home

setup.exe

This is a setup and installation application. The file has been seen being downloaded from install.oinstaller2.com.
MD5:
fa9718a5418719792547ea5360327e65

SHA-1:
c644035eed3d1bbf1434bc7ba91f037c1ac5f4f6

SHA-256:
da9c4c2075c521fc71858fe55ad821cf8ff2f966db9807a2eb8cbe429d7b2a9c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 9:02:57 AM UTC  (today)

File size:
1.4 MB (1,442,363 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:C+naTZDbLM35yNzIebVEWLNObZNxqBWtV:H8LM35yVmbZDqBWT

Entry point:
00, 14, A8, 00, 0C, 1B, D1, 41, 42, 41, 41, 41, 45, 41, 41, 41, BE, BE, 41, 41, F9, 41, 41, 41, 41, 41, 41, 41, 01, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, 41, B9, 41, 41, 41, 4F, 5E, FB, 4F, 41, F5, 48, 8C, 60, F9, 40, 0D, 8C, 60, 15, 29, 28, 32, 61, 31, 33, 2E, 26, 33, 20, 2C, 61, 22, 20, 2F, 2F, 2E, 35, 61, 23, 24, 61, 33, 34, 2F, 61, 28, 2F, 61, 05, 0E, 12, 61, 2C, 2E, 25, 24, 6F, 4C, 4C, 4B, 65, 41, 41, 41...
 
[+]

The file setup.exe has been seen being distributed by the following URL.

http://install.oinstaller2.com/o/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.