home

setup.exe

Kaspersky Installer

Kaspersky Lab

Publisher:
Kaspersky Lab  (signed and verified)

Product:
Kaspersky Installer

Description:
Kaspersky Installer [12.0.1.808.14]

Version:
12.0.1.808.14

MD5:
35d4dce7738c37556e2972d32eab1f69

SHA-1:
baef12cd1a2b03a0525f408c38a3b40d7dc08095

SHA-256:
fb85acb005a5ad259003c8244c4334db696f8a024675872d8c7123fff8d43434

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 3:39:53 PM UTC  (today)

File size:
700.1 KB (716,896 bytes)

Product version:
12.0.1.808.14

Copyright:
© 2012 Kaspersky Lab ZAO. All Rights Reserved.

Trademarks:
Registered trademarks and service marks are the property of their respective owners.

Original file name:
Setup

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\idm\dwnldata\conrad\setup_1421\setup.exe

Digital Signature
Signed by:
Kaspersky Lab

Authority:
DigiCert Inc

Valid from:
2/21/2013 4:00:00 PM

Valid to:
4/28/2015 5:00:00 AM

Subject:
CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0226E6BDA76DAE711E3DB2321E3B5308

File PE Metadata
Compilation timestamp:
2/11/2015 4:01:19 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:mEqSmuTVp/iDltjbAB486nqiQn3uEVD7w0ZNF5LqiVE123:MuTVRikB2qBV3JmiK23

Entry address:
0x11A74

Entry point:
E8, 1D, 41, 00, 00, E9, 16, FE, FF, FF, E9, A7, 41, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, C1, 45, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, ED, 07, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, F5, 41, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 34, 0F, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 72, 45, 00, 00, 6A, 22, 59, 89, 08, 8B...
 
[+]

Entropy:
6.4727

Code size:
224 KB (229,376 bytes)

The file setup.exe has been seen being distributed by the following 10 URLs.

http://www.infospyware.us/.../KasSS.exe

http://www.infospyware.com/.../KasSS.exe

http://www.rtsoftwares.com/.../setup.exe

http://nustrk.com/base2.php

http://kaspersky-security-scan.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GUTh8mwLOhGoMW3jQZkGeXol96JJC3CTasl1poaDN0RcZE1wldQA4Vk6boxslXCvU3bQUsAlM8xha0zpwSZGZc9ONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://downloadrockstar.com/lp/speedtest/.../download.php

http://global-shared-files-lw.softonic.com/bae/f12/.../setup.exe

https://www.omronfitness.com/.../setup.exe

http://special.kaspersky-labs.com/.../setup.exe

http://gsf-cf.softonic.com/bae/f12/.../setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.