home

setup.exe

This is a setup and installation application. The file has been seen being downloaded from d.playjewelquest.com.
MD5:
2f86b00412a7cfecf002b39393279227

SHA-1:
5755b1bb33e457a5158fe36e32ea692207deec5c

SHA-256:
a519986636cf2c44b753b91cfffb612d346357384b61dd1f5574061f2c257302

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:47:05 PM UTC  (today)

File size:
3.1 MB (3,244,482 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:m9IBBgAtskWX/XkoGcEY2ti6rD1vq5MTnY83XLylvW:JBB7rWXPklcEY2sY9q5MTnYK7ylO

Entry point:
6B, 34, 47, 84, 6F, D7, 46, 65, 9B, FE, 32, 47, 4E, 25, B6, 38, F3, BF, A1, A8, 1B, 55, 0B, CA, 3F, E3, 01, 30, 1D, 7E, BD, 1E, 5C, 4F, 08, E1, CB, D3, EC, 22, 87, 0F, E8, 74, 9B, 8B, F8, EE, F5, D4, 8A, 2F, 5B, 3C, 59, 14, 5A, AC, F4, 0D, 85, 6D, 0C, 36, D0, 63, D3, 2E, 0E, F0, CB, 39, 18, C3, FD, 6C, E8, E7, 04, 53, 42, E2, 20, D5, 3E, 1A, F2, DA, 8E, F6, 31, 89, 1B, 7A, 0D, E8, F5, 2C, 30, E3, 3E, A4, 3A, C1, E3, E2, CB, 99, D2, 4F, D0, 2B, 78, A1, B1, DF, 54, 23, 06, 4E, A8, 0E, 68, 75, E8, 50, 01, F4...
 
[+]

Entropy:
7.9996  (probably packed)

The file setup.exe has been seen being distributed by the following URL.

http://d.playjewelquest.com/JewelQuest/112801/.../Setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.