home

Setup.exe

This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser. The file has been seen being downloaded from download1842.mediafire.com and multiple other hosts.
MD5:
b7264634ed283eb798b38a794c4ace9f

SHA-1:
43e4a0438990e979f27cde251017acffe25c3d57

SHA-256:
b6c972b492d4c09d4197ef68b5e0b6ed3aa71522192586aa26a5f317c42e570f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:19:56 PM UTC  (today)

File size:
2 GB (2,104,287,978 bytes)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
6/10/2014 1:11:07 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
50331648:yu+FodABdYFEVjZlubIVSb1gbq7yhLJOClgu0B7w1VkBvSSh:yu+eQZRTQyVEb7okB6W

Entry address:
0x1D41B

Entry point:
E8, 5D, 64, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 7A, FC, FF, FF, C7, 06, F0, B1, 42, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, F0, B1, 42, 00, E9, 2F, FD, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, F0, B1, 42, 00, E8, 1C, FD, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 86, C9, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08...
 
[+]

Entropy:
7.9967  (probably packed)

Code size:
161.5 KB (165,376 bytes)

The file Setup.exe has been seen being distributed by the following 7 URLs.

http://download1842.mediafire.com/h8zzn73y38ag/.../Call of Duty 2.exe

http://download2061.mediafire.com/p8971smav8lg/.../Call of Duty 2.exe

http://download1129.mediafire.com/xw353buhae9g/.../Call of Duty 2.exe

http://download1019.mediafire.com/ajqb6ahs9c8g/.../Call of Duty 2.exe

http://download1085.mediafire.com/e3e2agx3k8bg/.../Call of Duty 2.exe

http://download1801.mediafire.com/sbich4jqi3hg/.../Call of Duty 2.exe

http://download1642.mediafire.com/vm9i10yl5sxg/.../Call of Duty 2.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.