home

setup.exe

DigitalDNA Games LLC

The program is a setup application that uses the Microsoft Setup installer. The file has been seen being downloaded from cdn.downloadcocci.com and multiple other hosts.
Publisher:
DigitalDNA Games LLC  (signed and verified)

Description:
Setup

Version:
10.0.30319.1 built by: RTMRel

MD5:
c68a4dab43e8a414cfc58e6f250cad26

SHA-1:
7f3b9f1f2513907b4e2f54893290c4d6f4eab2f3

SHA-256:
c786fe404f263ce630a5900d4298e80e8d6de4c6e2071572eabc901ef8b75760

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:10:31 AM UTC  (today)

File size:
441.8 KB (452,384 bytes)

Product version:
10.0.30319.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Installer:
Microsoft Setup

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

Digital Signature
Signed by:
DigitalDNA Games LLC

Authority:
GoDaddy.com, Inc.

Valid from:
6/26/2013 2:30:37 AM

Valid to:
6/26/2015 2:30:37 AM

Subject:
CN=DigitalDNA Games LLC, O=DigitalDNA Games LLC, L=Kirkland, S=WA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
27A47029F2CF9A

File PE Metadata
Compilation timestamp:
3/18/2010 2:21:36 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:OqIpd/w8ylWKxavR+dJ1oMBClrbMAo+nhmuFfvY0SHZvuD3SsojDuUlXG9RlGrlY:O7IRWDvFa+nhmuF3Y0scLeDuUlXuX

Entry address:
0x2E541

Entry point:
E8, 9E, 4E, 00, 00, E9, 84, FE, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 43, 15, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 08, 66, 3B, CA, 74, 12, 83, C0, 02, 0F, B7, 08, 66, 85, C9, 75, F0, 66, 39, 10, 74, 02, 33, C0, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, 68, 2F, 45, 00, 00, 74, 13...
 
[+]

Entropy:
6.1984

Code size:
314.5 KB (322,048 bytes)

The file setup.exe has been seen being distributed by the following 17 URLs.

http://cdn.downloadcocci.com/.../setup.exe

http://ttb.thisfilespc.com/download/request/.../qhcE1TXJ?__tc=1448237436.249&lpsl=3535678065c666acf79a0d85a6504824&expire=1448324017&clickid=wD7GVH6E6KE2S0OOGGMR8L56&pubid=125578&slp=www.defile4.com&fileName=Setup

http://az804920.vo.msecnd.net/Setup.exe

http://6w0n1.yuvshu.com/.../?p=ZXh0c3lzPTQmYWZmaWQ9MTUwNCZjaWQ9MTAwJmNyPTEwMCZsb2M9ZW4mb2lkPTE2JnJlcWlkPTEwMjRjYjJkODgxYjM3YzNiNDJkMzI1YWI3ZGNmZA==&trx=061ad1a8-4441-44b8-94b2-c4a49ca58497&trxsrc=1

http://downloads.installationsafe.net/Download/DownloadContent/306138a56d98409ea1bf53c2ce43f79b?ag_domain=safeupdate.technology&ag_originalUrl=http://cdn.installationsafe.net/.../S&ag_medium=cpa&ag_postback=15908181431405243497&ag_filename=setup.exe

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQa5heoXqXiWKYmmCkgpSJkGqXYZ57lbdqbp5joXs?dp=v63nrV0fRyWxbB4NyKRUW_2a6P6lYJ-suqk7UIY7Uiwx890kiW9SfU_3MSB9lbni4jP_JLkmKbUgVmc8DNOkI6h3F_KyaW0D9RWYP4x61Q3Ksldv4ki5A09fjZXq9WnhSLjJgzo4VVqXt004LGe70ZYCL4GW5bv2GO5wQvztt-8NC6l3NZw0V-lB9z5g2-B0iZiZlbmR-JuglXXkPvpo95iwiWzXyAs7oqRTrQnrrwQw9oW2GeJeAD1mp3JPTAQxJfT2_y9eTn5fggbvjdILqmu64nXsm_-irVT1YUngkWoluUdxKQ8-y_dKjnlxErb0qronWPPJqM0MUCiWaeQwaWH40F-VnrpMXYwIq7LKFo5IqoiJEzilPhvk5S1sOEwHxTEL_U_ovwFcIyLvt3em0-5y2-RHxw9LV5gafg0FxJxHU8qZOao--AiF

http://ttb.needsoft4wer.com/download/request/.../xb9onqTr?__tc=1450904839.026&lpsl=f79c8424cc4e2a758b960bfdd60ab88a&expire=1450991186&PubID=341598&slp=www.ultifiletur.com&ClickID=31729762581450904782&fileName=Setup

http://cdn.awesomeinstallerdomain.com/c?x=NF/z6kz77c4kmwWUSnitzpwTG57efrdl24ym9KyXQTU=&c=T6 rvs8rk5rAkhK4aOKv4q/4s4sVYjKgsMZZGXFKpxz0bAd/.../ DaLgZm4qg==&downloadAs=Setup.exe

http://www.openfilesnow.com/.../download_TuneupPro_pt-br.php

http://www.online2videopctools.com/.../setup.exe

http://www.levelupgames.com.br/redirecionador/comum/.../gerenciador-do-jogo

http://castleminer-z.soft32.com/get/file/id/.../?no_download_manager=true

http://www.lpmxp2022.com/.../Setup.exe

http://castleminer-z.software.informer.com/.../

http://www.techtudo.com.br/_/software/.../download

https://fs09n1.sendspace.com/dl/e6c43af33297484ef6132d8f12cf0e0e/5428a0e634c53f7b/.../Setup.exe

http://deploy.digitaldnagames.com/deploy/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.