home

setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.appdeliverycycle.com.
MD5:
25e4f044519f79fbeaeeee13c6e6dc28

SHA-1:
a830d292b6d20628ff138bf53c09686db15033c5

SHA-256:
70cbb9e4d6b914bc29ca2d0c9d1cf31a772583923c107d84f23f71c609b2a340

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 2:44:58 PM UTC  (today)

File size:
901.6 KB (923,208 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:b77l1zoDdvKGPeI5MHCHtwyskFA9AIZpul57YP1c33SjeP3:b7ZhGvPTKCtZsaA9AlUP1mSi/

Entry address:
0xAA98

Entry point:
73, 65, 4B, 65, 79, 00, 00, 00, 4F, 70, 65, 6E, 50, 72, 6F, 63, 65, 73, 73, 54, 6F, 6B, 65, 6E, 00, 00, 00, 00, 4C, 6F, 6F, 6B, 75, 70, 50, 72, 69, 76, 69, 6C, 65, 67, 65, 56, 61, 6C, 75, 65, 41, 00, 6B, 65, 72, 6E, 65, 6C, 33, 32, 2E, 64, 6C, 6C, 00, 00, 00, 00, 57, 72, 69, 74, 65, 46, 69, 6C, 65, 00, 00, 00, 56, 69, 72, 74, 75, 61, 6C, 51, 75, 65, 72, 79, 00, 00, 00, 00, 56, 69, 72, 74, 75, 61, 6C, 50, 72, 6F, 74, 65, 63, 74, 00, 00, 00, 00, 56, 69, 72, 74, 75, 61, 6C, 46, 72, 65, 65, 00, 00, 00, 56, 69...
 
[+]

Entropy:
7.9340  (probably packed)

Code size:
40.5 KB (41,472 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://www.appdeliverycycle.com/c?x=ktWjF5vGR7kD3VQDovcKESWP7U3Vcel0kcz GVHIIOI=&c=ZIvO6unuZNpR6Jd/zgNJMt/RQsk9ueteGiLqRo8yz6fa4hU vLnQGVFQZFf425UwX 59ghmMjD6K3tiwewB8wlcdx3Lz0f7fQu1uzWKViDjrl3IctC8ZiFkV/EpIi4V6&downloadAs=setup.exe&fallback_url=http://.../setup1.19.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.