home

setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from ttb.lpmxp2124.com.
MD5:
41b38ad6dad3f1889ed32b80381aaaee

SHA-1:
dbc3dd7764398fcd6776f9b207a7c59c936d00fa

SHA-256:
44ae4cb26316ea6090422c7be009acbc471aee870636d32c8f013132d7a85ea4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:55:09 AM UTC  (today)

File size:
907 KB (928,748 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
9/3/2014 4:51:45 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:2f0yTan8aHw5JY4/hwjoRzwIbn7h9evqQMoXWtub:2f0yTcw5JZeoJwEn7KMoXWtW

Entry address:
0x2A0700

Entry point:
00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 09, 04, 00, 00, C0, 02, 00, 00, 5C, 2C, 2A, 00, 34, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 09, 04, 00, 00, E8, 02, 00, 00, 94, 2D, 2A, 00, 34, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 09, 04, 00, 00, 10, 03, 00, 00, CC, 2E, 2A, 00, 34, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
844 KB (864,256 bytes)

The file setup.exe has been seen being distributed by the following URL.

http://ttb.lpmxp2124.com/download/request/.../llCB4Edv?__tc=1408461630.363&lpsl=e6ec5ce8256f0969e64347f712f88ec6&expire=1408548018&tgu_src_lp_domain=www.dlultimatesoft.com&PubID=44&tid=IYVjWnzzT2HnT5_Ew6yKyjMDse5Fh3vFgN-ijqvXQ2kMk78DLxfcIFL0c2QJRiCNWfEOb6t-nIrn0q0s6rftveZvYroz5NUSgWRN6pPbpFQp9XvLNl-d7awcOFzB6xwwcRlRgHCFoG9sUjI3rSRO_WA6YDYZK-NKGcbSVIUc3cULFEARvlAxoPSnSAE_ytcYhZUy9_4wO9RinlhY1zhPKpujUojbn2yFZjDrEVTk9GPdqHtEu-LvvlLZ29ueS98GWeSkdfLxj6_1XauaeApHz-SCc13ogpeReNEhl_HGAxhtxu7EUuYxvXXG86OM28oP4bevuCbvbUNgpAkkt1-AVnGRhZxXC2NihlFYlUVfn3k-x2aL2SXinf3sPqwk7Gb5u8kT3Rd2Fcf1fBwDuSkmLHOuky2c-kNz81Gw00k1YB1oLv4QBg&pid=44&ref=clickated.com&ClickID=M_317557269736b30411f71408461616&sid=M_317557269736b30411f71408461616&fileName=Setup

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.