home

Setup.exe

CATALYST Install Manager

ATI Technologies, Inc

This is a self-extracting archive and installer. The file has been seen being downloaded from vi.originaldll.com.
Publisher:
Advanced Micro Devices, Inc.  (signed by ATI Technologies, Inc)

Product:
CATALYST™ Install Manager

Version:
3.0.765.0

MD5:
bed392f5274c83cb0bb7f49d5aedb87b

SHA-1:
53a9efdd91e3816a4679826e9199d5bdf95f45b5

SHA-256:
713b715eef835027db338f796dbf8e05b29b038e8f54dbc14fa2227f1403d2dc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:51:55 AM UTC  (today)

File size:
565 KB (578,576 bytes)

Product version:
3.0.765.0

Copyright:
Copyright (c) 2007, Advanced Micro Devices, Inc.

Original file name:
Setup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\amd\bin64\setup.exe

Digital Signature
Signed by:
ATI Technologies, Inc

Authority:
VeriSign, Inc.

Valid from:
2/25/2009 1:00:00 AM

Valid to:
3/21/2012 12:59:59 AM

Subject:
CN="ATI Technologies, Inc", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ATI Technologies, Inc", L=Thornhill, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3DE959EF88A52C10BC8511EF057C233F

File PE Metadata
Compilation timestamp:
2/11/2010 3:37:27 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:6f06rE9ZdY2mrXfMlrtTkNi64ZynHLrvELrn/v4s8OPIumVQy2QCSe1g/85XXix:g7cdk0rtgi64Zlvo/8dXix

Entry address:
0x488E0

Entry point:
48, 83, EC, 28, E8, 97, 05, 00, 00, 48, 83, C4, 28, E9, AE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 41, 8B, 00, 48, 8B, DA, 4C, 8B, C9, 44, 8B, D8, 4C, 8B, D1, 41, 83, E3, F8, A8, 04, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03, 4B, 08, 0F, B6, 41, 03, A8, 0F, 74, 0B, 0F, B6, C0, 83, E0, F0, 48, 98, 4C, 03, C8, 4C, 33, CA, 49, 8B, C9, 48, 83, C4, 20, 5B...
 
[+]

Code size:
289.5 KB (296,448 bytes)

The file Setup.exe has been seen being distributed by the following URL.

http://vi.originaldll.com/.../26230.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.