home

setup.exe

Earth\Alex

The program is a setup application that uses the Microsoft Setup installer. The file has been seen being downloaded from dla.uloz.to and multiple other hosts.
Publisher:
Earth\Alex  (signed and verified)

Description:
Setup

Version:
10.0.30319.1 built by: RTMRel

MD5:
ec334fba45f021c0adfc2b1b385b25fc

SHA-1:
60b0ceb9c6291bd0918c13c09c6a1669d3c4e714

SHA-256:
f15d61b7cad4dc6b3a3e0d5a48e16109b193550161c67d9002ee3ff6f2d4f5d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:35:19 PM UTC  (today)

File size:
419.4 KB (429,464 bytes)

Product version:
10.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Installer:
Microsoft Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Earth\Alex

Authority:
Earth\Alex

Valid from:
4/12/2011 11:55:59 AM

Valid to:
4/11/2012 5:55:59 PM

Subject:
CN=Earth\Alex

Issuer:
CN=Earth\Alex

Serial number:
3E1F89B7A141A2B34D6C7F5EC81FC30A

File PE Metadata
Compilation timestamp:
3/18/2010 4:21:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:LqIpd/w8ylWKxavR+dJ1oMBClrbMAo+nhmuFfvY0SHZvuD3QTojDuUlX7eO/:L7IRWDvFa+nhmuF3Y0sckeDuUlXqG

Entry address:
0x2E541

Entry point:
E8, 9E, 4E, 00, 00, E9, 84, FE, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 43, 15, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 08, 66, 3B, CA, 74, 12, 83, C0, 02, 0F, B7, 08, 66, 85, C9, 75, F0, 66, 39, 10, 74, 02, 33, C0, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, 68, 2F, 45, 00, 00, 74, 13...
 
[+]

Entropy:
6.2490

Code size:
314.5 KB (322,048 bytes)

The file setup.exe has been seen being distributed by the following 4 URLs.

http://dla.uloz.to/Ps;Hs;fid=50046025;cid=1918503202;rid=2115879129;up=0;uip=194.228.32.212;tm=1459842309;ut=f;aff=uloz.to;did=uloz-to;He;ch=1878d9aeb72482a210ef4625783d756d;Pe/.../setup-exe?bD&c=1918503202&De

http://dl.dropbox.com/u/15368593/Minecraft/.../setup.exe

http://dla.uloz.to/Ps;Hs;fid=50046025;cid=1231250099;rid=1522688378;up=0;uip=217.145.199.39;tm=1454311205;ut=f;aff=uloz.to;did=uloz-to;He;ch=05f205ed910338d23fc50864a87af47a;Pe/.../setup-exe?bD&c=1231250099&De

http://sumotorrent.eu/.../

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.