home

setup.exe

This is a setup and installation application. The file has been seen being downloaded from cdn.pmdownloadcdn.com.
MD5:
da3c4fcdd7cffbb766ff7ab5dd9b6755

SHA-1:
39cbd756841744259deb50dae6788a9fc71518d4

SHA-256:
f55ce37472c449c726eebedeec579a15d02bff57e485e7e1371c589917cfdfb2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:33:27 AM UTC  (today)

File size:
515.7 KB (528,064 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:YWBL3bMDydgHTWlDMUbEaLt5ZxrIqRs4TGiwMzMbMRaf6D/LM44c:Yk9vMHaLt5LIQrDwDb3f2LJH

Entry point:
81, AD, D8, FB, 79, B9, 2E, E4, 85, 79, 54, C1, 68, 9F, FE, 37, BE, E9, E5, 78, 24, 6D, 8B, 4B, 60, 3A, E4, 80, 94, F9, E8, 09, 9A, 67, 64, 2B, F8, C2, 8A, 8A, 13, 86, 14, 15, 94, 19, 09, F1, 2E, 39, 65, 08, 1D, 56, 39, D3, 29, 28, 0D, 6F, FB, 22, 8D, 37, 04, 9A, D2, 58, 5A, CD, CE, 21, 38, 0C, AB, 0A, 0D, B7, 22, AC, 45, E5, 26, 27, 3E, C6, 5B, B4, 09, 33, 31, 5D, F1, ED, A6, 15, E9, 7E, 17, AF, 54, C6, 78, 74, 30, 52, 60, 97, 08, 0C, 0A, 0B, 0C, 11, 0E, 0F, 10, 30, FE, 30, FC, 04, 05, BE, 07, 08, 09, 0A...
 
[+]

Entropy:
7.6969

The file setup.exe has been seen being distributed by the following URL.

http://cdn.pmdownloadcdn.com/pf2/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.