home

setup.exe

Setup

This is a setup and installation application. The file has been seen being downloaded from get1.0112app.info.
Product:
Setup

Version:
1.9.3.0

MD5:
55815e67fff7d198a1c76791f13fa86d

SHA-1:
990ee3d4e1fb17a59f9b8b93c59fc9feb20a0bd7

SHA-256:
fc906dabfb8c426914cdb1a78f9d3664f1a02aea4f971ddfb451f5dce3322f0e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 10:24:05 AM UTC  (today)

File size:
535 KB (547,863 bytes)

Product version:
1.9.3.0

Copyright:
Setup

Original file name:
Ionic.Zip-2015Mar16-195302-e248fe48-8ce0-4fa6-91d9-0b073ad127c7.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\documents and settings\admin\mes documents\downloads\setup.exe

File PE Metadata
Compilation timestamp:
3/16/2015 8:53:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:R6ziYJDMYhaatGtSV41OJDsTDDRI09e6RcxLV/EheN70h6BpJDsTDDDw:RMiy4IadS4ms5I6e66fEheKhwsbw

Entry address:
0x75F3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
464 KB (475,136 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://get1.0112app.info/.../1426535571/1426535571?44534261087Y2FvLjU9ajwxKykzLyFhOS8yNDYrH2g5LjAuMyBtPSgfYC04S1FLPERSHlxoZV5oZWI3RmUpKWxiQD8vQiBoY2dnOTEhd2VuNzEmW2U5Y2BxMDU

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.