home

Setup.exe

Setup Module

This is a setup and installation application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Product:
Setup Module

Version:
2.2.5.0

MD5:
f218fee9ccc53861616d0934975c27ab

SHA-1:
b9ef0fbb99d959e95d19ba1975fd49e6cbbcb3c3

SHA-256:
0d2f93d602aae2bfba1223ea183a0c5a5a67d92b8fb208e88640209cad5dd29b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:15:04 AM UTC  (today)

File size:
838 KB (858,087 bytes)

Product version:
2.2.5.0

Copyright:
Copyright 2004

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup.exe

File PE Metadata
Compilation timestamp:
3/12/2004 4:35:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:OeHd4YBAif5QZUCtHvPzzC1jd+mP9WpAB4UdkUZfXvAtSCPyL:fHd4YBAifMNt3Rg9aS40XF/yjPC

Entry address:
0x495F

Entry point:
55, 8B, EC, 83, EC, 44, 56, 57, FF, 15, 20, 71, 40, 00, 8B, F0, 85, F6, 75, 04, 6A, FF, EB, 7C, E8, 2A, FD, FF, FF, 8A, 06, 3C, 22, 8B, 3D, 30, 71, 40, 00, 75, 15, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 1E, 84, C0, 75, F1, 3C, 22, 75, 1B, EB, 14, 3C, 20, 7E, 15, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, EB, 09, 3C, 20, 7F, 0B, 56, FF, D7, 8B, F0, 8A, 06, 84, C0, 75, F1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, CC, 70, 40, 00, F6, 45, E8, 01, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
24 KB (24,576 bytes)

The file Setup.exe has been seen being distributed by the following 11 URLs.

https://dw.uptodown.com/dwn/hILk_VsDCZ6-9CLRVl1VFCIFqbIMJux4_9iLGpb5R-ULVGv_zTQL3LW6kLub1zhzph-izCHPwrn-giDUL49pxG3PD5trK9MCx-JUBXMYU2GOeYNllCY1PXcNQu3DVhfF/dUFe6riffERsG17eWuZM_jTb0zR4V6Twc7BFVXY6uR2OJPFQDeM24c78tgNwMiAAvQlYcxKCHW7wwc6QVsi6et05-AQRiKL6dKThzj7Zgd7wNgAN5sIHUq2-jwMHDCFn/Lsgk7GHqC4IN3Zcgl54t-4_PHkVJBbnxiXn1ctPxBO69axChvkYuKWCqPOu_YbannPkyTVdmmFWNKI9-XRbBiz1YQssMCRPDwrEWjyIYGGCxKdfOFfarJOCEu1LnEi8w/.../

http://dw.uptodown.com/dwn/UUzpGnbPyKVFBvno8R4-rRlXx-R9G65-bEa9CCvzj52aRBjA7abiYD3lDt8kLPZiaRtPqjgq69Y9GSYRnlBWfm9-q8cXiFKT56qdAnP9hmQ1cc2OTlHwkag6KhsrdGg4/YLvTmwQ_54zSjKvBSQ1-RonEX7CAfdc3A4i5mMxj1lFbwFqCpHxaJvBZeSVoCOeoDjz-6qj9O24E5XakQ4_ZkwFjKwpzNPPnSAPWO5fASabF5kbu-gdjjYIzLNAT_gA8/0vyE_iqiCwu61Txc10V3JyFOLrYcUTFlLbbzQlYtydLeXri6xUOUQDHhjK_SMEY1hmpYyD9Xo_2G-8btsrDikxC4RYs4w7pSKjway89BP6OL3gRpDZfNf4-I4WJ3o-zl/.../

https://drive.google.com/uc?id=0ByCqMe00pTIpWmhjSk1GcDFqQlE&export=download

https://dw.uptodown.com/dwn/RKgtQae7xV1ONEXGKzfq6RZCpRm7HX-L-ik1RsqVy9msyUa9n_Z6HVT-2WKGQyCyqQg_-WUc7oW5Yi__e8ODGH3Z8P1s584pIbfFXmc2VwNB9qHt_c5FQsZZ9Uq7pgel/OTwVsng9itNtaoGwBWEBl4LE94xx3Aie1gNjGkp5kQE4MmiaQp3gOzbqX8DHeTFiMslSwMeR-yTwmrbVTACULBZyvcWqAXkY4axvoUEjtrK46aIUPPGylzgC5H46MMv8/qOp5_1rwgQsQMxCWhz0MVSc66CfQMRPHZUpjisjqvkj_pWw94P9zZSP6pJ4kf8JNmCG-w2ltxbVpLpTaAKODHDdeMsqHFGz8SxF6TSZ3gbOCYr7Mbvhj3bG4cNTUIued/.../

https://dw.uptodown.com/dwn/LI5p7yVuurLblr_q_TJxac_RWVLxA2hhSMVwpkKLkStebe1KRUkf8uNX9FgjaVW3vqRruDw312owFYFrDmmhCKK7HWEV94757vOPKxppQSHZVcR2kgKmyoZUu8LoBHu7/45bVyqwVtFpkQs6ADjMWaSvtwy9FSb-1YPXhqBV1eNChAD59Y5zwEioF4f_EZ2aCPxwBQ5kRtsHGt_zHndPczEyls5Ma5aYyAZmzqL9CyMhyk8hLn-ysuQ0mc46sG0DH/2weqqOoSmud1eew9NOyO02Qej0oL0ID9jp5MzvN6-3_5clJdxFF3Ucdo43BDJJhVoYGvjCS5w_wqjeadI_PbPiIE4rdLSEryOcMWIiwfKH8aPKjI0vI1oQPDoax1CXN_/.../

http://www.spczerwin.webh.pl/.../pivot_setup.exe

http://s5961.chomikuj.pl/File.aspx?e=Mg_DdeW9i0h5jA3sVkFfvqjCioBWjX8f3ELbuqollBIIHpsDuB4DDFo1QEyPYpmpBU4mzL8Rl7uEWH2dxmjJ_kh6mYvl3s_PZ8rXpIB7q7fEXH1o3jisJ1tozTfnjO7Zx6o5rC2XCLAc4Eo7EQJatw&pv=2

http://dw.uptodown.com/dwn/NXYr_sba8mHkMkA2yLy-3I0x3hFnKrfoS81UWCS4HB2cuZDKdfpaaXdyf1OEPaBQsj-gjXfP8FP3egU_zZ3fIGlhV4mFUw8za3_XOiVDTD4MAGcbtRqW3kO3-K9ZXWfw/Gysh6g7xT4-6ggMP4hl_iUpXbkTb2w4KGo6eSgMZWaw7Ef6t2fvFiC1F7COb0XXXGFaVWNa-WaJBdeuORQTPusQCoRF14_Gi4m46MVhx2G2NalnkuHF7tsljPfjrrxrk/.../

https://dw.uptodown.com/dwn/PlJlwj-FbQt2Vb6Cv-sGlK0cO64kOOkGiswsHvZ68-Mz5BBV_QibwR6m999us0j97gbZD2FFCFri-7jDYcMb6DCmbnePfqH-xYe2UHSaNkb6HQ2U9Ljj6bY9OQ2VC1WQ/lH7Qw_kBOANLtppEwMBc5d0Fz-K3HqVLw6osD4EiXcLZxIl2fEEL91oDcXHC6poxj1MzBCgfb-w_gbwKyF5xPJBugh1rO39ztJ1Vh0w1V7Qj-rWodwzLwWIufcK0ynQ9/XPC8sVZy3p-rkq74SegS-VkFZzC_uwLstxrH9qJP1V9UIQxYb8pVd73-VqX8bg7gLcMaTEO2FmKyJkkbSYAko4K2HinQDXF-fXUNGQX7IolPBUpq2jXlol6TAYVQU8dB/.../

http://www.tallysolutions.com/tallyweb/modules/admin/.../CDownloadManagerWIC.php?&strEventID=5&strFileID=88&strRemarks=Offline Installer

http://dw.en.uptodown.com/dl/1442712895/.../pivot-stickfigure-animator-2.2.5.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.