HaFKDYi6cCPrkrXUPi2vx-tm03XD8smLtNv29xL_E22fE0O7h9m2cis9CCN_zgmIsVfPkpe-Qt9qclFguo_PYQn8I701YG6IW7Ts_7izlaZx9CQYD0n1Wv1ygZzAyp0tqwk8XQQ9FWCF3qTMExk-IbdlSBeF3Wx5rL4F-r52TSBqnhklsadKOnwSQDcobUhCQidFoF452O5-j3tVEyjabcCNh1SSCCCXLR7SjQS46SDDdzlz-18wdKYybe4btktEpCwwZLUTo_9ENr7d0Ao2NuogXtkMQ

Latest 30 of 161 download URLs

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.