home

setup.exe

This is a setup and installation application. The file has been seen being downloaded from pl-pl.facebook.com.
MD5:
14b85599c1a924556ba093283d59a443

SHA-1:
6ef6011ba4224ea1713f2ba54f4df7ff5181d726

SHA-256:
4f34d373d2707737282bc1afee850ff00894a8335f813ce1a5e480b1dd61a8d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 2:35:37 PM UTC  (today)

File size:
2.5 KB (2,611 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
2/12/2000 9:32:02 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
48:6VTsaEsxJHmvS8S6D9/sC0Sknd6uCKjVs4b3MHKnLFYyvuNAxyze:ktEClm6IRn07nd66s4ZGAxyze

Entry address:
0x1190

Entry point:
55, 89, E5, E8, 07, 00, 00, 00, C9, C3, 00, 00, 45, 58, 45, 89, C3, 2B, 3D, 00, E0, 40, 00, 29, 25, 00, E0, 40, 00, 2B, F0, 01, EA, 68, 84, E0, 40, 00, E8, CD, 12, 00, 00, E8, CE, 12, 00, 00, 33, F0, E8, CD, 12, 00, 00, 33, F0, E8, CC, 12, 00, 00, 33, F0, 68, 8C, E0, 40, 00, E8, C6, 12, 00, 00, 33, F0, 8B, 3D, 94, E0, 40, 00, 29, 2D, 70, E0, 40, 00, 03, 15, 98, E0, 40, 00, 01, 25, 18, E0, 40, 00, 2B, F3, 01, FA, 2B, 35, 3C, E0, 40, 00, 01, C6, 2B, 0D, 00, E0, 40, 00, 29, D0, 03, 15, 00, E0, 40, 00, 29, 25...
 
[+]

Code size:
40.5 KB (41,472 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://pl-pl.facebook.com/setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.