home

setup.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from cdn.pmdownloadcdn.com and multiple other hosts.
MD5:
90f9ffff055bdf1b1da9d2007d9a6017

SHA-1:
dfbf3b6802776cee0311ee72b3d7f27d25262c05

SHA-256:
2f6c1f2be3b0cc3183fc7df970a23f2b4bc177d05d7f49e9c359ec87ffe07c4e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 9:21:19 PM UTC  (today)

File size:
512.9 KB (525,259 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\setup.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:AOsR7/Y/UQrIDZNlrQNIXWi5YPMZcxIgAxRqCg:2s/UQ4NlrQNIXv7CxTAxRM

Entry point:
CE, 84, AD, C5, 48, 5D, FE, 6E, 6D, 7E, 7B, 1C, 70, 79, A5, 81, 55, 12, 6D, 87, 91, 7A, 3F, 3C, E9, F9, 31, 75, 32, B8, 0C, 99, A5, BF, 0C, 24, EF, 49, 93, C8, 2C, FF, 2E, 38, 71, CB, 9E, 11, A5, 3C, D4, 61, B3, C3, 02, C2, 6A, 3F, 38, 13, 92, 89, 36, 32, 02, 12, 54, 51, BD, BD, C2, C9, 73, 7B, 72, 7D, DF, 5A, 73, 2A, DC, 16, 8E, 48, 31, 4E, 69, 57, 66, F5, 89, A4, 3E, A4, ED, FB, 7C, D6, 27, CC, 1F, 44, 1D, B1, 5E, E4, E5, 30, 55, 63, 9A, 0B, 0F, 0D, 0E, 0F, 14, 11, 01, 02, 30, FB, 30, F9, 07, 08, C1, 0A...
 
[+]

The file setup.exe has been seen being distributed by the following 2 URLs.

http://cdn.pmdownloadcdn.com/pf2/.../setup.exe

http://sub.lastapa.info/installers/bi_downloader/.../setup.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.