home

setup.exe

Tally Update

Tally Solutions Private Limited

This is a setup and installation application. The file has been seen being downloaded from www.tallysolutions.com and multiple other hosts.
Publisher:
Tally Solutions Pvt. Ltd.  (signed by Tally Solutions Private Limited)

Product:
Tally Update

Description:
Tally Update Setup

Version:
1.0.1.0

MD5:
fe4fbc1a274948de328f44d694f2fc4c

SHA-1:
7daa050adf6741e20468cb73ea0d0b09e8673534

SHA-256:
e8ef0648803e78817c425af6b42f98d2dc20e80c80fcd3897b8d89fb81f2a064

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:06:03 AM UTC  (today)

File size:
59.9 MB (62,759,712 bytes)

Product version:
1.0.1.0

Copyright:
© Tally Solutions Pvt. Ltd., 1988-2016

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Tally Solutions Private Limited

Authority:
Symantec Corporation

Valid from:
2/18/2016 5:30:00 AM

Valid to:
3/20/2019 5:29:59 AM

Subject:
CN=Tally Solutions Private Limited, OU=RnD, O=Tally Solutions Private Limited, L=Bangalore, S=Karnataka, C=IN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4F966789BA4CE00242D910B210FAE6F4

File PE Metadata
Compilation timestamp:
4/22/2016 9:33:00 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1572864:9ueayQSTefrDTrk/diX237eTC6sGW/FCN:YsQGefrDNX23AfW9

Entry address:
0x2BEC0

Entry point:
B8, 10, 82, 27, 04, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 79, 8B, CB, 60, 38, 4B, 84, 07, CB, 86, C3, 68, 0B, 51, 08, EE, 27, F3, 07, 4B, AE, C4, 72, 4F, 0F, D9, D4, 83, 13, 69, 0C, 83, 98, B7, 41, 08, 27, 4A, A1, 3C, 70, C8, 4C, 77, 0B, D5, 43, 3F, 3C, 64, 7D, 06, 37, AC, 93, 84, 49, 7D, 1C, DB, D4, 31, 60, 05, DA, 03, 92, A5, C4, 1A, 5D, FC, 3C, 9E, A2, A0, 4A, 59, D0, C3, 12, 3A, 4C, 9C, 6F, C0, 63, 39, 8F, 5A, BB, A9, 29...
 
[+]

Entropy:
8.0000

Packer / compiler:
PECompact v2

Code size:
1.2 MB (1,266,176 bytes)

The file setup.exe has been seen being distributed by the following 2 URLs.

http://www.tallysolutions.com/tallyweb/modules/admin/.../CDownloadManagerWIC.php?&strEventID=5&strFileID=234&strRemarks=Offline Installer

http://www.tallysolutions.com/tallyweb/modules/admin/.../CDownloadManagerWIC.php?&strEventID=5&strFileID=234&strRemarks=Sample remarks

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.